UbuntuUpdates.org

Package "libx11-dev"

Name: libx11-dev

Description:

X11 client-side library (development headers)
Latest version: 2:1.8.13-1ubuntu0.1
Release: resolute (26.04)
Level: security
Repository: main
Head package: libx11

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libx11-dev"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libx11-dev" in Resolute

Repository Area Version
base main 2:1.8.13-1

Changelog

Version: 2:1.8.13-1ubuntu0.1 2026-10-12 14:07:34 UTC

libx11 (2:1.8.13-1ubuntu0.1) resolute-security; urgency=medium

  * SECURITY UPDATE: heap buffer overflow in _XkbReadKeyActions()
    - debian/patches/CVE-2026-88806.patch: check the keysym range in
      _XkbReadKeyActions() in src/xkb/XKBGetMap.c.
    - CVE-2026-88806
  * SECURITY UPDATE: out-of-bounds read in XIM attribute parser
    - debian/patches/CVE-2026-94283.patch: bound XIM_OPEN_REPLY attribute
      lengths to the received packet in modules/im/ximcp/imDefIm.c,
      modules/im/ximcp/imRmAttr.c and src/xlibi18n/XimintP.h.
    - CVE-2026-94283
  * SECURITY UPDATE: out-of-bounds read in XIM trigger-key registration
    - debian/patches/CVE-2026-94284.patch: bound XIM_REGISTER_TRIGGERKEYS
      keylist lengths to the packet in modules/im/ximcp/imDefLkup.c.
    - CVE-2026-94284
  * SECURITY UPDATE: out-of-bounds read in byte-oriented codeset parser
    - debian/patches/CVE-2026-94285.patch: bound byteM_parse_codeset() reads
      to the remaining input length in modules/lc/gen/lcGenConv.c.
    - CVE-2026-94285

 -- Nick Galanis Thu, 08 Oct 2026 14:13:18 +0300
CVE-2026-88806 A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map.
CVE-2026-94283 An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to
CVE-2026-94284 An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to c
CVE-2026-94285 An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clien


About   -   Send Feedback to @ubuntu_updates