shield Security update for libxfont

SUSE-SLE-SERVER-12-SP2-2018-230

This update for libXfont fixes several issues. These security issues were fixed: - CVE-2017-13720: Improper check for end of string in PatterMatch caused invalid reads (bsc#1054285) - CVE-2017-13722: Malformed PCF file could have caused DoS or leak information (bsc#1049692) - Prevent the X server from accessing arbitrary files as root. It is not possible to leak information, but special files can be touched allowing for causing side effects (bsc#1050459)

• Release Date
  Feb 1 2018
• References
  Bugzilla: 1054285, 1050459, 1049692
  CVEs: CVE-2017-13722, CVE-2017-13720
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.2 aarch64

• Packages
  libXfont
  X font handling library for server and utilities

  1.5.1-11.3.12 lock src

  libXfont1
  X font handling library for server and utilities

  1.5.1-11.3.12 lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  libXfont
  X font handling library for server and utilities

  1.5.1-11.3.12 lock src

  libXfont1
  X font handling library for server and utilities

  1.5.1-11.3.12 lock rpm

SUSE Linux Enterprise Server 12.2 s390x

• Packages
  libXfont
  X font handling library for server and utilities

  1.5.1-11.3.12 lock src

  libXfont1
  X font handling library for server and utilities

  1.5.1-11.3.12 lock rpm

SUSE Linux Enterprise Server 12.2 x86_64

• Packages
  libXfont
  X font handling library for server and utilities

  1.5.1-11.3.12 lock src

  libXfont1
  X font handling library for server and utilities

  1.5.1-11.3.12 lock rpm