XFree86 security update

🗓️ 12 Jun 2008 13:26:31Reported by CentOS ProjectType

centos

centos🔗 lists.centos.org👁 57 Views

XFree86 security update, input validation and integer overflow flaw

Reporter	Title	Published	Views	Family All 262
ALT Linux	Security fix for the ALT Linux 10 package xorg-server version 2:1.4.0.90-alt23	9 Jun 200800:00	–	altlinux
FreeBSD	xorg -- multiple vulnerabilities	11 Jun 200800:00	–	freebsd
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
CentOS	3	i386	xfree86-100dpi-fonts	4.3.0-128.EL	XFree86-100dpi-fonts-4.3.0-128.EL.i386.rpm
CentOS	3	i386	xfree86	4.3.0-128.EL	XFree86-4.3.0-128.EL.i386.rpm
CentOS	3	i386	xfree86-75dpi-fonts	4.3.0-128.EL	XFree86-75dpi-fonts-4.3.0-128.EL.i386.rpm
CentOS	3	i386	xfree86-base-fonts	4.3.0-128.EL	XFree86-base-fonts-4.3.0-128.EL.i386.rpm
CentOS	3	i386	xfree86-cyrillic-fonts	4.3.0-128.EL	XFree86-cyrillic-fonts-4.3.0-128.EL.i386.rpm
CentOS	3	i386	xfree86-devel	4.3.0-128.EL	XFree86-devel-4.3.0-128.EL.i386.rpm
CentOS	3	i386	xfree86-doc	4.3.0-128.EL	XFree86-doc-4.3.0-128.EL.i386.rpm
CentOS	3	i386	xfree86-font-utils	4.3.0-128.EL	XFree86-font-utils-4.3.0-128.EL.i386.rpm
CentOS	3	i386	xfree86-iso8859-14-100dpi-fonts	4.3.0-128.EL	XFree86-ISO8859-14-100dpi-fonts-4.3.0-128.EL.i386.rpm
CentOS	3	i386	xfree86-iso8859-14-75dpi-fonts	4.3.0-128.EL	XFree86-ISO8859-14-75dpi-fonts-4.3.0-128.EL.i386.rpm

Source	Link
twitter	www.twitter.com/centos
steadfast	www.steadfast.net/
pasi	www.pasi.pirhonen.eu/
rhn	www.rhn.redhat.com/errata/RHSA-2008-0502.html
linkedin	www.linkedin.com/groups/22405
youtube	www.youtube.com/TheCentOSProject
facebook	www.facebook.com/groups/centosproject/
reddit	www.reddit.com/r/CentOS/
pgp	www.pgp.mit.edu:11371/pks/lookup

14 Jun 2008 19:26Current

7.5High risk

Vulners AI Score7.5

CVSS 29

EPSS0.02373

xfree86 x window system linux input validation integer overflow denial of service execute arbitrary code root privileges x.org server sensitive data disclosed.