Synopsis

Important: libXfont security update

Type/Severity

Security Advisory: Important

Topic

Updated X.org libXfont packages that fix a security issue are now available
for Red Hat Enterprise Linux 5.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

Description

X.org is an open source implementation of the X Window System. It provides
the basic low-level functionality that full-fledged graphical user
interfaces are designed upon.

iDefense reported two integer overflows in the way X.org handled various
font files. A malicious local user could exploit these issues to
potentially execute arbitrary code with the privileges of the X.org server.
(CVE-2007-1351, CVE-2007-1352)

Users of X.org libXfont should upgrade to these updated packages, which
contain a backported patch and are not vulnerable to this issue.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 234058 - CVE-2007-1351 Multiple font integer overflows (CVE-2007-1352)

CVEs

• CVE-2007-1352
• CVE-2007-1351

References

• http://www.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server 5

SRPM
libXfont-1.2.2-1.0.2.el5.src.rpm	SHA-256: f9089a50da478920e7f6b5e99af99a010d5b42769577c9bb099f8fecfd0b9e7d
x86_64
libXfont-1.2.2-1.0.2.el5.i386.rpm	SHA-256: c3030a75af90636ead2b41e18e675333c310e4ce7f1a66ad558da94636646505
libXfont-1.2.2-1.0.2.el5.x86_64.rpm	SHA-256: e826ef487ab9f8fac98af9afe5cc4f9fab00f05ae687c529d98f93ea6f366910
libXfont-devel-1.2.2-1.0.2.el5.i386.rpm	SHA-256: 48870b065fcc2edab91da4b5e4abbb4131211443457713b061f0bdb2564973d7
libXfont-devel-1.2.2-1.0.2.el5.x86_64.rpm	SHA-256: 470922c48187519829bebfedef2c69ae57968a6235a2b442cb04b28b674cd32a
ia64
libXfont-1.2.2-1.0.2.el5.ia64.rpm	SHA-256: 63e8935ddacfb5976c0415a15ed4884fd30ac72735ce3c2759e0e30ffdc2e628
libXfont-devel-1.2.2-1.0.2.el5.ia64.rpm	SHA-256: 8f9a63fd02a5091cdff2d7e019686850b86f2de7d63e2b8bf7850c9ab78abfee
i386
libXfont-1.2.2-1.0.2.el5.i386.rpm	SHA-256: c3030a75af90636ead2b41e18e675333c310e4ce7f1a66ad558da94636646505
libXfont-devel-1.2.2-1.0.2.el5.i386.rpm	SHA-256: 48870b065fcc2edab91da4b5e4abbb4131211443457713b061f0bdb2564973d7

Red Hat Enterprise Linux Workstation 5

SRPM
libXfont-1.2.2-1.0.2.el5.src.rpm	SHA-256: f9089a50da478920e7f6b5e99af99a010d5b42769577c9bb099f8fecfd0b9e7d
x86_64
libXfont-1.2.2-1.0.2.el5.i386.rpm	SHA-256: c3030a75af90636ead2b41e18e675333c310e4ce7f1a66ad558da94636646505
libXfont-1.2.2-1.0.2.el5.x86_64.rpm	SHA-256: e826ef487ab9f8fac98af9afe5cc4f9fab00f05ae687c529d98f93ea6f366910
libXfont-devel-1.2.2-1.0.2.el5.i386.rpm	SHA-256: 48870b065fcc2edab91da4b5e4abbb4131211443457713b061f0bdb2564973d7
libXfont-devel-1.2.2-1.0.2.el5.x86_64.rpm	SHA-256: 470922c48187519829bebfedef2c69ae57968a6235a2b442cb04b28b674cd32a
i386
libXfont-1.2.2-1.0.2.el5.i386.rpm	SHA-256: c3030a75af90636ead2b41e18e675333c310e4ce7f1a66ad558da94636646505
libXfont-devel-1.2.2-1.0.2.el5.i386.rpm	SHA-256: 48870b065fcc2edab91da4b5e4abbb4131211443457713b061f0bdb2564973d7

