Security update for xorg-x11-server

SUSE Security Update: Security update for xorg-x11-server
Announcement ID: SUSE-SU-2013:0857-1
Rating: low
References: #814653
Affected Products:
  • SUSE Linux Enterprise Server 10 SP4
  • SUSE Linux Enterprise Desktop 10 SP4

  • An update that fixes one vulnerability is now available.

    Description:


    In some cases, input events are sent to X servers not
    currently the VT owner, allowing a user to capture
    passwords. This update fixes this issue. CVE-2013-1940 has
    been assigned to this issue.

    Security Issue reference:

    * CVE-2013-1940
    >

    Package List:

    • SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc x86_64):
    • xorg-x11-server-6.9.0-50.82.1
    • SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64):
    • xorg-x11-server-6.9.0-50.82.1

    References:

    • http://support.novell.com/security/cve/CVE-2013-1940.html
    • https://bugzilla.novell.com/814653
    • http://download.suse.com/patch/finder/?keywords=69cb26f8a0705fcf17f6341d54cdb9e1