Lucene search
RedHatRHSA-2011:1154HistoryAug 11, 2011 - 12:00 a.m.
(RHSA-2011:1154) Important: libXfont security update
2011-08-1100:00:00
access.redhat.com
14
0.013 Low
EPSS
Percentile
86.1%
The libXfont packages provide the X.Org libXfont runtime library. X.Org is
an open source implementation of the X Window System.
A buffer overflow flaw was found in the way the libXfont library, used by
the X.Org server, handled malformed font files compressed using UNIX
compress. A malicious, local user could exploit this issue to potentially
execute arbitrary code with the privileges of the X.Org server.
(CVE-2011-2895)
Users of libXfont should upgrade to these updated packages, which contain a
backported patch to resolve this issue. All running X.Org server instances
must be restarted for the update to take effect.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 5 | src | libxfont | < 1.2.2-1.0.4.el5_7 | libXfont-1.2.2-1.0.4.el5_7.src.rpm |
| RedHat | 6 | x86_64 | libxfont | < 1.4.1-2.el6_1 | libXfont-1.4.1-2.el6_1.x86_64.rpm |
| RedHat | 6 | i686 | libxfont | < 1.4.1-2.el6_1 | libXfont-1.4.1-2.el6_1.i686.rpm |
| RedHat | 5 | ia64 | libxfont-devel | < 1.2.2-1.0.4.el5_7 | libXfont-devel-1.2.2-1.0.4.el5_7.ia64.rpm |
| RedHat | 5 | ppc64 | libxfont-devel | < 1.2.2-1.0.4.el5_7 | libXfont-devel-1.2.2-1.0.4.el5_7.ppc64.rpm |
| RedHat | 5 | s390x | libxfont-devel | < 1.2.2-1.0.4.el5_7 | libXfont-devel-1.2.2-1.0.4.el5_7.s390x.rpm |
| RedHat | 6 | s390 | libxfont | < 1.4.1-2.el6_1 | libXfont-1.4.1-2.el6_1.s390.rpm |
| RedHat | 6 | s390x | libxfont | < 1.4.1-2.el6_1 | libXfont-1.4.1-2.el6_1.s390x.rpm |
| RedHat | 5 | s390 | libxfont | < 1.2.2-1.0.4.el5_7 | libXfont-1.2.2-1.0.4.el5_7.s390.rpm |
| RedHat | 6 | ppc | libxfont-devel | < 1.4.1-2.el6_1 | libXfont-devel-1.4.1-2.el6_1.ppc.rpm |
Related
oraclelinux
oraclelinux
freetype security update
2011-08-15 00:00:00
libXfont security update
2011-08-11 00:00:00
xorg-x11 security update
2011-08-12 00:00:00
redhat
redhat
(RHSA-2011:1161) Moderate: freetype security update
2011-08-15 00:00:00
(RHSA-2011:1834) Important: libXfont security update
2011-12-19 00:00:00
(RHSA-2011:1155) Important: xorg-x11 security update
2011-08-11 00:00:00
nessus
nessus
SuSE 10 Security Update : Xorg-X11 (ZYPP Patch Number 7759)
2011-12-13 00:00:00
RHEL 4 : xorg-x11 (RHSA-2011:1155)
2011-08-12 00:00:00
Scientific Linux Security Update : xorg-x11 on SL4.x i386/x86_64
2012-08-01 00:00:00
openvas
openvas
RedHat Update for libXfont RHSA-2011:1154-01
2011-08-12 00:00:00
CentOS Update for libXfont CESA-2011:1154 centos5 x86_64
2012-07-30 00:00:00
RedHat Update for freetype RHSA-2011:1161-01
2011-08-18 00:00:00
freebsd
freebsd
FreeBSD -- errors handling corrupt compress file in compress(1) and gzip(1)
2011-09-28 00:00:00
libXfont -- possible local privilege escalation
2011-07-26 00:00:00
suse
suse
Security update for Xorg X11 (important)
2011-09-13 17:08:18
Security update for Xorg-X11 (important)
2011-12-06 21:08:30
xorg-x11-libs (important)
2011-12-05 18:08:19
securityvulns
securityvulns
libXfont memory corruption
2013-08-17 00:00:00
[USN-1191-1] libXfont vulnerability
2011-08-17 00:00:00
Apple Mac OS X multiple security vulnerabilities
2012-08-20 00:00:00
centos
centos
libXfont security update
2011-09-02 16:41:15
xorg security update
2011-08-14 20:09:20
freetype security update
2011-08-16 13:02:42
freebsd_advisory
freebsd_advisory
FreeBSD-SA-11:04.compress
2011-09-28 00:00:00
ubuntu
ubuntu
libXfont vulnerability
2011-08-15 00:00:00
debian
debian
[SECURITY] [DSA 2293-1] libxfont security update
2011-08-12 14:15:28
veracode
veracode
Arbitrary Code Execution
2020-04-10 01:01:36
gentoo
gentoo
libXfont: Multiple vulnerabilities
2014-02-21 00:00:00
cve
cve
CVE-2011-2896
2011-08-19 17:55:03
CVE-2011-2895
2011-08-19 17:55:03
ubuntucve
ubuntucve
CVE-2011-2895
2011-08-11 00:00:00
CVE-2011-2896
2011-08-19 00:00:00
debiancve
debiancve
CVE-2011-2895
2011-08-19 17:55:03
CVE-2011-2896
2011-08-19 17:55:03
cvelist
cvelist
CVE-2011-2896
2011-08-19 17:00:00
CVE-2011-2895
2011-08-19 17:00:00
nvd
nvd
CVE-2011-2896
2011-08-19 17:55:03
CVE-2011-2895
2011-08-19 17:55:03
prion
prion
Heap overflow
2011-08-19 17:55:00
Heap overflow
2011-08-19 17:55:00
fedora
fedora
[SECURITY] Fedora 21 Update: nx-libs-3.5.0.29-1.fc21
2015-03-26 21:51:39
[SECURITY] Fedora 22 Update: nx-libs-3.5.0.29-1.fc22
2015-03-21 04:53:26
[SECURITY] Fedora 20 Update: nx-libs-3.5.0.29-1.fc20
2015-03-26 21:29:40