SUSE-SU-2021:1892-1

Опубликовано: 08 июн. 2021

Источник: suse-cvrf

Описание

Security update for libX11

This update for libX11 fixes the following issues:

Regression in the fix for CVE-2021-31535, causing segfaults for xforms applications like fdesign (bsc#1186643)

Список пакетов

HPE Helion OpenStack 8

libX11-6-1.6.2-12.21.1

libX11-6-32bit-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

libX11-xcb1-32bit-1.6.2-12.21.1

Image SLES12-SP4-Azure-BYOS

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

Image SLES12-SP4-EC2-HVM-BYOS

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

Image SLES12-SP4-GCE-BYOS

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

Image SLES12-SP4-SAP-Azure

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

Image SLES12-SP4-SAP-Azure-BYOS

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

Image SLES12-SP4-SAP-EC2-HVM

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

Image SLES12-SP4-SAP-EC2-HVM-BYOS

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

Image SLES12-SP4-SAP-GCE

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

Image SLES12-SP4-SAP-GCE-BYOS

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

Image SLES12-SP5-Azure-BYOS

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

Image SLES12-SP5-Azure-Basic-On-Demand

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

Image SLES12-SP5-Azure-HPC-BYOS

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

Image SLES12-SP5-Azure-HPC-On-Demand

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

Image SLES12-SP5-Azure-SAP-BYOS

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

Image SLES12-SP5-Azure-SAP-On-Demand

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

Image SLES12-SP5-Azure-Standard-On-Demand

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

Image SLES12-SP5-EC2-BYOS

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

Image SLES12-SP5-EC2-ECS-On-Demand

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

Image SLES12-SP5-EC2-On-Demand

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

Image SLES12-SP5-EC2-SAP-BYOS

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

Image SLES12-SP5-EC2-SAP-On-Demand

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

Image SLES12-SP5-GCE-BYOS

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

Image SLES12-SP5-GCE-On-Demand

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

Image SLES12-SP5-GCE-SAP-BYOS

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

Image SLES12-SP5-GCE-SAP-On-Demand

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

Image SLES12-SP5-OCI-BYOS-BYOS

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

Image SLES12-SP5-OCI-BYOS-SAP-BYOS

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

libX11-6-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

SUSE Linux Enterprise Server 12 SP2-BCL

libX11-6-1.6.2-12.21.1

libX11-6-32bit-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

libX11-xcb1-32bit-1.6.2-12.21.1

SUSE Linux Enterprise Server 12 SP3-BCL

libX11-6-1.6.2-12.21.1

libX11-6-32bit-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

libX11-xcb1-32bit-1.6.2-12.21.1

SUSE Linux Enterprise Server 12 SP3-LTSS

libX11-6-1.6.2-12.21.1

libX11-6-32bit-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

libX11-xcb1-32bit-1.6.2-12.21.1

SUSE Linux Enterprise Server 12 SP4-LTSS

libX11-6-1.6.2-12.21.1

libX11-6-32bit-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

libX11-xcb1-32bit-1.6.2-12.21.1

SUSE Linux Enterprise Server 12 SP5

libX11-6-1.6.2-12.21.1

libX11-6-32bit-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

libX11-xcb1-32bit-1.6.2-12.21.1

SUSE Linux Enterprise Server for SAP Applications 12 SP3

libX11-6-1.6.2-12.21.1

libX11-6-32bit-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

libX11-xcb1-32bit-1.6.2-12.21.1

SUSE Linux Enterprise Server for SAP Applications 12 SP4

libX11-6-1.6.2-12.21.1

libX11-6-32bit-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

libX11-xcb1-32bit-1.6.2-12.21.1

SUSE Linux Enterprise Server for SAP Applications 12 SP5

