Description
Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set of vulnerabilities than CVE-2004-0083 and CVE-2004-0084.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | xfree86 | 4.1.0-16woody3 | DSA-443 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | XFree86 +28 | 4.3.0-55.EL | RHSA-2004:061 |
Advisories 2
- RHSA-2004:061 Red Hat Security Advisory: XFree86 security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-443 xfree86 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- SuSE-SA:2004:006 vendor-advisory
- oval:org.mitre.oval:def:11111 vdb-entry signature
- RHSA-2004:060 vendor-advisory
- CLA-2004:821 vendor-advisory
- oval:org.mitre.oval:def:809 vdb-entry signature
- xfree86-multiple-font-improper-handling(15206) vdb-entry
- FLSA:2314 vendor-advisory
- DSA-443 vendor-advisory
- MDKSA-2004:012 vendor-advisory
- oval:org.mitre.oval:def:832 vdb-entry signature
- RHSA-2004:059 vendor-advisory
- RHSA-2004:061 vendor-advisory
- SSA:2004-043 vendor-advisory