Synopsis:          Important: xorg-x11-server security update
Advisory ID:       SLSA-2013:1426-1
Issue Date:        2013-10-15
CVE Numbers:       CVE-2013-4396
--

A use-after-free flaw was found in the way the X.Org server handled
ImageText requests. A malicious, authorized client could use this flaw to
crash the X.Org server or, potentially, execute arbitrary code with root
privileges. (CVE-2013-4396)

Users of proprietary drivers may need to reinstall the driver after applying
this update.  Some users have reported the inability to load X without
reloading the nVidia or the ATI drivers.  You can use 'yum reinstall' to
easily reload drivers packaged in RPM format.  RPMs for many common drivers
can be found at the ELRepo Project.  You can easily add the ELRepo Project's
repository to your system with 'yum install yum-conf-elrepo' on SL 6 systems.
Any issues with ELRepo packages should be directed to their mailing lists.

After installing the update, X must be restarted for the changes to take full effect.
--

SL5
  x86_64
    xorg-x11-server-Xdmx-1.1.1-48.101.el5_10.1.x86_64.rpm
    xorg-x11-server-Xephyr-1.1.1-48.101.el5_10.1.x86_64.rpm
    xorg-x11-server-Xnest-1.1.1-48.101.el5_10.1.x86_64.rpm
    xorg-x11-server-Xorg-1.1.1-48.101.el5_10.1.x86_64.rpm
    xorg-x11-server-Xvfb-1.1.1-48.101.el5_10.1.x86_64.rpm
    xorg-x11-server-Xvnc-source-1.1.1-48.101.el5_10.1.x86_64.rpm
    xorg-x11-server-debuginfo-1.1.1-48.101.el5_10.1.x86_64.rpm
    xorg-x11-server-sdk-1.1.1-48.101.el5_10.1.x86_64.rpm
  i386
    xorg-x11-server-Xdmx-1.1.1-48.101.el5_10.1.i386.rpm
    xorg-x11-server-Xephyr-1.1.1-48.101.el5_10.1.i386.rpm
    xorg-x11-server-Xnest-1.1.1-48.101.el5_10.1.i386.rpm
    xorg-x11-server-Xorg-1.1.1-48.101.el5_10.1.i386.rpm
    xorg-x11-server-Xvfb-1.1.1-48.101.el5_10.1.i386.rpm
    xorg-x11-server-Xvnc-source-1.1.1-48.101.el5_10.1.i386.rpm
    xorg-x11-server-debuginfo-1.1.1-48.101.el5_10.1.i386.rpm
    xorg-x11-server-sdk-1.1.1-48.101.el5_10.1.i386.rpm
SL6
  x86_64
    xorg-x11-server-Xephyr-1.13.0-11.1.sl6.2.x86_64.rpm
    xorg-x11-server-Xorg-1.13.0-11.1.sl6.2.x86_64.rpm
    xorg-x11-server-common-1.13.0-11.1.sl6.2.x86_64.rpm
    xorg-x11-server-debuginfo-1.13.0-11.1.sl6.2.x86_64.rpm
    xorg-x11-server-Xdmx-1.13.0-11.1.sl6.2.x86_64.rpm
    xorg-x11-server-Xnest-1.13.0-11.1.sl6.2.x86_64.rpm
    xorg-x11-server-Xvfb-1.13.0-11.1.sl6.2.x86_64.rpm
    xorg-x11-server-debuginfo-1.13.0-11.1.sl6.2.i686.rpm
    xorg-x11-server-devel-1.13.0-11.1.sl6.2.i686.rpm
    xorg-x11-server-devel-1.13.0-11.1.sl6.2.x86_64.rpm
  i386
    xorg-x11-server-Xephyr-1.13.0-11.1.sl6.2.i686.rpm
    xorg-x11-server-Xorg-1.13.0-11.1.sl6.2.i686.rpm
    xorg-x11-server-common-1.13.0-11.1.sl6.2.i686.rpm
    xorg-x11-server-debuginfo-1.13.0-11.1.sl6.2.i686.rpm
    xorg-x11-server-Xdmx-1.13.0-11.1.sl6.2.i686.rpm
    xorg-x11-server-Xnest-1.13.0-11.1.sl6.2.i686.rpm
    xorg-x11-server-Xvfb-1.13.0-11.1.sl6.2.i686.rpm
    xorg-x11-server-devel-1.13.0-11.1.sl6.2.i686.rpm
  noarch
    xorg-x11-server-source-1.13.0-11.1.sl6.2.noarch.rpm

