p PatchFirst

SUSE-SU-2024:1260-1

SUSE-SU-2024:1260-1 · Security update for xorg-x11-server

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for xorg-x11-server fixes the following issues: - CVE-2024-31080: Fixed ProcXIGetSelectedEvents to use unswapped length (bsc#1222309). - CVE-2024-31081: Fixed ProcXIPassiveGrabDevice to use unswapped length to send reply (bsc#1222310). - CVE-2024-31082: Fixed ProcAppleDRICreatePixmap to use unswapped length to send reply (bsc#1222311). - CVE-2024-31083: Fixed refcounting of glyphs during ProcRenderAddGlyphs (bsc#1222312). Other fixes: - Fixed regression for security fix for CVE-2024-31083 when using Android Studio (bnc#1222442)

Fix available

Published
Updated

Stack: system

Affected products and versions

  • xorg-x11-server SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS

    Affected ranges
    • ECOSYSTEM: < 1.20.3-150400.38.48.1

    Update to 1.20.3-150400.38.48.1

  • xorg-x11-server SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS

    Affected ranges
    • ECOSYSTEM: < 1.20.3-150400.38.48.1

    Update to 1.20.3-150400.38.48.1

  • xorg-x11-server SUSE:Linux Enterprise Server 15 SP4-LTSS

    Affected ranges
    • ECOSYSTEM: < 1.20.3-150400.38.48.1

    Update to 1.20.3-150400.38.48.1

  • xorg-x11-server SUSE:Linux Enterprise Server for SAP Applications 15 SP4

    Affected ranges
    • ECOSYSTEM: < 1.20.3-150400.38.48.1

    Update to 1.20.3-150400.38.48.1

  • xorg-x11-server SUSE:Manager Proxy 4.3

    Affected ranges
    • ECOSYSTEM: < 1.20.3-150400.38.48.1

    Update to 1.20.3-150400.38.48.1

  • xorg-x11-server SUSE:Manager Server 4.3

    Affected ranges
    • ECOSYSTEM: < 1.20.3-150400.38.48.1

    Update to 1.20.3-150400.38.48.1

Original sources

Check your server →