[slackware-security] libX11

New libX11 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libX11-1.8.14-i586-1slack15.0.txz: Upgraded. This update fixes security issues: ximcp: bound XIMOPENREPLY attribute lengths. ximcp:...

CVE-2006-5397

The Xinput module modules/im/ximcp/imLcIm.c in X.Org libX11 1.0.2 and 1.0.3 opens a file for reading twice using the same file descriptor, which causes a file descriptor leak that allows local users to read files specified by the XCOMPOSEFILE environment variable via the duplicate file descriptor...