Login
Newsletter
Werbung

Sicherheit: Pufferüberlauf in libxfont
Aktuelle Meldungen Distributionen
Name: Pufferüberlauf in libxfont
ID: DSA-2293-1
Distribution: Debian
Plattformen: Debian lenny, Debian sid, Debian squeeze
Datum: Fr, 12. August 2011, 16:46
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2895
Applikationen: X11

Originalnachricht

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -------------------------------------------------------------------------
Debian Security Advisory DSA-2293-1 security@debian.org
http://www.debian.org/security/ Thijs Kinkhorst
August 12, 2011 http://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : libxfont
Vulnerability : buffer overflow
Problem type : local
Debian-specific: no
CVE ID : CVE-2011-2895

Tomas Hoger found a buffer overflow in the X.Org libXfont library,
which may allow for a local privilege escalation through crafted
font files.

For the oldstable distribution (lenny), this problem has been fixed in
version 1.3.3-2.

For the stable distribution (squeeze), this problem has been fixed in
version 1.4.1-3.

For the unstable distribution (sid), this problem has been fixed in
version 1.4.4-1.

We recommend that you upgrade your libxfont packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAEBAgAGBQJORTVOAAoJEOxfUAG2iX57GdQH/jAs25PDrIb0/j1lmxUxvE2w
hIZrq/NKYzUIG07RjOHnWwcsRHB3XirSAQUcK4u81DgWlNHbyFoaAuybYm+SoQRR
wF0JEMtwx83C8Ge91tbhUoJqiBwCGr2PFkYptk9fBbSkHDa6qUGWBYuLx7IdOCtU
0OCA0m83D4RDKZfMKsaFM8O9xyVX8/selLk+PGaNrRO14tXMIkQNVNphN4dVDOxY
EX1n6MRQlyawLh1U3d0x2cfSDlyYurBIo8z60Qgxm5CxPPLlWynhcHlR0Gu1ryIc
zuA/v+gN+ZP7KOB4orOxuwipD9G3r5vYWSWOthOqK4sJUhmtTnw7iKOkEAb9omU=
=fZ5c
-----END PGP SIGNATURE-----


--
To UNSUBSCRIBE, email to debian-security-announce-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact
listmaster@lists.debian.org
Archive: http://lists.debian.org/20110812141528.A1D5859DCD@kinkhorst.com
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung