RHSA-2008:0029High

Red Hat Security Advisory: XFree86 security update

Published
January 18, 2008
Last Modified
November 7, 2026

🔗 CVE IDs covered (7)

CVE-2007-4568 →CVE-2007-4990 →CVE-2007-5958 →CVE-2007-6427 →CVE-2007-6428 →CVE-2007-6429 →CVE-2008-0006 →

📋 Description

CVE-2007-4568 — xfs integer overflow in the build_range function CVE-2007-4990 — xfs heap overflow in the swap_char2b function CVE-2007-5958 — Xorg / XFree86 file existence disclosure vulnerability CVE-2007-6427 — xfree86: memory corruption via XInput extension CVE-2007-6428 — xfree86: information disclosure via TOG-CUP extension CVE-2007-6429 — xfree86: integer overflow in EVI extension CVE-2008-0006 — Xorg / XFree86 PCF font parser buffer overflow

🎯 Affected products200

  • Red Hat Desktop version 3
  • Red Hat Enterprise Linux AS (Advanced Server) version 2.1
  • Red Hat Enterprise Linux AS version 3
  • Red Hat Enterprise Linux ES version 2.1
  • Red Hat Enterprise Linux ES version 3
  • Red Hat Enterprise Linux WS version 2.1
  • Red Hat Enterprise Linux WS version 3
  • Red Hat Linux Advanced Workstation 2.1
  • XFree86-0:4.1.0-86.EL.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1
  • XFree86-0:4.1.0-86.EL.i386 as a component of Red Hat Enterprise Linux ES version 2.1
  • XFree86-0:4.1.0-86.EL.i386 as a component of Red Hat Enterprise Linux WS version 2.1
  • XFree86-0:4.1.0-86.EL.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1
  • XFree86-0:4.1.0-86.EL.ia64 as a component of Red Hat Linux Advanced Workstation 2.1
  • XFree86-0:4.1.0-86.EL.src as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1
  • XFree86-0:4.1.0-86.EL.src as a component of Red Hat Enterprise Linux ES version 2.1
  • XFree86-0:4.1.0-86.EL.src as a component of Red Hat Enterprise Linux WS version 2.1
  • XFree86-0:4.1.0-86.EL.src as a component of Red Hat Linux Advanced Workstation 2.1
  • XFree86-0:4.3.0-126.EL.i386 as a component of Red Hat Desktop version 3
  • XFree86-0:4.3.0-126.EL.i386 as a component of Red Hat Enterprise Linux AS version 3
  • XFree86-0:4.3.0-126.EL.i386 as a component of Red Hat Enterprise Linux ES version 3
  • XFree86-0:4.3.0-126.EL.i386 as a component of Red Hat Enterprise Linux WS version 3
  • XFree86-0:4.3.0-126.EL.ia64 as a component of Red Hat Enterprise Linux AS version 3
  • XFree86-0:4.3.0-126.EL.ia64 as a component of Red Hat Enterprise Linux ES version 3
  • XFree86-0:4.3.0-126.EL.ia64 as a component of Red Hat Enterprise Linux WS version 3
  • XFree86-0:4.3.0-126.EL.ppc as a component of Red Hat Enterprise Linux AS version 3
  • XFree86-0:4.3.0-126.EL.s390 as a component of Red Hat Enterprise Linux AS version 3
  • XFree86-0:4.3.0-126.EL.s390x as a component of Red Hat Enterprise Linux AS version 3
  • XFree86-0:4.3.0-126.EL.src as a component of Red Hat Desktop version 3
  • XFree86-0:4.3.0-126.EL.src as a component of Red Hat Enterprise Linux AS version 3
  • XFree86-0:4.3.0-126.EL.src as a component of Red Hat Enterprise Linux ES version 3
  • +170 more not shown

✅ Remediation

Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188

🔗 References (11)