--------------------------------------------------------------------- Fedora Legacy Test Update Notification FEDORALEGACY-2006-168264-1 Bugzilla https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168264 2006-02-17 --------------------------------------------------------------------- Name : XFree86 Versions : rh73: XFree86-4.2.1-16.73.31.legacy Versions : rh9: XFree86-4.3.0-2.90.61.legacy Versions : fc1: XFree86-4.3.0-60.legacy Summary : The basic fonts, programs and docs for an X workstation. Description : XFree86 is an open source implementation of the X Window System. It provides the basic low level functionality which full fledged graphical user interfaces (GUIs) such as GNOME and KDE are designed upon. --------------------------------------------------------------------- Update Information: Updated XFree86 packages that fix security issues are now available. XFree86 is an open source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces (GUIs) such as GNOME and KDE are designed upon. An integer overflow flaw was found in libXpm, which is used by some applications for loading of XPM images. An attacker could create a malicious XPM file that would execute arbitrary code if opened by a victim using an application linked to the vulnerable library. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-0605 to this issue. Several integer overflow bugs were found in the way XFree86 parses pixmap images. It is possible for a user to gain elevated privileges by loading a specially crafted pixmap image. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-2495 to this issue. Users of XFree86 should upgrade to these updated packages, which contain backported patches and are not vulnerable to these issues. --------------------------------------------------------------------- Changelogs rh73: * Sun Feb 12 2006 Marc Deslauriers <marcdeslauriers@xxxxxxxxxxxx> 4.2.1-16.73.31.legacy - Add XFree86-4.1.0-xpm-security-fix-CAN-2005-0605.patch. - Add XFree86-4.3.0-security-CAN-2005-2495.patch to fix various integer overflows. rh9: * Sun Feb 12 2006 Marc Deslauriers <marcdeslauriers@xxxxxxxxxxxx> 4.3.0-2.x.61.legacy - Add XFree86-4.1.0-xpm-security-fix-CAN-2005-0605.patch. - Add XFree86-4.3.0-security-CAN-2005-2495.patch to fix various integer overflows. fc1: * Sun Feb 12 2006 Marc Deslauriers <marcdeslauriers@xxxxxxxxxxxx> 4.3.0-60.legacy - Add XFree86-4.1.0-xpm-security-fix-CAN-2005-0605.patch. - Add XFree86-4.3.0-security-CAN-2005-2495.patch to fix various integer overflows. --------------------------------------------------------------------- This update can be downloaded