Technical Description

Fedora has released security updates to address a vulnerability identified in xorg-x11-server. This issue could be exploited by malicious clients to execute arbitrary commands. For additional information, see : VUPEN/ADV-2007-1217

Affected Products

Fedora Core 5
Fedora Core 6

Solution

Upgrade the affected packages :

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/

00cbc8150fa51936dc4be6539c746e0993f231a1 SRPMS/xorg-x11-server-1.0.1-9.fc5.7.src.rpm
00cbc8150fa51936dc4be6539c746e0993f231a1 noarch/xorg-x11-server-1.0.1-9.fc5.7.src.rpm
21d4ba0d190b9aa5fe9d42a1906aac2722957a8d ppc/xorg-x11-server-Xvfb-1.0.1-9.fc5.7.ppc.rpm
87837bc9d3ad09777f81c6933f62ac67a8f1806d ppc/xorg-x11-server-Xdmx-1.0.1-9.fc5.7.ppc.rpm
4ff858dcc4243cd4036bc6e004e84b344bfdd714 ppc/debug/xorg-x11-server-debuginfo-1.0.1-9.fc5.7.ppc.rpm
0f029a57cf5b3e56df41418bb66fd546fdbe0b37 ppc/xorg-x11-server-sdk-1.0.1-9.fc5.7.ppc.rpm
a98afa24f810d32b4da760c46b6e26be586d357f ppc/xorg-x11-server-Xnest-1.0.1-9.fc5.7.ppc.rpm
f8f6f081fa6c857eec0a5fe2056809e1a9c0e518 ppc/xorg-x11-server-Xorg-1.0.1-9.fc5.7.ppc.rpm
c7a8b930b49fdd440b8dd9916a980cf2aa1fac12 x86_64/debug/xorg-x11-server-debuginfo-1.0.1-9.fc5.7.x86_64.rpm
f3657299efc6e06ba2d69efb6c4c0f79e10a76f1 x86_64/xorg-x11-server-sdk-1.0.1-9.fc5.7.x86_64.rpm
a28401beb997ff167afbdb169f79fe936e8ab813 x86_64/xorg-x11-server-Xdmx-1.0.1-9.fc5.7.x86_64.rpm
6d462dae35b9302cc0d3a20213579251c30ab2f4 x86_64/xorg-x11-server-Xnest-1.0.1-9.fc5.7.x86_64.rpm
476b9d8a0d66faac671a78899873c49831ce0de3 x86_64/xorg-x11-server-Xorg-1.0.1-9.fc5.7.x86_64.rpm
a9f8a4f474e8c301992ebb9c9fb3da3d6859c0dd x86_64/xorg-x11-server-Xvfb-1.0.1-9.fc5.7.x86_64.rpm
bcf07a6314fc0ce3b234a856b84a1434c96c9b6b i386/debug/xorg-x11-server-debuginfo-1.0.1-9.fc5.7.i386.rpm
9853953b59dbea6b9076cf50552dabee51f2bf5a i386/xorg-x11-server-Xnest-1.0.1-9.fc5.7.i386.rpm
248cbc592dbbf295b38b90958178c9101e505598 i386/xorg-x11-server-Xdmx-1.0.1-9.fc5.7.i386.rpm
b8c97c7ed4759669f3dacb08b2d7ac401ae4da78 i386/xorg-x11-server-sdk-1.0.1-9.fc5.7.i386.rpm
bff108c01d761d3e963e2a48b8c895190c68cde9 i386/xorg-x11-server-Xorg-1.0.1-9.fc5.7.i386.rpm
8139ca6942cd30105f56db6a8b72687413a80733 i386/xorg-x11-server-Xvfb-1.0.1-9.fc5.7.i386.rpm

