ELA-881-1 libx11 security update

missing input validation

2023-06-29
Packagelibx11
Version2:1.6.2-3+deb8u6 (jessie), 2:1.6.4-3+deb9u5 (stretch)
Related CVEs CVE-2023-3138


Missing input validation in various functions may have resulted in denial of service in various functions provided by libx11, the X11 client-side library.



For Debian 8 jessie, these problems have been fixed in version 2:1.6.2-3+deb8u6.

For Debian 9 stretch, these problems have been fixed in version 2:1.6.4-3+deb9u5.

We recommend that you upgrade your libx11 packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.