Описание
Security update for libX11 and libxcb
This update for libX11 and libxcb fixes the following issue:
libX11:
These security issues were fixed:
- CVE-2018-14599: The function XListExtensions was vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact (bsc#1102062).
- CVE-2018-14600: The function XListExtensions interpreted a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading to DoS or remote code execution (bsc#1102068).
- CVE-2018-14598: A malicious server could have sent a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS (segmentation fault) (bsc#1102073).
This non-security issue was fixed:
- Make use of the new 64-bit sequence number API in XCB 1.11.1 to avoid the 32-bit sequence number wrap in libX11 (bsc#1094327).
libxcb:
- Expose 64-bit sequence number from XCB API so that Xlib and others can use it even on 32-bit environment. (bsc#1094327)
Список пакетов
SUSE Linux Enterprise Desktop 12 SP3
libX11-6-1.6.2-12.5.1
libX11-6-32bit-1.6.2-12.5.1
libX11-data-1.6.2-12.5.1
libX11-xcb1-1.6.2-12.5.1
libX11-xcb1-32bit-1.6.2-12.5.1
libxcb-dri2-0-1.10-4.3.1
libxcb-dri2-0-32bit-1.10-4.3.1
libxcb-dri3-0-1.10-4.3.1
libxcb-dri3-0-32bit-1.10-4.3.1
libxcb-glx0-1.10-4.3.1
libxcb-glx0-32bit-1.10-4.3.1
libxcb-present0-1.10-4.3.1
libxcb-present0-32bit-1.10-4.3.1
libxcb-randr0-1.10-4.3.1
libxcb-render0-1.10-4.3.1
libxcb-render0-32bit-1.10-4.3.1
libxcb-shape0-1.10-4.3.1
libxcb-shm0-1.10-4.3.1
libxcb-shm0-32bit-1.10-4.3.1
libxcb-sync1-1.10-4.3.1
libxcb-sync1-32bit-1.10-4.3.1
libxcb-xf86dri0-1.10-4.3.1
libxcb-xfixes0-1.10-4.3.1
libxcb-xfixes0-32bit-1.10-4.3.1
libxcb-xinerama0-1.10-4.3.1
libxcb-xkb1-1.10-4.3.1
libxcb-xkb1-32bit-1.10-4.3.1
libxcb-xv0-1.10-4.3.1
libxcb1-1.10-4.3.1
libxcb1-32bit-1.10-4.3.1
SUSE Linux Enterprise Server 12 SP3
libX11-6-1.6.2-12.5.1
libX11-6-32bit-1.6.2-12.5.1
libX11-data-1.6.2-12.5.1
libX11-xcb1-1.6.2-12.5.1
libX11-xcb1-32bit-1.6.2-12.5.1
libxcb-dri2-0-1.10-4.3.1
libxcb-dri2-0-32bit-1.10-4.3.1
libxcb-dri3-0-1.10-4.3.1
libxcb-dri3-0-32bit-1.10-4.3.1
libxcb-glx0-1.10-4.3.1
libxcb-glx0-32bit-1.10-4.3.1
libxcb-present0-1.10-4.3.1
libxcb-present0-32bit-1.10-4.3.1
libxcb-randr0-1.10-4.3.1
libxcb-render0-1.10-4.3.1
libxcb-render0-32bit-1.10-4.3.1
libxcb-shape0-1.10-4.3.1
libxcb-shm0-1.10-4.3.1
libxcb-shm0-32bit-1.10-4.3.1
libxcb-sync1-1.10-4.3.1
libxcb-sync1-32bit-1.10-4.3.1
libxcb-xf86dri0-1.10-4.3.1
libxcb-xfixes0-1.10-4.3.1
libxcb-xfixes0-32bit-1.10-4.3.1
libxcb-xinerama0-1.10-4.3.1
libxcb-xkb1-1.10-4.3.1
libxcb-xkb1-32bit-1.10-4.3.1
libxcb-xv0-1.10-4.3.1
libxcb1-1.10-4.3.1
libxcb1-32bit-1.10-4.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
libX11-6-1.6.2-12.5.1
libX11-6-32bit-1.6.2-12.5.1
libX11-data-1.6.2-12.5.1
