Bug 745755 (CVE-2011-4028)
Summary: | CVE-2011-4028 xorg-x11-server: File existence disclosure vulnerability | ||||||
---|---|---|---|---|---|---|---|
Product: | [Other] Security Response | Reporter: | Jan Lieskovsky <jlieskov> | ||||
Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> | ||||
Status: | CLOSED ERRATA | QA Contact: | |||||
Severity: | low | Docs Contact: | |||||
Priority: | low | ||||||
Version: | unspecified | CC: | ajax, security-response-team, vdanen, xgl-maint | ||||
Target Milestone: | --- | Keywords: | Security | ||||
Target Release: | --- | ||||||
Hardware: | All | ||||||
OS: | Linux | ||||||
Whiteboard: | |||||||
Fixed In Version: | Doc Type: | Bug Fix | |||||
Doc Text: | Story Points: | --- | |||||
Clone Of: | Environment: | ||||||
Last Closed: | 2012-06-20 10:22:49 UTC | Type: | --- | ||||
Regression: | --- | Mount Type: | --- | ||||
Documentation: | --- | CRM: | |||||
Verified Versions: | Category: | --- | |||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
Cloudforms Team: | --- | Target Upstream Version: | |||||
Embargoed: | |||||||
Bug Depends On: | 768993, 799349, 807122 | ||||||
Bug Blocks: | 742493, 745043, 784298 | ||||||
Attachments: |
|
Description
Jan Lieskovsky
2011-10-13 10:09:20 UTC
Acknowledgements: Red Hat would like to thank researcher with a nickname vladz for reporting this issue. Created attachment 528780 [details]
Proposed X.Org X11 server upstream patch
This issue is now public. The following commit corrects the problem upstream: http://cgit.freedesktop.org/xorg/xserver/commit/?id=6ba44b91e37622ef8c146d8f2ac92d708a18ed34 External References: http://lists.freedesktop.org/archives/xorg-announce/2011-October/001744.html Statement: (none) This issue has been addressed in following products: Red Hat Enterprise Linux 5 Via RHSA-2012:0303 https://rhn.redhat.com/errata/RHSA-2012-0303.html This issue affects the current version (xorg-x11-server-Xorg-1.10.4-1.fc15.*) of the xorg-x11-server package, as shipped with Fedora release of 15. Please schedule an update. -- This issue does NOT affect the current version (xorg-x11-server-Xorg-1.11.4-1.fc16) of the xorg-x11-server package, as shipped with Fedora release of 16. The deficiency in this version is corrected already. Created xorg-x11-server tracking bugs for this issue Affects: fedora-15 [bug 799349] This issue has been addressed in following products: Red Hat Enterprise Linux 6 Via RHSA-2012:0939 https://rhn.redhat.com/errata/RHSA-2012-0939.html |