Security update for xorg-x11-server SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:2452-1 Final 1 1 2020-09-02T11:58:35Z current 2020-09-02T11:58:35Z 2020-09-02T11:58:35Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for xorg-x11-server This update for xorg-x11-server fixes the following issues: - CVE-2020-14361: Fix XkbSelectEvents() integer underflow (bsc#1174910 ZDI-CAN-11573). - CVE-2020-14362: Fix XRecordRegisterClients() Integer underflow (bsc#1174913 ZDI-CAN-11574). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SP3-EC2-HVM-2020-2452,Image SLES15-SP3-SAP-Azure-2020-2452,Image SLES15-SP3-SAP-EC2-HVM-2020-2452,Image SLES15-SP3-SAP-GCE-2020-2452,Image SLES15-SP3-SAPCAL-Azure-2020-2452,Image SLES15-SP3-SAPCAL-EC2-HVM-2020-2452,Image SLES15-SP3-SAPCAL-GCE-2020-2452,SUSE-2020-2452,SUSE-SLE-Module-Basesystem-15-SP2-2020-2452,SUSE-SLE-Module-Development-Tools-15-SP2-2020-2452,SUSE-SLE-Product-WE-15-SP2-2020-2452 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20202452-1/ Link for SUSE-SU-2020:2452-1 https://lists.suse.com/pipermail/sle-security-updates/2020-September/007335.html E-Mail link for SUSE-SU-2020:2452-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1174910 SUSE Bug 1174910 https://bugzilla.suse.com/1174913 SUSE Bug 1174913 https://www.suse.com/security/cve/CVE-2020-14361/ SUSE CVE CVE-2020-14361 page https://www.suse.com/security/cve/CVE-2020-14362/ SUSE CVE CVE-2020-14362 page Image SLES15-SP3-EC2-HVM Image SLES15-SP3-SAP-Azure Image SLES15-SP3-SAP-EC2-HVM Image SLES15-SP3-SAP-GCE Image SLES15-SP3-SAPCAL-Azure Image SLES15-SP3-SAPCAL-EC2-HVM Image SLES15-SP3-SAPCAL-GCE SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP2 xorg-x11-server-1.20.3-22.5.5.1 xorg-x11-server-extra-1.20.3-22.5.5.1 xorg-x11-server-sdk-1.20.3-22.5.5.1 xorg-x11-server-source-1.20.3-22.5.5.1 xorg-x11-server-wayland-1.20.3-22.5.5.1 xorg-x11-server-1.20.3-22.5.5.1 as a component of Image SLES15-SP3-EC2-HVM xorg-x11-server-1.20.3-22.5.5.1 as a component of Image SLES15-SP3-SAP-Azure xorg-x11-server-1.20.3-22.5.5.1 as a component of Image SLES15-SP3-SAP-EC2-HVM xorg-x11-server-1.20.3-22.5.5.1 as a component of Image SLES15-SP3-SAP-GCE xorg-x11-server-1.20.3-22.5.5.1 as a component of Image SLES15-SP3-SAPCAL-Azure xorg-x11-server-1.20.3-22.5.5.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM xorg-x11-server-1.20.3-22.5.5.1 as a component of Image SLES15-SP3-SAPCAL-GCE xorg-x11-server-1.20.3-22.5.5.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 xorg-x11-server-extra-1.20.3-22.5.5.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 xorg-x11-server-sdk-1.20.3-22.5.5.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP2 xorg-x11-server-wayland-1.20.3-22.5.5.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. CVE-2020-14361 Image SLES15-SP3-EC2-HVM:xorg-x11-server-1.20.3-22.5.5.1 Image SLES15-SP3-SAP-Azure:xorg-x11-server-1.20.3-22.5.5.1 Image SLES15-SP3-SAP-EC2-HVM:xorg-x11-server-1.20.3-22.5.5.1 Image SLES15-SP3-SAP-GCE:xorg-x11-server-1.20.3-22.5.5.1 Image SLES15-SP3-SAPCAL-Azure:xorg-x11-server-1.20.3-22.5.5.1 Image SLES15-SP3-SAPCAL-EC2-HVM:xorg-x11-server-1.20.3-22.5.5.1 Image SLES15-SP3-SAPCAL-GCE:xorg-x11-server-1.20.3-22.5.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:xorg-x11-server-1.20.3-22.5.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:xorg-x11-server-extra-1.20.3-22.5.5.1 SUSE Linux Enterprise Module for Development Tools 15 SP2:xorg-x11-server-sdk-1.20.3-22.5.5.1 SUSE Linux Enterprise Workstation Extension 15 SP2:xorg-x11-server-wayland-1.20.3-22.5.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202452-1/ https://www.suse.com/security/cve/CVE-2020-14361.html CVE-2020-14361 https://bugzilla.suse.com/1174635 SUSE Bug 1174635 https://bugzilla.suse.com/1174638 SUSE Bug 1174638 https://bugzilla.suse.com/1174910 SUSE Bug 1174910 https://bugzilla.suse.com/1174913 SUSE Bug 1174913 A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. CVE-2020-14362 Image SLES15-SP3-EC2-HVM:xorg-x11-server-1.20.3-22.5.5.1 Image SLES15-SP3-SAP-Azure:xorg-x11-server-1.20.3-22.5.5.1 Image SLES15-SP3-SAP-EC2-HVM:xorg-x11-server-1.20.3-22.5.5.1 Image SLES15-SP3-SAP-GCE:xorg-x11-server-1.20.3-22.5.5.1 Image SLES15-SP3-SAPCAL-Azure:xorg-x11-server-1.20.3-22.5.5.1 Image SLES15-SP3-SAPCAL-EC2-HVM:xorg-x11-server-1.20.3-22.5.5.1 Image SLES15-SP3-SAPCAL-GCE:xorg-x11-server-1.20.3-22.5.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:xorg-x11-server-1.20.3-22.5.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:xorg-x11-server-extra-1.20.3-22.5.5.1 SUSE Linux Enterprise Module for Development Tools 15 SP2:xorg-x11-server-sdk-1.20.3-22.5.5.1 SUSE Linux Enterprise Workstation Extension 15 SP2:xorg-x11-server-wayland-1.20.3-22.5.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202452-1/ https://www.suse.com/security/cve/CVE-2020-14362.html CVE-2020-14362 https://bugzilla.suse.com/1174635 SUSE Bug 1174635 https://bugzilla.suse.com/1174638 SUSE Bug 1174638 https://bugzilla.suse.com/1174910 SUSE Bug 1174910 https://bugzilla.suse.com/1174913 SUSE Bug 1174913