rPath Security Advisory: 2008-0032-1 Published: 2008-01-30 Products: rPath Linux 1 rPath Appliance Platform Linux Service 1 Rating: Severe Exposure Level Classification: Local Root Deterministic Privilege Escalation Updated Versions: xorg-x11=conary.rpath.com@rpl:1/6.8.2-30.13-1 xorg-x11-fonts=conary.rpath.com@rpl:1/6.8.2-30.13-1 xorg-x11-tools=conary.rpath.com@rpl:1/6.8.2-30.13-1 xorg-x11-xfs=conary.rpath.com@rpl:1/6.8.2-30.13-1 rPath Issue Tracking System: https://issues.rpath.com/browse/RPL-1970 https://issues.rpath.com/browse/RPL-2010 References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6427 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6428 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6429 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5760 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0006 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5958 Description: Previous versions of the xorg-x11 package contain multiple vulnerabilities, the most serious of which allow authenticated users to execute arbitrary code with elevated privileges. http://wiki.rpath.com/Advisories:rPSA-2008-0032 Copyright 2008 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html