[Technik] [SECURITY] [DSA 1466-3] New xfree86 packages fix regression

[Noèl Köthe]

Am Montag, den 21.01.2008, 19:53 +0100 schrieb Moritz Muehlenhoff:

> Debian Security Advisory DSA-1466-3                  security at debian.org
> http://www.debian.org/security/                       Moritz Muehlenhoff
> January 21, 2008                      http://www.debian.org/security/faq
> 
> Package        : xfree86
> Vulnerability  : several
> Problem type   : local
> Debian-specific: no
> CVE Id(s)      : CVE-2007-5760 CVE-2007-5958 CVE-2007-6427 CVE-2007-6428 CVE-2007-6429 CVE-2008-0006
> 
> The X.org fix for CVE-2007-6429 introduced a regression in the MIT-SHM
> extension, which prevented the start of a few applications. This update
> provides updated packages for the xfree86 version included in Debian
> old stable (Sarge) in addition to the fixed packages for Debian stable
> (Etch), which were provided in DSA 1466-2.

xfree86 auf cupa aktualisiert.

> For the oldstable distribution (etch), this problem has been fixed in
> version 4.3.0.dfsg.1-14sarge7 of xfree86.

changelog:
xfree86 (4.3.0.dfsg.1-14sarge7) oldstable-security; urgency=high

  * Fix regression introduced in -14sarge6 by the MIT-SHM security patch
    (closes: #461410).

 -- Julien Cristau <jcristau at debian.org>  Sat, 19 Jan 2008 19:28:39 +0100

-- 
Noèl Köthe <noel debian.org>
Debian GNU/Linux, www.debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
Url : /archiv/technik/attachments/20080122/af9052b8/attachment.pgp