oss-security - CVE Request: libX11: buffer overflow in MakeBigReq macro

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <552495F1.6000709@canonical.com>
Date: Tue, 07 Apr 2015 22:44:01 -0400
From: Marc Deslauriers <marc.deslauriers@...onical.com>
To: oss-security@...ts.openwall.com
CC: cve-assign@...re.org
Subject: CVE Request: libX11: buffer overflow in  MakeBigReq macro

Hello,

The MakeBigReq macro in libX11 contained a 4-byte buffer overflow:

https://bugs.freedesktop.org/show_bug.cgi?id=56508

Fixed by the following commit in libX11 1.5.99.901:

http://cgit.freedesktop.org/xorg/lib/libX11/commit/?id=39547d600a13713e15429f49768e54c3173c828d

Could a CVE please be assigned to this issue? (needs a CVE-2013)

Thanks,

Marc.

-- 
Marc Deslauriers
Ubuntu Security Engineer     | http://www.ubuntu.com/
Canonical Ltd.               | http://www.canonical.com/

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.