Security update for xorg-x11-server (important)

An update that fixes three vulnerabilities is now available.

Description:

This update for xorg-x11-server fixes the following issues:

• CVE-2021-4009: The handler for the CreatePointerBarrier request of the
  XFixes extension does not properly validate the request length leading
  to out of bounds memory write. (bsc#1190487)
• CVE-2021-4010: The handler for the Suspend request of the Screen Saver
  extension does not properly validate the request length leading to out
  of bounds memory write. (bsc#1190488)
• CVE-2021-4011: The handlers for the RecordCreateContext and
  RecordRegisterClients requests of the Record extension do not properly
  validate the request length leading to out of bounds memory write.
  (bsc#1190489)

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.2:

  zypper in -t patch openSUSE-2021-1606=1