-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 16 Dec 2011 19:54:40 +0100 Source: xorg Binary: x11-common xserver-xorg xserver-xorg-video-all xserver-xorg-input-all xorg xorg-dev xlibmesa-gl xlibmesa-gl-dev xlibmesa-glu libglu1-xorg libglu1-xorg-dev xbase-clients xutils Architecture: s390 Version: 1:7.5+8+squeeze1 Distribution: squeeze-security Urgency: low Maintainer: s390/s390x Build Daemon (zandonai) Changed-By: Julien Cristau Description: libglu1-xorg - transitional package for Debian etch libglu1-xorg-dev - transitional package for Debian etch x11-common - X Window System (X.Org) infrastructure xbase-clients - miscellaneous X clients - metapackage xlibmesa-gl - transitional package for Debian etch xlibmesa-gl-dev - transitional package for Debian etch xlibmesa-glu - transitional package for Debian etch xorg - X.Org X Window System xorg-dev - the X.Org X Window System development libraries xserver-xorg - the X.Org X server xserver-xorg-input-all - the X.Org X server -- input driver metapackage xserver-xorg-video-all - the X.Org X server -- output driver metapackage xutils - X Window System utility programs metapackage Closes: 652249 Changes: xorg (1:7.5+8+squeeze1) squeeze-security; urgency=low . * xserver-wrapper: when we drop privileges, don't forget to also reset effective group id, since we're installed setgid root. * xserver-wrapper: revert change to allow devices with major 5 as consoles. This includes things like /dev/tty and /dev/ptmx, which are world-readable (closes: #652249). Thanks to vladz for the report. Reference: CVE-2011-4613. Checksums-Sha1: 547783b2a38903d6663e4a521d06bc1fc2d1c5e6 53838 xserver-xorg_7.5+8+squeeze1_s390.deb b7b6a5331b14d694b3ca91d9aa454b0fd85592e7 31862 xserver-xorg-video-all_7.5+8+squeeze1_s390.deb 93d69ec38cf87d4a4dff3e55ee2f8ec9fd4c26f8 31832 xserver-xorg-input-all_7.5+8+squeeze1_s390.deb 73585ce4212ad45eb0c02f8aeb37f4708ef47046 32490 xorg_7.5+8+squeeze1_s390.deb Checksums-Sha256: 4ebf98e0a53b25b019f9a466debc4d2fa7a5dcc1e204b30db06fce568c965f6d 53838 xserver-xorg_7.5+8+squeeze1_s390.deb fb6efcd4338e4d24d268523703af848292292690811d01e8e3cc4fff1ea7b544 31862 xserver-xorg-video-all_7.5+8+squeeze1_s390.deb c094e99f5ea67c90e818caeca2500ae041f74d9467c93f032b1dad36ddcd0c81 31832 xserver-xorg-input-all_7.5+8+squeeze1_s390.deb 0fd24c077f28fa8a94fd412f6b6902a6a6a7f919e81051f2a94752affb013b5b 32490 xorg_7.5+8+squeeze1_s390.deb Files: c22782ee1ae3323a5607e4f4bb6b3807 53838 x11 optional xserver-xorg_7.5+8+squeeze1_s390.deb 804d4861f7b7ecbedeab677499401a51 31862 x11 optional xserver-xorg-video-all_7.5+8+squeeze1_s390.deb 94a384bc4fe46084aaf54b24beeff4dd 31832 x11 optional xserver-xorg-input-all_7.5+8+squeeze1_s390.deb 5b52ac0836748d1cba7b3265ded0238b 32490 x11 optional xorg_7.5+8+squeeze1_s390.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJO65mZAAoJELWkVFx3JxH3aw0P/1Dm4fulBCApPlLwcjGWRBdH JDHqgGKWSRnT+8dyE/c3zr8wE5nWZTzMjRafBYKItccdj1afoW6FJzwuiqabS9jP mvTiQ1YdLXIe9a6iwcLBNg6JmmFkTltC18pM+z7j4KAyn0wNyq6Q6umND+0tcCJn MaRgA3PAmVQp63CPMfao52FUXJl6CuTiHdEQwittZ8aLjKBI64PAl2h0sy5+RMDg 2QFmyBPqtLo63ntpFW8K5tqLH0ZmmDtr/uzKkPnC3nHBtGaW2mGxk3Us0BiyN8zF jlYmzzTsHayxhOQVgNN/58+6Y/s4IJJFMvUC3I42UdZWrPnLjSXiVN0q7ACNSuMZ mINUwP/dY46u+NpSd3t38pLeHfcP2uZGfLBLp/ylx+lTRP1w46Z9U/j/MRbhpZGF zZWHJqvCXGjujrGZLcKCZzL69VLl+DuKphpAkyTR9FpJBJueUu/SpXc4V8NeZCqK biUTSpv2O7samKz1Q++18146VlJrcA39XDSPdrXTgcH/07iFqM6vqGWUpJ8qE0rs gjkW+sXCO12r2cyL9JA/2jW1zFzLFBlSGP2WKf83+Bgksz+NCoHnzFyeUdkRanFs UdFBPNNtY5X9OHw0NeXi3QhvPdbubzu83ZhG0osJ2VwEcfaGkrCsXuuvuttBVdYV If7JATRMq3V27Cb1bwDZ =ylOd -----END PGP SIGNATURE-----