| Revision Date: | 2020-12-01 | Version: | 1 |
| Title: | Security update for xorg-x11-server (Important) |
| Description: |
This update for xorg-x11-server fixes the following issues:
- CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation (bsc#1174633, ZDI-CAN-11426). - CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability (bsc#1174638, ZDI-CAN-11429). - CVE-2020-14345: XKB out-of-bounds access privilege escalation vulnerability (bsc#1174635, ZDI-CAN-11428).
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1012102
1012103
1012104
1013653
1013655
1013663
1022032
1027519
1032144
1049379
1050135
1052249
1052253
1052545
1054924
1055219
1055430
1061873
1072834
1080634
1080635
1080662
1087020
1087251
1087252
1089152
1089635
1090820
1090822
1090823
1108308
1174633
1174635
1174638
295284
773464
782060
872912
890228
899756
901813
902421
910378
912457
913304
916617
923374
931854
933591
936909
937837
939051
947552
949022
951559
951629
951660
953382
954658
956773
958581
958582
958583
958584
958585
958586
962318
962784
962802
962960
962966
962970
962988
962994
962995
962997
963000
963002
975496
975981
CVE-2006-7250
CVE-2008-5077
CVE-2009-0368
CVE-2009-0590
CVE-2009-0591
CVE-2009-0789
CVE-2009-1377
CVE-2009-1378
CVE-2009-1379
CVE-2009-1386
CVE-2009-1387
CVE-2010-0740
CVE-2010-0742
CVE-2010-1633
CVE-2010-2547
CVE-2010-2939
CVE-2010-3864
CVE-2010-4523
CVE-2010-5298
CVE-2011-0014
CVE-2011-3207
CVE-2011-3210
CVE-2011-4108
CVE-2011-4576
CVE-2011-4577
CVE-2011-4619
CVE-2012-0027
CVE-2012-0050
CVE-2012-0884
CVE-2012-1165
CVE-2012-2110
CVE-2012-2686
CVE-2012-4929
CVE-2013-0166
CVE-2013-0169
CVE-2013-4233
CVE-2013-4234
CVE-2013-4351
CVE-2013-4353
CVE-2013-4402
CVE-2013-6449
CVE-2013-6450
CVE-2014-0076
CVE-2014-0160
CVE-2014-0195
CVE-2014-0198
CVE-2014-0221
CVE-2014-0224
CVE-2014-3470
CVE-2014-3505
CVE-2014-3506
CVE-2014-3507
CVE-2014-3508
CVE-2014-3509
CVE-2014-3510
CVE-2014-3511
CVE-2014-3512
CVE-2014-3513
CVE-2014-3567
CVE-2014-3568
CVE-2014-3569
CVE-2014-3570
CVE-2014-3571
CVE-2014-3572
CVE-2014-3634
CVE-2014-3683
CVE-2014-4617
CVE-2014-5139
CVE-2014-8275
CVE-2015-0204
CVE-2015-0205
CVE-2015-0206
CVE-2015-0209
CVE-2015-0286
CVE-2015-0287
CVE-2015-0288
CVE-2015-0289
CVE-2015-0293
CVE-2015-1788
CVE-2015-1789
CVE-2015-1790
CVE-2015-1791
CVE-2015-1792
CVE-2015-1793
CVE-2015-1794
CVE-2015-3193
CVE-2015-3194
CVE-2015-3195
CVE-2015-3196
CVE-2015-3197
CVE-2015-3223
CVE-2015-4171
CVE-2015-5252
CVE-2015-5296
CVE-2015-5299
CVE-2015-5300
CVE-2015-5330
CVE-2015-7236
CVE-2015-7973
CVE-2015-7974
CVE-2015-7975
CVE-2015-7976
CVE-2015-7977
CVE-2015-7978
CVE-2015-7979
CVE-2015-8138
CVE-2015-8139
CVE-2015-8140
CVE-2015-8158
CVE-2015-8467
CVE-2016-0701
CVE-2016-0702
CVE-2016-0705
CVE-2016-0797
CVE-2016-0798
CVE-2016-0800
CVE-2016-2105
CVE-2016-2106
CVE-2016-2107
CVE-2016-2109
CVE-2016-2176
CVE-2016-2177
CVE-2016-2178
CVE-2016-2179
CVE-2016-2180
CVE-2016-2181
CVE-2016-2182
CVE-2016-2183
CVE-2016-6302
CVE-2016-6303
CVE-2016-6304
CVE-2016-6306
CVE-2016-7052
CVE-2016-7055
CVE-2016-7056
CVE-2016-7530
CVE-2016-9634
CVE-2016-9635
CVE-2016-9636
CVE-2016-9807
CVE-2016-9808
CVE-2016-9810
CVE-2017-11446
CVE-2017-11534
CVE-2017-12428
CVE-2017-12431
CVE-2017-12433
CVE-2017-13133
CVE-2017-13139
CVE-2017-15033
CVE-2017-3731
CVE-2017-3732
CVE-2017-5950
CVE-2017-8779
CVE-2018-10471
CVE-2018-10472
CVE-2018-7540
