Oval Definition:	oval:org.opensuse.security:def:45506
Revision Date: 2020-12-01 Version: 1 Title: Security update for xorg-x11-server (Important) Description: This update for xorg-x11-server fixes the following issues: - CVE-2020-25712: Fixed a heap-based buffer overflow which could have led to privilege escalation (bsc#1177596). - CVE-2020-14360: Fixed an out of bounds memory accesses on too short request which could lead to denial of service (bsc#1174908). Family: unix Class: patch Status: Reference(s): 1032089 1037008 1037009 1056127 1056128 1056129 1056131 1056132 1056136 1057514 1059100 1059134 1059139 1080919 1082828 1121563 1121567 1125352 1126056 1127557 1128657 1130230 1132348 1132400 1132721 1141853 1148987 1149955 1149961 1156015 1169659 1170313 1170423 1170643 1170771 1171550 1172265 1174908 1175070 1175071 1175072 1177513 1177596 955942 CVE-2016-10209 CVE-2016-10349 CVE-2016-10350 CVE-2017-13728 CVE-2017-13729 CVE-2017-13730 CVE-2017-13731 CVE-2017-13732 CVE-2017-13733 CVE-2017-14166 CVE-2017-14501 CVE-2017-14502 CVE-2017-14503 CVE-2017-15130 CVE-2017-9103 CVE-2017-9104 CVE-2017-9105 CVE-2017-9106 CVE-2017-9107 CVE-2017-9108 CVE-2017-9109 CVE-2018-16889 CVE-2018-20852 CVE-2018-6954 CVE-2019-12519 CVE-2019-12520 CVE-2019-12521 CVE-2019-12524 CVE-2019-13627 CVE-2019-16056 CVE-2019-3842 CVE-2019-5068 CVE-2019-6454 CVE-2020-11945 CVE-2020-11985 CVE-2020-11985 CVE-2020-11993 CVE-2020-11993 CVE-2020-12243 CVE-2020-13249 CVE-2020-14360 CVE-2020-25645 CVE-2020-25712 CVE-2020-3899 CVE-2020-9490 CVE-2020-9490 SUSE-SU-2018:0120-1 SUSE-SU-2018:3640-2 SUSE-SU-2019:1265-1 SUSE-SU-2019:2798-1 SUSE-SU-2020:0145-1 SUSE-SU-2020:1227-1 SUSE-SU-2020:1431-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 42.3 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Legacy Software 15 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Python2 packages 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Web Scripting 15 SP1 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP3-ESPOS SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4-ESPOS SUSE Linux Enterprise Server for SAP Applications 12 SP4-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information freerdp-2.0.0~rc2-lp150.1 is installed OR libfreerdp2-2.0.0~rc2-lp150.1 is installed OR libwinpr2-2.0.0~rc2-lp150.1 is installed Definition Synopsis openSUSE Leap 42.3 is installed AND Package Information gv-3.7.4-8 is installed OR wdiff-1.2.2-9 is installed OR wdiff-lang-1.2.2-9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND libgadu-1.8.2-1.24 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information alsa-1.0.27.2-11 is installed OR libasound2-1.0.27.2-11 is installed OR libasound2-32bit-1.0.27.2-11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information cpp48-4.8.5-24 is installed OR gcc48-4.8.5-24 is installed OR gcc48-32bit-4.8.5-24 is installed OR gcc48-c++-4.8.5-24 is installed OR gcc48-gij-4.8.5-24 is installed OR gcc48-gij-32bit-4.8.5-24 is installed OR gcc48-info-4.8.5-24 is installed OR libasan0-4.8.5-24 is installed OR libasan0-32bit-4.8.5-24 is installed OR libgcj48-4.8.5-24 is installed OR libgcj48-32bit-4.8.5-24 is installed OR libgcj48-jar-4.8.5-24 is installed OR libgcj_bc1-4.8.5-24 is installed OR libstdc++48-devel-4.8.5-24 is installed OR libstdc++48-devel-32bit-4.8.5-24 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information dbus-1-glib-0.100.2-3 is installed OR dbus-1-glib-32bit-0.100.2-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-32bit-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information alsa-1.0.27.2-15 is installed OR libasound2-1.0.27.2-15 is installed OR libasound2-32bit-1.0.27.2-15 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed AND tiff-4.0.9-5.27 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 is installed AND Package Information python-Werkzeug-0.14.1-6.3 is installed OR python2-Werkzeug-0.14.1-6.