Mageia alert MGASA-2014-0532 (x11-server)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2014-0532: Updated x11-server packages fix security vulnerabilities 
Date:
    	     
 
Fri, 19 Dec 2014 16:06:56 +0100
Message-ID:
    	     
 
<20141219150656.CB88E41B18@valstar.mageia.org>
MGASA-2014-0532 - Updated x11-server packages fix security vulnerabilities

Publication date: 19 Dec 2014
URL: http://advisories.mageia.org/MGASA-2014-0532.html
Type: security
Affected Mageia releases: 4
CVE: CVE-2014-8091,
     CVE-2014-8092,
     CVE-2014-8093,
     CVE-2014-8094,
     CVE-2014-8095,
     CVE-2014-8096,
     CVE-2014-8097,
     CVE-2014-8098,
     CVE-2014-8099,
     CVE-2014-8100,
     CVE-2014-8101,
     CVE-2014-8102

Description:
Ilja van Sprundel of IOActive discovered several security issues in the X.org
X server, which may lead to privilege escalation or denial of service
(CVE-2014-8091, CVE-2014-8092, CVE-2014-8093, CVE-2014-8094, CVE-2014-8095,
CVE-2014-8096, CVE-2014-8097, CVE-2014-8098, CVE-2014-8099, CVE-2014-8100,
CVE-2014-8101, CVE-2014-8102).

References:
- https://bugs.mageia.org/show_bug.cgi?id=14767
- http://www.x.org/wiki/Development/Security/Advisory-2014-...
- https://www.debian.org/security/2014/dsa-3095
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8091
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8092
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8093
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8094
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8095
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8096
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8097
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8098
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8099
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8100
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8101
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8102

SRPMS:
- 4/core/x11-server-1.14.5-2.1.mga4