-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 16 Dec 2011 19:54:40 +0100 Source: xorg Binary: x11-common xserver-xorg xserver-xorg-video-all xserver-xorg-input-all xorg xorg-dev xlibmesa-gl xlibmesa-gl-dev xlibmesa-glu libglu1-xorg libglu1-xorg-dev xbase-clients xutils Architecture: armel Version: 1:7.5+8+squeeze1 Distribution: squeeze-security Urgency: low Maintainer: armel Build Daemon (alwyn) Changed-By: Julien Cristau Description: libglu1-xorg - transitional package for Debian etch libglu1-xorg-dev - transitional package for Debian etch x11-common - X Window System (X.Org) infrastructure xbase-clients - miscellaneous X clients - metapackage xlibmesa-gl - transitional package for Debian etch xlibmesa-gl-dev - transitional package for Debian etch xlibmesa-glu - transitional package for Debian etch xorg - X.Org X Window System xorg-dev - the X.Org X Window System development libraries xserver-xorg - the X.Org X server xserver-xorg-input-all - the X.Org X server -- input driver metapackage xserver-xorg-video-all - the X.Org X server -- output driver metapackage xutils - X Window System utility programs metapackage Closes: 652249 Changes: xorg (1:7.5+8+squeeze1) squeeze-security; urgency=low . * xserver-wrapper: when we drop privileges, don't forget to also reset effective group id, since we're installed setgid root. * xserver-wrapper: revert change to allow devices with major 5 as consoles. This includes things like /dev/tty and /dev/ptmx, which are world-readable (closes: #652249). Thanks to vladz for the report. Reference: CVE-2011-4613. Checksums-Sha1: 61d6cfbc93f5fcc8494425c8ad88c35cda7b27e5 53086 xserver-xorg_7.5+8+squeeze1_armel.deb 27190bb7781cdbe0374e7cdfdf2d14ed64901f11 31978 xserver-xorg-video-all_7.5+8+squeeze1_armel.deb 97aa4fb4a51be49b0b1050bb4922e3bab9f441cd 31862 xserver-xorg-input-all_7.5+8+squeeze1_armel.deb fbb6af3d6cb4f5f120c7455994f5bfeb4fc73b4e 32498 xorg_7.5+8+squeeze1_armel.deb Checksums-Sha256: e06cf50302fd966159c211e971dfd24214b1a801d3e5563b95105d01f206fcb2 53086 xserver-xorg_7.5+8+squeeze1_armel.deb 5ec3191d6cfd7aa7e72bc7e6db8f262964409a35742f352dc59c83cf28c2c9d6 31978 xserver-xorg-video-all_7.5+8+squeeze1_armel.deb 5210055151f823d7ef84c84dd4c1f21236d7e30d909b745b805d614a10b13106 31862 xserver-xorg-input-all_7.5+8+squeeze1_armel.deb 8cf0d80f7f8bcf41aba4971513b01df7eb5f844295dcf0ae028322f4559b1709 32498 xorg_7.5+8+squeeze1_armel.deb Files: 85e822637a1716e6ecbacb1c97e7a09e 53086 x11 optional xserver-xorg_7.5+8+squeeze1_armel.deb f60159ebcb53634eda0603de75a36b06 31978 x11 optional xserver-xorg-video-all_7.5+8+squeeze1_armel.deb 90d0b7a5d2725aeb9db252dfd7eec591 31862 x11 optional xserver-xorg-input-all_7.5+8+squeeze1_armel.deb 237b2ad73b4c97e88996b2c2dd790a26 32498 x11 optional xorg_7.5+8+squeeze1_armel.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJO67XrAAoJEBRVXZHoMsNVV0UP/Ao5MITIffq4dcWC4nTa3Abd uh2wvMO6XReyvCtGbb3R12GmsZBBiU0doKMukl/H8uVFhiDYnd/1ZEUTzYF0r4rg xX8HXN6vQPKCo8pCNU4FXh5nC8UbxmLNj3sUIQjR7qS6FX2GQDcXdak4oYZqXREk hkOsaPsLEpae67HLtWlDg4xNQpgsLWTb4dNBYqMPByTaiB5yNk30JE7tAgHsa7Wa 9GhwLnufPWv+caUqh7SKYRMCDFSokgl+K0w9MHIZJkNFm22MA0Q09Cpik/CzsUV1 u7mtMDynbwsZtWaf4C0vL65IBVbtmk0xd4jkYoe2yJlCU5M536HER9sdVQp3BqRW i/CBHKgb/r1yPi3iYuIGi1pHHgAnVJo4psZamDIgekY8zn9IgkV8Btf4vzHrUINn 4beGpXY2NR2KTLgewvPfP3eVmnlHtf8tL9k/C2T9UKrGlOac8Qmv2CnnwGUJat0v 4SsFwCuH/mX//3mqy8MZWUIDP5/Shrisb9jO6I9CfPIonMaqPZhv3jIovhCQdtkZ dx0YJ7IVGcOA23ZzMNGSIdXwhDzdDkXKVeLaP1OBNxx9tzGcxxCm3SO4VmEEQna2 TUT0lhDsatNShZCBTQYoA6857KRWBfwS0OaIyapXrwMnU6F3l7vrAcwFZuu11AGA XcMgSriZEO7K6bL+bnzd =SAMr -----END PGP SIGNATURE-----