Summary
This update for xorg-x11-libs fixes the following issues:
- The original fix for CVE-2015-1804 prevented DWIDTH to be negative. However, the
spec states that 'DWIDTH [...] is a vector indicating the position of the next
glyph's origin relative to the origin of this glyph'. Consequently, negative
DWIDTH values should be allowed. (bsc#958383)
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| SUSE · SLES 11 SP3 Linux Enterprise Desktop 11 SP3 | xorg-x11-libs | 7.4-8.26.46.1 |
| SUSE · SLES 11 SP4 Linux Enterprise Desktop 11 SP4 | xorg-x11-libs | 7.4-8.26.46.1 |
| SUSE · SLES 11 SP3 Linux Enterprise Server 11 SP3 | xorg-x11-libs | 7.4-8.26.46.1 |
| SUSE · SLES 11 SP3 Linux Enterprise Server 11 SP3-TERADATA | xorg-x11-libs | 7.4-8.26.46.1 |
| SUSE · SLES 11 SP4 Linux Enterprise Server 11 SP4 | xorg-x11-libs | 7.4-8.26.46.1 |
| SUSE · SLES for SAP 11 SP3 Linux Enterprise Server for SAP Applications 11 SP3 | xorg-x11-libs | 7.4-8.26.46.1 |
| SUSE · SLES for SAP 11 SP4 Linux Enterprise Server for SAP Applications 11 SP4 | xorg-x11-libs | 7.4-8.26.46.1 |
| SUSE · SLES 11 SP3 Linux Enterprise Software Development Kit 11 SP3 | xorg-x11-libs | 7.4-8.26.46.1 |
| SUSE · SLES 11 SP4 Linux Enterprise Software Development Kit 11 SP4 | xorg-x11-libs | 7.4-8.26.46.1 |
Vulnerabilities 1
-
Unscored —
The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not prope…