Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-14344: A flaw was found in libX11. An integer overflow leading to a heap-buffer overflow occurs when setuid programs call XIM client functions while running with elevated privileges. The highest threat from this vulnerability are to data confidentiality and integrity as well as system vulnerability. 1862255: CVE-2020-14344 libX11: Heap overflow in the X input method client
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | libX11 | 0:1.6.7-3.amzn2.0.1 |
| Amazon Linux · 2 | libX11-common | 0:1.6.7-3.amzn2.0.1 |
| Amazon Linux · 2 | libX11-debuginfo | 0:1.6.7-3.amzn2.0.1 |
| Amazon Linux · 2 | libX11-devel | 0:1.6.7-3.amzn2.0.1 |
Vulnerabilities 1
-
Medium 6.7
An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in l…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2020-14344.html