Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

openSUSE Leap 15.2 Security Advisory: Important Xorg-X11-Server Threats

opensuse
Calendar Grey December 22, 2021
Dist Opensuse Esm H88
A crucial update for xorg-x11-server has been issued to address memory vulnerabilities. OpenSUSE Leap 15.2 users should implement the patch instructions quickly
An update that fixes three vulnerabilities is now available

Description

This update for xorg-x11-server fixes the following issues:

- CVE-2021-4009: The handler for the CreatePointerBarrier request of the

XFixes extension does not properly validate the request length leading

to out of bounds memory write. (bsc#1190487)

- CVE-2021-4010: The handler for the Suspend request of the Screen Saver

extension does not properly validate the request length leading to out

of bounds memory write. (bsc#1190488)

- CVE-2021-4011: The handlers for the RecordCreateContext and

RecordRegisterClients requests of the Record extension do not properly

validate the request length leading to out of bounds memory write.

(bsc#1190489)

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.2:

zypper in -t patch openSUSE-2021-1606=1

Package List

- openSUSE Leap 15.2 (i586 x86_64):

xorg-x11-server-1.20.3-lp152.8.36.1

xorg-x11-server-debuginfo-1.20.3-lp152.8.36.1

xorg-x11-server-debugsource-1.20.3-lp152.8.36.1

xorg-x11-server-extra-1.20.3-lp152.8.36.1

xorg-x11-server-extra-debuginfo-1.20.3-lp152.8.36.1

xorg-x11-server-sdk-1.20.3-lp152.8.36.1

xorg-x11-server-source-1.20.3-lp152.8.36.1

xorg-x11-server-wayland-1.20.3-lp152.8.36.1

xorg-x11-server-wayland-debuginfo-1.20.3-lp152.8.36.1

References

https://www.suse.com/security/cve/CVE-2021-4009.html

https://www.suse.com/security/cve/CVE-2021-4010.html

https://www.suse.com/security/cve/CVE-2021-4011.html

https://bugzilla.suse.com/1190487

https://bugzilla.suse.com/1190488

https://bugzilla.suse.com/1190489

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2021:1606-1
Rating: important
Affected Products: openSUSE Leap 15.2 .

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here