Oval Definition:oval:org.opensuse.security:def:78982
Revision Date:2018-02-01Version:1
Title:Security update for libXfont (Moderate)
Description:

This update for libXfont fixes several issues.

These security issues were fixed:

- CVE-2017-13720: Improper check for end of string in PatterMatch caused invalid reads (bsc#1054285) - CVE-2017-13722: Malformed PCF file could have caused DoS or leak information (bsc#1049692) - Prevent the X server from accessing arbitrary files as root. It is not possible to leak information, but special files can be touched allowing for causing side effects (bsc#1050459)
Family:unixClass:patch
Status:Reference(s):1049692
1050459
1054285
CVE-2017-13720
CVE-2017-13722
SUSE-SU-2018:0334-1
Platform(s):SUSE Linux Enterprise Desktop 12 SP2
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND libXfont1-1.5.1-11.3.12 is installed
  • BACK