Red Hat Security AdvisoryRHSA-2011:1154
libXfont security update
Released 2011-08-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) libXfont-1.2.2-1.0.4.el5_7, libXfont-devel-1.2.2-1.0.4.el5_7, libXfont-devel-1.2.2-1.0.4.el5_7.i386
- Red Hat Enterprise Linux (v. 5 server) libXfont-1.2.2-1.0.4.el5_7, libXfont-1.2.2-1.0.4.el5_7.i386, libXfont-1.2.2-1.0.4.el5_7.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) libXfont-1.2.2-1.0.4.el5_7, libXfont-1.2.2-1.0.4.el5_7.i386
- Red Hat Enterprise Linux Server (v. 6) libXfont-1.4.1-2.el6_1
- Red Hat Enterprise Linux Server Optional (v. 6) libXfont-1.4.1-2.el6_1, libXfont-1.4.1-2.el6_1.ppc, libXfont-devel-1.4.1-2.el6_1 +1
Fixes 1 record
Priority MEDIUM 51
The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x an…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08355 · Published 2011-08-19 · Partial fix CWE-119
