Updated x11-server packages fix security vulnerabilities

Ilja van Sprundel of IOActive discovered several security issues in the X.org X server, which may lead to privilege escalation or denial of service CVE-2014-8091, CVE-2014-8092, CVE-2014-8093, CVE-2014-8094, CVE-2014-8095, CVE-2014-8096, CVE-2014-8097, CVE-2014-8098, CVE-2014-8099, CVE-2014-8100,...

[SECURITY] Fedora 20 Update: xorg-x11-server-1.14.4-13.fc20

X.Org X11 X server...

Fedora 20 : xorg-x11-server-1.14.4-13.fc20 (2014-16600)

CVE fixes for everyone - all the X.org CVE fixes from Dec 9th 2014 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora Update for xorg-x11-server FEDORA-2014-16600

Check the version of xorg-x11-server SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868611";...

[SECURITY] Fedora 21 Update: xorg-x11-server-1.16.2.901-1.fc21

X.Org X11 X server...

Oracle Linux 5 : xorg-x11-server (ELSA-2014-1982)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1982 advisory. - CVE-2014-8091 denial of service due to unchecked malloc in client authentication 1168680 - CVE-2014-8092 integer overflow in X11 core protocol reques...

Scientific Linux Security Update : xorg-x11-server on SL6.x, SL7.x i386/x86_64 (20141211)

Multiple integer overflow flaws and out-of-bounds write flaws were found in the way the X.Org server calculated memory requirements for certain X11 core protocol and GLX extension requests. A malicious, authenticated client could use either of these flaws to crash the X.Org server or, potentially...

Scientific Linux Security Update : xorg-x11-server on SL5.x i386/x86_64 (20141211)

Multiple integer overflow flaws and out-of-bounds write flaws were found in the way the X.Org server calculated memory requirements for certain X11 core protocol and GLX extension requests. A malicious, authenticated client could use either of these flaws to crash the X.Org server or, potentially...

Oracle Linux 6 / 7 : xorg-x11-server (ELSA-2014-1983)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1983 advisory. 1.15.0-7.0.1.el70.3 - Invalid BUGRETURNVAL fix, upstream patch orabug 18896390 1.15.0-7.3 - CVE fixes for: CVE-2014-8099, CVE-2014-8098,...

CentOS 5 : xorg-x11-server (CESA-2014:1982)

Updated xorg-x11-server packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CentOS 6 / 7 : xorg-x11-server (CESA-2014:1983)

Updated xorg-x11-server packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

Fedora 21 : xorg-x11-server-1.16.2.901-1.fc21 (2014-16623)

upstream security release. 1.16.2.901 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

RHEL 5 : xorg-x11-server (RHSA-2014:1982)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:1982 advisory. - xorg-x11-server: denial of service due to unchecked malloc in client authentication CVE-2014-8091 - xorg-x11-server: integer overflow in X...

xorg security update

CentOS Errata and Security Advisory CESA-2014:1982 Updated xorg-x11-server packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base...

xorg security update

CentOS Errata and Security Advisory CESA-2014:1983 Updated xorg-x11-server packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVS...

xorg-x11-server: out of bounds access due to not validating length or offset values in XC-MISC extension

Multiple out-of-bounds access flaws were found in the way the X.Org server calculated memory requirements for certain requests. A malicious, authenticated client could use either of these flaws to crash the X.Org server...

xorg-x11-server: out of bounds access due to not validating length or offset values in XFixes extension

Multiple out-of-bounds access flaws were found in the way the X.Org server calculated memory requirements for certain requests. A malicious, authenticated client could use either of these flaws to crash the X.Org server...

xorg-x11-server security update

1.1.1-48.107.0.1.el511 - Added oracle-enterprise-detect.patch - Replaced 'Red Hat' in spec file 1.1.1-48.107 - CVE-2014-8091 denial of service due to unchecked malloc in client authentication 1168680 - CVE-2014-8092 integer overflow in X11 core protocol requests when calculating memory needs for...

xorg-x11-server security update

1.15.0-7.0.1.el70.3 - Invalid BUGRETURNVAL fix, upstream patch orabug 18896390 1.15.0-7.3 - CVE fixes for: CVE-2014-8099, CVE-2014-8098, CVE-2014-8097, CVE-2014-8096, CVE-2014-8095, CVE-2014-8094, CVE-2014-8093, CVE-2014-8092, CVE-2014-8091, CVE-2014-8101, CVE-2014-8100, CVE-2014-8103, CVE-2014-8...

CVE-2014-8100

CVE-2014-8100 affects X.Org X Server (and the X Render extension) prior to 1.16.3. A crafted length/index value to multiple Render-related handlers can trigger out-of-bounds read/write, enabling remote authenticated users to cause denial of service or potentially execute arbitrary code. Affected ...