Red Hat Enterprise Linux Desktop 5

SRPM
libXfont-1.2.2-1.0.2.el5.src.rpm	SHA-256: f9089a50da478920e7f6b5e99af99a010d5b42769577c9bb099f8fecfd0b9e7d
x86_64
libXfont-1.2.2-1.0.2.el5.i386.rpm	SHA-256: c3030a75af90636ead2b41e18e675333c310e4ce7f1a66ad558da94636646505
libXfont-1.2.2-1.0.2.el5.x86_64.rpm	SHA-256: e826ef487ab9f8fac98af9afe5cc4f9fab00f05ae687c529d98f93ea6f366910
i386
libXfont-1.2.2-1.0.2.el5.i386.rpm	SHA-256: c3030a75af90636ead2b41e18e675333c310e4ce7f1a66ad558da94636646505

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
libXfont-1.2.2-1.0.2.el5.src.rpm	SHA-256: f9089a50da478920e7f6b5e99af99a010d5b42769577c9bb099f8fecfd0b9e7d
s390x
libXfont-1.2.2-1.0.2.el5.s390.rpm	SHA-256: 407dabdbc3bf015d3c1f5af233d5d66b83acdefe39838e00ebd268966138bbfe
libXfont-1.2.2-1.0.2.el5.s390x.rpm	SHA-256: fad060f92ad599615ecefebc1b126c37c7832f76923d9623a80d07434889c1d9
libXfont-devel-1.2.2-1.0.2.el5.s390.rpm	SHA-256: 57755626ee8f8c2be49b7f9594617929409f07064765f42e4ffe141334e2d445
libXfont-devel-1.2.2-1.0.2.el5.s390x.rpm	SHA-256: 4c1bbe17f899029fc44d740bba373882f72f14c9b71d60adf533179cd73c5a88

Red Hat Enterprise Linux for Power, big endian 5

SRPM
libXfont-1.2.2-1.0.2.el5.src.rpm	SHA-256: f9089a50da478920e7f6b5e99af99a010d5b42769577c9bb099f8fecfd0b9e7d
ppc
libXfont-1.2.2-1.0.2.el5.ppc.rpm	SHA-256: 870ebfd5ea53665df33e52552915f07bcd9fc0a68cba61f0471d60f1cff11564
libXfont-1.2.2-1.0.2.el5.ppc64.rpm	SHA-256: 6c11ca9237c69c8f71e67d0eea417120197b6c5e47eb94788872404673052165
libXfont-devel-1.2.2-1.0.2.el5.ppc.rpm	SHA-256: ec5edc2c25ec34f7160ba56e042f9228ece4219d965b4d10221f3fb6035526d5
libXfont-devel-1.2.2-1.0.2.el5.ppc64.rpm	SHA-256: 0fd0b39b226f1a3f68139057d26a89552409b35b494303ea0f4a084e2decc3ed

Red Hat Enterprise Linux Server from RHUI 5

SRPM
libXfont-1.2.2-1.0.2.el5.src.rpm	SHA-256: f9089a50da478920e7f6b5e99af99a010d5b42769577c9bb099f8fecfd0b9e7d
x86_64
libXfont-1.2.2-1.0.2.el5.i386.rpm	SHA-256: c3030a75af90636ead2b41e18e675333c310e4ce7f1a66ad558da94636646505
libXfont-1.2.2-1.0.2.el5.x86_64.rpm	SHA-256: e826ef487ab9f8fac98af9afe5cc4f9fab00f05ae687c529d98f93ea6f366910
libXfont-devel-1.2.2-1.0.2.el5.i386.rpm	SHA-256: 48870b065fcc2edab91da4b5e4abbb4131211443457713b061f0bdb2564973d7
libXfont-devel-1.2.2-1.0.2.el5.x86_64.rpm	SHA-256: 470922c48187519829bebfedef2c69ae57968a6235a2b442cb04b28b674cd32a
i386
libXfont-1.2.2-1.0.2.el5.i386.rpm	SHA-256: c3030a75af90636ead2b41e18e675333c310e4ce7f1a66ad558da94636646505
libXfont-devel-1.2.2-1.0.2.el5.i386.rpm	SHA-256: 48870b065fcc2edab91da4b5e4abbb4131211443457713b061f0bdb2564973d7