Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:0818-1

Опубликовано: 10 мар. 2025
Источник: suse-cvrf

Описание

Security update for libxkbfile

This update for libxkbfile fixes the following issues:

  • CVE-2025-26595: Fixed buffer overflow in XkbVModMaskText() (bsc#1237429).

Список пакетов

Image SLES12-SP5-EC2-SAP-BYOS
libxkbfile1-1.0.8-12.3.1
Image SLES12-SP5-EC2-SAP-On-Demand
libxkbfile1-1.0.8-12.3.1
SUSE Linux Enterprise Server 12 SP5-LTSS
libxkbfile-devel-1.0.8-12.3.1
libxkbfile1-1.0.8-12.3.1
libxkbfile1-32bit-1.0.8-12.3.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
libxkbfile-devel-1.0.8-12.3.1
libxkbfile1-1.0.8-12.3.1
libxkbfile1-32bit-1.0.8-12.3.1

Ссылки

Описание

A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size.

Затронутые продукты
Image SLES12-SP5-EC2-SAP-BYOS:libxkbfile1-1.0.8-12.3.1
Image SLES12-SP5-EC2-SAP-On-Demand:libxkbfile1-1.0.8-12.3.1
SUSE Linux Enterprise Server 12 SP5-LTSS:libxkbfile-devel-1.0.8-12.3.1
SUSE Linux Enterprise Server 12 SP5-LTSS:libxkbfile1-1.0.8-12.3.1
Ссылки