gpp_maybe Security update for xorg-x11-server

SUSE-SLE-SDK-12-SP2-2017-1148

This update for xorg-x11-server provides the following fixes: - CVE-2017-10971: Fix endianess handling of GenericEvent to prevent a stack overflow by clients. (bnc#1035283) - Make sure the type of all events to be sent by ProcXSendExtensionEvent are in the allowed range. - CVE-2017-10972: Initialize the xEvent eventT with zeros to avoid information leakage.

• Release Date
  Jul 14 2017
• References
  Bugzilla: 1035283
  CVEs: CVE-2017-10971, CVE-2017-10972
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.2 aarch64

• Packages
  xorg-x11-server
  X

  7.6_1.18.3-74.2 lock src

  xorg-x11-server-sdk
  X

  7.6_1.18.3-74.2 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 ppc64le

• Packages
  xorg-x11-server
  X

  7.6_1.18.3-74.2 lock src

  xorg-x11-server-sdk
  X

  7.6_1.18.3-74.2 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 s390x

• Packages
  xorg-x11-server
  X

  7.6_1.18.3-74.2 lock src

  xorg-x11-server-sdk
  X

  7.6_1.18.3-74.2 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 x86_64

• Packages
  xorg-x11-server
  X

  7.6_1.18.3-74.2 lock src

  xorg-x11-server-sdk
  X

  7.6_1.18.3-74.2 lock rpm