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/

c372c2467ffe6120e85cfc0f679975518d6ada86 SRPMS/xorg-x11-server-1.1.1-47.8.fc6.src.rpm
c372c2467ffe6120e85cfc0f679975518d6ada86 noarch/xorg-x11-server-1.1.1-47.8.fc6.src.rpm
e6801496adc1c1b53c6f3ff0989c2162967e134a ppc/xorg-x11-server-sdk-1.1.1-47.8.fc6.ppc.rpm
2f4dc0fc28141a82596976dad905aaaa97bc44db ppc/xorg-x11-server-Xorg-1.1.1-47.8.fc6.ppc.rpm
91b7dfb3bb3ec650d319d69617487b10827482a6 ppc/xorg-x11-server-Xdmx-1.1.1-47.8.fc6.ppc.rpm
5a3fc43c6bda3d536d66db09c6ccd83e4d7c09a1 ppc/debug/xorg-x11-server-debuginfo-1.1.1-47.8.fc6.ppc.rpm
b5e3f65d7d8635a997722a4ff92fa3e7fb46e3ba ppc/xorg-x11-server-Xnest-1.1.1-47.8.fc6.ppc.rpm
1cbbd8ac888030a91b9363b106a7cbdcbabfcdf6 ppc/xorg-x11-server-Xvfb-1.1.1-47.8.fc6.ppc.rpm
1a822cacc05cdcc584fc3e12ce37d74cab813407 ppc/xorg-x11-server-Xephyr-1.1.1-47.8.fc6.ppc.rpm
20fa8e75994b364a358b293feb7035b186d02f60 x86_64/xorg-x11-server-Xvfb-1.1.1-47.8.fc6.x86_64.rpm
ae940786143f5069e79f23d20e7160f18dded5b5 x86_64/xorg-x11-server-sdk-1.1.1-47.8.fc6.x86_64.rpm
6b7ef6e1f737b2e3d61291b9150f368fed83714b x86_64/debug/xorg-x11-server-debuginfo-1.1.1-47.8.fc6.x86_64.rpm
39fd15ec3ae12448073e605eff0ce22a7aeec77d x86_64/xorg-x11-server-Xephyr-1.1.1-47.8.fc6.x86_64.rpm
8be4bbe6dddba7633667bde69bd8fcbefd509558 x86_64/xorg-x11-server-Xorg-1.1.1-47.8.fc6.x86_64.rpm
91e7022fa87f0ffb5babc5c56e8533ad65ce2f18 x86_64/xorg-x11-server-Xnest-1.1.1-47.8.fc6.x86_64.rpm
6d88b16e37ad79c52c2336373a36450bd732c8f6 x86_64/xorg-x11-server-Xdmx-1.1.1-47.8.fc6.x86_64.rpm
1ddbe1cdcbee5d531d955520a59cb4df0aed6353 i386/xorg-x11-server-Xnest-1.1.1-47.8.fc6.i386.rpm
bc727aa02f271005ed18b0fd50d46f50154945ae i386/xorg-x11-server-Xdmx-1.1.1-47.8.fc6.i386.rpm
772fcf3827e3fcf7bf792f3fd7d72b116bf97e28 i386/debug/xorg-x11-server-debuginfo-1.1.1-47.8.fc6.i386.rpm
22ceb948e65c720fca587efd517598a9b12c8c81 i386/xorg-x11-server-sdk-1.1.1-47.8.fc6.i386.rpm
62b895cd3f2f01c094a010ca5a8f723eb606b4e8 i386/xorg-x11-server-Xorg-1.1.1-47.8.fc6.i386.rpm
ec62e0e1b4f2fcd41cfda15ec8eac1af699ba327 i386/xorg-x11-server-Xvfb-1.1.1-47.8.fc6.i386.rpm
1bd878a48f34773106bbed64305a25d0b58d40b6 i386/xorg-x11-server-Xephyr-1.1.1-47.8.fc6.i386.rpm

References

http://www.vupen.com/english/advisories/2007/1328
https://www.redhat.com/archives/fedora-package-announce/2007-April/msg00027.html
https://www.redhat.com/archives/fedora-package-announce/2007-April/msg00028.html

ChangeLog

2007-04-11 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.