gpp_maybe Security update for xorg-x11-server

SUSE-SLE-DESKTOP-12-SP2-2017-1148

This update for xorg-x11-server provides the following fixes: - CVE-2017-10971: Fix endianess handling of GenericEvent to prevent a stack overflow by clients. (bnc#1035283) - Make sure the type of all events to be sent by ProcXSendExtensionEvent are in the allowed range. - CVE-2017-10972: Initialize the xEvent eventT with zeros to avoid information leakage.

• Release Date
  Jul 14 2017
• References
  Bugzilla: 1035283
  CVEs: CVE-2017-10971, CVE-2017-10972
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Desktop 12.2 x86_64

• Packages
  xorg-x11-server
  X

  7.6_1.18.3-74.2

  lock rpm

  lock src

  xorg-x11-server-extra
  Additional Xservers (Xdmx, Xephyr, Xnest)

  7.6_1.18.3-74.2

  lock rpm