X.org X11 libraries security, bug fix and enhancement update

The X11 (Xorg) libraries provide library routines that are used within all X
Window applications.

The following packages have been upgraded to a later upstream version: libX11
(1.6.5), libXaw (1.0.13), libXdmcp (1.1.2), libXfixes (5.0.3), libXfont
(1.5.2), libXi (1.7.9), libXpm (3.5.12), libXrandr (1.5.1), libXrender
(0.9.10), libXt (1.1.5), libXtst (1.2.3), libXv (1.0.11), libXvMC (1.0.10),
libXxf86vm (1.1.4), libdrm (2.4.74), libepoxy (1.3.1), libevdev (1.5.6),
libfontenc (1.1.3), libvdpau (1.1.1), libwacom (0.24), libxcb (1.12),
libxkbfile (1.0.9), mesa (17.0.1), mesa-private-llvm (3.9.1), xcb-proto
(1.12), xkeyboard-config (2.20), xorg-x11-proto-devel (7.7). (BZ#1401667,
BZ#1401668, BZ#1401669, BZ#1401670, BZ#1401671, BZ#1401672, BZ#1401673,
BZ#1401675, BZ#1401676, BZ#1401677, BZ#1401678, BZ#1401679, BZ#1401680,
BZ#1401681, BZ#1401682, BZ#1401683, BZ#1401685, BZ#1401690, BZ#1401752,
BZ#1401753, BZ#1401754, BZ#1402560, BZ#1410477, BZ#1411390, BZ#1411392,
BZ#1411393, BZ#1411452, BZ#1420224)

Security Fix(es):

* An integer overflow flaw leading to a heap-based buffer overflow was found
in libXpm. An attacker could use this flaw to crash an application using libXpm
via a specially crafted XPM file. (CVE-2016-10164)

* It was discovered that libXdmcp used weak entropy to generate session keys.
On a multi-user system using xdmcp, a local attacker could potentially use
information available from the process list to brute force the key, allowing
them to hijack other users' sessions. (CVE-2017-2625)

* It was discovered that libICE used a weak entropy to generate keys. A local
attacker could potentially use this flaw for session hijacking using the
information available from the process list. (CVE-2017-2626)

CVE-2016-10164
Multiple integer overflows in libXpm before 3.5.12, when a program
requests parsing XPM extensions on a 64-bit platform, allow remote
attackers to cause a denial of service (out-of-bounds write) or
execute arbitrary code via (1) the number of extensions or (2) their
concatenated length in a crafted XPM file, which triggers a heap-based
buffer overflow.
CVE-2017-2625
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
CVE-2017-2626
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.