Oval Definition:oval:com.redhat.rhsa:def:20070132
Revision Date:2007-04-03Version:636
Title:RHSA-2007:0132: libXfont security update (Important)
Description:X.org is an open source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

  • iDefense reported two integer overflows in the way X.org handled various font files. A malicious local user could exploit these issues to potentially execute arbitrary code with the privileges of the X.org server. (CVE-2007-1351, CVE-2007-1352)

    Users of X.org libXfont should upgrade to these updated packages, which contain a backported patch and are not vulnerable to this issue.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2007-1351
    CVE-2007-1352
    RHSA-2007:0132
    RHSA-2007:0132-01
    RHSA-2007:0132-01
    Platform(s):Red Hat Enterprise Linux 5
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 5 is installed
  • AND
  • libXfont is earlier than 0:1.2.2-1.0.2.el5
  • AND libXfont is signed with Red Hat redhatrelease2 key
  • libXfont-devel is earlier than 0:1.2.2-1.0.2.el5
  • AND libXfont-devel is signed with Red Hat redhatrelease2 key
  • BACK