Security update for xorg-x11-libX11 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:14447-1 Final 1 1 2020-08-11T11:29:45Z current 2020-08-11T11:29:45Z 2020-08-11T11:29:45Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for xorg-x11-libX11 This update for xorg-x11-libX11 fixes the following issues: - Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sleposp3-xorg-x11-libX11-14447,slessp4-xorg-x11-libX11-14447 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-202014447-1/ Link for SUSE-SU-2020:14447-1 https://lists.suse.com/pipermail/sle-security-updates/2020-August/007247.html E-Mail link for SUSE-SU-2020:14447-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1174628 SUSE Bug 1174628 https://www.suse.com/security/cve/CVE-2020-14344/ SUSE CVE CVE-2020-14344 page SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP4-LTSS xorg-x11-libX11-7.4-5.11.72.18.1 xorg-x11-libX11-32bit-7.4-5.11.72.18.1 xorg-x11-libX11-7.4-5.11.72.18.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 xorg-x11-libX11-7.4-5.11.72.18.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS xorg-x11-libX11-32bit-7.4-5.11.72.18.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version 1.6.10. As per upstream this is security relevant when setuid programs call XIM client functions while running with elevated privileges. No such programs are shipped with Red Hat Enterprise Linux. CVE-2020-14344 SUSE Linux Enterprise Point of Sale 11 SP3:xorg-x11-libX11-7.4-5.11.72.18.1 SUSE Linux Enterprise Server 11 SP4-LTSS:xorg-x11-libX11-32bit-7.4-5.11.72.18.1 SUSE Linux Enterprise Server 11 SP4-LTSS:xorg-x11-libX11-7.4-5.11.72.18.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-202014447-1/ https://www.suse.com/security/cve/CVE-2020-14344.html CVE-2020-14344 https://bugzilla.suse.com/1174628 SUSE Bug 1174628 https://bugzilla.suse.com/1174638 SUSE Bug 1174638 https://bugzilla.suse.com/1175880 SUSE Bug 1175880