xorg-x11-server-1.10.6-1.0.1.AXS4

エラータID: AXSA:2012-767:04

Release date: 
Tuesday, August 14, 2012 - 13:39
Subject: 
xorg-x11-server-1.10.6-1.0.1.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

X.Org X11 X server

Security issues fixed with this release:

• CVE-2011-4028
The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a temporary lock file, which is handled differently if the file exists.

• CVE-2011-4029
The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of arbitrary files to 444, read those files, and possibly cause a denial of service (removed execution permission) via a symlink attack on a temporary lock file.

Solution: 

Update packages.

CVEs: 
CVE-2011-4028
The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a temporary lock file, which is handled differently if the file exists.
CVE-2011-4029
The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of arbitrary files to 444, read those files, and possibly cause a denial of service (removed execution permission) via a symlink attack on a temporary lock file.
Additional Info: 

N/A

Download: 

SRPMS
  1. xorg-x11-server-1.10.6-1.0.1.AXS4.src.rpm
    MD5: 5ee7cf4f7b5d012161daf3cdc10b8526
    SHA-256: b4dd223170feeb095cd8b4ff9cd9fe93bb4a4921bc88e14615ccb8ba8d70af67
    Size: 5.25 MB

Asianux Server 4 for x86
  1. xorg-x11-server-common-1.10.6-1.0.1.AXS4.i686.rpm
    MD5: 02db956ea52ce76e520fd1108f95ec40
    SHA-256: 5e1376ebb6ce2b30b44f4f781551b5d1b2703a2e81cbe989cd31cb378eb47c04
    Size: 33.32 kB
  2. xorg-x11-server-Xephyr-1.10.6-1.0.1.AXS4.i686.rpm
    MD5: 5753360890785c8690a049f86820f7de
    SHA-256: 63acd21e93ea0d8f0eecbc2e2601f6da24c2757d189b80216d2c8f6d88aaaf86
    Size: 811.89 kB
  3. xorg-x11-server-Xorg-1.10.6-1.0.1.AXS4.i686.rpm
    MD5: 8d7af46b93cbdad1a1a31d070ff681e0
    SHA-256: 7559af99e04bc453b5aec0ca3a4310a5f313f989ba840b3d490c21a6f6eebbe7
    Size: 1.32 MB

Asianux Server 4 for x86_64
  1. xorg-x11-server-common-1.10.6-1.0.1.AXS4.x86_64.rpm
    MD5: 721b2963c2d1d9a2bc45aeada097a90a
    SHA-256: 302ebc6b70edd1a14a27753e45b7576f8d7bb68066daf9061c7b5e3637d0c4bf
    Size: 32.88 kB
  2. xorg-x11-server-Xephyr-1.10.6-1.0.1.AXS4.x86_64.rpm
    MD5: 83d15a5caae9c4ed2b9bebd2d9b9a0fd
    SHA-256: eae4d1074b39c9eef7bb4f1dad9939206489a74dbe265e7ad1c7091160141402
    Size: 805.89 kB
  3. xorg-x11-server-Xorg-1.10.6-1.0.1.AXS4.x86_64.rpm
    MD5: 0520d5c9c0ef7c87af5550bc3a05b88a
    SHA-256: a512505a28db98c50699ecca06e0e8706549b06b6eb0c565466157306a9cc86b
    Size: 1.35 MB