xorg security update

CentOS Errata and Security Advisory CESA-2013:1620 Updated xorg-x11-server packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring...

xorg-x11-server security and bug fix update

1.13.0-23 - Fix root window damage reports when Xinerama is active 919165 1.13.0-22 - Fix Xephyr crashes in 8 and 16 bit mode 1018405 1.13.0-21 - Fix Damage reports when Xinerama is active 919165 1.13.0-20 - Fix broken Xorg -configure 1016854 - CVE-2013-1940: Fix xf86FlushInput to drain evdev...

RedHat Update for xorg-x11-server RHSA-2013:1620-02

Check for the Version of xorg-x11-server OpenVAS Vulnerability Test RedHat Update for xorg-x11-server RHSA-2013:1620-02 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

RedHat Update for xorg-x11-server RHSA-2013:1620-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

xorg-x11-server: Information disclosure due enabling events from hot-plug devices despite input from the device being momentarily disabled

X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty...

SuSE 11.2 / 11.3 Security Update : xorg-x11-server (SAT Patch Numbers 8463 / 8464)

xorg-x11-server was updated to fix the following security issue : - Fixed a security issue in which an authenticated X client can cause an X server to use memory after it was freed, potentially leading to crash and/or memory corruption. CVE-2013-4396, bnc843652 A non-security issues was also fixe...

Amazon Linux AMI : xorg-x11-server (ALAS-2013-234)

A use-after-free flaw was found in the way the X.Org server handled ImageText requests. A malicious, authorized client could use this flaw to crash the X.Org server or, potentially, execute arbitrary code with root privileges. CVE-2013-4396 C Tenable Network Security, Inc. The descriptive text an...

CVE-2013-4394

The SetX11Keyboard function in systemd, when PolicyKit Local Authority PKLA is used to change the group permissions on the X Keyboard Extension XKB layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors...

CVE-2013-4394

The SetX11Keyboard function in systemd, when PolicyKit Local Authority PKLA is used to change the group permissions on the X Keyboard Extension XKB layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors...

DEBIAN-CVE-2013-4394

The SetX11Keyboard function in systemd, when PolicyKit Local Authority PKLA is used to change the group permissions on the X Keyboard Extension XKB layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors...

Design/Logic Flaw

The SetX11Keyboard function in systemd, when PolicyKit Local Authority PKLA is used to change the group permissions on the X Keyboard Extension XKB layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors...

CVE-2013-4394

The SetX11Keyboard function in systemd, when PolicyKit Local Authority PKLA is used to change the group permissions on the X Keyboard Extension XKB layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors...

CVE-2013-4394

The SetX11Keyboard function in systemd, when PolicyKit Local Authority PKLA is used to change the group permissions on the X Keyboard Extension XKB layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors...

CVE-2013-4394

CVE-2013-4394 concerns systemd’s SetX11Keyboard function. When PKLA is used to change group permissions on XKB layouts, local users in that group may modify the Xorg X11 Server configuration file and potentially gain privileges through vectors involving special and control characters. The vulnera...

CVE-2013-4394

The SetX11Keyboard function in systemd, when PolicyKit Local Authority PKLA is used to change the group permissions on the X Keyboard Extension XKB layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors...

[SECURITY] [DSA 2784-1] xorg-server security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2784-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 22, 2013 http://www.debian.org/security/faq -...

FreeBSD : xorg-server -- use-after-free (9a57c607-3cab-11e3-b4d9-bcaec565249c)

Alan Coopersmith reports : Pedro Ribeiro pedrib at gmail.com reported an issue to the X.Org security team in which an authenticated X client can cause an X server to use memory after it was freed, potentially leading to crash and/or memory corruption. %NASLMINLEVEL 70300 C Tenable Network Securit...

Debian DSA-2784-1 : xorg-server - use-after-free

Pedro Ribeiro discovered a use-after-free in the handling of ImageText requests in the Xorg Xserver, which could result in denial of service or privilege escalation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

[SECURITY] [DSA 2784-1] xorg-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2784-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 22, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2784-1 (xorg-server - use-after-free)

Pedro Ribeiro discovered a use-after-free in the handling of ImageText requests in the Xorg Xserver, which could result in denial of service or privilege escalation. OpenVAS Vulnerability Test $Id: deb2784.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2784-1 using...