from: http://download.fedoralegacy.org/ (sha1sums) rh73: 0cbc1cb6499a8684d19f24cf111b4fea65ba92ae redhat/7.3/updates-testing/i386/XFree86-100dpi-fonts-4.2.1-16.73.31.legacy.i386.rpm 8c2025d75448c2f03b9bd2493cdc42f84741ba14 redhat/7.3/updates-testing/i386/XFree86-4.2.1-16.73.31.legacy.i386.rpm 45d182c851d2d98fcf551ee5f4229ba76f7fe1ae redhat/7.3/updates-testing/i386/XFree86-75dpi-fonts-4.2.1-16.73.31.legacy.i386.rpm 57d848f52c35787175eb7556350cf6202a3acc9e redhat/7.3/updates-testing/i386/XFree86-base-fonts-4.2.1-16.73.31.legacy.i386.rpm 6b7e1499d32cea54eda46c7a23586edff860b01f redhat/7.3/updates-testing/i386/XFree86-cyrillic-fonts-4.2.1-16.73.31.legacy.i386.rpm 5ae4db073a051453c1ea05328ba611820c54ac6e redhat/7.3/updates-testing/i386/XFree86-devel-4.2.1-16.73.31.legacy.i386.rpm 8f5ddf6f2ffc17a706368dbdcd9f6880cf163eca redhat/7.3/updates-testing/i386/XFree86-doc-4.2.1-16.73.31.legacy.i386.rpm e80034e10d2babcab44f449040556f1c62b9c65b redhat/7.3/updates-testing/i386/XFree86-font-utils-4.2.1-16.73.31.legacy.i386.rpm 67b6b5d8b00a4f53ad300bc07d5c35c6c023280f redhat/7.3/updates-testing/i386/XFree86-ISO8859-15-100dpi-fonts-4.2.1-16.73.31.legacy.i386.rpm c25c85a92e2fb2e80fb9ee2c19b0cb017e92b065 redhat/7.3/updates-testing/i386/XFree86-ISO8859-15-75dpi-fonts-4.2.1-16.73.31.legacy.i386.rpm a54081ce435b2ed6695231f895e8cce95972027f redhat/7.3/updates-testing/i386/XFree86-ISO8859-2-100dpi-fonts-4.2.1-16.73.31.legacy.i386.rpm ceb5c88c82123d553c09ed2dceb7395abf893dfc redhat/7.3/updates-testing/i386/XFree86-ISO8859-2-75dpi-fonts-4.2.1-16.73.31.legacy.i386.rpm 9d8a2d217d1161cd8e37187ab82826592fced64b redhat/7.3/updates-testing/i386/XFree86-ISO8859-9-100dpi-fonts-4.2.1-16.73.31.legacy.i386.rpm 7b7684a8bca628231f42d04aa545624052ebd59b redhat/7.3/updates-testing/i386/XFree86-ISO8859-9-75dpi-fonts-4.2.1-16.73.31.legacy.i386.rpm dc04b533163d6a61471e2ce404bbce11e8a026de redhat/7.3/updates-testing/i386/XFree86-libs-4.2.1-16.73.31.legacy.i386.rpm 58388c03cb94a1b74c4e65246a21b364e3e9bec0 redhat/7.3/updates-testing/i386/XFree86-tools-4.2.1-16.73.31.legacy.i386.rpm 23d5801937faf0b0033db434d4713719bf13992f redhat/7.3/updates-testing/i386/XFree86-truetype-fonts-4.2.1-16.73.31.legacy.i386.rpm ea0187127b7e4177c7d1653fe65c86d1b95f2dd9 redhat/7.3/updates-testing/i386/XFree86-twm-4.2.1-16.73.31.legacy.i386.rpm 05d935b6e8e5b2dcc443556a3f15522aaa054278 redhat/7.3/updates-testing/i386/XFree86-xdm-4.2.1-16.73.31.legacy.i386.rpm 7ec5886f06e93eac890fd5c47ed96b811b218b17 redhat/7.3/updates-testing/i386/XFree86-xf86cfg-4.2.1-16.73.31.legacy.i386.rpm cd5d813aa22857cea4ea75179befad39e643559d