Red Hat Security AdvisoryRHSA-2012:0939
xorg-x11-server security and bug fix update
Released 2012-06-19 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) xorg-x11-server-1.10.6-1.el6, xorg-x11-server-Xephyr-1.10.6-1.el6, xorg-x11-server-Xorg-1.10.6-1.el6 +1
- Red Hat Enterprise Linux Desktop Optional (v. 6) xorg-x11-server-1.10.6-1.el6, xorg-x11-server-Xdmx-1.10.6-1.el6, xorg-x11-server-Xnest-1.10.6-1.el6 +3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) xorg-x11-server-1.10.6-1.el6, xorg-x11-server-Xdmx-1.10.6-1.el6, xorg-x11-server-Xephyr-1.10.6-1.el6 +6
- Red Hat Enterprise Linux Server (v. 6) xorg-x11-server-1.10.6-1.el6, xorg-x11-server-Xephyr-1.10.6-1.el6, xorg-x11-server-Xorg-1.10.6-1.el6 +1
- Red Hat Enterprise Linux Server Optional (v. 6) xorg-x11-server-1.10.6-1.el6, xorg-x11-server-Xdmx-1.10.6-1.el6, xorg-x11-server-Xnest-1.10.6-1.el6 +4
- Red Hat Enterprise Linux Workstation (v. 6) xorg-x11-server-1.10.6-1.el6, xorg-x11-server-Xephyr-1.10.6-1.el6, xorg-x11-server-Xorg-1.10.6-1.el6 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) xorg-x11-server-1.10.6-1.el6, xorg-x11-server-Xdmx-1.10.6-1.el6, xorg-x11-server-Xnest-1.10.6-1.el6 +3
Fixes 2 records
Priority LOW 11
The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of arbitrary files to 444, read those files, and possibly cause a denial of service (removed execution per…
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.00605 · Published 2012-07-03 · Partial fix CWE-362
Priority LOW 8
The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a temporary lock file, which is handled differently if the fil…
CVSS 2.0LOW 1.2· Local · No auth · Interaction — · EPSS 0.00372 · Published 2012-07-03 · Partial fix CWE-59
