slesp3-xorg-x11-XvncSecurity update for Xorg
The X.Org X11 Server was updated to fix several bugs and 2 security issues:
* CVE-2010-2240: This fix adds a workaround for overlapping stacks and
heaps in case of OOM conditions.This workaround is necessary if the
kernel is not properly adding guard or gap-pages below the stack.
* CVE-2010-1166: The fbComposite function in fbpict.c in the Render
extension in the X server in X.Org X11R7.1 allows remote
authenticated users to cause a denial of service (memory corruption
and daemon crash) or possibly execute arbitrary code via a crafted
request, related to an incorrect macro definition.
Non-Security Bugs fixed:
*
Fix some shortcomings in the Xdmcp implementation. It used to
suppress loopback addresses from the list of potential display
addresses to report to xdm, even when talking to xdm through a
loopback address. Now only display addresses of the same kind as the
xdm connection are reported to xdm.
*
This most notably helps Xvnc servers contacting the local xdm,
because they were severely affected by the suppression of
securityxorg-x11-Xvnci58622b3c1bc35d2872ed5699f17dde1dbeb08cb31c2xorg-x11-serveri5864d486cb37de89d7a778d9856037e6d4a4efe147a