redhat/7.3/updates-testing/i386/XFree86-xfs-4.2.1-16.73.31.legacy.i386.rpm 53f7b20ad43180b4b860974a867030c484656b23 redhat/7.3/updates-testing/i386/XFree86-Xnest-4.2.1-16.73.31.legacy.i386.rpm e0629ed131499721c4384630364fa34a4338614f redhat/7.3/updates-testing/i386/XFree86-Xvfb-4.2.1-16.73.31.legacy.i386.rpm f28c45eafb4b035d7fa814ed8b23c1270aea4d0b redhat/7.3/updates-testing/SRPMS/XFree86-4.2.1-16.73.31.legacy.src.rpm rh9: fb1a1f39a9372aa0147c508eb5d4db52d581a1cc redhat/9/updates-testing/i386/XFree86-100dpi-fonts-4.3.0-2.90.61.legacy.i386.rpm 562913cdf6f7237b852062d1c6fd8f1a03482f9f redhat/9/updates-testing/i386/XFree86-4.3.0-2.90.61.legacy.i386.rpm a0a44151d9c0c7b73e2b266b3c81f4e5cd2ba712 redhat/9/updates-testing/i386/XFree86-75dpi-fonts-4.3.0-2.90.61.legacy.i386.rpm 0b6ae5bf6ea0938feadc805890c1b46b5de98870 redhat/9/updates-testing/i386/XFree86-base-fonts-4.3.0-2.90.61.legacy.i386.rpm 6e06fe3b0262230d005020b9176a0601f8fe17fd redhat/9/updates-testing/i386/XFree86-cyrillic-fonts-4.3.0-2.90.61.legacy.i386.rpm 75ec411aeaa191642774ff3d6b2da778849fff86 redhat/9/updates-testing/i386/XFree86-devel-4.3.0-2.90.61.legacy.i386.rpm 9ca5fb3e139559593e1d3b243c03fd660ebf1bde redhat/9/updates-testing/i386/XFree86-doc-4.3.0-2.90.61.legacy.i386.rpm 77f4f6d9d41c8ae72ca152fa8c5d856dd0d14acb redhat/9/updates-testing/i386/XFree86-font-utils-4.3.0-2.90.61.legacy.i386.rpm 8a3282947adcb55f210534fa7930a2caf35ee31b redhat/9/updates-testing/i386/XFree86-ISO8859-14-100dpi-fonts-4.3.0-2.90.61.legacy.i386.rpm 00e356bf12d218e3cf4cfd16cbdbb3bb6c1f4ff6 redhat/9/updates-testing/i386/XFree86-ISO8859-14-75dpi-fonts-4.3.0-2.90.61.legacy.i386.rpm ffa1bfa1925f88314a916835609d2567593fee7d redhat/9/updates-testing/i386/XFree86-ISO8859-15-100dpi-fonts-4.3.0-2.90.61.legacy.i386.rpm 73ccf11e207edc656b4bb7dfce08ed804290ef4b redhat/9/updates-testing/i386/XFree86-ISO8859-15-75dpi-fonts-4.3.0-2.90.61.legacy.i386.rpm 38b67c16ea8b8191edb4b3df890d017b4c498397 redhat/9/updates-testing/i386/XFree86-ISO8859-2-100dpi-fonts-4.3.0-2.90.61.legacy.i386.rpm ec33602ea178f0c9b3133f5224c7230f373a19ff redhat/9/updates-testing/i386/XFree86-ISO8859-2-75dpi-fonts-4.3.0-2.90.61.legacy.i386.rpm b47fb63d7c9dfbe83846a8c016a4e62725d8fad4 redhat/9/updates-testing/i386/XFree86-ISO8859-9-100dpi-fonts-4.3.0-2.90.61.legacy.i386.rpm b9c0e2552ccd4ce1f2cdd3494d38d956cd0e8c52 redhat/9/updates-testing/i386/XFree86-ISO8859-9-75dpi-fonts-4.3.0-2.90.61.legacy.i386.rpm f34539d0acccb62d0c39eda5d8e2f69677594505 redhat/9/updates-testing/i386/XFree86-libs-4.3.0-2.90.61.legacy.i386.rpm 44c71e911bcbc53bf2692bdb4fa39d05b69777ec redhat/9/updates-testing/i386/XFree86-libs-data-4.3.0-2.90.61.legacy.i386.rpm