-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Wed, 3 Sep 2003 19:40:13 -0500
Source: xfree86
Binary: xserver-common xlibs-dev xfs xfree86-common xfonts-pex x-window-system
xlibmesa-dev xspecs xlibmesa3 xfonts-cyrillic xlibmesa3-dbg xserver-xfree86
xlibs-dbg libxaw6 libxaw7 xterm xvfb xfonts-scalable xfonts-75dpi xlib6g
proxymngr libxaw6-dev xlibs-pic libdps1-dbg xlib6g-dev xfonts-base xutils
libxaw7-dev xnest xlibs libxaw6-dbg xmh lbxproxy libxaw7-dbg
xfonts-base-transcoded xbase-clients xprt xlibosmesa3 x-window-system-core
xlibosmesa-dev twm xfwp xfonts-100dpi-transcoded xlibosmesa3-dbg xfonts-100dpi
xdm libdps-dev xfonts-75dpi-transcoded libdps1
Architecture: source all powerpc
Version: 4.1.0-16woody1
Distribution: stable-security
Urgency: high
Maintainer: Branden Robinson <[EMAIL PROTECTED]>
Changed-By: Branden Robinson <[EMAIL PROTECTED]>
Description:
lbxproxy - Low Bandwidth X (LBX) proxy server
libdps-dev - Display PostScript (DPS) client library development files
libdps1 - Display PostScript (DPS) client library
libdps1-dbg - Display PostScript (DPS) client library (unstripped)
libxaw6 - X Athena widget set library (version 6)
libxaw6-dbg - X Athena widget set library (version 6) (unstripped)
libxaw6-dev - X Athena widget set library development files (version 6)
libxaw7 - X Athena widget set library
libxaw7-dbg - X Athena widget set library (unstripped)
libxaw7-dev - X Athena widget set library development files
proxymngr - X proxy services manager
twm - Tab window manager
x-window-system - X Window System
x-window-system-core - X Window System core components
xbase-clients - miscellaneous X clients
xdm - X display manager
xfonts-100dpi - 100 dpi fonts for X
xfonts-100dpi-transcoded - 100 dpi fonts for X (transcoded from ISO 10646-1)
xfonts-75dpi - 75 dpi fonts for X
xfonts-75dpi-transcoded - 75 dpi fonts for X (transcoded from ISO 10646-1)
xfonts-base - standard fonts for X
xfonts-base-transcoded - standard fonts for X (transcoded from ISO 10646-1)
xfonts-cyrillic - Cyrillic fonts for X
xfonts-pex - fonts for minimal PEX support in X
xfonts-scalable - scalable fonts for X
xfree86-common - X Window System (XFree86) infrastructure
xfs - X font server
xfwp - X firewall proxy server
xlib6g - pseudopackage providing X libraries
xlib6g-dev - pseudopackage providing X library development files
xlibmesa-dev - XFree86 version of Mesa 3D graphics library development files
xlibmesa3 - XFree86 version of Mesa 3D graphics library
xlibmesa3-dbg - XFree86 version of Mesa 3D graphics library (unstripped)
xlibosmesa-dev - Mesa/XFree86 off-screen rendering library development files
xlibosmesa3 - Mesa/XFree86 off-screen rendering library
xlibosmesa3-dbg - Mesa/XFree86 off-screen rendering library (unstripped)
xlibs - X Window System client libraries
xlibs-dbg - X Window System client libraries (unstripped)
xlibs-dev - X Window System client library development files
xlibs-pic - X Window System client extension library PIC archives
xmh - X interface to the MH mail system
xnest - nested X server
xprt - X print server
xserver-common - files and utilities common to all X servers
xserver-xfree86 - the XFree86 X server
xspecs - X protocol, extension, and library technical specifications
xterm - X terminal emulator
xutils - X Window System utility programs
xvfb - virtual framebuffer X server
Changes:
xfree86 (4.1.0-16woody1) stable-security; urgency=high
.
* Security update release. Resolves the following issues:
+ CAN-2003-0063 (xterm window title reporting can deceive user)
+ CAN-2003-0071 (xterm susceptible to DEC UDK sequence DoS attack)
+ CAN-2002-0164 (flaw in X server's MIT-SHM extension permits user owning
X session to read and write arbitrary shared memory
segments)
+ CAN-2003-0730 (multiple integer overflows in the font libraries for
XFree86 allow local or remote attackers to cause a denial
of service or execute arbitrary code via heap-based and
stack-based buffer overflow attacks)
.
* patch #069: new; disable xterm's window title reporting escape sequence
.
* patch #070: new; fix term to ignore malformed DEC UDK escape sequences
instead of locking up
.
