Paketname
XFree86
Datum
2008-01-23
Advisory ID
MDVSA-2008:021
Betroffene Versionen
CS3.0 i586 , CS3.0 x86_64

Problembeschreibung

A flaw was found in the XFree86 server's XC-SECURITY extension that
could allow a local user to verify the existence of an arbitrary file,
even in directories that are not normally accessible to that user
(CVE-2007-5958).

A memory corruption flaw was found in the XFree86 server's XInput
extension that could allow a malicious authorized client to cause a
denial of service (crash) or potentially execute arbitrary code with
root privileges on the XFree86 server (CVE-2007-6427).

An information disclosure flaw was found in the XFree86 server's
TOG-CUP extension that could allow a malicious authorized client to
cause a denial of service (crash) or potentially view arbitrary memory
content within the XFree86 server's address space (CVE-2007-6428).

Two integer overflow flaws were found in the XFree86 server's EVI
and MIT-SHM modules that could allow a malicious authorized client
to cause a denial of service (crash) or potentially execute arbitrary
code with the privileges of the XFree86 server (CVE-2007-6429).

A heap-based buffer overflow flaw was found in how the XFree86 server
handled malformed font files that could allow a malicious local user
to potentially execute arbitrary code with the privileges of the
XFree86 server (CVE-2008-0006).

The updated packages have been patched to correct these issues.

Aktualisierte Pakete

CS3.0 i586

 edf0b59930673873fb08cccc9be6455d  corporate/3.0/i586/X11R6-contrib-4.3-32.15.C30mdk.i586.rpm
 d7dc44b08ae02df79df8a2f215013dba  corporate/3.0/i586/XFree86-100dpi-fonts-4.3-32.15.C30mdk.i586.rpm
 9417e84fc3f0e6e84d04efbcbb813657  corporate/3.0/i586/XFree86-4.3-32.15.C30mdk.i586.rpm
 8c31072dc21135ef055f9581012a87f4  corporate/3.0/i586/XFree86-75dpi-fonts-4.3-32.15.C30mdk.i586.rpm
 4081b67e881dce355c7a1ea1fc080052  corporate/3.0/i586/XFree86-Xnest-4.3-32.15.C30mdk.i586.rpm
 411a7ba5603126d8d1b7e1aa39a58b8d  corporate/3.0/i586/XFree86-Xvfb-4.3-32.15.C30mdk.i586.rpm
 0c23c135b3287f36409e9ec9090e41da  corporate/3.0/i586/XFree86-cyrillic-fonts-4.3-32.15.C30mdk.i586.rpm
 cdeec4de08d0a007eb808c2b45628b7c  corporate/3.0/i586/XFree86-doc-4.3-32.15.C30mdk.i586.rpm
 92db94203737fbb3aa633f24570de55f  corporate/3.0/i586/XFree86-glide-module-4.3-32.15.C30mdk.i586.rpm
 0e6f2844da5b19134c9a577a587a3972  corporate/3.0/i586/XFree86-server-4.3-32.15.C30mdk.i586.rpm
 ad3811b39ed3eb16389d25ba63a9bb12  corporate/3.0/i586/XFree86-xfs-4.3-32.15.C30mdk.i586.rpm
 d128d5d3510f6006f24e430ce284abe8  corporate/3.0/i586/libxfree86-4.3-32.15.C30mdk.i586.rpm
 8c3daa3ddc0cfc02b6a533486b5205ca  corporate/3.0/i586/libxfree86-devel-4.3-32.15.C30mdk.i586.rpm
 6e6ba11a9108e3d1eb5eee2e49258e1b  corporate/3.0/i586/libxfree86-static-devel-4.3-32.15.C30mdk.i586.rpm 
 c6ab0fa0baee5dba4a1387edd17e9d66  corporate/3.0/SRPMS/XFree86-4.3-32.15.C30mdk.src.rpm

CS3.0 x86_64

 c8196dcee230fb85dfbc3f31fdfd2647  corporate/3.0/x86_64/X11R6-contrib-4.3-32.15.C30mdk.x86_64.rpm
 03f0c7b57884c903bcda039946af56ec  corporate/3.0/x86_64/XFree86-100dpi-fonts-4.3-32.15.C30mdk.x86_64.rpm
 2a3715df350a35556cbf538b480a46a8  corporate/3.0/x86_64/XFree86-4.3-32.15.C30mdk.x86_64.rpm
 bf88bd71991d906ee860f61ccdd1fdb3  corporate/3.0/x86_64/XFree86-75dpi-fonts-4.3-32.15.C30mdk.x86_64.rpm
 9c23466d3edf760f78d7556de9ad48f2  corporate/3.0/x86_64/XFree86-Xnest-4.3-32.15.C30mdk.x86_64.rpm
 5ed72dfb027ff9f04ec1c4e6e7e673fd  corporate/3.0/x86_64/XFree86-Xvfb-4.3-32.15.C30mdk.x86_64.rpm
 61c0fe60ed278ec94ce513134a05a9d2  corporate/3.0/x86_64/XFree86-cyrillic-fonts-4.3-32.15.C30mdk.x86_64.rpm
 a2ae652d88c648b9555e1579717f7c7d  corporate/3.0/x86_64/XFree86-doc-4.3-32.15.C30mdk.x86_64.rpm
 cd0b21b902fd2b2de31810d86a294b7f  corporate/3.0/x86_64/XFree86-server-4.3-32.15.C30mdk.x86_64.rpm
 24cef9af7fbaf1e19adba76c3fe9b244  corporate/3.0/x86_64/XFree86-xfs-4.3-32.15.C30mdk.x86_64.rpm
 d48804766743b3104fd47f95b615d0fc  corporate/3.0/x86_64/lib64xfree86-4.3-32.15.C30mdk.x86_64.rpm
 f5162ea84f6557df38fcd5d3fb810b39  corporate/3.0/x86_64/lib64xfree86-devel-4.3-32.15.C30mdk.x86_64.rpm
 ef2c80adf27aec9fc5f925e1986cc906  corporate/3.0/x86_64/lib64xfree86-static-devel-4.3-32.15.C30mdk.x86_64.rpm 
 c6ab0fa0baee5dba4a1387edd17e9d66  corporate/3.0/SRPMS/XFree86-4.3-32.15.C30mdk.src.rpm

Referenzen