Synopsis:          Moderate: xorg-x11-server security update
Advisory ID:       SLSA-2015:0797-1
Issue Date:        2015-04-10
CVE Numbers:       CVE-2015-0255
--

A buffer over-read flaw was found in the way the X.Org server handled
XkbGetGeometry requests. A malicious, authorized client could use this
flaw to disclose portions of the X.Org server memory, or cause the X.Org
server to crash using a specially crafted XkbGetGeometry request.
(CVE-2015-0255)
--

SL6
  x86_64
    xorg-x11-server-Xephyr-1.15.0-26.sl6.x86_64.rpm
    xorg-x11-server-Xorg-1.15.0-26.sl6.x86_64.rpm
    xorg-x11-server-common-1.15.0-26.sl6.x86_64.rpm
    xorg-x11-server-debuginfo-1.15.0-26.sl6.x86_64.rpm
    xorg-x11-server-Xdmx-1.15.0-26.sl6.x86_64.rpm
    xorg-x11-server-Xnest-1.15.0-26.sl6.x86_64.rpm
    xorg-x11-server-Xvfb-1.15.0-26.sl6.x86_64.rpm
    xorg-x11-server-debuginfo-1.15.0-26.sl6.i686.rpm
    xorg-x11-server-devel-1.15.0-26.sl6.i686.rpm
    xorg-x11-server-devel-1.15.0-26.sl6.x86_64.rpm
  i386
    xorg-x11-server-Xephyr-1.15.0-26.sl6.i686.rpm
    xorg-x11-server-Xorg-1.15.0-26.sl6.i686.rpm
    xorg-x11-server-common-1.15.0-26.sl6.i686.rpm
    xorg-x11-server-debuginfo-1.15.0-26.sl6.i686.rpm
    xorg-x11-server-Xdmx-1.15.0-26.sl6.i686.rpm
    xorg-x11-server-Xnest-1.15.0-26.sl6.i686.rpm
    xorg-x11-server-Xvfb-1.15.0-26.sl6.i686.rpm
    xorg-x11-server-devel-1.15.0-26.sl6.i686.rpm
  noarch
    xorg-x11-server-source-1.15.0-26.sl6.noarch.rpm
SL7
  x86_64
    xorg-x11-server-Xephyr-1.15.0-33.el7_1.x86_64.rpm
    xorg-x11-server-Xorg-1.15.0-33.el7_1.x86_64.rpm
    xorg-x11-server-common-1.15.0-33.el7_1.x86_64.rpm
    xorg-x11-server-debuginfo-1.15.0-33.el7_1.x86_64.rpm
    xorg-x11-server-Xdmx-1.15.0-33.el7_1.x86_64.rpm
    xorg-x11-server-Xnest-1.15.0-33.el7_1.x86_64.rpm
    xorg-x11-server-Xvfb-1.15.0-33.el7_1.x86_64.rpm
    xorg-x11-server-debuginfo-1.15.0-33.el7_1.i686.rpm
    xorg-x11-server-devel-1.15.0-33.el7_1.i686.rpm
    xorg-x11-server-devel-1.15.0-33.el7_1.x86_64.rpm
  noarch
    xorg-x11-server-source-1.15.0-33.el7_1.noarch.rpm

- Scientific Linux Development Team