Date:         Mon, 13 Apr 2015 15:10:19 +0000
Reply-To:     scientific-linux-users@listserv.fnal.gov
Sender:       Security Errata for Scientific Linux
              
From:         Pat Riehecky 
Subject:      Security ERRATA Moderate: xorg-x11-server on SL6.x,
              SL7.x i386/x86_64
MIME-Version: 1.0

Synopsis:          Moderate: xorg-x11-server security update
Advisory ID:       SLSA-2015:0797-1
Issue Date:        2015-04-10
CVE Numbers:       CVE-2015-0255
--

A buffer over-read flaw was found in the way the X.Org server handled
XkbGetGeometry requests. A malicious, authorized client could use this
flaw to disclose portions of the X.Org server memory, or cause the X.Org
server to crash using a specially crafted XkbGetGeometry request.
(CVE-2015-0255)
--

SL6
  x86_64
    xorg-x11-server-Xephyr-1.15.0-26.sl6.x86_64.rpm
    xorg-x11-server-Xorg-1.15.0-26.sl6.x86_64.rpm
    xorg-x11-server-common-1.15.0-26.sl6.x86_64.rpm
    xorg-x11-server-debuginfo-1.15.0-26.sl6.x86_64.rpm
    xorg-x11-server-Xdmx-1.15.0-26.sl6.x86_64.rpm
    xorg-x11-server-Xnest-1.15.0-26.sl6.x86_64.rpm
    xorg-x11-server-Xvfb-1.15.0-26.sl6.x86_64.rpm
    xorg-x11-server-debuginfo-1.15.0-26.sl6.i686.rpm
    xorg-x11-server-devel-1.15.0-26.sl6.i686.rpm
    xorg-x11-server-devel-1.15.0-26.sl6.x86_64.rpm
  i386
    xorg-x11-server-Xephyr-1.15.0-26.sl6.i686.rpm
    xorg-x11-server-Xorg-1.15.0-26.sl6.i686.rpm
    xorg-x11-server-common-1.15.0-26.sl6.i686.rpm
    xorg-x11-server-debuginfo-1.15.0-26.sl6.i686.rpm
    xorg-x11-server-Xdmx-1.15.0-26.sl6.i686.rpm
    xorg-x11-server-Xnest-1.15.0-26.sl6.i686.rpm
    xorg-x11-server-Xvfb-1.15.0-26.sl6.i686.rpm
    xorg-x11-server-devel-1.15.0-26.sl6.i686.rpm
  noarch
    xorg-x11-server-source-1.15.0-26.sl6.noarch.rpm
SL7
  x86_64
    xorg-x11-server-Xephyr-1.15.0-33.el7_1.x86_64.rpm
    xorg-x11-server-Xorg-1.15.0-33.el7_1.x86_64.rpm
    xorg-x11-server-common-1.15.0-33.el7_1.x86_64.rpm
    xorg-x11-server-debuginfo-1.15.0-33.el7_1.x86_64.rpm
    xorg-x11-server-Xdmx-1.15.0-33.el7_1.x86_64.rpm
    xorg-x11-server-Xnest-1.15.0-33.el7_1.x86_64.rpm
    xorg-x11-server-Xvfb-1.15.0-33.el7_1.x86_64.rpm
    xorg-x11-server-debuginfo-1.15.0-33.el7_1.i686.rpm
    xorg-x11-server-devel-1.15.0-33.el7_1.i686.rpm
    xorg-x11-server-devel-1.15.0-33.el7_1.x86_64.rpm
  noarch
    xorg-x11-server-source-1.15.0-33.el7_1.noarch.rpm

- Scientific Linux Development Team

SciLinux: CVE-2015-0255 Moderate: xorg-x11-server SL6.x,

Moderate: xorg-x11-server security update

Summary

Moderate: xorg-x11-server security update



Security Fixes

Severity
Advisory ID: SLSA-2015:0797-1
Issued Date: : 2015-04-10
CVE Numbers: CVE-2015-0255
A buffer over-read flaw was found in the way the X.Org server handled