-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Fri, 16 Dec 2011 19:54:40 +0100 Source: xorg Binary: x11-common xserver-xorg xserver-xorg-video-all xserver-xorg-input-all xorg xorg-dev xlibmesa-gl xlibmesa-gl-dev xlibmesa-glu libglu1-xorg libglu1-xorg-dev xbase-clients xutils Architecture: kfreebsd-amd64 Version: 1:7.5+8+squeeze1 Distribution: squeeze-security Urgency: low Maintainer: kfreebsd-amd64 Build Daemon (fano) Changed-By: Julien Cristau Description: libglu1-xorg - transitional package for Debian etch libglu1-xorg-dev - transitional package for Debian etch x11-common - X Window System (X.Org) infrastructure xbase-clients - miscellaneous X clients - metapackage xlibmesa-gl - transitional package for Debian etch xlibmesa-gl-dev - transitional package for Debian etch xlibmesa-glu - transitional package for Debian etch xorg - X.Org X Window System xorg-dev - the X.Org X Window System development libraries xserver-xorg - the X.Org X server xserver-xorg-input-all - the X.Org X server -- input driver metapackage xserver-xorg-video-all - the X.Org X server -- output driver metapackage xutils - X Window System utility programs metapackage Closes: 652249 Changes: xorg (1:7.5+8+squeeze1) squeeze-security; urgency=low . * xserver-wrapper: when we drop privileges, don't forget to also reset effective group id, since we're installed setgid root. * xserver-wrapper: revert change to allow devices with major 5 as consoles. This includes things like /dev/tty and /dev/ptmx, which are world-readable (closes: #652249). Thanks to vladz for the report. Reference: CVE-2011-4613. Checksums-Sha1: 9962eec1883154f3747410fb7592d49141931bee 53956 xserver-xorg_7.5+8+squeeze1_kfreebsd-amd64.deb 5cd6292032613eb27c0e5c34684754b053c138cc 31970 xserver-xorg-video-all_7.5+8+squeeze1_kfreebsd-amd64.deb 4a873d8e092a001d194eb30f05faec31bbaca8e3 31848 xserver-xorg-input-all_7.5+8+squeeze1_kfreebsd-amd64.deb 21ed169b5a6d68d58e662bff04b4b1f73d56ffb5 32512 xorg_7.5+8+squeeze1_kfreebsd-amd64.deb Checksums-Sha256: 2e24f8b7c6fe5785f6558bf30d157da05ee3579e64f2ea386337be8cbab0eca0 53956 xserver-xorg_7.5+8+squeeze1_kfreebsd-amd64.deb 8c9c92dda0170025e9ca761b2d03ac9d7c68dc497f680f634ff43c1051cc90b6 31970 xserver-xorg-video-all_7.5+8+squeeze1_kfreebsd-amd64.deb 1aef971bf1e96614d5d6a45915269848294c0dd273056079cea2dcfbd09054ff 31848 xserver-xorg-input-all_7.5+8+squeeze1_kfreebsd-amd64.deb 259dad3b6e14abdcd779e13e2877ac35c4cb2c1d8e38e3e4c53760efd41da866 32512 xorg_7.5+8+squeeze1_kfreebsd-amd64.deb Files: 7397ffffaf5b956fc9a24c59610c8ea8 53956 x11 optional xserver-xorg_7.5+8+squeeze1_kfreebsd-amd64.deb e9174476db957dc366b363a5968066c3 31970 x11 optional xserver-xorg-video-all_7.5+8+squeeze1_kfreebsd-amd64.deb 86dd0343066f3966183aacd7ada320dc 31848 x11 optional xserver-xorg-input-all_7.5+8+squeeze1_kfreebsd-amd64.deb ff86f1dece0b4d7a5d4cbdd8695797ee 32512 x11 optional xorg_7.5+8+squeeze1_kfreebsd-amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/kFreeBSD) iQIcBAEBAgAGBQJO7lKzAAoJEM8yO6vTP+HY8egQALTHu2eAJrhFZazTvUOAU4kh fAJpj/fOOCi1+Pfeq8HNW85Pny+zUweNBD28VT9iyMcG/weJc+swbEP081m8kmHZ vc0oXL2D97eHWPaSNJGrGLKZWzEzB3n9e0w9Eqa2bnhKZGxPEQXdopn+ndMoRd37 ebhnnZCzT7fpEd8DAviOahDGU6tHMEpYQKUFkzyMPh84u5EJgULJd8VrDn9IRZEc UJx2ECtWwdwYzvpkg54W+1imKT98utvT96Hv4FMKC8aCwl56abfwW1heubTo4JEC JHkCFWomuWRLq+dgzgYFNzdVtASPBKI20Q11wVFJ3sB6OLTcsf9hDdvmPilX1F2v /TcCWla7OsuMY/di6uFRm4cC22S2gBA8sbMnkED/aimkMv/AW0y16/33gI+qjhwb rDJIIW6+9pUAueL81/Xkn7xg9OXygXd0HcifhGmpE0T2XEYVbc6TRPSOaJvXpdW1 wrZDPJlLlWKopzSXxACVy1dnNl7PGDYxNxwzoiEqXDwkkzj++jb/5mhbeupLq6kV eiHhxIDgLgSdr3H70tzR21Wu/qhxDopWqto4UhsCp9soGy/YWakMaxYtulY5E5Ur iDGU0G16DINzVbR8j4/rBVwBXvu9zU38U9fFT8esV4VSli5Vm/pvmeqaQULOlzVU kBbySIWn9MO+zo9H7wWL =scPT -----END PGP SIGNATURE-----