(RHSA-2006:0666) XFree86 security update

2006-09-1200:00:00

access.redhat.com

EPSS

0.001

Percentile

29.0%

JSON

XFree86 is an implementation of the X Window System, which provides the
core functionality for the Linux graphical desktop.

iDefense reported two integer overflow flaws in the way the XFree86 server
processed CID font files. A malicious authorized client could exploit this
issue to cause a denial of service (crash) or potentially execute arbitrary
code with root privileges on the XFree86 server. (CVE-2006-3739,
CVE-2006-3740)

Users of XFree86 should upgrade to these updated packages, which contain a
backported patch and is not vulnerable to this issue.

OSVersionArchitecturePackageVersionFilename
RedHatanyi386xfree86-mesa-libglu< 4.3.0-113.ELXFree86-Mesa-libGLU-4.3.0-113.EL.i386.rpm
RedHatanys390xfree86-devel< 4.3.0-113.ELXFree86-devel-4.3.0-113.EL.s390.rpm
RedHatanys390xxfree86-font-utils< 4.3.0-113.ELXFree86-font-utils-4.3.0-113.EL.s390x.rpm
RedHatanyx86_64xfree86-iso8859-15-100dpi-fonts< 4.3.0-113.ELXFree86-ISO8859-15-100dpi-fonts-4.3.0-113.EL.x86_64.rpm
RedHatanyx86_64xfree86-cyrillic-fonts< 4.3.0-113.ELXFree86-cyrillic-fonts-4.3.0-113.EL.x86_64.rpm
RedHatanys390xfree86-mesa-libglu< 4.3.0-113.ELXFree86-Mesa-libGLU-4.3.0-113.EL.s390.rpm
RedHatanyi386xfree86-libs< 4.1.0-77.ELXFree86-libs-4.1.0-77.EL.i386.rpm
RedHatanyx86_64xfree86-iso8859-2-100dpi-fonts< 4.3.0-113.ELXFree86-ISO8859-2-100dpi-fonts-4.3.0-113.EL.x86_64.rpm
RedHatanyppcxfree86-font-utils< 4.3.0-113.ELXFree86-font-utils-4.3.0-113.EL.ppc.rpm
RedHatanys390xfree86-iso8859-9-100dpi-fonts< 4.3.0-113.ELXFree86-ISO8859-9-100dpi-fonts-4.3.0-113.EL.s390.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	i386	xfree86-mesa-libglu	< 4.3.0-113.EL	XFree86-Mesa-libGLU-4.3.0-113.EL.i386.rpm
RedHat	any	s390	xfree86-devel	< 4.3.0-113.EL	XFree86-devel-4.3.0-113.EL.s390.rpm
RedHat	any	s390x	xfree86-font-utils	< 4.3.0-113.EL	XFree86-font-utils-4.3.0-113.EL.s390x.rpm
RedHat	any	x86_64	xfree86-iso8859-15-100dpi-fonts	< 4.3.0-113.EL	XFree86-ISO8859-15-100dpi-fonts-4.3.0-113.EL.x86_64.rpm
RedHat	any	x86_64	xfree86-cyrillic-fonts	< 4.3.0-113.EL	XFree86-cyrillic-fonts-4.3.0-113.EL.x86_64.rpm
RedHat	any	s390	xfree86-mesa-libglu	< 4.3.0-113.EL	XFree86-Mesa-libGLU-4.3.0-113.EL.s390.rpm
RedHat	any	i386	xfree86-libs	< 4.1.0-77.EL	XFree86-libs-4.1.0-77.EL.i386.rpm
RedHat	any	x86_64	xfree86-iso8859-2-100dpi-fonts	< 4.3.0-113.EL	XFree86-ISO8859-2-100dpi-fonts-4.3.0-113.EL.x86_64.rpm
RedHat	any	ppc	xfree86-font-utils	< 4.3.0-113.EL	XFree86-font-utils-4.3.0-113.EL.ppc.rpm
RedHat	any	s390	xfree86-iso8859-9-100dpi-fonts	< 4.3.0-113.EL	XFree86-ISO8859-9-100dpi-fonts-4.3.0-113.EL.s390.rpm