CVE-2018-7541
CVE-2018-7542
CVE-2018-8897
CVE-2018-9055
CVE-2020-14345
CVE-2020-14346
CVE-2020-14347
SUSE-SU-2015:1196-1
SUSE-SU-2015:2304-1
SUSE-SU-2016:1177-1
SUSE-SU-2016:3303-1
SUSE-SU-2017:2949-1
SUSE-SU-2018:0631-1
SUSE-SU-2018:1184-1
SUSE-SU-2018:1424-1
SUSE-SU-2018:1441-1
SUSE-SU-2018:3074-1
SUSE-SU-2020:2240-1
|
| Platform(s): | openSUSE Leap 15.0
openSUSE Leap 15.1
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Workstation Extension 15 SP2
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
| Product(s): | |
| Definition Synopsis |
| openSUSE Leap 15.0 is installed AND Package Information
ImageMagick-7.0.7.29-lp150.1 is installed
OR libMagick++-7_Q16HDRI4-7.0.7.29-lp150.1 is installed
OR libMagickCore-7_Q16HDRI6-7.0.7.29-lp150.1 is installed
OR libMagickWand-7_Q16HDRI6-7.0.7.29-lp150.1 is installed
|
| Definition Synopsis |
| openSUSE Leap 15.1 is installed
AND Package Information
bluez-5.48-lp151.8.3 is installed
OR bluez-auto-enable-devices-5.48-lp151.8.3 is installed
OR bluez-cups-5.48-lp151.8.3 is installed
OR bluez-devel-5.48-lp151.8.3 is installed
OR bluez-devel-32bit-5.48-lp151.8.3 is installed
OR bluez-test-5.48-lp151.8.3 is installed
OR libbluetooth3-5.48-lp151.8.3 is installed
OR libbluetooth3-32bit-5.48-lp151.8.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP2 is installed
AND Package Information
hplip-3.11.10-0.6.11 is installed
OR hplip-hpijs-3.11.10-0.6.11 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP3 is installed
AND Package Information
bind-9.9.6P1-0.15 is installed
OR bind-libs-9.9.6P1-0.15 is installed
OR bind-libs-32bit-9.9.6P1-0.15 is installed
OR bind-utils-9.9.6P1-0.15 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP4 is installed
AND Package Information
MozillaFirefox-31.8.0esr-0.13 is installed
OR MozillaFirefox-translations-31.8.0esr-0.13 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 is installed
AND Package Information
gpg2-2.0.24-1 is installed
OR gpg2-lang-2.0.24-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP1 is installed
AND Package Information
ntp-4.2.8p6-8 is installed
OR ntp-doc-4.2.8p6-8 is installed
OR yast2-ntp-client-3.1.22-6 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP2 is installed
AND Package Information
gstreamer-plugins-good-1.8.3-9 is installed
OR gstreamer-plugins-good-lang-1.8.3-9 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP3 is installed
AND Package Information
libecpg6-10.5-1.3 is installed
OR libpq5-10.5-1.3 is installed
OR libpq5-32bit-10.5-1.3 is installed
OR postgresql10-10.5-1.3 is installed
OR postgresql10-libs-10.5-1.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP4 is installed
AND Package Information
libopenssl-devel-1.0.2p-1 is installed
OR openssl-1.0.2p-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1 is installed
AND Package Information
ecryptfs-utils-103-5 is installed
OR ecryptfs-utils-32bit-103-5 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1-LTSS is installed
AND Package Information
kgraft-patch-3_12_74-60_64_48-default-3-2 is installed
OR kgraft-patch-3_12_74-60_64_48-xen-3-2 is installed
OR kgraft-patch-SLE12-SP1_Update_17-3-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2 is installed
AND opensc-0.13.0-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-BCL is installed
AND Package Information
