-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 16 Dec 2011 19:54:40 +0100 Source: xorg Binary: x11-common xserver-xorg xserver-xorg-video-all xserver-xorg-input-all xorg xorg-dev xlibmesa-gl xlibmesa-gl-dev xlibmesa-glu libglu1-xorg libglu1-xorg-dev xbase-clients xutils Architecture: mipsel Version: 1:7.5+8+squeeze1 Distribution: squeeze-security Urgency: low Maintainer: mipsel Build Daemon (rem) Changed-By: Julien Cristau Description: libglu1-xorg - transitional package for Debian etch libglu1-xorg-dev - transitional package for Debian etch x11-common - X Window System (X.Org) infrastructure xbase-clients - miscellaneous X clients - metapackage xlibmesa-gl - transitional package for Debian etch xlibmesa-gl-dev - transitional package for Debian etch xlibmesa-glu - transitional package for Debian etch xorg - X.Org X Window System xorg-dev - the X.Org X Window System development libraries xserver-xorg - the X.Org X server xserver-xorg-input-all - the X.Org X server -- input driver metapackage xserver-xorg-video-all - the X.Org X server -- output driver metapackage xutils - X Window System utility programs metapackage Closes: 652249 Changes: xorg (1:7.5+8+squeeze1) squeeze-security; urgency=low . * xserver-wrapper: when we drop privileges, don't forget to also reset effective group id, since we're installed setgid root. * xserver-wrapper: revert change to allow devices with major 5 as consoles. This includes things like /dev/tty and /dev/ptmx, which are world-readable (closes: #652249). Thanks to vladz for the report. Reference: CVE-2011-4613. Checksums-Sha1: 671eed95f276d46186470d9a16ccae1e09c6c134 53212 xserver-xorg_7.5+8+squeeze1_mipsel.deb 8fe6b8a0033a25b7c616ec3312d9817ca2c5a683 31972 xserver-xorg-video-all_7.5+8+squeeze1_mipsel.deb 1e86ff0313d5bca9bb237c7cca8116c8c85af696 31858 xserver-xorg-input-all_7.5+8+squeeze1_mipsel.deb 2a6ba674be8951ace3addf1169ba1a5852a019ad 32520 xorg_7.5+8+squeeze1_mipsel.deb Checksums-Sha256: 91992f5d12ce64e5960bed0c875c81a27a931c3475c6ffdc47698f9518fa0c98 53212 xserver-xorg_7.5+8+squeeze1_mipsel.deb 928a01cbba96e7305cb072cfcb52d4e575e2a798446d4e9471af8788bc834c70 31972 xserver-xorg-video-all_7.5+8+squeeze1_mipsel.deb 3c4271a5c1bb511967df509c43d5c95b1ad82414def8e75cc25649a02eca5c3a 31858 xserver-xorg-input-all_7.5+8+squeeze1_mipsel.deb 0b66b2675350ed458342a683d7e4555a53a25f927d4a5741ccbbf8b216b1d2ea 32520 xorg_7.5+8+squeeze1_mipsel.deb Files: 0e41dc2831ac97689e980c2caf2e1014 53212 x11 optional xserver-xorg_7.5+8+squeeze1_mipsel.deb b7ab0e3086b93fa50e80ee9c47708be1 31972 x11 optional xserver-xorg-video-all_7.5+8+squeeze1_mipsel.deb eae3dbf723163403ce05703ce3dbeae1 31858 x11 optional xserver-xorg-input-all_7.5+8+squeeze1_mipsel.deb b31a37f6d249b23cd8d229528cc3d00f 32520 x11 optional xorg_7.5+8+squeeze1_mipsel.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJO67NIAAoJEAzzgj1nKIEudSMP/13XuU1Q3FWE2MP4vCI2z/iN NF5VLQbZMoPy9jSmV1UQHhWw0u+sqSkQSVXe3oMV3rAkW3RKDiECVY/lNq8c8Evt LDtnLmVU82gzMAmQ3oh/qijV/STNyihlVQhUl3EgHAGx5QDAJq25m2aK2SeeMRpi j9VLQHStnQRyNRcNJYJDpu7xlUpc5LrzuNodYi/ibt8243kVmOGWkkCvFEsn7AXB 2LIBxO96Nm+xqguhKXHys8E5FaKWB4p4rKT7ABjn1H+A7cS53YS8lK3bg33AkDcf QEisHTo8HFQiUDUF0VXrhE5zspEt3WQYGBNjNBWRcBDmy8QZ18pDm0kpAyjdH0VN fboKCb3TUisZZz5o9N0EqdkO928MNx0F/5FwcY7HaXB3X9LOOyp9+qql5QoGmZnb k/bCMvfLlMlRbl78I1y0Ci983n8/U3gRkyMyXXyqzIP2KSoSiX3zB4UdojP6etEx YnRMXq9V7vVCSD9sI4HQMDf6RyIr1JAbXjkASty2TU2RE/pfDmy6roxbwdhU15dK vaGKX0PHOuwd6cXvxi46B2oUH35FIUcHo1WV/dA0WqdoNRad9G1cys5shXtyKPL1 +A467jwJXzoDh87Lzv2eeXWJYqQroVKKz8C5hil3SH6+xGWx2Nc7XNrfsFLs6a8Y FKPOD0viQNL2R6QI774/ =MLJG -----END PGP SIGNATURE-----