Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02225-1

Опубликовано: 04 июл. 2025
Источник: suse-cvrf

Описание

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues:

  • CVE-2025-49176: Fixed the integer overflow in Big Requests Extension (bsc#1244084).

Список пакетов

SUSE Linux Enterprise Server 12 SP5-LTSS
xorg-x11-server-1.19.6-10.86.1
xorg-x11-server-extra-1.19.6-10.86.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
xorg-x11-server-1.19.6-10.86.1
xorg-x11-server-extra-1.19.6-10.86.1

Описание

A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.


Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.86.1
SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.86.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.86.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.86.1

Ссылки