libpython2_7-1_0-2.7.17-28.42 is installed
OR libpython2_7-1_0-32bit-2.7.17-28.42 is installed
OR python-2.7.17-28.42 is installed
OR python-32bit-2.7.17-28.42 is installed
OR python-base-2.7.17-28.42 is installed
OR python-base-32bit-2.7.17-28.42 is installed
OR python-curses-2.7.17-28.42 is installed
OR python-demo-2.7.17-28.42 is installed
OR python-doc-2.7.17-28.42 is installed
OR python-doc-pdf-2.7.17-28.42 is installed
OR python-gdbm-2.7.17-28.42 is installed
OR python-idle-2.7.17-28.42 is installed
OR python-rpm-macros-20200207.5feb6c1-3.19 is installed
OR python-tk-2.7.17-28.42 is installed
OR python-xml-2.7.17-28.42 is installed
OR shared-python-startup-0.1-1.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
AND Package Information
libsnmp30-5.7.3-6.3 is installed
OR libsnmp30-32bit-5.7.3-6.3 is installed
OR net-snmp-5.7.3-6.3 is installed
OR perl-SNMP-5.7.3-6.3 is installed
OR snmp-mibs-5.7.3-6.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-LTSS is installed
AND Package Information
kgraft-patch-4_4_74-92_35-default-10-2 is installed
OR kgraft-patch-SLE12-SP2_Update_12-10-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3 is installed
AND Package Information
libHX28-3.18-1 is installed
OR libHX28-32bit-3.18-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
AND Package Information
kgraft-patch-4_4_180-94_103-default-3-2 is installed
OR kgraft-patch-SLE12-SP3_Update_28-3-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-LTSS is installed
AND Package Information
kgraft-patch-4_4_178-94_91-default-4-2 is installed
OR kgraft-patch-SLE12-SP3_Update_25-4-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
AND Package Information
java-1_8_0-ibm-1.8.0_sr5.20-30.36 is installed
OR java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36 is installed
OR java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP4 is installed
AND Package Information
DirectFB-1.7.1-6 is installed
OR lib++dfb-1_7-1-1.7.1-6 is installed
OR libdirectfb-1_7-1-1.7.1-6 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 SP2 is installed
AND Package Information
xorg-x11-server-1.20.3-22.5 is installed
OR xorg-x11-server-wayland-1.20.3-22.5 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 6 is installed
AND Package Information
openstack-horizon-plugin-manila-ui-1.2.1~a0~dev2-3 is installed
OR python-horizon-plugin-manila-ui-1.2.1~a0~dev2-3 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 7 is installed
AND python-Jinja2-2.8-22.8 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 8 is installed
AND Package Information
java-1_7_0-openjdk-1.7.0.241-43.30 is installed
OR java-1_7_0-openjdk-demo-1.7.0.241-43.30 is installed
OR java-1_7_0-openjdk-devel-1.7.0.241-43.30 is installed
OR java-1_7_0-openjdk-headless-1.7.0.241-43.30 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud Crowbar 8 is installed
AND Package Information
libecpg6-10.9-1.12 is installed
OR libpq5-10.9-1.12 is installed
OR libpq5-32bit-10.9-1.12 is installed
OR postgresql10-10.9-1.12 is installed
OR postgresql10-contrib-10.9-1.12 is installed
OR postgresql10-docs-10.9-1.12 is installed
OR postgresql10-libs-10.9-1.12 is installed
OR postgresql10-plperl-10.9-1.12 is installed
OR postgresql10-plpython-10.9-1.12 is installed
OR postgresql10-pltcl-10.9-1.12 is installed
OR postgresql10-server-10.9-1.12 is installed
|