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 is installed AND Package Information glibc-2.26-11 is installed OR glibc-32bit-2.26-11 is installed OR glibc-devel-2.26-11 is installed OR glibc-extra-2.26-11 is installed OR glibc-i18ndata-2.26-11 is installed OR glibc-info-2.26-11 is installed OR glibc-locale-2.26-11 is installed OR glibc-locale-32bit-2.26-11 is installed OR glibc-profile-2.26-11 is installed OR nscd-2.26-11 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND libcolord2-1.4.2-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 is installed AND libcairo2-32bit-1.15.10-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed AND xorg-x11-server-sdk-1.20.3-12 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 is installed AND gv-3.7.4-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-25_6-default-4-2 is installed OR kernel-livepatch-SLE15_Update_2-4-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-default-4.12.14-197.37 is installed OR kernel-default-livepatch-4.12.14-197.37 is installed OR kernel-default-livepatch-devel-4.12.14-197.37 is installed OR kernel-livepatch-4_12_14-197_37-default-1-3.3 is installed OR kernel-livepatch-SLE15-SP1_Update_10-1-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed AND Package Information MozillaFirefox-60.4.0-3.21 is installed OR MozillaFirefox-branding-upstream-60.4.0-3.21 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information xen-4.12.1_04-3.6 is installed OR xen-devel-4.12.1_04-3.6 is installed OR xen-doc-html-4.12.1_04-3.6 is installed OR xen-libs-4.12.1_04-3.6 is installed OR xen-libs-32bit-4.12.1_04-3.6 is installed OR xen-tools-4.12.1_04-3.6 is installed OR xen-tools-domU-4.12.1_04-3.6 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed AND Package Information MozillaFirefox-68.9.0-3.91 is installed OR MozillaFirefox-branding-upstream-68.9.0-3.91 is installed OR MozillaFirefox-buildsymbols-68.9.0-3.91 is installed OR MozillaFirefox-devel-68.9.0-3.91 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed AND Package Information rmt-server-2.3.1-3.3 is installed OR rmt-server-pubcloud-2.3.1-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed AND Package Information python2-salt-2019.2.0-6.24 is installed OR salt-2019.2.0-6.24 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information dpdk-17.11.2-3.2 is installed OR dpdk-devel-17.11.2-3.2 is installed OR dpdk-kmp-default-17.11.2_k4.12.14_23-3.2 is installed OR dpdk-thunderx-17.11.2-3.2 is installed OR dpdk-thunderx-devel-17.11.2-3.2 is installed OR dpdk-thunderx-kmp-default-17.11.2_k4.12.14_23-3.2 is installed OR dpdk-tools-17.11.2-3.2 is installed OR libdpdk-17_11-0-17.11.2-3.2 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed AND Package Information nodejs8-8.16.1-3.20 is installed OR nodejs8-devel-8.16.1-3.20 is installed OR nodejs8-docs-8.16.1-3.20 is installed OR npm8-8.16.1-3.20 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3-TERADATA is installed AND Package Information xorg-x11-Xvnc-7.4-27.122.37.1 is installed OR xorg-x11-server-7.4-27.122.37.1 is installed OR xorg-x11-server-extra-7.4-27.122.37.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information MozillaFirefox-45.8.0esr-102 is installed OR MozillaFirefox-translations-45.8.0esr-102 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information curl-7.37.0-37.43 is installed OR libcurl4-7.37.0-37.43 is installed OR libcurl4-32bit-7.37.0-37.43 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information gpg2-2.0.24-9.3 is installed OR gpg2-lang-2.0.24-9.