Two vulnerabilities were identified in X.Org Server and libX11 :
- — the lack of memory initialization when allocating buffers for pixmaps via the AllocatePixmap() call can lead to an X client leaking heap memory contents when the X server is running with elevated privileges. This leak can be exploited to bypass Address Space Layout Randomization (ASLR). In conjunction with other vulnerabilities, this issue may be used to create an exploit for privilege escalation within the system. Fixes are currently available in patch form.
of the corrective release of X.Org Server 1.20.9 is expected in the coming days. - — an integer overflow in the XIM (Input Method) implementation in libX11, which may lead to heap memory corruption when processing specially crafted input method messages.
The issue has been resolved in the release .
Izvor: opennet.ru
