iDefense reported several flaws in the X.org Record and Security extensions. The iDefense advisory states: Multiple vulnerabilities are present in the Record and Security extensions. In both cases, untrusted values are taken from a client request, and used to swap the byte order of heap memory that follows the client request. Since the number of bytes to swap is not properly validated, it is possible to corrupt heap memory located after the request. The following functions contain vulnerable code: SProcSecurityGenerateAuthorization() SProcRecordCreateContext() SProcRecordRegisterClients()
Public now: http://lists.freedesktop.org/archives/xorg/2008-June/036026.html
xorg-x11-server-1.4.99.902-3.20080612.fc9 has been submitted as an update for Fedora 9
iDefense advisory: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=721
xorg-x11-server-1.4.99.902-3.20080612.fc9 has been pushed to the Fedora 9 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update xorg-x11-server'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F9/FEDORA-2008-5254
xorg-x11-server-1.3.0.0-17.fc7 has been pushed to the Fedora 7 stable repository. If problems still persist, please make note of it in this bug report.
xorg-x11-server-1.4.99.902-3.20080612.fc9 has been pushed to the Fedora 9 stable repository. If problems still persist, please make note of it in this bug report.
xorg-x11-server-1.3.0.0-46.fc8 has been pushed to the Fedora 8 stable repository. If problems still persist, please make note of it in this bug report.
This issue was addressed in: Red Hat Enterprise Linux: http://rhn.redhat.com/errata/RHSA-2008-0503.html http://rhn.redhat.com/errata/RHSA-2008-0502.html http://rhn.redhat.com/errata/RHSA-2008-0504.html http://rhn.redhat.com/errata/RHSA-2008-0512.html Fedora: https://admin.fedoraproject.org/updates/F7/FEDORA-2008-5285 https://admin.fedoraproject.org/updates/F8/FEDORA-2008-5279 https://admin.fedoraproject.org/updates/F9/FEDORA-2008-5254