libX11: Changes to 'master'

[GitLab Mirror]

 README.md     |    4 ++++
 configure.ac  |    2 +-
 src/InitExt.c |   42 ++++++++++++++++++++++++++++++++++++++++++
 3 files changed, 47 insertions(+), 1 deletion(-)

New commits:
commit 695e90ad26f632feb0f58ad94882fb3a263bf114
Author: Alan Coopersmith <alan.coopersmith at oracle.com>
Date:   Thu Jun 15 09:14:48 2023 -0700

    libX11 1.8.6
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith at oracle.com>

commit 304a654a0d57bf0f00d8998185f0360332cfa36c
Author: Alan Coopersmith <alan.coopersmith at oracle.com>
Date:   Sat Jun 10 16:30:07 2023 -0700

    InitExt.c: Add bounds checks for extension request, event, & error codes
    
    Fixes CVE-2023-3138: X servers could return values from XQueryExtension
    that would cause Xlib to write entries out-of-bounds of the arrays to
    store them, though this would only overwrite other parts of the Display
    struct, not outside the bounds allocated for that structure.
    
    Reported-by: Gregory James DUCK <gjduck at gmail.com>
    Signed-off-by: Alan Coopersmith <alan.coopersmith at oracle.com>