Oval Definition:	oval:org.opensuse.security:def:54677
Revision Date: 2020-12-01 Version: 1 Title: Security update for xorg-x11-server (Important) Description: This update for xorg-x11-server fixes the following issues: - CVE-2020-25712: Fixed a heap-based buffer overflow which could have led to privilege escalation (bsc#1177596). - CVE-2020-14360: Fixed an out of bounds memory accesses on too short request which could lead to denial of service (bsc#1174908). Family: unix Class: patch Status: Reference(s): 1015565 1021483 1022805 1024517 1024528 1024531 1024532 1024533 1024534 1024535 1024536 1024537 1024539 1034481 1034482 1037603 1037624 1037824 1038293 1043898 1043899 1049607 1055825 1056058 1065363 1066242 1096974 1096984 1122623 1126117 1126118 1126119 1174908 1177596 777565 814440 815451 821664 900610 904348 904965 920016 923002 926007 926709 926774 930145 930788 932350 932805 933721 934920 935053 935757 936118 938706 939826 939926 939955 940017 940925 941202 942204 942305 942367 942605 942688 942938 943786 944296 944831 944837 944989 944993 945691 945825 945827 946078 946309 947957 948330 948347 948521 949100 949298 949502 949706 949744 949981 951440 952084 952099 952384 952579 953527 953980 954404 957812 963415 968046 968048 968051 968053 968374 CVE-2009-0688 CVE-2013-1981 CVE-2013-1997 CVE-2013-2004 CVE-2014-3675 CVE-2014-3676 CVE-2014-3677 CVE-2015-0272 CVE-2015-3195 CVE-2015-3197 CVE-2015-3238 CVE-2015-5157 CVE-2015-5307 CVE-2015-6252 CVE-2015-6937 CVE-2015-7872 CVE-2015-7990 CVE-2015-8104 CVE-2016-0702 CVE-2016-0703 CVE-2016-0797 CVE-2016-0799 CVE-2016-0800 CVE-2016-10169 CVE-2016-10170 CVE-2016-10171 CVE-2016-10172 CVE-2016-2399 CVE-2017-11464 CVE-2017-3735 CVE-2017-3736 CVE-2017-5974 CVE-2017-5975 CVE-2017-5976 CVE-2017-5977 CVE-2017-5978 CVE-2017-5979 CVE-2017-5980 CVE-2017-5981 CVE-2017-7484 CVE-2017-7485 CVE-2017-7486 CVE-2017-7960 CVE-2017-7961 CVE-2017-8834 CVE-2017-8871 CVE-2018-10360 CVE-2019-3816 CVE-2019-3833 CVE-2019-8905 CVE-2019-8906 CVE-2019-8907 CVE-2020-14360 CVE-2020-25712 SUSE-SU-2015:2108-1 SUSE-SU-2015:2251-1 SUSE-SU-2016:0631-1 SUSE-SU-2017:1095-1 SUSE-SU-2017:1398-1 SUSE-SU-2017:1690-1 SUSE-SU-2017:1986-1 SUSE-SU-2017:2117-1 SUSE-SU-2017:3169-1 SUSE-SU-2018:0608-1 SUSE-SU-2019:0656-1 SUSE-SU-2019:0839-1 SUSE-SU-2019:1468-1 SUSE-SU-2020:3585-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information emacs-25.3-lp150.1 is installed OR emacs-info-25.3-lp150.1 is installed OR emacs-nox-25.3-lp150.1 is installed OR etags-25.3-lp150.1 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information libwireshark9-2.4.15-lp151.2.3 is installed OR libwiretap7-2.4.15-lp151.2.3 is installed OR libwscodecs1-2.4.15-lp151.2.3 is installed OR libwsutil8-2.4.15-lp151.2.3 is installed OR wireshark-2.4.15-lp151.2.3 is installed OR wireshark-devel-2.4.15-lp151.2.3 is installed OR wireshark-ui-qt-2.4.15-lp151.2.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information kernel-bigsmp-3.0.101-0.47.71 is installed OR kernel-bigsmp-devel-3.0.101-0.47.71 is installed OR kernel-default-3.0.101-0.47.71 is installed OR kernel-default-base-3.0.101-0.47.71 is installed OR kernel-default-devel-3.0.101-0.47.71 is installed OR kernel-default-extra-3.0.101-0.47.71 is installed OR kernel-pae-3.0.101-0.47.71 is installed OR kernel-pae-base-3.0.101-0.47.71 is installed OR kernel-pae-devel-3.0.101-0.47.71 is installed OR kernel-pae-extra-3.0.101-0.47.71 is installed OR kernel-source-3.0.101-0.47.71 is installed OR kernel-syms-3.0.101-0.47.71 is installed OR kernel-trace-3.0.101-0.47.71 is installed OR kernel-trace-devel-3.0.101-0.47.71 is installed OR kernel-xen-3.0.101-0.47.71 is installed OR kernel-xen-base-3.0.101-0.47.71 is installed OR kernel-xen-devel-3.0.101-0.47.71 is installed OR kernel-xen-extra-3.0.101-0.47.71 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information compat-openssl097g-0.9.7g-146.22.36 is installed OR compat-openssl097g-32bit-0.9.7g-146.22.36 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information libzzip-0-13-0.13.62-9 is installed OR zziplib-0.13.62-9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND shim-0.9-20 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information