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_74-92_38-default-9-2 is installed OR kgraft-patch-SLE12-SP2_Update_13-9-2 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3 is installed AND libncurses5-5.9-55 is installed OR libncurses5-32bit-5.9-55 is installed OR libncurses6-5.9-55 is installed OR libncurses6-32bit-5.9-55 is installed OR ncurses-5.9-55 is installed OR ncurses-devel-5.9-55 is installed OR ncurses-devel-32bit-5.9-55 is installed OR ncurses-utils-5.9-55 is installed OR tack-5.9-55 is installed OR terminfo-5.9-55 is installed OR terminfo-base-5.9-55 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed AND libncurses5-5.9-55 is installed OR libncurses5-32bit-5.9-55 is installed OR libncurses6-5.9-55 is installed OR libncurses6-32bit-5.9-55 is installed OR ncurses-5.9-55 is installed OR ncurses-devel-5.9-55 is installed OR ncurses-devel-32bit-5.9-55 is installed OR ncurses-utils-5.9-55 is installed OR tack-5.9-55 is installed OR terminfo-5.9-55 is installed OR terminfo-base-5.9-55 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information liblua5_2-5.2.4-6 is installed OR liblua5_2-32bit-5.2.4-6 is installed OR lua-5.2.4-6 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND libgcrypt-1.6.1-16.68 is installed OR libgcrypt20-1.6.1-16.68 is installed OR libgcrypt20-32bit-1.6.1-16.68 is installed OR libgcrypt20-hmac-1.6.1-16.68 is installed OR libgcrypt20-hmac-32bit-1.6.1-16.68 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-ESPOS is installed AND libgcrypt-1.6.1-16.68 is installed OR libgcrypt20-1.6.1-16.68 is installed OR libgcrypt20-32bit-1.6.1-16.68 is installed OR libgcrypt20-hmac-1.6.1-16.68 is installed OR libgcrypt20-hmac-32bit-1.6.1-16.68 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information perl-5.18.2-12.20 is installed OR perl-32bit-5.18.2-12.20 is installed OR perl-base-5.18.2-12.20 is installed OR perl-doc-5.18.2-12.20 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information kgraft-patch-4_4_175-94_79-default-4-2 is installed OR kgraft-patch-SLE12-SP3_Update_23-4-2 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND dovecot22-2.2.31-19.11 is installed OR dovecot22-backend-mysql-2.2.31-19.11 is installed OR dovecot22-backend-pgsql-2.2.31-19.11 is installed OR dovecot22-backend-sqlite-2.2.31-19.11 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA is installed AND dovecot22-2.2.31-19.11 is installed OR dovecot22-backend-mysql-2.2.31-19.11 is installed OR dovecot22-backend-pgsql-2.2.31-19.11 is installed OR dovecot22-backend-sqlite-2.2.31-19.11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information gnutls-3.3.27-3.3 is installed OR libgnutls-openssl27-3.3.27-3.3 is installed OR libgnutls28-3.3.27-3.3 is installed OR libgnutls28-32bit-3.3.27-3.3 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4 is installed AND libarchive-3.1.2-26.3 is installed OR libarchive13-3.1.2-26.3 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND libarchive-3.1.2-26.3 is installed OR libarchive13-3.1.2-26.3 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4-ESPOS is installed AND xorg-x11-server-1.19.6-4.11 is installed OR xorg-x11-server-extra-1.19.6-4.11 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4-ESPOS is installed AND xorg-x11-server-1.19.6-4.11 is installed OR xorg-x11-server-extra-1.19.6-4.11 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4-LTSS is installed AND mailman-2.1.17-3.23 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4-LTSS is installed AND mailman-2.1.17-3.23 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP5 is installed AND libpython2_7-1_0-2.7.13-28.36 is installed OR