Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:0984-1

Опубликовано: 21 мар. 2025
Источник: suse-cvrf

Описание

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues:

  • CVE-2022-49737: Fixed Xorg crashing when client applications use easystroke for mouse gestures (bsc#1239750)

Список пакетов

Container suse/kiosk/xorg:21
xorg-x11-server-21.1.11-150600.5.9.1
xorg-x11-server-Xvfb-21.1.11-150600.5.9.1
Image SLES15-SP6-SAP
xorg-x11-server-21.1.11-150600.5.9.1
xorg-x11-server-Xvfb-21.1.11-150600.5.9.1
Image SLES15-SP6-SAP-Azure
xorg-x11-server-21.1.11-150600.5.9.1
xorg-x11-server-Xvfb-21.1.11-150600.5.9.1
Image SLES15-SP6-SAP-EC2
xorg-x11-server-21.1.11-150600.5.9.1
xorg-x11-server-Xvfb-21.1.11-150600.5.9.1
Image SLES15-SP6-SAP-GCE
xorg-x11-server-21.1.11-150600.5.9.1
xorg-x11-server-Xvfb-21.1.11-150600.5.9.1
Image SLES15-SP6-SAPCAL
xorg-x11-server-21.1.11-150600.5.9.1
xorg-x11-server-Xvfb-21.1.11-150600.5.9.1
Image SLES15-SP6-SAPCAL-Azure
xorg-x11-server-21.1.11-150600.5.9.1
xorg-x11-server-Xvfb-21.1.11-150600.5.9.1
Image SLES15-SP6-SAPCAL-EC2
xorg-x11-server-21.1.11-150600.5.9.1
xorg-x11-server-Xvfb-21.1.11-150600.5.9.1
Image SLES15-SP6-SAPCAL-GCE
xorg-x11-server-21.1.11-150600.5.9.1
xorg-x11-server-Xvfb-21.1.11-150600.5.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP6
xorg-x11-server-21.1.11-150600.5.9.1
xorg-x11-server-Xvfb-21.1.11-150600.5.9.1
xorg-x11-server-extra-21.1.11-150600.5.9.1
SUSE Linux Enterprise Module for Development Tools 15 SP6
xorg-x11-server-sdk-21.1.11-150600.5.9.1
openSUSE Leap 15.6
xorg-x11-server-21.1.11-150600.5.9.1
xorg-x11-server-Xvfb-21.1.11-150600.5.9.1
xorg-x11-server-extra-21.1.11-150600.5.9.1
xorg-x11-server-sdk-21.1.11-150600.5.9.1
xorg-x11-server-source-21.1.11-150600.5.9.1

Описание

In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, aka a race condition. In particular, AttachDevice in dix/devices.c does not acquire an input lock.


Затронутые продукты
Container suse/kiosk/xorg:21:xorg-x11-server-21.1.11-150600.5.9.1
Container suse/kiosk/xorg:21:xorg-x11-server-Xvfb-21.1.11-150600.5.9.1
Image SLES15-SP6-SAP-Azure:xorg-x11-server-21.1.11-150600.5.9.1
Image SLES15-SP6-SAP-Azure:xorg-x11-server-Xvfb-21.1.11-150600.5.9.1

Ссылки
Уязвимость SUSE-SU-2025:0984-1