SUSE-SU-2024:0236-1: Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: CVE-2024-0408: Fixed SELinux unlabeled GLX PBuffer. (bsc#1218845) CVE-2024-0409: Fixed SELinux context corruption. (bsc#1218846)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/xorg-x11-server-debuginfoto a version that resolves this vulnerability.Fixed in 1.19.6-10.68.1 - Upgrade
Upgrade
suse/xorg-x11-server-sdkto a version that resolves this vulnerability.Fixed in 1.19.6-10.68.1 - Upgrade
Upgrade
suse/xorg-x11-server-debugsourceto a version that resolves this vulnerability.Fixed in 1.19.6-10.68.1 - Upgrade
Upgrade
suse/xorg-x11-server-extra-debuginfoto a version that resolves this vulnerability.Fixed in 1.19.6-10.68.1 - Upgrade
Upgrade
suse/xorg-x11-serverto a version that resolves this vulnerability.Fixed in 1.19.6-10.68.1 - Upgrade
Upgrade
suse/xorg-x11-server-extrato a version that resolves this vulnerability.Fixed in 1.19.6-10.68.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-SDK-12-SP5-2024-236=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-SERVER-12-SP5-2024-236=1
Event History
Frequently Asked Questions
Which systems and packages are covered by this update?
The update applies to xorg-x11-server and related extra, SDK, debuginfo, and debugsource packages for SUSE Linux Enterprise Software Development Kit 12 SP5 and SUSE Linux Enterprise High Performance Computing 12 SP5. Listed architectures include aarch64, ppc64le, s390x, and x86_64, with HPC listed for aarch64 and x86_64.
What security contexts are addressed by the fixes?
The update fixes an unlabeled GLX PBuffer issue under SELinux (CVE-2024-0408) and SELinux context corruption (CVE-2024-0409).