b65547fc07ae1c1880cbfb2905dbc61a3e97f7d3 redhat/9/updates-testing/i386/XFree86-Mesa-libGL-4.3.0-2.90.61.legacy.i386.rpm 537c5f4aacb6eedd2c508ab2968f013396e52a76 redhat/9/updates-testing/i386/XFree86-Mesa-libGLU-4.3.0-2.90.61.legacy.i386.rpm 2b4c1d714eec3c66cb5b01539ee8d179b49ffcc1 redhat/9/updates-testing/i386/XFree86-sdk-4.3.0-2.90.61.legacy.i386.rpm 97b8aa8cf0cfcb6af5e594819d98486b32f9c965 redhat/9/updates-testing/i386/XFree86-syriac-fonts-4.3.0-2.90.61.legacy.i386.rpm 7898a7ae919e67e4cfe63fd3121d815710240bf0 redhat/9/updates-testing/i386/XFree86-tools-4.3.0-2.90.61.legacy.i386.rpm d8b6e93b6c4fa6c0563bf9bc4f82b1e4828c9b30 redhat/9/updates-testing/i386/XFree86-truetype-fonts-4.3.0-2.90.61.legacy.i386.rpm 3fdf5b8877cef9d337ae13deff0c72fdea156291 redhat/9/updates-testing/i386/XFree86-twm-4.3.0-2.90.61.legacy.i386.rpm 612a4e120fcd790c5e8a3481e0cadd76fddb1cc7 redhat/9/updates-testing/i386/XFree86-xauth-4.3.0-2.90.61.legacy.i386.rpm 6ceb66f35332408b2a19474533285b3d0fc17c9d redhat/9/updates-testing/i386/XFree86-xdm-4.3.0-2.90.61.legacy.i386.rpm 174dcc7e757da7175b270ff34f8ce9c4efd9563e redhat/9/updates-testing/i386/XFree86-xfs-4.3.0-2.90.61.legacy.i386.rpm 22b32e9c6460e4a52704f43d78675f0cdcce8291 redhat/9/updates-testing/i386/XFree86-Xnest-4.3.0-2.90.61.legacy.i386.rpm ec25c9cb7a1bff4eccd503fedd3b49862d9c2405 redhat/9/updates-testing/i386/XFree86-Xvfb-4.3.0-2.90.61.legacy.i386.rpm 84bbfb5f2fa13f20d465a0a552041526cb26bc3b redhat/9/updates-testing/SRPMS/XFree86-4.3.0-2.90.61.legacy.src.rpm fc1: 2a09c30f05a126480d06220affc808bed0ccd831 fedora/1/updates-testing/i386/XFree86-100dpi-fonts-4.3.0-60.legacy.i386.rpm d168ebb164d69f9fa0edd668a27e50a4e43ea2dd fedora/1/updates-testing/i386/XFree86-4.3.0-60.legacy.i386.rpm e6ab23ec2e99a2d6dcbfed6a073402d88e796563 fedora/1/updates-testing/i386/XFree86-75dpi-fonts-4.3.0-60.legacy.i386.rpm 5573af42869b10f104a52ac6fa5221e4c125cd46 fedora/1/updates-testing/i386/XFree86-base-fonts-4.3.0-60.legacy.i386.rpm 0ae445a93ae5b573b2afb72441a712ac858c002e fedora/1/updates-testing/i386/XFree86-cyrillic-fonts-4.3.0-60.legacy.i386.rpm c453822bd9aa5cdd6d7497bf7e629928a0424ebb fedora/1/updates-testing/i386/XFree86-devel-4.3.0-60.legacy.i386.rpm b8768066b3f60ae86ab32559748c33590ae58b61 fedora/1/updates-testing/i386/XFree86-doc-4.3.0-60.legacy.i386.rpm 142309e5f990556c9789bbe8e5b29e7b99ce9131 fedora/1/updates-testing/i386/XFree86-font-utils-4.3.0-60.legacy.i386.rpm 02f4ffe56217dac4c263317c754be2221f11c2b1 fedora/1/updates-testing/i386/XFree86-ISO8859-14-100dpi-fonts-4.3.0-60.legacy.i386.rpm f5a98a73fcdc0ff03e2b24ed9b8e147c85e55487 