gpp_maybe Security update for xorg-x11-server

SUSE-SLE-SERVER-12-SP1-2017-1149

This update for xorg-x11-server provides the following fixes: - CVE-2017-10971: Fix endianess handling of GenericEvent to prevent a stack overflow by clients. (bnc#1035283) - Make sure the type of all events to be sent by ProcXSendExtensionEvent are in the allowed range. - CVE-2017-10972: Initialize the xEvent eventT with zeros to avoid information leakage.

• Release Date
  Jul 14 2017
• References
  Bugzilla: 1035283
  CVEs: CVE-2017-10971, CVE-2017-10972
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server LTSS 12.1 s390x

• Packages
  xorg-x11-server
  X

  7.6_1.15.2-53.3.1 lock rpm lock src

  xorg-x11-server-extra
  Additional Xservers (Xdmx, Xephyr, Xnest)

  7.6_1.15.2-53.3.1 lock rpm

SUSE Linux Enterprise Server LTSS 12.1 x86_64

• Packages
  xorg-x11-server
  X

  7.6_1.15.2-53.3.1 lock rpm lock src

  xorg-x11-server-extra
  Additional Xservers (Xdmx, Xephyr, Xnest)

  7.6_1.15.2-53.3.1 lock rpm