* patch #071: new; updated fix to MIT-SHM vulnerability from upstream CVS:
- Implement LocalClientCred() to return the credentials of local clients
connected through Unix domain sockets on systems that have the required
support (for now recent Linux, FreeBSD >= 4.6, OpenBSD >= 3.0 are
implemented), and use that in ShmAttach() to grant access to the client.
When client credentials are not available, require world accessibility.
The original fix did not cover the case where the X server is started
from an X display manager such as xdm.
.
* patch #072: new; fixes for integer overflows in font libraries from
upstream CVS:
- fixes for potential integer overflows in font libraries (blexim, Matthieu
Herrb).
- For integer overflow tests, use SIZE_MAX which is more standard than
SIZE_T_MAX, and default to ULONG_MAX for the case of LP64 systems. Based
on reports by Matthias Scheler and Alan Coopersmith (Bugzilla #646).
.
* patch #400: resynced offsets in the wake of patch #071
Files:
944b46135349c20bfcc29e70c48e3134 1512 x11 optional xfree86_4.1.0-16woody1.dsc
502185d1b3e5b517d6a9cda100597014 1596153 x11 optional
xfree86_4.1.0-16woody1.diff.gz
cff62cda8037370ed8d2855a9c13a8a2 140856 x11 optional
lbxproxy_4.1.0-16woody1_powerpc.deb
0bab1863617cb2be405082feb5b542e4 187356 libs optional
libdps1_4.1.0-16woody1_powerpc.deb
600a1c5c647d8e069c6612ef19d7134d 445466 devel extra
libdps1-dbg_4.1.0-16woody1_powerpc.deb
39d8b42620092d2ea7f9db15d2080c1d 259506 devel optional
libdps-dev_4.1.0-16woody1_powerpc.deb
d356234e25d58426727f396283af1601 178344 libs optional
libxaw6_4.1.0-16woody1_powerpc.deb
f50f5d58a5ce5b21a8d5ec4accdedce1 355670 devel extra
libxaw6-dbg_4.1.0-16woody1_powerpc.deb
8a8728d24a8d24fc2a91aa53737d2467 330432 devel extra
libxaw6-dev_4.1.0-16woody1_powerpc.deb
fb3ea3d8b9ac7885cdb3d776a73df5f2 231894 libs optional
libxaw7_4.1.0-16woody1_powerpc.deb
e2216a4ac014f7ef86dd9ffbb704eae1 468828 devel extra
libxaw7-dbg_4.1.0-16woody1_powerpc.deb
3035dd3ee0918b64d9d117c60985c382 330318 devel optional
libxaw7-dev_4.1.0-16woody1_powerpc.deb
900b1dc23dd7172fd583580bac6c9966 76348 x11 optional
proxymngr_4.1.0-16woody1_powerpc.deb
a8af399963df2748db052329fa5356a5 159860 x11 optional
twm_4.1.0-16woody1_powerpc.deb
f01b9e60d35142a752d900f9b837e570 1609036 x11 optional
xbase-clients_4.1.0-16woody1_powerpc.deb
0b1924068fbaaf443587cff7e8214265 171858 x11 optional
xdm_4.1.0-16woody1_powerpc.deb
65efabc5bce1f411d63148a3ecf52912 303994 x11 optional
xfs_4.1.0-16woody1_powerpc.deb
058bafcf058cd740dca12b0be9d49fac 81796 x11 optional
xfwp_4.1.0-16woody1_powerpc.deb
13ede7269683a0023a0870f61b162788 2448394 libs optional
xlibmesa3_4.1.0-16woody1_powerpc.deb
08add16bd826cd43c6eb80a237b732ec 923256 devel extra
xlibmesa3-dbg_4.1.0-16woody1_powerpc.deb
c2ac0b4bfcf1265e3a3e04365c17a94f 605772 devel optional
xlibmesa-dev_4.1.0-16woody1_powerpc.deb
f51a5bf8f83e1373d5f894913dddf4f8 529810 libs optional
xlibosmesa3_4.1.0-16woody1_powerpc.deb
e2f980f38b98267386bb6901d2860e28 1086818 devel extra
xlibosmesa3-dbg_4.1.0-16woody1_powerpc.deb
bbd9412bc1afafdf256c2d8260bc03b4 622812 devel optional
xlibosmesa-dev_4.1.0-16woody1_powerpc.deb
be2336f5fd92075172f9a2eccc506a50 1299246 libs optional
xlibs_4.1.0-16woody1_powerpc.deb
4a0db8d2de23db9c42c1ec97f88cf775 2701380 devel extra
xlibs-dbg_4.1.0-16woody1_powerpc.deb
63cf5b6a130da604bb37d4d735a5224e 2984616 devel optional
xlibs-dev_4.1.0-16woody1_powerpc.deb
e3b357204d6605ea0ec3d83b04a01871 76056 devel optional
xlibs-pic_4.1.0-16woody1_powerpc.deb
bf0e9e39023198c1c89e3f36720d6c7a 131878 mail extra
xmh_4.1.0-16woody1_powerpc.deb
1118c7f3cf81e9f2de035d3751750fd9 1579354 x11 optional
