Skip to content
OpenAdvisories
Low ALAS2-2019-1173 1 CVE

Low: libXcursor security update (Amazon Linux 2)

Published Mar 7, 2019 · Updated Mar 8, 2019

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2015-9262: _XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow. 1611599: CVE-2015-9262 libxcursor: 1-byte heap-based overflow in _XcursorThemeInherits function in library.c

Fixed packages 3

ReleasePackageFixed in
Amazon Linux · 2 libXcursor 0:1.1.15-1.amzn2
Amazon Linux · 2 libXcursor-debuginfo 0:1.1.15-1.amzn2
Amazon Linux · 2 libXcursor-devel 0:1.1.15-1.amzn2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2015-9262.html