| Revision Date: | 2020-12-01 | Version: | 1 |
| Title: | Security update for xorg-x11-server (Important) |
| Description: |
This update for xorg-x11-server fixes the following issues:
- CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation (bsc#1174633, ZDI-CAN-11426). - CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability (bsc#1174638, ZDI-CAN-11429). - CVE-2020-14345: XKB out-of-bounds access privilege escalation vulnerability (bsc#1174635, ZDI-CAN-11428).
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1012382
1031392
1051510
1055120
1055186
1061840
1065600
1065729
1082519
1085030
1090078
1094244
1098782
1100369
1101669
1102495
1103269
1103405
1103587
1103636
1104888
1105190
1105795
1106105
1106240
1106948
1107783
1107829
1107928
1107947
1108096
1108170
1108281
1108323
1108399
1108823
1109160
1109244
1109333
1109336
1109337
1109603
1109806
1109859
1109979
1109992
1110006
1110301
1110363
1110639
1110642
1110643
1110644
1110645
1110646
1110647
1110649
1110650
1112178
1113956
1118367
1118368
1128220
1141025
1151317
1154366
1156205
1157051
1161168
1167527
1168468
1169972
1170667
1170713
1171313
1171675
1171688
1171740
1171742
1172958
1173115
1173307
1173311
1173983
1174633
1174635
1174638
1174899
1175228
1175443
1175749
1175882
1176011
1176022
1176038
1176092
1176235
1176242
1176278
1176316
1176317
1176318
1176319
1176320
1176321
1176381
1176395
1176410
1176423
1176482
1176507
1176536
1176544
1176545
1176546
1176548
1176659
1176674
1176698
1176699
1176700
1176721
1176722
1176725
1176732
1176788
1176789
1176869
1176877
1176935
1176950
1176962
1176966
1176990
1177027
1177030
1177041
1177042
1177043
1177044
1177121
1177206
1177258
1177291
1177293
1177294
1177295
1177296
906079
CVE-2007-3126
CVE-2007-4129
CVE-2007-5970
CVE-2008-1227
CVE-2008-7247
CVE-2009-0186
CVE-2009-4019
CVE-2009-4028
CVE-2009-4030
CVE-2010-4540
CVE-2010-4541
CVE-2010-4542
CVE-2010-4543
CVE-2011-0465
CVE-2011-2696
CVE-2011-2896
CVE-2012-0247
CVE-2012-0248
CVE-2012-1185
CVE-2012-1186
CVE-2012-3236
CVE-2012-4453
CVE-2012-5576
CVE-2013-1976
CVE-2014-3566
CVE-2014-4975
CVE-2014-8080
CVE-2014-8090
CVE-2014-8354
CVE-2014-8355
CVE-2014-8562
CVE-2014-8716
CVE-2014-9496
CVE-2014-9756
CVE-2015-1855
CVE-2015-3900
CVE-2015-7551
CVE-2015-7805
CVE-2015-8075
CVE-2016-2339
CVE-2016-2851
CVE-2016-4994
CVE-2016-6354
CVE-2017-3136
CVE-2017-8422
CVE-2018-14633
CVE-2018-17182
CVE-2018-5741
CVE-2019-6477
CVE-2020-0404
CVE-2020-0427
CVE-2020-0431
CVE-2020-0432
CVE-2020-14345
CVE-2020-14346
CVE-2020-14347
CVE-2020-14381
CVE-2020-14390
CVE-2020-25212
CVE-2020-25284
CVE-2020-25641
CVE-2020-25643
CVE-2020-26088
CVE-2020-8616
CVE-2020-8617
CVE-2020-8618
CVE-2020-8619
CVE-2020-8620
CVE-2020-8621
CVE-2020-8622
CVE-2020-8623
CVE-2020-8624
SUSE-SU-2018:3159-1
SUSE-SU-2019:2982-1
SUSE-SU-2020:2905-1
|
| Platform(s): | openSUSE Leap 15.0
openSUSE Leap 15.1
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Workstation Extension 15
SUSE Linux Enterprise Workstation Extension 15 SP1
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
| Product(s): | |
| Definition Synopsis |
| openSUSE Leap 15.0 is installed AND dracut-044.1-lp150.13 is installed
|
| Definition Synopsis |
| openSUSE Leap 15.1 is installed
AND Package Information
libBasicUsageEnvironment1-2019.06.28-lp151.2.3 is installed
OR libUsageEnvironment3-2019.06.28-lp151.2.3 is installed
OR libgroupsock8-2019.06.28-lp151.2.3 is installed
OR libliveMedia66-2019.06.28-lp151.2.3 is installed
OR live555-2019.06.28-lp151.2.3 is installed
OR live555-devel-2019.06.28-lp151.2.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP3 is installed
AND Package Information
cpio-2.9-75.78 is installed
OR cpio-lang-2.9-75.78 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 is installed
AND dracut-037-34 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP1 is installed
AND Package Information
ImageMagick-6.8.8.1-8 is installed
OR libMagick++-6_Q16-3-6.8.8.1-8 is installed
OR libMagickCore-6_Q16-1-6.8.8.1-8 is installed
OR libMagickCore-6_Q16-1-32bit-6.8.8.1-8 is installed
OR libMagickWand-6_Q16-1-6.8.8.1-8 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP2 is installed
AND coolkey-1.1.0-147 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP3 is installed
AND Package Information
libkde4-4.12.0-10 is installed
OR libkde4-32bit-4.12.0-10 is installed
OR libkdecore4-4.12.0-10 is installed
OR libkdecore4-32bit-4.12.0-10 is installed
OR libksuseinstall1-4.12.0-10 is installed
OR libksuseinstall1-32bit-4.12.0-10 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP4 is installed
AND Package Information
gimp-2.8.18-9.3 is installed
OR gimp-lang-2.8.18-9.3 is installed
OR gimp-plugins-python-2.8.18-9.3 is installed
OR libgimp-2_0-0-2.8.18-9.3 is installed
OR libgimpui-2_0-0-2.8.18-9.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed
