libXfont-1.4.5-3.AXS4

エラータID: AXSA:2014-146:01

Release date: 
Tuesday, March 25, 2014 - 20:48
Subject: 
libXfont-1.4.5-3.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

X.Org X11 libXfont runtime library

Security issues fixed with this release:

• CVE-2013-6462
Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.

Solution: 

Update packages.

CVEs: 
CVE-2013-6462
Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.


Additional Info: 

N/A

Download: 

SRPMS
  1. libXfont-1.4.5-3.AXS4.src.rpm
    MD5: 8b4aa7aea69bf8a477c83d0e5f80d818
    SHA-256: 913ae524ca94acc91df921e6910cc9c3c243b1af39850c72ef453d6b9203791f
    Size: 472.33 kB

Asianux Server 4 for x86
  1. libXfont-1.4.5-3.AXS4.i686.rpm
    MD5: 7b386c498ea186e53f8d7a7328a52061
    SHA-256: bbea9e958f6070aca941d650270835e7b3348d755ca9ea4ed7a31eaff7ca26af
    Size: 143.46 kB

Asianux Server 4 for x86_64
  1. libXfont-1.4.5-3.AXS4.x86_64.rpm
    MD5: 59153f09266d09cd93c9a78fa374ad1f
    SHA-256: 27bd3799a2bf71d2009e63711e605917282f36f9bb49ba1532ec2994931d40b6
    Size: 135.53 kB