Fedora has issued an update for xorg-x11-xfs. This fixes a vulnerability, which can be exploited by malicious, local users to perform actions with escalated privileges.

The vulnerability is caused due to a race condition within the handling of temporary files when the xfs font server startup script is executed. This can be exploited to change the permissions of arbitrary files.

Solution
Apply updated packages using the yum utility ("yum update xorg-x11-xfs").

Provided and/or discovered by
An anonymous person, reported via iDefense.

Original Advisory
FEDORA-2009-3666:
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00095.html

FEDORA-2009-3651:
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00096.html

iDefense:
http://labs.idefense.com/intelli...lnerabilities/display.php?id=557

Deep Links
Links available to Secunia VIM customers