-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 16 Dec 2011 19:54:40 +0100 Source: xorg Binary: x11-common xserver-xorg xserver-xorg-video-all xserver-xorg-input-all xorg xorg-dev xlibmesa-gl xlibmesa-gl-dev xlibmesa-glu libglu1-xorg libglu1-xorg-dev xbase-clients xutils Architecture: ia64 Version: 1:7.5+8+squeeze1 Distribution: squeeze-security Urgency: low Maintainer: ia64 Build Daemon (alkman) Changed-By: Julien Cristau Description: libglu1-xorg - transitional package for Debian etch libglu1-xorg-dev - transitional package for Debian etch x11-common - X Window System (X.Org) infrastructure xbase-clients - miscellaneous X clients - metapackage xlibmesa-gl - transitional package for Debian etch xlibmesa-gl-dev - transitional package for Debian etch xlibmesa-glu - transitional package for Debian etch xorg - X.Org X Window System xorg-dev - the X.Org X Window System development libraries xserver-xorg - the X.Org X server xserver-xorg-input-all - the X.Org X server -- input driver metapackage xserver-xorg-video-all - the X.Org X server -- output driver metapackage xutils - X Window System utility programs metapackage Closes: 652249 Changes: xorg (1:7.5+8+squeeze1) squeeze-security; urgency=low . * xserver-wrapper: when we drop privileges, don't forget to also reset effective group id, since we're installed setgid root. * xserver-wrapper: revert change to allow devices with major 5 as consoles. This includes things like /dev/tty and /dev/ptmx, which are world-readable (closes: #652249). Thanks to vladz for the report. Reference: CVE-2011-4613. Checksums-Sha1: e87c36f78b582f3f22d4dcb3b81e43efbc008438 53944 xserver-xorg_7.5+8+squeeze1_ia64.deb c57b0963ad0526b39c72b88c4ccb1887cbecce4a 31960 xserver-xorg-video-all_7.5+8+squeeze1_ia64.deb 155f7d11ce6e8239f535f0d9853c5b3b1ad66d3c 31854 xserver-xorg-input-all_7.5+8+squeeze1_ia64.deb 53f6c744967c49970f6f92acee86e46bfc23f019 32496 xorg_7.5+8+squeeze1_ia64.deb Checksums-Sha256: e193e84d86ebe1dc161e4e018b576475c56f100f3dcbf9539ecf43fb5a8772fb 53944 xserver-xorg_7.5+8+squeeze1_ia64.deb f0ea36313f9a8ff0a029be0f8246547fc9e622e585b12b5e392835384b01e6ae 31960 xserver-xorg-video-all_7.5+8+squeeze1_ia64.deb c00c5d4508c364a3736e5e5ded265023ec1a92079e9268d0b27d0723ae4ab430 31854 xserver-xorg-input-all_7.5+8+squeeze1_ia64.deb bf41e6d18706bbcc7698328017b7dde608977fe3637731d1ef55efb0054ee208 32496 xorg_7.5+8+squeeze1_ia64.deb Files: 635398fe9a1c8245a86b0e4caad50130 53944 x11 optional xserver-xorg_7.5+8+squeeze1_ia64.deb 8380331b93a545ec887e8d8ebbd2f1d2 31960 x11 optional xserver-xorg-video-all_7.5+8+squeeze1_ia64.deb 97dc119e84386608e388605968a0f2ba 31854 x11 optional xserver-xorg-input-all_7.5+8+squeeze1_ia64.deb ce691041520696efedd579dc80e9c286 32496 x11 optional xorg_7.5+8+squeeze1_ia64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJO65oHAAoJEEvpbjz8HoZo9KAP/2j0WEWEPaWUXR2+T0CxmvJm f4m3PRNGnLqmqAUhyT8+BGCn6e5ftoUs6NdKHfRiYY/PwB9sZUA1CE1aZQsGplDR SM0w9cy6nlN1bbOCgwkvBLKzgbM9LmPtVqIOnBpk66KJ9TyVMGNAb8ziMUtAnaCh qQ0sNCyjC+SAlMK58fxZJD63BsmI8PyFQM8r0CTqlVqgAKSjVATEBX9uqMrT4kc4 oAhp27WzNGe7iIrSfR6Yr7Yy7t4f/sICmlgB9uFTsg19czhIXGv+I26OQTJF7kgW uNG4Z7wtG9FNkfaRrem7LpHvVols+s9fyHL3ZpqAnI21cOvXxwg2zzu4XfEHHRgi rkvDd1C3RplEXlbp9poC3ONNBBqh2RY/FdH2e3Tcy8wY8/cSCBnhylw3IxQpvNJs TWS6/EFOlrLD3o7SHqoScF6v0AHxXl2ooJIjY3Yd7XciE5VtaZWlD8MZ+cTS19pV CKSKhmI12mmvTP235g8/hUnfx7surZsve9Za1XSzestDDO7KFNxWaLsxRvOvdIZS oR64PSsLa4COTuAcKHPipEb5DxBdGwI0XtUc4vGgLcU+pKRWHNDDyWkKF+jItmBi 0YEqh4UA/+EKylvbmHEZrFOtcFP4qfaQPIRhwO5WP86wGWC4KvyiBuq+yKYxWaLK 8uloCE03fCz5ZXyjaqSX =njWr -----END PGP SIGNATURE-----