Описание
Security update for xtrans
This update for xtrans fixes the following issues:
- CVE-2020-25697: Fixed local privilege escalation via TRANS_ABSTRACT on the client side (bsc#1178613).
Список пакетов
Image SLES15-SP3-SAPCAL-Azure
xtrans-1.3.5-150000.3.3.1
Image SLES15-SP3-SAPCAL-EC2-HVM
xtrans-1.3.5-150000.3.3.1
Image SLES15-SP3-SAPCAL-GCE
xtrans-1.3.5-150000.3.3.1
Image SLES15-SP4-SAP
xtrans-1.3.5-150000.3.3.1
Image SLES15-SP4-SAP-Azure
xtrans-1.3.5-150000.3.3.1
Image SLES15-SP4-SAP-EC2
xtrans-1.3.5-150000.3.3.1
Image SLES15-SP4-SAP-GCE
xtrans-1.3.5-150000.3.3.1
Image SLES15-SP4-SAPCAL
xtrans-1.3.5-150000.3.3.1
Image SLES15-SP4-SAPCAL-Azure
xtrans-1.3.5-150000.3.3.1
Image SLES15-SP4-SAPCAL-EC2
xtrans-1.3.5-150000.3.3.1
Image SLES15-SP4-SAPCAL-GCE
xtrans-1.3.5-150000.3.3.1
Image SLES15-SP5-SAPCAL-Azure
xtrans-1.3.5-150000.3.3.1
Image SLES15-SP5-SAPCAL-EC2
xtrans-1.3.5-150000.3.3.1
Image SLES15-SP5-SAPCAL-GCE
xtrans-1.3.5-150000.3.3.1
Image SLES15-SP6-SAP
xtrans-1.3.5-150000.3.3.1
Image SLES15-SP6-SAP-Azure
xtrans-1.3.5-150000.3.3.1
Image SLES15-SP6-SAP-EC2
xtrans-1.3.5-150000.3.3.1
Image SLES15-SP6-SAP-GCE
xtrans-1.3.5-150000.3.3.1
Image SLES15-SP6-SAPCAL
xtrans-1.3.5-150000.3.3.1
Image SLES15-SP6-SAPCAL-Azure
xtrans-1.3.5-150000.3.3.1
Image SLES15-SP6-SAPCAL-EC2
xtrans-1.3.5-150000.3.3.1
Image SLES15-SP6-SAPCAL-GCE
xtrans-1.3.5-150000.3.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP4
xtrans-1.3.5-150000.3.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP5
xtrans-1.3.5-150000.3.3.1
SUSE Linux Enterprise Real Time 15 SP3
xtrans-1.3.5-150000.3.3.1
openSUSE Leap 15.4
xtrans-1.3.5-150000.3.3.1
openSUSE Leap 15.5
xtrans-1.3.5-150000.3.3.1
Ссылки
- Link for SUSE-SU-2023:3190-1
- E-Mail link for SUSE-SU-2023:3190-1
- SUSE Security Ratings
- SUSE Bug 1178613
- SUSE CVE CVE-2020-25697 page
Описание
A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11 clients. This flaw allows an attacker to take control of an X application by impersonating the server it is expecting to connect to.
Затронутые продукты
Image SLES15-SP3-SAPCAL-Azure:xtrans-1.3.5-150000.3.3.1
Image SLES15-SP3-SAPCAL-EC2-HVM:xtrans-1.3.5-150000.3.3.1
Image SLES15-SP3-SAPCAL-GCE:xtrans-1.3.5-150000.3.3.1
Image SLES15-SP4-SAP-Azure:xtrans-1.3.5-150000.3.3.1
Ссылки
- CVE-2020-25697
- SUSE Bug 1178613