The MakeBigReq macro in libX11 before version 126.96.36.1991 contained a 4-byte buffer overflow:
Fixed by the following commit in libX11 188.8.131.521:
CVE request: http://seclists.org/oss-sec/2015/q2/73
This issue does not affect the version of libX11 package as shipped with Red Hat Enterprise Linux 7.
This issue was was fixed in Red Hat Enterprise Linux 6 via the following security advisory:
This issue affects the version of libX11 package as shipped with Red Hat Enterprise Linux 5. Red Hat Enterprise Linux 5 is now in Extended Life Cycle phase of the support and maintenance life cycle. This issue is not currently planned to be addressed in future updates.
This issue was assigned CVE-2013-7439 via
According to http://lists.x.org/archives/xorg-announce/2015-April/002561.html a rebuild of all software using the vulnerable version of the macros is required. Is this tracked somewhere or did this already happen? Did this happen for EPEL?