xnest_4.1.0-16woody1_powerpc.deb
3483121378d1d2c2d2f5d69a05c4abd9 1274394 x11 optional
xprt_4.1.0-16woody1_powerpc.deb
4b2953bbff6f58904e69363e89971dcf 218938 x11 optional
xserver-common_4.1.0-16woody1_powerpc.deb
763ec729da2d3ca6f79e432efe25db24 4617160 x11 optional
xserver-xfree86_4.1.0-16woody1_powerpc.deb
852e848f8f5a4c21f35c79144530e04a 492640 x11 optional
xterm_4.1.0-16woody1_powerpc.deb
a5d4f4129c4d55797d034bf747325285 603546 x11 optional
xutils_4.1.0-16woody1_powerpc.deb
bee0e9fee2b844bb02b0b5c5fdbbeca9 1707414 x11 optional
xvfb_4.1.0-16woody1_powerpc.deb
777642929cae8fb09cec8923411b39a0 59832 x11 optional
x-window-system-core_4.1.0-16woody1_powerpc.deb
a1980fa766907cd8c0137769378ce017 4441766 x11 optional
xfonts-100dpi_4.1.0-16woody1_all.deb
61c2a42c2d5e668ab6adbaaff9da4c02 8332974 x11 optional
xfonts-100dpi-transcoded_4.1.0-16woody1_all.deb
ded7e9cf4ec402311366f3c16cf3b522 3931002 x11 optional
xfonts-75dpi_4.1.0-16woody1_all.deb
7672c6a1664634a543bee78dbd707f27 7224972 x11 optional
xfonts-75dpi-transcoded_4.1.0-16woody1_all.deb
45d2fb54abcbc20a454c54d07fd87275 5028098 x11 optional
xfonts-base_4.1.0-16woody1_all.deb
0c310f293d5f18027b4f66d89e8c88a9 1104714 x11 optional
xfonts-base-transcoded_4.1.0-16woody1_all.deb
a4b60c52f618daba56cb59422dca8e1e 437850 x11 optional
xfonts-cyrillic_4.1.0-16woody1_all.deb
9c70aea042a1bb6e3bb32a12f417e335 68210 x11 optional
xfonts-pex_4.1.0-16woody1_all.deb
2b51a0af0d69f6bfc7c9386926d3393b 795574 x11 optional
xfonts-scalable_4.1.0-16woody1_all.deb
041abd5637b1dd4adb9461f1db4e8f54 545426 x11 optional
xfree86-common_4.1.0-16woody1_all.deb
3c984ffa27a444559d0ffae3a1802f14 4164958 x11 optional
xspecs_4.1.0-16woody1_all.deb
b6ac13562174e6071f8320aeb1abc0a5 59818 libs optional
xlib6g_4.1.0-16woody1_all.deb
29a21611c82da8b2beac7b77a56c596f 59620 devel optional
xlib6g-dev_4.1.0-16woody1_all.deb
77a3d33f0adef1482433508fc2fe2572 59660 x11 optional
x-window-system_4.1.0-16woody1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
iEYEARECAAYFAj9Wt7UACgkQ6kxmHytGonwDjwCeK6RzspAM1uBdQZyZn8LNfZSE
SmQAn0Tu9GVQec1XC1+q+UVetJQja2Go
=mp8j
-----END PGP SIGNATURE-----
Accepted:
lbxproxy_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/lbxproxy_4.1.0-16woody1_powerpc.deb
libdps-dev_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/libdps-dev_4.1.0-16woody1_powerpc.deb
libdps1-dbg_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/libdps1-dbg_4.1.0-16woody1_powerpc.deb
libdps1_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/libdps1_4.1.0-16woody1_powerpc.deb
libxaw6-dbg_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/libxaw6-dbg_4.1.0-16woody1_powerpc.deb
libxaw6-dev_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/libxaw6-dev_4.1.0-16woody1_powerpc.deb
libxaw6_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/libxaw6_4.1.0-16woody1_powerpc.deb
libxaw7-dbg_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/libxaw7-dbg_4.1.0-16woody1_powerpc.deb
libxaw7-dev_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/libxaw7-dev_4.1.0-16woody1_powerpc.deb
libxaw7_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/libxaw7_4.1.0-16woody1_powerpc.deb
proxymngr_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/proxymngr_4.1.0-16woody1_powerpc.deb
twm_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/twm_4.1.0-16woody1_powerpc.deb
x-window-system-core_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/x-window-system-core_4.1.0-16woody1_powerpc.deb
x-window-system_4.1.0-16woody1_all.deb
to pool/main/x/xfree86/x-window-system_4.1.0-16woody1_all.deb
