slesp3-xorg-x11-XvncSecurity update for Xorg
The X.Org X11 Server was updated to fix several bugs and 2 security issues:
* CVE-2010-2240: This fix adds a workaround for overlapping stacks and
heaps in case of OOM conditions.This workaround is necessary if the
kernel is not properly adding guard or gap-pages below the stack.
* CVE-2010-1166: The fbComposite function in fbpict.c in the Render
extension in the X server in X.Org X11R7.1 allows remote
authenticated users to cause a denial of service (memory corruption
and daemon crash) or possibly execute arbitrary code via a crafted
request, related to an incorrect macro definition.
Non-Security Bugs fixed:
*
Fix some shortcomings in the Xdmcp implementation. It used to
suppress loopback addresses from the list of potential display
addresses to report to xdm, even when talking to xdm through a
loopback address. Now only display addresses of the same kind as the
xdm connection are reported to xdm.
*
This most notably helps Xvnc servers contacting the local xdm,
because they were severely affected by the suppression of
securityxorg-x11-Xvncx86_64d712fbceb9952b92c9d88276821a538a97b9322fxorg-x11-serverx86_6485ea8b5d46a35c3cd59592479e3aa3115f28f651