Added for dependency resolution
SL5
  i386
    xorg-x11-drivers-7.1-4.2.el5.i386.rpm
    xorg-x11-drv-ast-0.89.9-1.el5.i386.rpm
    xorg-x11-drv-evdev-1.0.0.5-5.el5.i386.rpm
    xorg-x11-drv-fbdev-0.3.0-3.i386.rpm
    xorg-x11-drv-i810-1.6.5-9.40.el5.i386.rpm
    xorg-x11-drv-i810-devel-1.6.5-9.40.el5.i386.rpm
    xorg-x11-drv-keyboard-1.1.0-3.i386.rpm
    xorg-x11-drv-mga-1.4.13-5.el5.i386.rpm
    xorg-x11-drv-mutouch-1.1.0-3.i386.rpm
    xorg-x11-drv-nv-2.1.15-4.el5.i386.rpm
    xorg-x11-drv-qxl-0.0.12-2.el5.i386.rpm
    xorg-x11-drv-sis-0.9.1-7.3.el5_7.1.i386.rpm
    xorg-x11-drv-vesa-1.3.0-8.3.el5.i386.rpm
    xorg-x11-font-utils-7.1-3.i386.rpm
    xorg-x11-proto-devel-7.1-13.el5.i386.rpm
    xorg-x11-server-utils-7.1-5.el5_6.2.i386.rpm
    xorg-x11-xdm-1.0.5-7.el5.i386.rpm
    xorg-x11-xfs-1.0.2-5.el5_6.1.i386.rpm
    xorg-x11-xfs-utils-1.0.2-5.el5_6.1.i386.rpm
    xorg-x11-xinit-1.0.2-15.el5.i386.rpm
  x86_64
    xorg-x11-drivers-7.1-4.2.el5.x86_64.rpm
    xorg-x11-drv-ast-0.89.9-1.el5.x86_64.rpm
    xorg-x11-drv-evdev-1.0.0.5-5.el5.x86_64.rpm
    xorg-x11-drv-fbdev-0.3.0-3.x86_64.rpm
    xorg-x11-drv-i810-1.6.5-9.40.el5.i386.rpm
    xorg-x11-drv-i810-1.6.5-9.40.el5.x86_64.rpm
    xorg-x11-drv-i810-devel-1.6.5-9.40.el5.i386.rpm
    xorg-x11-drv-i810-devel-1.6.5-9.40.el5.x86_64.rpm
    xorg-x11-drv-keyboard-1.1.0-3.x86_64.rpm
    xorg-x11-drv-mga-1.4.13-5.el5.x86_64.rpm
    xorg-x11-drv-mutouch-1.1.0-3.x86_64.rpm
    xorg-x11-drv-nv-2.1.15-4.el5.x86_64.rpm
    xorg-x11-drv-qxl-0.0.12-2.el5.x86_64.rpm
    xorg-x11-drv-sis-0.9.1-7.3.el5_7.1.x86_64.rpm
    xorg-x11-drv-vesa-1.3.0-8.3.el5.x86_64.rpm
    xorg-x11-font-utils-7.1-3.x86_64.rpm
    xorg-x11-proto-devel-7.1-13.el5.i386.rpm
    xorg-x11-proto-devel-7.1-13.el5.x86_64.rpm
    xorg-x11-server-utils-7.1-5.el5_6.2.x86_64.rpm
    xorg-x11-xdm-1.0.5-7.el5.x86_64.rpm
    xorg-x11-xfs-1.0.2-5.el5_6.1.x86_64.rpm
    xorg-x11-xfs-utils-1.0.2-5.el5_6.1.x86_64.rpm
    xorg-x11-xinit-1.0.2-15.el5.x86_64.rpm

SL6
  i386
    xorg-x11-drv-mach64-6.9.3-4.1.el6_4.i686.rpm
    xorg-x11-drv-mga-1.6.1-8.el6_4.i686.rpm
    xorg-x11-drv-synaptics-1.6.2-11.el6_4.1.i686.rpm
    xorg-x11-drv-synaptics-devel-1.6.2-11.el6_4.1.i686.rpm
  x86_64
    xorg-x11-drv-mach64-6.9.3-4.1.el6_4.x86_64.rpm
    xorg-x11-drv-mga-1.6.1-8.el6_4.x86_64.rpm
    xorg-x11-drv-synaptics-1.6.2-11.el6_4.1.x86_64.rpm
    xorg-x11-drv-synaptics-devel-1.6.2-11.el6_4.1.i686.rpm
    xorg-x11-drv-synaptics-devel-1.6.2-11.el6_4.1.x86_64.rpm

- Scientific Linux Development Team