Technical Description

Fedora has released security updates to address multiple vulnerabilities identified in libXfont and libX11. These issues could be exploited by attackers to execute arbitrary commands. For additional information, see : VUPEN/ADV-2007-1217

Affected Products

Fedora Core 5
Fedora Core 6

Solution

Upgrade the affected packages :

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/

aaf45ead6cac1d43c990cbfac69774f2d3a36857 SRPMS/libXfont-1.2.8-1.fc5.src.rpm
aaf45ead6cac1d43c990cbfac69774f2d3a36857 noarch/libXfont-1.2.8-1.fc5.src.rpm
069c67665f9ddae2d67100c6c70509011a489c0a ppc/debug/libXfont-debuginfo-1.2.8-1.fc5.ppc.rpm
f177147d891ba44f6a3253e94e250d21a322057e ppc/libXfont-devel-1.2.8-1.fc5.ppc.rpm
56642a97c35316f2331a46dafac3964d99829581 ppc/libXfont-1.2.8-1.fc5.ppc.rpm
f910418741b85bc75c10997b20610a5347c78f78 x86_64/libXfont-1.2.8-1.fc5.x86_64.rpm
c934f4ddcc06775826dc54b92269b0e35a36a488 x86_64/debug/libXfont-debuginfo-1.2.8-1.fc5.x86_64.rpm
6ad80acdfb463d513efc404b3bba4a16b11a6652 x86_64/libXfont-devel-1.2.8-1.fc5.x86_64.rpm
ce523cb73f9fdfeb84cca8d9d3441de1d7236c61 i386/libXfont-devel-1.2.8-1.fc5.i386.rpm
857c427a94d352c6d588630a7531bdae845c3fdc i386/libXfont-1.2.8-1.fc5.i386.rpm
e993552b7677941677cbf587270901c00bdc5733 i386/debug/libXfont-debuginfo-1.2.8-1.fc5.i386.rpm
c22d27ee248a80bc38df598a9eec181467737774 SRPMS/libX11-1.0.0-4.fc5.src.rpm
c22d27ee248a80bc38df598a9eec181467737774 noarch/libX11-1.0.0-4.fc5.src.rpm
8771ae8ef00ea0c750fe08a7b1b849ff97fe7563 ppc/debug/libX11-debuginfo-1.0.0-4.fc5.ppc.rpm
bb6f378e7a39054d97488c808abb504f4b927052 ppc/libX11-1.0.0-4.fc5.ppc.rpm
d8735b5c0548723b72a44986da63bf109c54ccf3 ppc/libX11-devel-1.0.0-4.fc5.ppc.rpm
0c47a719ab3721a55aa9eac4d0350515250e6d28 x86_64/debug/libX11-debuginfo-1.0.0-4.fc5.x86_64.rpm
8bacc024a882f3422f34042bd730d7fe8cfb5363 x86_64/libX11-devel-1.0.0-4.fc5.x86_64.rpm
a0113254f8e206dce9635286ad23be564c16f3a1 x86_64/libX11-1.0.0-4.fc5.x86_64.rpm
54a14a35b6beff16e75578673acc700b19f80b8c i386/debug/libX11-debuginfo-1.0.0-4.fc5.i386.rpm
107a9202f421b8a8cf9dd5be8e556954bbd539d9 i386/libX11-devel-1.0.0-4.fc5.i386.rpm
645037e8a0ea24b8889e9c627a8c216cfd915314 i386/libX11-1.0.0-4.fc5.i386.rpm

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/

6d39743041082790f356d74797ea2a49da8ff8d9 SRPMS/libXfont-1.2.8-1.fc6.src.rpm
6d39743041082790f356d74797ea2a49da8ff8d9 noarch/libXfont-1.2.8-1.fc6.src.rpm
67a94481532a3506f582c93220236bc3692d312e ppc/libXfont-1.2.8-1.fc6.ppc.rpm
02d654ad2c48fbcedc68ca2a2b7333fb96da3d1b ppc/libXfont-devel-1.2.8-1.fc6.ppc.rpm
e8447ebfb8c764128f76456070bc4ad7142c9ae9 ppc/debug/libXfont-debuginfo-1.2.8-1.fc6.ppc.rpm
f32b3383238a39cf94237c221a7b639781af4581 x86_64/libXfont-1.2.8-1.fc6.x86_64.rpm
121f6011626a50cd21e6e918ab52820e075ac90a x86_64/debug/libXfont-debuginfo-1.2.8-1.fc6.x86_64.rpm
df4fe12911b856f121975e8ea79e0294766ccccb x86_64/libXfont-devel-1.2.8-1.fc6.x86_64.rpm
37af0b5ba409aa9becc67545cec0ace1d8aa4a1f i386/libXfont-1.2.8-1.fc6.i386.rpm
156232489272e4dc9ffe28fdb028ef600c49ee34 i386/debug/libXfont-debuginfo-1.2.8-1.fc6.i386.rpm
03431ab8bf214cac2672611252fb04a703dc64b8 i386/libXfont-devel-1.2.8-1.fc6.i386.rpm
37ad9863a321eeca9c07f72f50d9ff5184469475 SRPMS/libX11-1.0.3-7.fc6.src.rpm
37ad9863a321eeca9c07f72f50d9ff5184469475 noarch/libX11-1.0.3-7.fc6.src.rpm
306c6dc3c836b9a29d2ac62ae68dd7a9923e9d25 ppc/debug/libX11-debuginfo-1.0.3-7.fc6.ppc.rpm
982e50e0924fa7af1b58b9de5662aaed7744dc39 ppc/libX11-devel-1.0.3-7.fc6.ppc.rpm
edf8554717c80d19a37054d673d1d886dcf5100f ppc/libX11-1.0.3-7.fc6.ppc.rpm
208cffad3d2ee7e9d8f08d367f36f80d8b2fe656 x86_64/debug/libX11-debuginfo-1.0.3-7.fc6.x86_64.rpm
3f726a7f8e32da2dff7f24a84957964ea9562296 x86_64/libX11-1.0.3-7.fc6.x86_64.rpm
ba884558a328b8b4ada6371d5513f9b21466d5d3 x86_64/libX11-devel-1.0.3-7.fc6.x86_64.rpm
f2ee01ea6dc6e3252b9ff33440f119f0f0e11343 i386/debug/libX11-debuginfo-1.0.3-7.fc6.i386.rpm
1e11734d3bab45b4bfdbad80fd6cfddabdd58c35 i386/libX11-devel-1.0.3-7.fc6.i386.rpm
2d5f9bacf810822d3585f4a6a43baf6c91b3891b i386/libX11-1.0.3-7.fc6.i386.rpm

References

http://www.vupen.com/english/advisories/2007/1327
https://www.redhat.com/archives/fedora-package-announce/2007-April/msg00023.html
https://www.redhat.com/archives/fedora-package-announce/2007-April/msg00024.html
https://www.redhat.com/archives/fedora-package-announce/2007-April/msg00030.html
https://www.redhat.com/archives/fedora-package-announce/2007-April/msg00029.html

ChangeLog

2007-04-11 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts with CVE, CWE, and CVSS when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.