libpython2_7-1_0-32bit-2.7.13-28.36 is installed OR python-2.7.13-28.36 is installed OR python-32bit-2.7.13-28.36 is installed OR python-base-2.7.13-28.36 is installed OR python-base-32bit-2.7.13-28.36 is installed OR python-curses-2.7.13-28.36 is installed OR python-demo-2.7.13-28.36 is installed OR python-devel-2.7.13-28.36 is installed OR python-doc-2.7.13-28.36 is installed OR python-doc-pdf-2.7.13-28.36 is installed OR python-gdbm-2.7.13-28.36 is installed OR python-idle-2.7.13-28.36 is installed OR python-tk-2.7.13-28.36 is installed OR python-xml-2.7.13-28.36 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND libpython2_7-1_0-2.7.13-28.36 is installed OR libpython2_7-1_0-32bit-2.7.13-28.36 is installed OR python-2.7.13-28.36 is installed OR python-32bit-2.7.13-28.36 is installed OR python-base-2.7.13-28.36 is installed OR python-base-32bit-2.7.13-28.36 is installed OR python-curses-2.7.13-28.36 is installed OR python-demo-2.7.13-28.36 is installed OR python-devel-2.7.13-28.36 is installed OR python-doc-2.7.13-28.36 is installed OR python-doc-pdf-2.7.13-28.36 is installed OR python-gdbm-2.7.13-28.36 is installed OR python-idle-2.7.13-28.36 is installed OR python-tk-2.7.13-28.36 is installed OR python-xml-2.7.13-28.36 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information libldap-2_4-2-2.4.46-9.28 is installed OR libldap-2_4-2-32bit-2.4.46-9.28 is installed OR libldap-data-2.4.46-9.28 is installed OR openldap2-2.4.46-9.28 is installed OR openldap2-back-meta-2.4.46-9.28 is installed OR openldap2-back-perl-2.4.46-9.28 is installed OR openldap2-client-2.4.46-9.28 is installed OR openldap2-devel-2.4.46-9.28 is installed OR openldap2-devel-32bit-2.4.46-9.28 is installed OR openldap2-devel-static-2.4.46-9.28 is installed OR openldap2-ppolicy-check-password-1.2-9.28 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information cups-2.2.7-3.17 is installed OR cups-client-2.2.7-3.17 is installed OR cups-config-2.2.7-3.17 is installed OR cups-ddk-2.2.7-3.17 is installed OR cups-devel-2.2.7-3.17 is installed OR libcups2-2.2.7-3.17 is installed OR libcups2-32bit-2.2.7-3.17 is installed OR libcupscgi1-2.2.7-3.17 is installed OR libcupsimage2-2.2.7-3.17 is installed OR libcupsmime1-2.2.7-3.17 is installed OR libcupsppdc1-2.2.7-3.17 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information kernel-default-3.12.36-38 is installed OR kernel-default-extra-3.12.36-38 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information kernel-default-3.12.51-60.20 is installed OR kernel-default-extra-3.12.51-60.20 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information kernel-default-4.4.21-84 is installed OR kernel-default-extra-4.4.21-84 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information gimp-2.8.18-9.3 is installed OR gimp-lang-2.8.18-9.3 is installed OR gimp-plugins-python-2.8.18-9.3 is installed OR libgimp-2_0-0-2.8.18-9.3 is installed OR libgimpui-2_0-0-2.8.18-9.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information libIlmImf-Imf_2_1-21-32bit-2.1.0-6.10 is installed OR openexr-2.1.0-6.10 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information libraw-devel-0.18.9-1 is installed OR libraw16-0.18.9-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information bluez-5.48-5.19 is installed OR bluez-cups-5.48-5.19 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information bzip2-1.0.6-30.8 is installed OR bzip2-doc-1.0.6-30.8 is installed OR libbz2-1-1.0.6-30.8 is installed OR libbz2-1-32bit-1.0.6-30.8 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information bzip2-1.0.6-30.8 is installed OR bzip2-doc-1.0.6-30.8 is installed OR libbz2-1-1.0.6-30.8 is installed OR libbz2-1-32bit-1.0.6-30.8 is installed
BACK