AND Package Information
xorg-x11-server-1.20.3-22.5 is installed
OR xorg-x11-server-source-1.20.3-22.5 is installed
OR xorg-x11-server-wayland-1.20.3-22.5 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1 is installed
AND Package Information
gdk-pixbuf-lang-2.30.6-1 is installed
OR gdk-pixbuf-query-loaders-2.30.6-1 is installed
OR gdk-pixbuf-query-loaders-32bit-2.30.6-1 is installed
OR libgdk_pixbuf-2_0-0-2.30.6-1 is installed
OR libgdk_pixbuf-2_0-0-32bit-2.30.6-1 is installed
OR typelib-1_0-GdkPixbuf-2_0-2.30.6-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1-LTSS is installed
AND Package Information
kgraft-patch-3_12_74-60_64_45-default-4-2 is installed
OR kgraft-patch-3_12_74-60_64_45-xen-4-2 is installed
OR kgraft-patch-SLE12-SP1_Update_16-4-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2 is installed
AND Package Information
xorg-x11-7.6_1-14 is installed
OR xorg-x11-essentials-7.6_1-14 is installed
OR xrdb-1.1.0-3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-BCL is installed
AND Package Information
libecpg6-10.9-1.12 is installed
OR libpq5-10.9-1.12 is installed
OR libpq5-32bit-10.9-1.12 is installed
OR postgresql10-10.9-1.12 is installed
OR postgresql10-contrib-10.9-1.12 is installed
OR postgresql10-docs-10.9-1.12 is installed
OR postgresql10-libs-10.9-1.12 is installed
OR postgresql10-plperl-10.9-1.12 is installed
OR postgresql10-plpython-10.9-1.12 is installed
OR postgresql10-pltcl-10.9-1.12 is installed
OR postgresql10-server-10.9-1.12 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
AND Package Information
kgraft-patch-4_4_103-92_56-default-10-2 is installed
OR kgraft-patch-SLE12-SP2_Update_17-10-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-LTSS is installed
AND Package Information
kgraft-patch-4_4_103-92_53-default-7-2 is installed
OR kgraft-patch-SLE12-SP2_Update_16-7-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3 is installed
AND autofs-5.0.9-27 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-BCL is installed
AND Package Information
libpython3_4m1_0-3.4.6-25.29 is installed
OR python3-3.4.6-25.29 is installed
OR python3-base-3.4.6-25.29 is installed
OR python3-curses-3.4.6-25.29 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
AND Package Information
libsolv-0.6.36-2.27.19 is installed
OR libsolv-tools-0.6.36-2.27.19 is installed
OR libzypp-16.20.2-27.60 is installed
OR perl-solv-0.6.36-2.27.19 is installed
OR python-solv-0.6.36-2.27.19 is installed
OR zypper-1.13.54-18.40 is installed
OR zypper-log-1.13.54-18.40 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-LTSS is installed
AND Package Information
kgraft-patch-4_4_175-94_79-default-4-2 is installed
OR kgraft-patch-SLE12-SP3_Update_23-4-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
AND Package Information
libpolkit0-0.113-5.12 is installed
OR polkit-0.113-5.12 is installed
OR typelib-1_0-Polkit-1_0-0.113-5.12 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP4 is installed
AND Package Information
grub2-2.02-11 is installed
OR grub2-arm64-efi-2.02-11 is installed
OR grub2-i386-pc-2.02-11 is installed
OR grub2-powerpc-ieee1275-2.02-11 is installed
OR grub2-s390x-emu-2.02-11 is installed
OR grub2-snapper-plugin-2.02-11 is installed
OR grub2-systemd-sleep-plugin-2.02-11 is installed
OR grub2-x86_64-efi-2.02-11 is installed
OR grub2-x86_64-xen-2.02-11 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 is installed
AND Package Information
kernel-default-4.12.14-25.22 is installed
OR kernel-default-extra-4.12.14-25.22 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
AND enigmail-2.1.2-3.19 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 6 is installed
AND openstack-heat-templates-0.0.0+git.1452795102.e53f5d3-1 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 7 is installed
AND Package Information
xen-4.7.5_04-43.33 is installed
OR xen-doc-html-4.7.5_04-43.33 is installed
OR xen-libs-4.7.5_04-43.33 is installed
OR xen-libs-32bit-4.7.5_04-43.33 is installed
OR xen-tools-4.7.5_04-43.33 is installed
OR xen-tools-domU-4.7.5_04-43.33 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 8 is installed
AND Package Information
libecpg6-10.9-1.12 is installed
OR libpq5-10.9-1.12 is installed
OR libpq5-32bit-10.9-1.12 is installed
OR postgresql10-10.9-1.12 is installed
OR postgresql10-contrib-10.9-1.12 is installed
OR postgresql10-docs-10.9-1.12 is installed
OR postgresql10-libs-10.9-1.12 is installed
OR postgresql10-plperl-10.9-1.12 is installed
OR postgresql10-plpython-10.9-1.12 is installed
OR postgresql10-pltcl-10.9-1.12 is installed
OR postgresql10-server-10.9-1.12 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud Crowbar 8 is installed
AND Package Information
ruby2.1-rubygem-rails-html-sanitizer-1.0.3-8.8 is installed
OR rubygem-rails-html-sanitizer-1.0.3-8.8 is installed
|