openSUSE 10 Security Update : xorg-x11-server (xorg-x11-server-5316)

Critical Nessus Plugin ID 33166


The remote openSUSE host is missing a security update.


This update fixes multiple vulnerabilities reported by iDefense :

- CVE-2008-2360 - RENDER Extension heap buffer overflow

- CVE-2008-2361 - RENDER Extension crash

- CVE-2008-2362 - RENDER Extension memory corruption

- CVE-2008-1379 - MIT-SHM arbitrary memory read

- CVE-2008-1377 - RECORD and Security extensions memory corruption Additionally fixes for :

- gnome-screensaver loses keyboard focus lock under compiz (CVE-2007-3920)


Update the affected xorg-x11-server packages.

Plugin Details

Severity: Critical

ID: 33166

File Name: suse_xorg-x11-server-5316.nasl

Version: $Revision: 1.6 $

Type: local

Agent: unix

Published: 2008/06/12

Modified: 2014/06/13

Dependencies: 12634

Risk Information

Risk Factor: Critical


Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:xorg-x11-server, p-cpe:/a:novell:opensuse:xorg-x11-server-sdk, cpe:/o:novell:opensuse:10.2

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Patch Publication Date: 2008/06/03

Reference Information

CVE: CVE-2007-3920, CVE-2008-1377, CVE-2008-1379, CVE-2008-2360, CVE-2008-2361, CVE-2008-2362

CWE: 189