Red Hat Security Advisory

RHSA-2011:1834

libXfont security update

Released 2011-12-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux EUS (v. 5.6 server) libXfont-1.2.2-1.0.3.el5_6, libXfont-1.2.2-1.0.3.el5_6.i386, libXfont-1.2.2-1.0.3.el5_6.ia64 +5

Fixes 1 record

TI-2011-02548 CVE-2011-2895 · GHSA-8hvp-h85w-jwq9

The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in…

MEDIUM 51

The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x an…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.08355 Published 2011-08-19 Partial fix CWE-119