| Summary: | CVE-2013-4396 xorg-x11-server: use-after-free flaw when handling ImageText requests | ||||||
|---|---|---|---|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | Murray McAllister <mmcallis> | ||||
| Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> | ||||
| Status: | CLOSED ERRATA | QA Contact: | |||||
| Severity: | high | Docs Contact: | |||||
| Priority: | high | ||||||
| Version: | unspecified | CC: | ajax, jkurik, jrusnack, peter.hutterer, pfrields, security-response-team, twaugh, vdanen | ||||
| Target Milestone: | --- | Keywords: | Security | ||||
| Target Release: | --- | ||||||
| Hardware: | All | ||||||
| OS: | Linux | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | xorg-x11-server 1.15.0, xorg-x11-server 1.14.4 | Doc Type: | Bug Fix | ||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2013-11-22 06:18:06 UTC | Type: | --- | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Bug Depends On: | 1015161, 1016412, 1017013, 1017521, 1017522, 1017523 | ||||||
| Bug Blocks: | 974906, 1014570 | ||||||
| Attachments: |
|
||||||
|
Description
Murray McAllister
2013-10-02 10:56:30 UTC
Created attachment 806554 [details]
upstream patch
Acknowledgements: Red Hat would like to thank the X.Org security team for reporting this issue. Upstream acknowledges Pedro Ribeiro as the original reporter. This is now public: http://lists.x.org/archives/xorg-announce/2013-October/002332.html Created xorg-x11-server tracking bugs for this issue: Affects: fedora-all [bug 1017013] Statement: (none) This issue has been addressed in following products: Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5 Via RHSA-2013:1426 https://rhn.redhat.com/errata/RHSA-2013-1426.html |