Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02206-1

Опубликовано: 02 июл. 2025
Источник: suse-cvrf

Описание

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues:

  • CVE-2025-49176: Fixed the integer overflow in Big Requests Extension (bsc#1244084).

Список пакетов

Container suse/kiosk/xorg:latest
xorg-x11-server-21.1.15-150700.5.6.1
xorg-x11-server-Xvfb-21.1.15-150700.5.6.1
Image SLES15-SP7-SAPCAL-Azure
xorg-x11-server-21.1.15-150700.5.6.1
xorg-x11-server-Xvfb-21.1.15-150700.5.6.1
Image SLES15-SP7-SAPCAL-EC2
xorg-x11-server-21.1.15-150700.5.6.1
xorg-x11-server-Xvfb-21.1.15-150700.5.6.1
Image SLES15-SP7-SAPCAL-GCE
xorg-x11-server-21.1.15-150700.5.6.1
xorg-x11-server-Xvfb-21.1.15-150700.5.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
xorg-x11-server-21.1.15-150700.5.6.1
xorg-x11-server-Xvfb-21.1.15-150700.5.6.1
xorg-x11-server-extra-21.1.15-150700.5.6.1
SUSE Linux Enterprise Module for Development Tools 15 SP7
xorg-x11-server-sdk-21.1.15-150700.5.6.1

Ссылки

Описание

A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.

Затронутые продукты
Container suse/kiosk/xorg:latest:xorg-x11-server-21.1.15-150700.5.6.1
Container suse/kiosk/xorg:latest:xorg-x11-server-Xvfb-21.1.15-150700.5.6.1
Image SLES15-SP7-SAPCAL-Azure:xorg-x11-server-21.1.15-150700.5.6.1
Image SLES15-SP7-SAPCAL-Azure:xorg-x11-server-Xvfb-21.1.15-150700.5.6.1
Ссылки