libX11-6-1.6.2-12.21.1

libX11-6-32bit-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

libX11-xcb1-32bit-1.6.2-12.21.1

SUSE Linux Enterprise Software Development Kit 12 SP5

libX11-devel-1.6.2-12.21.1

SUSE OpenStack Cloud 8

libX11-6-1.6.2-12.21.1

libX11-6-32bit-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

libX11-xcb1-32bit-1.6.2-12.21.1

SUSE OpenStack Cloud 9

libX11-6-1.6.2-12.21.1

libX11-6-32bit-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

libX11-xcb1-32bit-1.6.2-12.21.1

SUSE OpenStack Cloud Crowbar 8

libX11-6-1.6.2-12.21.1

libX11-6-32bit-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

libX11-xcb1-32bit-1.6.2-12.21.1

SUSE OpenStack Cloud Crowbar 9

libX11-6-1.6.2-12.21.1

libX11-6-32bit-1.6.2-12.21.1

libX11-data-1.6.2-12.21.1

libX11-xcb1-1.6.2-12.21.1

libX11-xcb1-32bit-1.6.2-12.21.1

Ссылки

https://www.suse.com/support/update/announcement/2021/suse-su-20211892-1/
Link for SUSE-SU-2021:1892-1
https://lists.suse.com/pipermail/sle-security-updates/2021-June/008951.html
E-Mail link for SUSE-SU-2021:1892-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1186643
SUSE Bug 1186643
https://www.suse.com/security/cve/CVE-2021-31535/
SUSE CVE CVE-2021-31535 page

Описание

LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code. The libX11 XLookupColor request (intended for server-side color lookup) contains a flaw allowing a client to send color-name requests with a name longer than the maximum size allowed by the protocol (and also longer than the maximum packet size for normal-sized packets). The user-controlled data exceeding the maximum size is then interpreted by the server as additional X protocol requests and executed, e.g., to disable X server authorization completely. For example, if the victim encounters malicious terminal control sequences for color codes, then the attacker may be able to take full control of the running graphical session.

Затронутые продукты

HPE Helion OpenStack 8:libX11-6-1.6.2-12.21.1

HPE Helion OpenStack 8:libX11-6-32bit-1.6.2-12.21.1

HPE Helion OpenStack 8:libX11-data-1.6.2-12.21.1

HPE Helion OpenStack 8:libX11-xcb1-1.6.2-12.21.1

Ссылки

https://www.suse.com/security/cve/CVE-2021-31535.html
CVE-2021-31535
https://bugzilla.suse.com/1182506
SUSE Bug 1182506
https://bugzilla.suse.com/1191879
SUSE Bug 1191879
https://bugzilla.suse.com/1205051
SUSE Bug 1205051

SUSE-SU-2021:1892-1

Описание

Список пакетов

HPE Helion OpenStack 8

Image SLES12-SP4-Azure-BYOS

Image SLES12-SP4-EC2-HVM-BYOS

Image SLES12-SP4-GCE-BYOS

Image SLES12-SP4-SAP-Azure

Image SLES12-SP4-SAP-Azure-BYOS

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production

Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production

Image SLES12-SP4-SAP-EC2-HVM

Image SLES12-SP4-SAP-EC2-HVM-BYOS

Image SLES12-SP4-SAP-GCE

Image SLES12-SP4-SAP-GCE-BYOS

Image SLES12-SP5-Azure-BYOS

Image SLES12-SP5-Azure-Basic-On-Demand

Image SLES12-SP5-Azure-HPC-BYOS

Image SLES12-SP5-Azure-HPC-On-Demand

Image SLES12-SP5-Azure-SAP-BYOS

Image SLES12-SP5-Azure-SAP-On-Demand

Image SLES12-SP5-Azure-Standard-On-Demand

Image SLES12-SP5-EC2-BYOS

Image SLES12-SP5-EC2-ECS-On-Demand

Image SLES12-SP5-EC2-On-Demand

Image SLES12-SP5-EC2-SAP-BYOS

Image SLES12-SP5-EC2-SAP-On-Demand

Image SLES12-SP5-GCE-BYOS

Image SLES12-SP5-GCE-On-Demand

Image SLES12-SP5-GCE-SAP-BYOS

Image SLES12-SP5-GCE-SAP-On-Demand

Image SLES12-SP5-OCI-BYOS-BYOS

Image SLES12-SP5-OCI-BYOS-SAP-BYOS

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

SUSE Linux Enterprise Server 12 SP2-BCL

SUSE Linux Enterprise Server 12 SP3-BCL

SUSE Linux Enterprise Server 12 SP3-LTSS

SUSE Linux Enterprise Server 12 SP4-LTSS

SUSE Linux Enterprise Server 12 SP5

SUSE Linux Enterprise Server for SAP Applications 12 SP3

SUSE Linux Enterprise Server for SAP Applications 12 SP4

SUSE Linux Enterprise Server for SAP Applications 12 SP5

SUSE Linux Enterprise Software Development Kit 12 SP5

SUSE OpenStack Cloud 8

SUSE OpenStack Cloud 9

SUSE OpenStack Cloud Crowbar 8

SUSE OpenStack Cloud Crowbar 9

Ссылки

Уязвимость: CVE-2021-31535

Описание

Затронутые продукты

Ссылки