libX11-xcb1-1.6.2-12.5.1
libX11-xcb1-32bit-1.6.2-12.5.1
libxcb-dri2-0-1.10-4.3.1
libxcb-dri2-0-32bit-1.10-4.3.1
libxcb-dri3-0-1.10-4.3.1
libxcb-dri3-0-32bit-1.10-4.3.1
libxcb-glx0-1.10-4.3.1
libxcb-glx0-32bit-1.10-4.3.1
libxcb-present0-1.10-4.3.1
libxcb-present0-32bit-1.10-4.3.1
libxcb-randr0-1.10-4.3.1
libxcb-render0-1.10-4.3.1
libxcb-render0-32bit-1.10-4.3.1
libxcb-shape0-1.10-4.3.1
libxcb-shm0-1.10-4.3.1
libxcb-shm0-32bit-1.10-4.3.1
libxcb-sync1-1.10-4.3.1
libxcb-sync1-32bit-1.10-4.3.1
libxcb-xf86dri0-1.10-4.3.1
libxcb-xfixes0-1.10-4.3.1
libxcb-xfixes0-32bit-1.10-4.3.1
libxcb-xinerama0-1.10-4.3.1
libxcb-xkb1-1.10-4.3.1
libxcb-xkb1-32bit-1.10-4.3.1
libxcb-xv0-1.10-4.3.1
libxcb1-1.10-4.3.1
libxcb1-32bit-1.10-4.3.1
SUSE Linux Enterprise Software Development Kit 12 SP3
libX11-devel-1.6.2-12.5.1
libxcb-composite0-1.10-4.3.1
libxcb-damage0-1.10-4.3.1
libxcb-devel-1.10-4.3.1
libxcb-devel-doc-1.10-4.3.1
libxcb-dpms0-1.10-4.3.1
libxcb-dri3-0-1.10-4.3.1
libxcb-present0-1.10-4.3.1
libxcb-record0-1.10-4.3.1
libxcb-res0-1.10-4.3.1
libxcb-screensaver0-1.10-4.3.1
libxcb-xevie0-1.10-4.3.1
libxcb-xinerama0-1.10-4.3.1
libxcb-xprint0-1.10-4.3.1
libxcb-xtest0-1.10-4.3.1
libxcb-xvmc0-1.10-4.3.1
Ссылки
- Link for SUSE-SU-2018:3102-1
- E-Mail link for SUSE-SU-2018:3102-1
- SUSE Security Ratings
- SUSE Bug 1094327
- SUSE Bug 1102062
- SUSE Bug 1102068
- SUSE Bug 1102073
- SUSE CVE CVE-2018-14598 page
- SUSE CVE CVE-2018-14599 page
- SUSE CVE CVE-2018-14600 page
Описание
An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS (segmentation fault).
Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP3:libX11-6-1.6.2-12.5.1
SUSE Linux Enterprise Desktop 12 SP3:libX11-6-32bit-1.6.2-12.5.1
SUSE Linux Enterprise Desktop 12 SP3:libX11-data-1.6.2-12.5.1
SUSE Linux Enterprise Desktop 12 SP3:libX11-xcb1-1.6.2-12.5.1
Ссылки
- CVE-2018-14598
- SUSE Bug 1102073
Описание
An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact.
Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP3:libX11-6-1.6.2-12.5.1
SUSE Linux Enterprise Desktop 12 SP3:libX11-6-32bit-1.6.2-12.5.1
SUSE Linux Enterprise Desktop 12 SP3:libX11-data-1.6.2-12.5.1
SUSE Linux Enterprise Desktop 12 SP3:libX11-xcb1-1.6.2-12.5.1
Ссылки
- CVE-2018-14599
- SUSE Bug 1102062
Описание
An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading to DoS or remote code execution.
Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP3:libX11-6-1.6.2-12.5.1
SUSE Linux Enterprise Desktop 12 SP3:libX11-6-32bit-1.6.2-12.5.1
SUSE Linux Enterprise Desktop 12 SP3:libX11-data-1.6.2-12.5.1
SUSE Linux Enterprise Desktop 12 SP3:libX11-xcb1-1.6.2-12.5.1
Ссылки
- CVE-2018-14600
- SUSE Bug 1102068
- SUSE Bug 1178417