FEDORA-2016-9c065db2c1 — security update for libXi

obsolete

FEDORA-2016-9c065db2c1 created by whot 8 years ago for Fedora 23

Fix crash when calling XListInputDevices on devices without classes

Security fix for CVE-2016-7945, CVE-2016-7946

This update has been submitted for testing by whot.

This update has obsoleted libXi-1.7.7-1.fc23, and has inherited its bugs and notes.

This update has been pushed to testing.

This update has been obsoleted by libXi-1.7.8-2.fc23.

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Thresholds

Minimum Karma

Minimum Testing

14 days

Dates

submitted

8 years ago

in testing

8 years ago

Builds

BZ#1381868 CVE-2016-7945 libXi: Insufficient validation of server responses result in Integer overflows

BZ#1381869 CVE-2016-7946 libXi: Insufficient validation of server responses result in various data mishandlings

BZ#1381870 CVE-2016-7945 CVE-2016-7946 libXi: various flaws [fedora-all]

libXi-1.7.7-2.fc23

None