It was found that when receiving a response from the server protocol data is not validated sufficiently. This results in various data mishandlings. Upstream patch: https://cgit.freedesktop.org/xorg/lib/libXrandr/commit/?id=a0df3e1c7728205e5c7650b2e6dce684139254a6 External References: https://lists.x.org/archives/xorg-announce/2016-October/002720.html CVE assignment: http://seclists.org/oss-sec/2016/q4/17
Created libXrandr tracking bugs for this issue: Affects: fedora-all [bug 1381874]