security advisorydenial of serviceXFree86
Important: XFree86 security update. Date: Thu, 12 Jun 2008 12:25:37 -0500 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA for XFree86 on SL3.x i386/x86_64 Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it." Synopsis: Important: XFree86 security update Issue date: 2008-06-11 CVE Names: CVE-2008-1377 CVE-2008-1379 CVE-2008-2360 CVE-2008-2361 An input validation flaw was discovered in X.org's Security and Record extensions. A malicious authorized client could exploit this issue to cause a denial of service (crash) or, potentially, execute arbitrary code with root privileges on the X.Org server. (CVE-2008-1377) Multiple integer overflow flaws were found in X.org's Render extension. A malicious authorized client could exploit these issues to cause a denial of service (crash) or, potentially, execute arbitrary code with root privileges on the X.Org server. (CVE-2008-2360, CVE-2008-2361) An input validation flaw was discovered in X.org's MIT-SHM extension. A client connected to the X.org server could read arbitrary server memory. This could result in the sensitive data of other users of the X.org server being disclosed. (CVE-2008-1379) SL 3.0.x SRPMS: XFree86-4.3.0-128.EL.src.rpm i386: XFree86-100dpi-fonts-4.3.0-128.EL.i386.rpm XFree86-4.3.0-128.EL.i386.rpm XFree86-75dpi-fonts-4.3.0-128.EL.i386.rpm XFree86-base-fonts-4.3.0-128.EL.i386.rpm XFree86-cyrillic-fonts-4.3.0-128.EL.i386.rpm XFree86-devel-4.3.0-128.EL.i386.rpm XFree86-doc-4.3.0-128.EL.i386.rpm XFree86-font-utils-4.3.0-128.EL.i386.rpm XFree86-ISO8859-14-100dpi-fonts-4.3.0-128.EL.i386.rpm XFree86-ISO8859-14-75dpi-fonts-4.3.0-128.EL.i386.rpm XFree86-ISO8859-15-100dpi-fonts-4.3.0-128.EL.i386.rpm XFree86-ISO8859-15-75dpi-fonts-4.3.0-128.EL.i386.rpm XFree86-ISO8859-2-100dpi-fonts-4.3.0-128.EL.i386.rpm XFree86-ISO8859-2-75dpi-fonts-4.3.0-128.EL.i386.rpm XFree86-ISO8859-9-100dpi-fonts-4.3.0-128.EL.i386.rpm XFree86-ISO8859-9-75dpi-fonts-4.3.0-128.EL.i386.rpm XFree86-libs-4.3.0-128.EL.i386.rpm XFree86-libs-data-4.3.0-128.EL.i386.rpm XFree86-Mesa-libGL-4.3.0-128.EL.i386.rpm XFree86-Mesa-libGLU-4.3.0-128.EL.i386.rpm XFree86-sdk-4.3.0-128.EL.i386.rpm XFree86-syriac-fonts-4.3.0-128.EL.i386.rpm XFree86-tools-4.3.0-128.EL.i386.rpm XFree86-truetype-fonts-4.3.0-128.EL.i386.rpm XFree86-twm-4.3.0-128.EL.i386.rpm XFree86-xauth-4.3.0-128.EL.i386.rpm XFree86-xdm-4.3.0-128.EL.i386.rpm XFree86-xfs-4.3.0-128.EL.i386.rpm XFree86-Xnest-4.3.0-128.EL.i386.rpm XFree86-Xvfb-4.3.0-128.EL.i386.rpm x86_64: XFree86-100dpi-fonts-4.3.0-128.EL.x86_64.rpm XFree86-4.3.0-128.EL.x86_64.rpm XFree86-75dpi-fonts-4.3.0-128.EL.x86_64.rpm XFree86-base-fonts-4.3.0-128.EL.x86_64.rpm XFree86-cyrillic-fonts-4.3.0-128.EL.x86_64.rpm XFree86-devel-4.3.0-128.EL.i386.rpm XFree86-devel-4.3.0-128.EL.x86_64.rpm XFree86-doc-4.3.0-128.EL.x86_64.rpm XFree86-font-utils-4.3.0-128.EL.x86_64.rpm XFree86-ISO8859-14-100dpi-fonts-4.3.0-128.EL.x86_64.rpm XFree86-ISO8859-14-75dpi-fonts-4.3.0-128.EL.x86_64.rpm XFree86-ISO8859-15-100dpi-fonts-4.3.0-128.EL.x86_64.rpm XFree86-ISO8859-15-75dpi-fonts-4.3.0-128.EL.x86_64.rpm XFree86-ISO8859-2-100dpi-fonts-4.3.0-128.EL.x86_64.rpm XFree86-ISO8859-2-75dpi-fonts-4.3.0-128.EL.x86_64.rpm XFree86-ISO8859-9-100dpi-fonts-4.3.0-128.EL.x86_64.rpm XFree86-ISO8859-9-75dpi-fonts-4.3.0-128.EL.x86_64.rpm XFree86-libs-4.3.0-128.EL.i386.rpm XFree86-libs-4.3.0-128.EL.x86_64.rpm XFree86-libs-data-4.3.0-128.EL.x86_64.rpm XFree86-Mesa-libGL-4.3.0-128.EL.i386.rpm XFree86-Mesa-libGL-4.3.0-128.EL.x86_64.rpm XFree86-Mesa-libGLU-4.3.0-128.EL.i386.rpm XFree86-Mesa-libGLU-4.3.0-128.EL.x86_64.rpm XFree86-sdk-4.3.0-128.EL.x86_64.rpm XFree86-syriac-fonts-4.3.0-128.EL.x86_64.rpm XFree86-tools-4.3.0-128.EL.x86_64.rpm XFree86-truetype-fonts-4.3.0-128.EL.x86_64.rpm XFree86-twm-4.3.0-128.EL.x86_64.rpm XFree86-xauth-4.3.0-128.EL.x86_64.rpm XFree86-xdm-4.3.0-128.EL.x86_64.rpm XFree86-xfs-4.3.0-128.EL.x86_64.rpm XFree86-Xnest-4.3.0-128.EL.x86_64.rpm XFree86-Xvfb-4.3.0-128.EL.x86_64.rpm -Connie Sieh -Troy Dawson . XServer vulnerability patch enhances security, mitigating severe weaknesses that could permit unauthorized intrusions and trigger denial of service disruptions.. XFree86 Security Update, Scientific Linux, Denial of Service, Input Validation Fix, Security Errata. . Severity: Critical. LinuxSecurity.com Team
Jun 12, 2008
•Critical
Scientific Linux