MDVSA-2008:025
- Package name
- x11-server-xgl
- Date
- 2008-01-23
- Advisory ID
- MDVSA-2008:025
- Affected versions
- 2007.0 x86_64 , 2007.1 i586 , 2007.0 i586 , 2008.0 x86_64 , 2008.0 i586 , 2007.1 x86_64
Problem description
An input validation flaw was found in the X.org server's XFree86-Misc
extension that could allow a malicious authorized client to cause
a denial of service (crash), or potentially execute arbitrary code
with root privileges on the X.org server (CVE-2007-5760).
A flaw was found in the X.org server's XC-SECURITY extension that
could allow a local user to verify the existence of an arbitrary file,
even in directories that are not normally accessible to that user
(CVE-2007-5958).
A memory corruption flaw was found in the X.org server's XInput
extension that could allow a malicious authorized client to cause a
denial of service (crash) or potentially execute arbitrary code with
root privileges on the X.org server (CVE-2007-6427).
An information disclosure flaw was found in the X.org server's TOG-CUP
extension that could allow a malicious authorized client to cause
a denial of service (crash) or potentially view arbitrary memory
content within the X.org server's address space (CVE-2007-6428).
Two integer overflow flaws were found in the X.org server's EVI and
MIT-SHM modules that could allow a malicious authorized client to
cause a denial of service (crash) or potentially execute arbitrary
code with the privileges of the X.org server (CVE-2007-6429).
The updated packages have been patched to correct these issues.
Updated packages
2007.0 x86_64
8d451268a57d8994f0ce0cf04f830ccf 2007.0/x86_64/x11-server-xgl-0.0.1-0.20060714.11.3mdv2007.0.x86_64.rpm 3747f570ab5133bc33992aa6eb88119b 2007.0/SRPMS/x11-server-xgl-0.0.1-0.20060714.11.3mdv2007.0.src.rpm
2007.1 i586
5984120f81b569ed1d5ce33a4b99811c 2007.1/i586/x11-server-xgl-0.0.1-0.20070105.4.3mdv2007.1.i586.rpm d5ea53e985f860f4283a31871e92cb24 2007.1/SRPMS/x11-server-xgl-0.0.1-0.20070105.4.3mdv2007.1.src.rpm
2007.0 i586
dd641b0925b43a3c6db839717424f150 2007.0/i586/x11-server-xgl-0.0.1-0.20060714.11.3mdv2007.0.i586.rpm 3747f570ab5133bc33992aa6eb88119b 2007.0/SRPMS/x11-server-xgl-0.0.1-0.20060714.11.3mdv2007.0.src.rpm
2008.0 x86_64
67d964ead0d0f93df039c4d06ebf1b8c 2008.0/x86_64/x11-server-xgl-0.0.1-0.20070917.2.1mdv2008.0.x86_64.rpm 9eb1f98a29c53dcd3226b5ac5a8e28c7 2008.0/SRPMS/x11-server-xgl-0.0.1-0.20070917.2.1mdv2008.0.src.rpm
2008.0 i586
ee6ed1d6886652fc18672979d22a32d7 2008.0/i586/x11-server-xgl-0.0.1-0.20070917.2.1mdv2008.0.i586.rpm 9eb1f98a29c53dcd3226b5ac5a8e28c7 2008.0/SRPMS/x11-server-xgl-0.0.1-0.20070917.2.1mdv2008.0.src.rpm
2007.1 x86_64
844815151b636f617544c15327d79c23 2007.1/x86_64/x11-server-xgl-0.0.1-0.20070105.4.3mdv2007.1.x86_64.rpm d5ea53e985f860f4283a31871e92cb24 2007.1/SRPMS/x11-server-xgl-0.0.1-0.20070105.4.3mdv2007.1.src.rpm