Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:0740-1

Опубликовано: 28 фев. 2025
Источник: suse-cvrf

Описание

Security update for libX11

This update for libX11 fixes the following issues:

  • CVE-2025-26597: improper resizing of key actions when nGroups is 0 can lead to buffer overflows in XkbChangeTypesOfKey() (bsc#1237431).

Список пакетов

Image SLES12-SP5-EC2-BYOS
libX11-6-1.6.2-12.36.1
libX11-data-1.6.2-12.36.1
Image SLES12-SP5-EC2-On-Demand
libX11-6-1.6.2-12.36.1
libX11-data-1.6.2-12.36.1
Image SLES12-SP5-EC2-SAP-BYOS
libX11-6-1.6.2-12.36.1
libX11-data-1.6.2-12.36.1
libX11-xcb1-1.6.2-12.36.1
Image SLES12-SP5-EC2-SAP-On-Demand
libX11-6-1.6.2-12.36.1
libX11-data-1.6.2-12.36.1
libX11-xcb1-1.6.2-12.36.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
libX11-6-1.6.2-12.36.1
libX11-data-1.6.2-12.36.1
libX11-xcb1-1.6.2-12.36.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
libX11-6-1.6.2-12.36.1
libX11-data-1.6.2-12.36.1
libX11-xcb1-1.6.2-12.36.1
SUSE Linux Enterprise Server 12 SP5-LTSS
libX11-6-1.6.2-12.36.1
libX11-6-32bit-1.6.2-12.36.1
libX11-data-1.6.2-12.36.1
libX11-devel-1.6.2-12.36.1
libX11-xcb1-1.6.2-12.36.1
libX11-xcb1-32bit-1.6.2-12.36.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
libX11-6-1.6.2-12.36.1
libX11-6-32bit-1.6.2-12.36.1
libX11-data-1.6.2-12.36.1
libX11-devel-1.6.2-12.36.1
libX11-xcb1-1.6.2-12.36.1
libX11-xcb1-32bit-1.6.2-12.36.1

Ссылки

Описание

A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because the key actions are of the wrong size.

Затронутые продукты
Image SLES12-SP5-EC2-BYOS:libX11-6-1.6.2-12.36.1
Image SLES12-SP5-EC2-BYOS:libX11-data-1.6.2-12.36.1
Image SLES12-SP5-EC2-On-Demand:libX11-6-1.6.2-12.36.1
Image SLES12-SP5-EC2-On-Demand:libX11-data-1.6.2-12.36.1
Ссылки