Alerts This Week
Warning Icon 1 905
Alerts This Week
Warning Icon 1 905

Slackware 11.0: 2007-066-02 Moderate: X11 Memory Overflow Threat

slackware
Calendar Grey March 8, 2007
Dist Slackware Esm H88
Updated x11 packages that fix security issues for Slackware versions 10.2 and 11.0 have been released.
New x11 packages are available for Slackware 10.2 and 11.0

Summary

Here are the details from the Slackware 11.0 ChangeLog: x/x11-6.9.0-i486-12_slack11.0.tgz: Patched. This update fixes overflows in the dbe and render extensions. This could possibly be exploited to overwrite parts of memory, possibly allowing malicious code to execute, or (more likely) causing X to crash. For information about some of the security fixes, see: https://www.cve.org/CVERecord?id=CVE-2006-6101 https://www.cve.org/CVERecord?id=CVE-2006-6102 https://www.cve.org/CVERecord?id=CVE-2006-6103

Where Find New Packages

HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading from ftp.slackware.com.
Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating additional FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 10.2:
Updated package for Slackware 11.0:

MD5 Signatures

Slackware 10.2 package: f7f193b138303d0b04c72bd8b89d6947 x11-6.8.2-i486-8_slack10.2.tgz
Slackware 11.0 package: 1e5e912cf9133cdf8825906f908bec6a x11-6.9.0-i486-12_slack11.0.tgz

Severity
important
Lowest
Low
Medium
High
Critical

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg x11-6.9.0-i486-12_slack11.0.tgz

Your message here