Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2023:4338-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2023:4338-1

UNKNOWN

Security update for xorg-x11-server

Published Nov 2, 2023

Modified 2 years ago

Fix available

Details

This update for xorg-x11-server fixes the following issues:

CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol (bsc#1216261).
CVE-2023-5380: Fixed a memory safety issue that could be triggered when using multiple protocol screens (bsc#1216133).
CVE-2023-5367: Fixed a memory safety issue in both the XI2 and RandR protocols (bsc#1216135).

Affected Packages

SUSE:Enterprise Storage 7.1xorg-x11-server

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Enterprise Storage 7.1xorg-x11-server-extra

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Enterprise Storage 7.1xorg-x11-server-sdk

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSxorg-x11-server

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSxorg-x11-server-extra

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSxorg-x11-server-sdk

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSxorg-x11-server

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSxorg-x11-server-extra

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSxorg-x11-server-sdk

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSxorg-x11-server

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSxorg-x11-server-extra

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSxorg-x11-server-sdk

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise Server 15 SP2-LTSSxorg-x11-server

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise Server 15 SP2-LTSSxorg-x11-server-extra

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise Server 15 SP2-LTSSxorg-x11-server-sdk

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise Server 15 SP3-LTSSxorg-x11-server

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise Server 15 SP3-LTSSxorg-x11-server-extra

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise Server 15 SP3-LTSSxorg-x11-server-sdk

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2xorg-x11-server

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2xorg-x11-server-extra

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2xorg-x11-server-sdk

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3xorg-x11-server

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3xorg-x11-server-extra

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3xorg-x11-server-sdk

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise Workstation Extension 15 SP4xorg-x11-server

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise Workstation Extension 15 SP4xorg-x11-server-wayland

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise Workstation Extension 15 SP5xorg-x11-server

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Linux Enterprise Workstation Extension 15 SP5xorg-x11-server-wayland

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Manager Proxy 4.2xorg-x11-server

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Manager Proxy 4.2xorg-x11-server-extra

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Manager Server 4.2xorg-x11-server

Fixed in:

1.20.3-150200.22.5.79.1

SUSE:Manager Server 4.2xorg-x11-server-extra

Fixed in:

1.20.3-150200.22.5.79.1

openSUSE:Leap 15.4xorg-x11-server

Fixed in:

1.20.3-150200.22.5.79.1

openSUSE:Leap 15.4xorg-x11-server-wayland

Fixed in:

1.20.3-150200.22.5.79.1

References

REPORThttps://bugzilla.suse.com/1216133 REPORThttps://bugzilla.suse.com/1216135 REPORThttps://bugzilla.suse.com/1216261 WEBhttps://www.suse.com/security/cve/CVE-2023-5367 WEBhttps://www.suse.com/security/cve/CVE-2023-5380 WEBhttps://www.suse.com/security/cve/CVE-2023-5574 ADVISORYhttps://www.suse.com/support/update/announcement/2023/suse-su-20234338-1/

Upstream

CVE-2023-5367 CVE-2023-5380 CVE-2023-5574

Related

CVE-2023-5367 CVE-2023-5380 CVE-2023-5574

Ecosystems

SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP5 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.4

Timeline

PublishedNov 2, 2023

ModifiedNov 2, 2023