Synopsis:          Moderate: mesa security update
Advisory ID:       SLSA-2013:0898-1
Issue Date:        2013-06-03
CVE Numbers:       CVE-2013-1993
--

It was found that Mesa did not correctly validate messages from the X
server. A malicious X server could cause an application using Mesa to
crash or, potentially, execute arbitrary code with the privileges of the
user running the application. (CVE-2013-1993)

All running applications linked against Mesa must be restarted for this
update to take effect.
--

SL5
  x86_64
    glx-utils-6.5.1-7.11.el5_9.x86_64.rpm
    mesa-debuginfo-6.5.1-7.11.el5_9.i386.rpm
    mesa-debuginfo-6.5.1-7.11.el5_9.x86_64.rpm
    mesa-libGL-6.5.1-7.11.el5_9.i386.rpm
    mesa-libGL-6.5.1-7.11.el5_9.x86_64.rpm
    mesa-libGLU-6.5.1-7.11.el5_9.i386.rpm
    mesa-libGLU-6.5.1-7.11.el5_9.x86_64.rpm
    mesa-libGLw-6.5.1-7.11.el5_9.i386.rpm
    mesa-libGLw-6.5.1-7.11.el5_9.x86_64.rpm
    mesa-libOSMesa-6.5.1-7.11.el5_9.i386.rpm
    mesa-libOSMesa-6.5.1-7.11.el5_9.x86_64.rpm
    mesa-source-6.5.1-7.11.el5_9.x86_64.rpm
    mesa-libGL-devel-6.5.1-7.11.el5_9.i386.rpm
    mesa-libGL-devel-6.5.1-7.11.el5_9.x86_64.rpm
    mesa-libGLU-devel-6.5.1-7.11.el5_9.i386.rpm
    mesa-libGLU-devel-6.5.1-7.11.el5_9.x86_64.rpm
    mesa-libGLw-devel-6.5.1-7.11.el5_9.i386.rpm
    mesa-libGLw-devel-6.5.1-7.11.el5_9.x86_64.rpm
    mesa-libOSMesa-devel-6.5.1-7.11.el5_9.i386.rpm
    mesa-libOSMesa-devel-6.5.1-7.11.el5_9.x86_64.rpm
  i386
    glx-utils-6.5.1-7.11.el5_9.i386.rpm
    mesa-debuginfo-6.5.1-7.11.el5_9.i386.rpm
    mesa-libGL-6.5.1-7.11.el5_9.i386.rpm
    mesa-libGLU-6.5.1-7.11.el5_9.i386.rpm
    mesa-libGLw-6.5.1-7.11.el5_9.i386.rpm
    mesa-libOSMesa-6.5.1-7.11.el5_9.i386.rpm
    mesa-source-6.5.1-7.11.el5_9.i386.rpm
    mesa-libGL-devel-6.5.1-7.11.el5_9.i386.rpm
    mesa-libGLU-devel-6.5.1-7.11.el5_9.i386.rpm
    mesa-libGLw-devel-6.5.1-7.11.el5_9.i386.rpm
    mesa-libOSMesa-devel-6.5.1-7.11.el5_9.i386.rpm

- Scientific Linux Development Team