-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ----------------------------------------------------------------------------
Debian Security Advisory DSA 030-2 securitydebian.org
http://www.debian.org/security/ Martin Schulze
February 12, 2001
- ----------------------------------------------------------------------------

Package : xfree86-1
Vulnerability : buffer overflow, insecure tempfile handling,
                 denial-of-service attack
Debian-specific: no
Architecture : only m68k

Several people have noted a number of problems in several components
of the X Window System sample implementation (from which XFree86 is
derived). Please read DSA 030-1 for a detailed description.

We recommend you upgrade your XFree86 packages immediately.

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

You may use an automated update by adding the resources from the
footer to the proper configuration.

Debian GNU/Linux 2.2 alias potato
- ------------------------------------

  Potato was released for the alpha, arm, i386, m68k, powerpc and sparc
  architectures. This advisory only covers m68k which was missing in
  DSA 030-1 due to the slowliness of our m68k build box.

  Motorola 680x0 architecture:

    http://security.debian.org/dists/stable/updates/main/binary-m68k/rstartd_3.3.6-11potato32_m68k.deb
      MD5 checksum: c26b2f84fb702ee6fc73518bb0f7e7ae
    http://security.debian.org/dists/stable/updates/main/binary-m68k/twm_3.3.6-11potato32_m68k.deb
      MD5 checksum: e0363d5a9da2b5e01cd7fbede1d8e283
    http://security.debian.org/dists/stable/updates/main/binary-m68k/xbase-clients_3.3.6-11potato32_m68k.deb
      MD5 checksum: 6462a334f10df17ba770eb08ef0d7ab3
    http://security.debian.org/dists/stable/updates/main/binary-m68k/xdm_3.3.6-11potato32_m68k.deb
      MD5 checksum: 1a73a3251b7cc7d7dee035c27fba4a3b
    http://security.debian.org/dists/stable/updates/main/binary-m68k/xext_3.3.6-11potato32_m68k.deb
      MD5 checksum: 68371690d0cefdfb6761d951f2befa7d
    http://security.debian.org/dists/stable/updates/main/binary-m68k/xfs_3.3.6-11potato32_m68k.deb
      MD5 checksum: 785a4647af68bc25b352dd748b30498d
    http://security.debian.org/dists/stable/updates/main/binary-m68k/xlib6-altdev_3.3.6-11potato32_m68k.deb
      MD5 checksum: 7ec146d579c2ef52549de70ef4775aaf
    http://security.debian.org/dists/stable/updates/main/binary-m68k/xlib6_3.3.6-11potato32_m68k.deb
      MD5 checksum: 6190d755ed22f44a0e7e777ada1684a5
    http://security.debian.org/dists/stable/updates/main/binary-m68k/xlib6g-dev_3.3.6-11potato32_m68k.deb
      MD5 checksum: 84b01dd5db72283a93c74500cb36a5ae
    http://security.debian.org/dists/stable/updates/main/binary-m68k/xlib6g-static_3.3.6-11potato32_m68k.deb
      MD5 checksum: f4831d1b4128b64a173c037c2de90b12
    http://security.debian.org/dists/stable/updates/main/binary-m68k/xlib6g_3.3.6-11potato32_m68k.deb
      MD5 checksum: 002a3d192fc675b76876ffce233168be
    http://security.debian.org/dists/stable/updates/main/binary-m68k/xmh_3.3.6-11potato32_m68k.deb
      MD5 checksum: c95795a132852b968b8a273082d5e013
    http://security.debian.org/dists/stable/updates/main/binary-m68k/xnest_3.3.6-11potato32_m68k.deb
      MD5 checksum: 990d6f19014a5cc005a61d4476581417
    http://security.debian.org/dists/stable/updates/main/binary-m68k/xproxy_3.3.6-11potato32_m68k.deb
      MD5 checksum: a61722d4035e9a0e1e1b5f67dc1a2d25
    http://security.debian.org/dists/stable/updates/main/binary-m68k/xprt_3.3.6-11potato32_m68k.deb
      MD5 checksum: bf8598148af5de6ac25bb72aba602879
    http://security.debian.org/dists/stable/updates/main/binary-m68k/xserver-common_3.3.6-11potato32_m68k.deb
      MD5 checksum: 3aac56186bcd6ad41dc18632f6c5ed3c
    http://security.debian.org/dists/stable/updates/main/binary-m68k/xserver-fbdev_3.3.6-11potato32_m68k.deb
      MD5 checksum: bcaea9f6d130461b8a3474fd2fce35f8
    http://security.debian.org/dists/stable/updates/main/binary-m68k/xsm_3.3.6-11potato32_m68k.deb
      MD5 checksum: 9096c7da87b269dcb3bba0397307f584
    http://security.debian.org/dists/stable/updates/main/binary-m68k/xterm_3.3.6-11potato32_m68k.deb
      MD5 checksum: 73d1b9b527d7574062ea31db8ac7b023
    http://security.debian.org/dists/stable/updates/main/binary-m68k/xvfb_3.3.6-11potato32_m68k.deb
      MD5 checksum: 7f162872735817a05d16af8bd4970301

  These files will be moved into
  ftp://ftp.debian.org/debian/dists/stable/*/binary-$arch/ soon.

For not yet released architectures please refer to the appropriate
directory ftp://ftp.debian.org/debian/dists/sid/binary-$arch/ .

- ----------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announcelists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE6imE3W5ql+IAeqTIRAsm2AJ9ykVgRfsBTaHOnxfNm5EaEesaRawCgu5/q
Swno8YQoe6rfG00bgIl68jA=
=zkWl
-----END PGP SIGNATURE-----

--
To UNSUBSCRIBE, email to debian-security-announce-requestlists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmasterlists.debian.org

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]