Author: renodr
Date: Tue Aug 11 18:31:25 2020
New Revision: 1604

Log:
Errata: add errata for libX11 vulnerability
Errata: add errata for xorg-server vulnerability

Modified:
   html/trunk/blfs/errata/9.1-systemd/index.html
   html/trunk/blfs/errata/9.1/index.html

Modified: html/trunk/blfs/errata/9.1-systemd/index.html
==============================================================================
--- html/trunk/blfs/errata/9.1-systemd/index.html       Tue Aug 11 17:55:49 
2020        (r1603)
+++ html/trunk/blfs/errata/9.1-systemd/index.html       Tue Aug 11 18:31:25 
2020        (r1604)
@@ -297,6 +297,15 @@
           JavaScript interpreter when debugging scripts. To fix this issue,
           update to js68-68.11.0 or higher using the instructions in
           <a href="../../view/systemd/general/js68.html">js68-68.11.0</a>.</li>
+      <li>After release, a security vulnerability was identified in libX11.
+          This vulnerability was assigned CVE-2020-14344, and is identified
+          as a heap corruption vulnerability. To fix this issue, update to
+          libX11-1.6.11 or higher using the instructions for libX11 in the
+          <a href="../../view/systemd/x/x7lib.html">Xorg Libraries</a> 
page.</li>
+      <li>After release, a security vulnerability was identified in
+          xorg-server that leads to uninitialized memory disclosure. To
+          fix this vulnerability, apply the following sed to your build:
+          "sed -i 's/malloc(pScreen/calloc(1, pScreen/' dix/pixmap.c".</li>
      </ul>
 
 

Modified: html/trunk/blfs/errata/9.1/index.html
==============================================================================
--- html/trunk/blfs/errata/9.1/index.html       Tue Aug 11 17:55:49 2020        
(r1603)
+++ html/trunk/blfs/errata/9.1/index.html       Tue Aug 11 18:31:25 2020        
(r1604)
@@ -296,6 +296,15 @@
           JavaScript interpreter when debugging scripts. To fix this issue,
           update to js68-68.11.0 or higher using the instructions in
           <a href="../../view/svn/general/js68.html">js68-68.11.0</a>.</li>
+      <li>After release, a security vulnerability was identified in libX11.
+          This vulnerability was assigned CVE-2020-14344, and is identified
+          as a heap corruption vulnerability. To fix this issue, update to
+          libX11-1.6.11 or higher using the instructions for libX11 in the
+          <a href="../../view/svn/x/x7lib.html">Xorg Libraries</a> page.</li>
+      <li>After release, a security vulnerability was identified in
+          xorg-server that leads to uninitialized memory disclosure. To
+          fix this vulnerability, apply the following sed to your build:
+          "sed -i 's/malloc(pScreen/calloc(1, pScreen/' dix/pixmap.c".</li>
      </ul>
 
 <!--#include virtual="/common/footer.html" -->
-- 
http://lists.linuxfromscratch.org/listinfo/website
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Reply via email to