Advisories:rPSA-2006-0157

From rPath Wiki

rPath Security Advisory 2006-0157-1

Published: 2006-08-25

Products

• rPath Linux 1

Rating

Severe

Exposure Level Classification

Local Deterministic Vulnerability

Updated Versions

• xorg-x11=conary.rpath.com@rpl:1/6.8.2-30.1-1
• xorg-x11-fonts=conary.rpath.com@rpl:1/6.8.2-30.1-1
• xorg-x11-tools=conary.rpath.com@rpl:1/6.8.2-30.1-1
• xorg-x11-xfs=conary.rpath.com@rpl:1/6.8.2-30.1-1

rPath Issue Tracking System

• RPL-596

References

• CVE-2006-3467
• https://bugs.freedesktop.org/show_bug.cgi?id=7535

Description

Previous versions of the xorg-x11 package have weaknesses parsing

fonts, related to the freetype vulnerabilities described in the

rPSA-2006-0100-2 advisory. These weaknesses are known to allow at

least a denial of service attack, and may allow executing arbitrary

code as the root user. After updating, it will be necessary to

restart the X server in order for the update to take effect.

Copyright 2006 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html