Lucene search

K
slackwareSlackware Linux ProjectSSA-2018-233-01
HistoryAug 21, 2018 - 8:09 p.m.

[slackware-security] libX11

2018-08-2120:09:53
Slackware Linux Project
www.slackware.com
20

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.066 Low

EPSS

Percentile

93.7%

New libX11 packages are available for Slackware 14.0, 14.1, 14.2, and -current
to fix security issues.

Here are the details from the Slackware 14.2 ChangeLog:

patches/packages/libX11-1.6.6-i586-1_slack14.2.txz: Upgraded.
This update fixes some security issues:
Fixed crash on invalid reply (CVE-2018-14598).
Fixed off-by-one writes (CVE-2018-14599).
Fixed out of boundary write (CVE-2018-14600).
For more information, see:
https://vulners.com/cve/CVE-2018-14598
https://vulners.com/cve/CVE-2018-14599
https://vulners.com/cve/CVE-2018-14600
(* Security fix *)

Where to find the new packages:

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project! :-)

Also see the “Get Slack” section on http://slackware.com for
additional mirror sites near you.

Updated package for Slackware 14.0:
ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/libX11-1.6.6-i486-1_slack14.0.txz

Updated package for Slackware x86_64 14.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/libX11-1.6.6-x86_64-1_slack14.0.txz

Updated package for Slackware 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/libX11-1.6.6-i486-1_slack14.1.txz

Updated package for Slackware x86_64 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/libX11-1.6.6-x86_64-1_slack14.1.txz

Updated package for Slackware 14.2:
ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/libX11-1.6.6-i586-1_slack14.2.txz

Updated package for Slackware x86_64 14.2:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/libX11-1.6.6-x86_64-1_slack14.2.txz

Updated package for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/libX11-1.6.6-i586-1.txz

Updated package for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/libX11-1.6.6-x86_64-1.txz

MD5 signatures:

Slackware 14.0 package:
9bb8475057d8a2608b2fd12c0a1cbd21 libX11-1.6.6-i486-1_slack14.0.txz

Slackware x86_64 14.0 package:
58161eb995afd54e46c54ac7f8514863 libX11-1.6.6-x86_64-1_slack14.0.txz

Slackware 14.1 package:
12b07f273428650137f8f1ed7e8a47ee libX11-1.6.6-i486-1_slack14.1.txz

Slackware x86_64 14.1 package:
9e3744bcdbeb040bf74e1cf60e65a6e3 libX11-1.6.6-x86_64-1_slack14.1.txz

Slackware 14.2 package:
e8dce4b7c0084e08cf5e98b01623e96d libX11-1.6.6-i586-1_slack14.2.txz

Slackware x86_64 14.2 package:
0066b709becabab5661427863f9cbc37 libX11-1.6.6-x86_64-1_slack14.2.txz

Slackware -current package:
6ec3f2b5f2f314f5e9360e54864c70e5 x/libX11-1.6.6-i586-1.txz

Slackware x86_64 -current package:
44e4bd7fd0842ff5f980d812828e78e9 x/libX11-1.6.6-x86_64-1.txz

Installation instructions:

Upgrade the package as root:
> upgradepkg libX11-1.6.6-i586-1_slack14.2.txz

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.066 Low

EPSS

Percentile

93.7%