Synopsis: Important: libXfont security update Advisory ID: SLSA-2015:1708-1 Issue Date: 2015-09-03 CVE Numbers: CVE-2015-1802 CVE-2015-1803 CVE-2015-1804 -- An integer overflow flaw was found in the way libXfont processed certain Glyph Bitmap Distribution Format (BDF) fonts. A malicious, local user could use this flaw to crash the X.Org server or, potentially, execute arbitrary code with the privileges of the X.Org server. (CVE-2015-1802) An integer truncation flaw was discovered in the way libXfont processed certain Glyph Bitmap Distribution Format (BDF) fonts. A malicious, local user could use this flaw to crash the X.Org server or, potentially, execute arbitrary code with the privileges of the X.Org server. (CVE-2015-1804) A NULL pointer dereference flaw was discovered in the way libXfont processed certain Glyph Bitmap Distribution Format (BDF) fonts. A malicious, local user could use this flaw to crash the X.Org server. (CVE-2015-1803) -- SL6 x86_64 libXfont-1.4.5-5.el6_7.x86_64.rpm libXfont-debuginfo-1.4.5-5.el6_7.x86_64.rpm libXfont-1.4.5-5.el6_7.i686.rpm libXfont-debuginfo-1.4.5-5.el6_7.i686.rpm libXfont-devel-1.4.5-5.el6_7.i686.rpm libXfont-devel-1.4.5-5.el6_7.x86_64.rpm i386 libXfont-1.4.5-5.el6_7.i686.rpm libXfont-debuginfo-1.4.5-5.el6_7.i686.rpm libXfont-devel-1.4.5-5.el6_7.i686.rpm SL7 x86_64 libXfont-1.4.7-3.el7_1.i686.rpm libXfont-1.4.7-3.el7_1.x86_64.rpm libXfont-debuginfo-1.4.7-3.el7_1.i686.rpm libXfont-debuginfo-1.4.7-3.el7_1.x86_64.rpm libXfont-devel-1.4.7-3.el7_1.i686.rpm libXfont-devel-1.4.7-3.el7_1.x86_64.rpm - Scientific Linux Development Team