Security update for xorg-x11-libX11 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:1334-1 Final 1 1 2015-07-17T09:57:56Z current 2015-07-17T09:57:56Z 2015-07-17T09:57:56Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for xorg-x11-libX11 xorg-x11-libX11 was updated to fix one security issue. This security issue was fixed: - CVE-2013-7439: Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allowed remote attackers to have unspecified impact via a crafted request, which triggered a buffer overflow (bsc#927220). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp3-xorg-x11-libX11-12014,sdksp4-xorg-x11-libX11-12014,sledsp3-xorg-x11-libX11-12014,sledsp4-xorg-x11-libX11-12014,slessp1-xorg-x11-libX11-12014,slessp2-xorg-x11-libX11-12014,slessp3-xorg-x11-libX11-12014,slessp4-xorg-x11-libX11-12014 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20151334-1/ Link for SUSE-SU-2015:1334-1 https://lists.suse.com/pipermail/sle-security-updates/2015-August/001521.html E-Mail link for SUSE-SU-2015:1334-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/927220 SUSE Bug 927220 https://www.suse.com/security/cve/CVE-2013-7439/ SUSE CVE CVE-2013-7439 page SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP3 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 xorg-x11-libX11-devel-7.4-5.11.15.1 xorg-x11-libX11-devel-32bit-7.4-5.11.15.1 xorg-x11-libX11-7.4-5.11.15.1 xorg-x11-libX11-32bit-7.4-5.11.15.1 xorg-x11-libX11-x86-7.4-5.11.15.1 xorg-x11-libX11-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 xorg-x11-libX11-32bit-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 xorg-x11-libX11-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Desktop 11 SP4 xorg-x11-libX11-32bit-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Desktop 11 SP4 xorg-x11-libX11-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS xorg-x11-libX11-32bit-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS xorg-x11-libX11-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xorg-x11-libX11-32bit-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xorg-x11-libX11-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS xorg-x11-libX11-32bit-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS xorg-x11-libX11-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Server 11 SP3 xorg-x11-libX11-32bit-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Server 11 SP3 xorg-x11-libX11-x86-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Server 11 SP3 xorg-x11-libX11-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA xorg-x11-libX11-32bit-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA xorg-x11-libX11-x86-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA xorg-x11-libX11-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Server 11 SP4 xorg-x11-libX11-32bit-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Server 11 SP4 xorg-x11-libX11-x86-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Server 11 SP4 xorg-x11-libX11-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 xorg-x11-libX11-32bit-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 xorg-x11-libX11-x86-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 xorg-x11-libX11-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 xorg-x11-libX11-32bit-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 xorg-x11-libX11-x86-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 xorg-x11-libX11-devel-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 xorg-x11-libX11-devel-32bit-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 xorg-x11-libX11-devel-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 xorg-x11-libX11-devel-32bit-7.4-5.11.15.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow. CVE-2013-7439 SUSE Linux Enterprise Desktop 11 SP3:xorg-x11-libX11-32bit-7.4-5.11.15.1 SUSE Linux Enterprise Desktop 11 SP3:xorg-x11-libX11-7.4-5.11.15.1 SUSE Linux Enterprise Desktop 11 SP4:xorg-x11-libX11-32bit-7.4-5.11.15.1 SUSE Linux Enterprise Desktop 11 SP4:xorg-x11-libX11-7.4-5.11.15.1 SUSE Linux Enterprise Server 11 SP1-LTSS:xorg-x11-libX11-32bit-7.4-5.11.15.1 SUSE Linux Enterprise Server 11 SP1-LTSS:xorg-x11-libX11-7.4-5.11.15.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xorg-x11-libX11-32bit-7.4-5.11.15.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xorg-x11-libX11-7.4-5.11.15.1 SUSE Linux Enterprise Server 11 SP2-LTSS:xorg-x11-libX11-32bit-7.4-5.11.15.1 SUSE Linux Enterprise Server 11 SP2-LTSS:xorg-x11-libX11-7.4-5.11.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:xorg-x11-libX11-32bit-7.4-5.11.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:xorg-x11-libX11-7.4-5.11.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:xorg-x11-libX11-x86-7.4-5.11.15.1 SUSE Linux Enterprise Server 11 SP3:xorg-x11-libX11-32bit-7.4-5.11.15.1 SUSE Linux Enterprise Server 11 SP3:xorg-x11-libX11-7.4-5.11.15.1 SUSE Linux Enterprise Server 11 SP3:xorg-x11-libX11-x86-7.4-5.11.15.1 SUSE Linux Enterprise Server 11 SP4:xorg-x11-libX11-32bit-7.4-5.11.15.1 SUSE Linux Enterprise Server 11 SP4:xorg-x11-libX11-7.4-5.11.15.1 SUSE Linux Enterprise Server 11 SP4:xorg-x11-libX11-x86-7.4-5.11.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:xorg-x11-libX11-32bit-7.4-5.11.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:xorg-x11-libX11-7.4-5.11.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:xorg-x11-libX11-x86-7.4-5.11.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-libX11-32bit-7.4-5.11.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-libX11-7.4-5.11.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-libX11-x86-7.4-5.11.15.1 SUSE Linux Enterprise Software Development Kit 11 SP3:xorg-x11-libX11-devel-32bit-7.4-5.11.15.1 SUSE Linux Enterprise Software Development Kit 11 SP3:xorg-x11-libX11-devel-7.4-5.11.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-libX11-devel-32bit-7.4-5.11.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:xorg-x11-libX11-devel-7.4-5.11.15.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151334-1/ https://www.suse.com/security/cve/CVE-2013-7439.html CVE-2013-7439 https://bugzilla.suse.com/927126 SUSE Bug 927126 https://bugzilla.suse.com/927220 SUSE Bug 927220