xbase-clients_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/xbase-clients_4.1.0-16woody1_powerpc.deb
xdm_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/xdm_4.1.0-16woody1_powerpc.deb
xfonts-100dpi-transcoded_4.1.0-16woody1_all.deb
to pool/main/x/xfree86/xfonts-100dpi-transcoded_4.1.0-16woody1_all.deb
xfonts-100dpi_4.1.0-16woody1_all.deb
to pool/main/x/xfree86/xfonts-100dpi_4.1.0-16woody1_all.deb
xfonts-75dpi-transcoded_4.1.0-16woody1_all.deb
to pool/main/x/xfree86/xfonts-75dpi-transcoded_4.1.0-16woody1_all.deb
xfonts-75dpi_4.1.0-16woody1_all.deb
to pool/main/x/xfree86/xfonts-75dpi_4.1.0-16woody1_all.deb
xfonts-base-transcoded_4.1.0-16woody1_all.deb
to pool/main/x/xfree86/xfonts-base-transcoded_4.1.0-16woody1_all.deb
xfonts-base_4.1.0-16woody1_all.deb
to pool/main/x/xfree86/xfonts-base_4.1.0-16woody1_all.deb
xfonts-cyrillic_4.1.0-16woody1_all.deb
to pool/main/x/xfree86/xfonts-cyrillic_4.1.0-16woody1_all.deb
xfonts-pex_4.1.0-16woody1_all.deb
to pool/main/x/xfree86/xfonts-pex_4.1.0-16woody1_all.deb
xfonts-scalable_4.1.0-16woody1_all.deb
to pool/main/x/xfree86/xfonts-scalable_4.1.0-16woody1_all.deb
xfree86-common_4.1.0-16woody1_all.deb
to pool/main/x/xfree86/xfree86-common_4.1.0-16woody1_all.deb
xfree86_4.1.0-16woody1.diff.gz
to pool/main/x/xfree86/xfree86_4.1.0-16woody1.diff.gz
xfree86_4.1.0-16woody1.dsc
to pool/main/x/xfree86/xfree86_4.1.0-16woody1.dsc
xfs_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/xfs_4.1.0-16woody1_powerpc.deb
xfwp_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/xfwp_4.1.0-16woody1_powerpc.deb
xlib6g-dev_4.1.0-16woody1_all.deb
to pool/main/x/xfree86/xlib6g-dev_4.1.0-16woody1_all.deb
xlib6g_4.1.0-16woody1_all.deb
to pool/main/x/xfree86/xlib6g_4.1.0-16woody1_all.deb
xlibmesa-dev_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/xlibmesa-dev_4.1.0-16woody1_powerpc.deb
xlibmesa3-dbg_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/xlibmesa3-dbg_4.1.0-16woody1_powerpc.deb
xlibmesa3_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/xlibmesa3_4.1.0-16woody1_powerpc.deb
xlibosmesa-dev_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/xlibosmesa-dev_4.1.0-16woody1_powerpc.deb
xlibosmesa3-dbg_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/xlibosmesa3-dbg_4.1.0-16woody1_powerpc.deb
xlibosmesa3_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/xlibosmesa3_4.1.0-16woody1_powerpc.deb
xlibs-dbg_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/xlibs-dbg_4.1.0-16woody1_powerpc.deb
xlibs-dev_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/xlibs-dev_4.1.0-16woody1_powerpc.deb
xlibs-pic_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/xlibs-pic_4.1.0-16woody1_powerpc.deb
xlibs_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/xlibs_4.1.0-16woody1_powerpc.deb
xmh_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/xmh_4.1.0-16woody1_powerpc.deb
xnest_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/xnest_4.1.0-16woody1_powerpc.deb
xprt_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/xprt_4.1.0-16woody1_powerpc.deb
xserver-common_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/xserver-common_4.1.0-16woody1_powerpc.deb
xserver-xfree86_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/xserver-xfree86_4.1.0-16woody1_powerpc.deb
xspecs_4.1.0-16woody1_all.deb
to pool/main/x/xfree86/xspecs_4.1.0-16woody1_all.deb
xterm_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/xterm_4.1.0-16woody1_powerpc.deb
xutils_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/xutils_4.1.0-16woody1_powerpc.deb
xvfb_4.1.0-16woody1_powerpc.deb
to pool/main/x/xfree86/xvfb_4.1.0-16woody1_powerpc.deb
