Test ID:	1.3.6.1.4.1.25623.1.0.59514
Category:	Fedora Local Security Checks
Title:	Fedora Core 5 FEDORA-2007-424 (xorg-x11-server)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to xorg-x11-server announced via advisory FEDORA-2007-424. X.Org X11 X server * Sun Apr 8 2007 Adam Jackson 1.0.1-9.fc5.7 - xserver-cve-2007-1003.patch: Fix CVE 2007-1003 in XC-MISC extension. - xorg-x11-server-1.0.1-intel-bridge-fix.patch: Backport an Intel PCI bridge fix from FC6. * Tue Jan 9 2007 Adam Jackson 1.0.1-9.fc5.6 - xorg-xserver-1.0.1-dbe-render.diff: CVE #2006-6101. * Fri Jun 30 2006 Mike A. Harris 1.0.1-9.fc5.5 - Standardize on using lowercase fcN in Release field to denote the OS release the package is being built for in all erratum from now on, as this is the official Fedora packaging guideline recommended way that the new 'dist' tag uses: http://fedoraproject.org/wiki/DistTag. (#197266) - Remove various rpm spec file macros from the changelog which were inadvertently added over time. (#197281) * Mon Jun 26 2006 Mike A. Harris 1.0.1-9.FC5.4 - Updated build dependency to require mesa-source-6.4.2-6.FC5.3 minimum for DRI enabled builds to fix numerous bug reports on x86_64 including (#190245, 185929,187603,185727,189730) - Added xorg-x11-server-1.0.1-setuid.diff to fix setuid bug (#196126) - Bump xtrans dependency to >= 1.0.0-3.2.FC5.0 for setuid fix in xtrans. - Added BuildRequires: freetype-devel >= 2.1.9-1, zlib-devel so that the package will build now in brew/mock for erratum. * Fri May 19 2006 Mike A. Harris 1.0.1-9.FC5.3 - Enable alpha, sparc, sparc64 architectures to be buildable (untested, but feel free to submit patches in bugzilla if it does not work right) - Add missing SBUS header for sparc architecture (#187357) * Fri May 5 2006 Mike A. Harris 1.0.1-9.fc5.2 - Merge xorg-x11-server-1.0.1-render-tris-CVE-2006-1526.patch security fix from 1.0.1-9.fc5.1.1 release from embargoed branch of CVS to FC-5 branch. Solution: Apply the appropriate updates. This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/ This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2007-424 Risk factor : Medium CVSS Score: 2.1
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-1526 1016018 http://securitytracker.com/id?1016018 102339 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102339-1 17795 http://www.securityfocus.com/bid/17795 19900 http://secunia.com/advisories/19900 19915 http://secunia.com/advisories/19915 19916 http://secunia.com/advisories/19916 19921 http://secunia.com/advisories/19921 19943 http://secunia.com/advisories/19943 19951 http://secunia.com/advisories/19951 19956 http://secunia.com/advisories/19956 19983 http://secunia.com/advisories/19983 2006-0024 http://www.trustix.org/errata/2006/0024 ADV-2006-1617 http://www.vupen.com/english/advisories/2006/1617 FLSA:190777 http://www.securityfocus.com/archive/1/436327/100/0/threaded GLSA-200605-02 http://www.gentoo.org/security/en/glsa/glsa-200605-02.xml MDKSA-2006:081 http://www.mandriva.com/security/advisories?name=MDKSA-2006:081 RHSA-2006:0451 http://www.redhat.com/support/errata/RHSA-2006-0451.html SUSE-SA:2006:023 http://www.novell.com/linux/security/advisories/2006_05_03.html USN-280-1 https://usn.ubuntu.com/280-1/ VU#633257 http://www.kb.cert.org/vuls/id/633257 [3.8] 007: SECURITY FIX: May 2, 2006 http://www.openbsd.org/errata38.html#xorg [xorg] 20060502 [CVE-2006-1525] X.Org security advisory: Buffer overflow in the Xrender extension http://lists.freedesktop.org/archives/xorg/2006-May/015136.html https://bugs.freedesktop.org/show_bug.cgi?id=6642 oval:org.mitre.oval:def:9929 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9929 xorg-xrender-bo(26200) https://exchange.xforce.ibmcloud.com/vulnerabilities/26200
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.