Scientific Linux 5.x SLSA-2013:1868-1 xorg-x11-server Critical Buffer Overflow

Date: Mon, 23 Dec 2013 23:32:03 +0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Bonnie King 
Subject: Security ERRATA Important: xorg-x11-server on SL5.x,
 SL6.x i386/x86_64
MIME-Version: 1.0

Synopsis: Important: xorg-x11-server security update
Advisory ID: SLSA-2013:1868-1
Issue Date: 2013-12-20
CVE Numbers: CVE-2013-6424
--

An integer overflow, which led to a heap-based buffer overflow, was found
in the way X.Org server handled trapezoids. A malicious, authorized client
could use this flaw to crash the X.Org server or, potentially, execute
arbitrary code with root privileges. (CVE-2013-6424)
--

SL5
 x86_64
 xorg-x11-server-Xdmx-1.1.1-48.101.el5_10.2.x86_64.rpm
 xorg-x11-server-Xephyr-1.1.1-48.101.el5_10.2.x86_64.rpm
 xorg-x11-server-Xnest-1.1.1-48.101.el5_10.2.x86_64.rpm
 xorg-x11-server-Xorg-1.1.1-48.101.el5_10.2.x86_64.rpm
 xorg-x11-server-Xvfb-1.1.1-48.101.el5_10.2.x86_64.rpm
 xorg-x11-server-Xvnc-source-1.1.1-48.101.el5_10.2.x86_64.rpm
 xorg-x11-server-debuginfo-1.1.1-48.101.el5_10.2.x86_64.rpm
 xorg-x11-server-sdk-1.1.1-48.101.el5_10.2.x86_64.rpm
 i386
 xorg-x11-server-Xdmx-1.1.1-48.101.el5_10.2.i386.rpm
 xorg-x11-server-Xephyr-1.1.1-48.101.el5_10.2.i386.rpm
 xorg-x11-server-Xnest-1.1.1-48.101.el5_10.2.i386.rpm
 xorg-x11-server-Xorg-1.1.1-48.101.el5_10.2.i386.rpm
 xorg-x11-server-Xvfb-1.1.1-48.101.el5_10.2.i386.rpm
 xorg-x11-server-Xvnc-source-1.1.1-48.101.el5_10.2.i386.rpm
 xorg-x11-server-debuginfo-1.1.1-48.101.el5_10.2.i386.rpm
 xorg-x11-server-sdk-1.1.1-48.101.el5_10.2.i386.rpm
SL6
 x86_64
 xorg-x11-server-Xephyr-1.13.0-23.1.el6_5.x86_64.rpm
 xorg-x11-server-Xorg-1.13.0-23.1.el6_5.x86_64.rpm
 xorg-x11-server-common-1.13.0-23.1.el6_5.x86_64.rpm
 xorg-x11-server-debuginfo-1.13.0-23.1.el6_5.x86_64.rpm
 xorg-x11-server-Xdmx-1.13.0-23.1.el6_5.x86_64.rpm
 xorg-x11-server-Xnest-1.13.0-23.1.el6_5.x86_64.rpm
 xorg-x11-server-Xvfb-1.13.0-23.1.el6_5.x86_64.rpm
 xorg-x11-server-debuginfo-1.13.0-23.1.el6_5.i686.rpm
 xorg-x11-server-devel-1.13.0-23.1.el6_5.i686.rpm
 xorg-x11-server-devel-1.13.0-23.1.el6_5.x86_64.rpm
 i386
 xorg-x11-server-Xephyr-1.13.0-23.1.el6_5.i686.rpm
 xorg-x11-server-Xorg-1.13.0-23.1.el6_5.i686.rpm
 xorg-x11-server-common-1.13.0-23.1.el6_5.i686.rpm
 xorg-x11-server-debuginfo-1.13.0-23.1.el6_5.i686.rpm
 xorg-x11-server-Xdmx-1.13.0-23.1.el6_5.i686.rpm
 xorg-x11-server-Xnest-1.13.0-23.1.el6_5.i686.rpm
 xorg-x11-server-Xvfb-1.13.0-23.1.el6_5.i686.rpm
 xorg-x11-server-devel-1.13.0-23.1.el6_5.i686.rpm
 noarch
 xorg-x11-server-source-1.13.0-23.1.el6_5.noarch.rpm

- Scientific Linux Development Team