(RHSA-2013:1426) Important: xorg-x11-server security update

2013-10-1500:00:00

access.redhat.com

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.029 Low

EPSS

Percentile

89.3%

JSON

X.Org is an open source implementation of the X Window System. It provides
the basic low-level functionality that full-fledged graphical user
interfaces are designed upon.

A use-after-free flaw was found in the way the X.Org server handled
ImageText requests. A malicious, authorized client could use this flaw to
crash the X.Org server or, potentially, execute arbitrary code with root
privileges. (CVE-2013-4396)

Red Hat would like to thank the X.Org security team for reporting this
issue. Upstream acknowledges Pedro Ribeiro as the original reporter.

All xorg-x11-server users are advised to upgrade to these updated packages,
which contain a backported patch to correct this issue.

OSVersionArchitecturePackageVersionFilename
RedHat6x86_64xorg-x11-server-devel< 1.13.0-11.1.el6_4.2xorg-x11-server-devel-1.13.0-11.1.el6_4.2.x86_64.rpm
RedHat6ppcxorg-x11-server-devel< 1.13.0-11.1.el6_4.2xorg-x11-server-devel-1.13.0-11.1.el6_4.2.ppc.rpm
RedHat5ppcxorg-x11-server-xnest< 1.1.1-48.101.el5_10.1xorg-x11-server-Xnest-1.1.1-48.101.el5_10.1.ppc.rpm
RedHat5ppcxorg-x11-server-xdmx< 1.1.1-48.101.el5_10.1xorg-x11-server-Xdmx-1.1.1-48.101.el5_10.1.ppc.rpm
RedHat6s390xxorg-x11-server-xnest< 1.13.0-11.1.el6_4.2xorg-x11-server-Xnest-1.13.0-11.1.el6_4.2.s390x.rpm
RedHat5s390xxorg-x11-server-xephyr< 1.1.1-48.101.el5_10.1xorg-x11-server-Xephyr-1.1.1-48.101.el5_10.1.s390x.rpm
RedHat5i386xorg-x11-server-xvnc-source< 1.1.1-48.101.el5_10.1xorg-x11-server-Xvnc-source-1.1.1-48.101.el5_10.1.i386.rpm
RedHat5ia64xorg-x11-server-xnest< 1.1.1-48.101.el5_10.1xorg-x11-server-Xnest-1.1.1-48.101.el5_10.1.ia64.rpm
RedHat5ppcxorg-x11-server-xephyr< 1.1.1-48.101.el5_10.1xorg-x11-server-Xephyr-1.1.1-48.101.el5_10.1.ppc.rpm
RedHat6i686xorg-x11-server-xorg< 1.13.0-11.1.el6_4.2xorg-x11-server-Xorg-1.13.0-11.1.el6_4.2.i686.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	6	x86_64	xorg-x11-server-devel	< 1.13.0-11.1.el6_4.2	xorg-x11-server-devel-1.13.0-11.1.el6_4.2.x86_64.rpm
RedHat	6	ppc	xorg-x11-server-devel	< 1.13.0-11.1.el6_4.2	xorg-x11-server-devel-1.13.0-11.1.el6_4.2.ppc.rpm
RedHat	5	ppc	xorg-x11-server-xnest	< 1.1.1-48.101.el5_10.1	xorg-x11-server-Xnest-1.1.1-48.101.el5_10.1.ppc.rpm
RedHat	5	ppc	xorg-x11-server-xdmx	< 1.1.1-48.101.el5_10.1	xorg-x11-server-Xdmx-1.1.1-48.101.el5_10.1.ppc.rpm
RedHat	6	s390x	xorg-x11-server-xnest	< 1.13.0-11.1.el6_4.2	xorg-x11-server-Xnest-1.13.0-11.1.el6_4.2.s390x.rpm
RedHat	5	s390x	xorg-x11-server-xephyr	< 1.1.1-48.101.el5_10.1	xorg-x11-server-Xephyr-1.1.1-48.101.el5_10.1.s390x.rpm
RedHat	5	i386	xorg-x11-server-xvnc-source	< 1.1.1-48.101.el5_10.1	xorg-x11-server-Xvnc-source-1.1.1-48.101.el5_10.1.i386.rpm
RedHat	5	ia64	xorg-x11-server-xnest	< 1.1.1-48.101.el5_10.1	xorg-x11-server-Xnest-1.1.1-48.101.el5_10.1.ia64.rpm
RedHat	5	ppc	xorg-x11-server-xephyr	< 1.1.1-48.101.el5_10.1	xorg-x11-server-Xephyr-1.1.1-48.101.el5_10.1.ppc.rpm
RedHat	6	i686	xorg-x11-server-xorg	< 1.13.0-11.1.el6_4.2	xorg-x11-server-Xorg-1.13.0-11.1.el6_4.2.i686.rpm