cyrus-sasl-2.1.26-7 is installed OR cyrus-sasl-32bit-2.1.26-7 is installed OR cyrus-sasl-crammd5-2.1.26-7 is installed OR cyrus-sasl-crammd5-32bit-2.1.26-7 is installed OR cyrus-sasl-digestmd5-2.1.26-7 is installed OR cyrus-sasl-digestmd5-32bit-2.1.26-7 is installed OR cyrus-sasl-gssapi-2.1.26-7 is installed OR cyrus-sasl-gssapi-32bit-2.1.26-7 is installed OR cyrus-sasl-plain-2.1.26-7 is installed OR cyrus-sasl-plain-32bit-2.1.26-7 is installed OR cyrus-sasl-saslauthd-2.1.26-7 is installed OR libsasl2-3-2.1.26-7 is installed OR libsasl2-3-32bit-2.1.26-7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information libcroco-0.6.11-12.3 is installed OR libcroco-0_6-3-0.6.11-12.3 is installed OR libcroco-0_6-3-32bit-0.6.11-12.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information emacs-24.3-14 is installed OR emacs-el-24.3-14 is installed OR emacs-info-24.3-14 is installed OR emacs-nox-24.3-14 is installed OR emacs-x11-24.3-14 is installed OR etags-24.3-14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_51-default-2-2 is installed OR kgraft-patch-3_12_74-60_64_51-xen-2-2 is installed OR kgraft-patch-SLE12-SP1_Update_18-2-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information apache-commons-daemon-1.0.15-4 is installed OR apache-commons-daemon-javadoc-1.0.15-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND wpa_supplicant-2.6-15.10 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information java-1_7_1-ibm-1.7.1_sr4.25-38.23 is installed OR java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23 is installed OR java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23 is installed OR java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23 is installed OR java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information xorg-x11-server-7.6_1.18.3-76.37.1 is installed OR xorg-x11-server-extra-7.6_1.18.3-76.37.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information tar-1.27.1-14 is installed OR tar-lang-1.27.1-14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information xen-4.9.4_04-3.56 is installed OR xen-doc-html-4.9.4_04-3.56 is installed OR xen-libs-4.9.4_04-3.56 is installed OR xen-libs-32bit-4.9.4_04-3.56 is installed OR xen-tools-4.9.4_04-3.56 is installed OR xen-tools-domU-4.9.4_04-3.56 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information java-1_8_0-ibm-1.8.0_sr5.40-30.54 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information kgraft-patch-4_4_180-94_103-default-2-2 is installed OR kgraft-patch-SLE12-SP3_Update_28-2-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND wpa_supplicant-2.6-15.10 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information at-3.1.14-8.6 is installed OR flex-2.5.37-8 is installed OR flex-32bit-2.5.37-8 is installed OR libQtWebKit4-4.8.7+2.3.4-4.7 is installed OR libQtWebKit4-32bit-4.8.7+2.3.4-4.7 is installed OR libbonobo-2.32.1-16 is installed OR libbonobo-32bit-2.32.1-16 is installed OR libbonobo-doc-2.32.1-16 is installed OR libbonobo-lang-2.32.1-16 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information xen-4.5.5_12-22.18 is installed OR xen-doc-html-4.5.5_12-22.18 is installed OR xen-kmp-default-4.5.5_12_k3.12.74_60.64.45-22.18 is installed OR xen-libs-4.5.5_12-22.18 is installed OR xen-libs-32bit-4.5.5_12-22.18 is installed OR xen-tools-4.5.5_12-22.18 is installed OR xen-tools-domU-4.5.5_12-22.18 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information libecpg6-10.5-1.3 is installed OR libpq5-10.5-1.3 is installed OR libpq5-32bit-10.5-1.3 is installed OR postgresql-init-10-17.20 is installed OR postgresql10-10.5-1.3 is installed OR postgresql10-contrib-10.5-1.3 is installed OR postgresql10-docs-10.5-1.3 is installed OR postgresql10-libs-10.5-1.3 is installed OR postgresql10-server-10.5-1.3 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information grafana-4.5.1-4.3 is installed OR kafka-0.9.0.1-5.3 is installed OR logstash-2.4.1-5.4 is installed OR openstack-monasca-installer-20180622_15.06-3.6 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information ghostscript-9.27-23.28 is installed OR ghostscript-x11-9.27-23.28 is installed
BACK