fedora/1/updates-testing/i386/XFree86-ISO8859-14-75dpi-fonts-4.3.0-60.legacy.i386.rpm 7d833db16f028ff40d6ee67e04c03e7bb351a0fd fedora/1/updates-testing/i386/XFree86-ISO8859-15-100dpi-fonts-4.3.0-60.legacy.i386.rpm 318f747bcdbd0be642d3fe1d52382772dec56634 fedora/1/updates-testing/i386/XFree86-ISO8859-15-75dpi-fonts-4.3.0-60.legacy.i386.rpm 38395a9806da0e234d74b7c1e6e3dbed5d525726 fedora/1/updates-testing/i386/XFree86-ISO8859-2-100dpi-fonts-4.3.0-60.legacy.i386.rpm 507cc1c515c2fe3f901704153819bcc62c133b46 fedora/1/updates-testing/i386/XFree86-ISO8859-2-75dpi-fonts-4.3.0-60.legacy.i386.rpm e5a19310f393f5fde53a72a7fa3d522e227bc7e7 fedora/1/updates-testing/i386/XFree86-ISO8859-9-100dpi-fonts-4.3.0-60.legacy.i386.rpm f65b8b8da1484ce2dd20737cc0279865ab5fdbd8 fedora/1/updates-testing/i386/XFree86-ISO8859-9-75dpi-fonts-4.3.0-60.legacy.i386.rpm 1bbdad4b6bd3117c6495d7c3bdef3da6bcb9ab0b fedora/1/updates-testing/i386/XFree86-libs-4.3.0-60.legacy.i386.rpm 8a55ec0a7a0564c3cd3f4263b6cc8e4ed151ba8e fedora/1/updates-testing/i386/XFree86-libs-data-4.3.0-60.legacy.i386.rpm c9eb4e6054d2159b1ff28a5ce52b640a4e9b0359 fedora/1/updates-testing/i386/XFree86-Mesa-libGL-4.3.0-60.legacy.i386.rpm 5e9c2f7390b7200e573a77bd9051ec36eb67621f fedora/1/updates-testing/i386/XFree86-Mesa-libGLU-4.3.0-60.legacy.i386.rpm 9cde04ebb5610324b158a9ae2b5f0d04d56ed7cb fedora/1/updates-testing/i386/XFree86-sdk-4.3.0-60.legacy.i386.rpm 339d8521270468753b9db696306acd64cb8bbab1 fedora/1/updates-testing/i386/XFree86-syriac-fonts-4.3.0-60.legacy.i386.rpm c011244e0b99ce7d3929c3ad6958f409de1f6139 fedora/1/updates-testing/i386/XFree86-tools-4.3.0-60.legacy.i386.rpm 36ba1b374ee3fae3b65712e2cd2a6b1e131524a5 fedora/1/updates-testing/i386/XFree86-truetype-fonts-4.3.0-60.legacy.i386.rpm 36f807093616e0615f4a70dc46ebd91b256ce8d2 fedora/1/updates-testing/i386/XFree86-twm-4.3.0-60.legacy.i386.rpm 5f82fea2f05c74f2433ebc6bc2e4db188ad9e7d2 fedora/1/updates-testing/i386/XFree86-xauth-4.3.0-60.legacy.i386.rpm 2b5768e46ce851b22564cc3b824d0987d027b8d1 fedora/1/updates-testing/i386/XFree86-xdm-4.3.0-60.legacy.i386.rpm c11d8de359322a543e8876163581bc38fa06b954 fedora/1/updates-testing/i386/XFree86-xfs-4.3.0-60.legacy.i386.rpm a3b20af14a192aa110f0fe247d7c6d0478cebd98 fedora/1/updates-testing/i386/XFree86-Xnest-4.3.0-60.legacy.i386.rpm ba4f2c18b58be48594a48eafc97564d31aec0286 fedora/1/updates-testing/i386/XFree86-Xvfb-4.3.0-60.legacy.i386.rpm d1fe795457c17ae1348c63e859414623d8fd5c02 fedora/1/updates-testing/SRPMS/XFree86-4.3.0-60.legacy.src.rpm --------------------------------------------------------------------- Please test and comment in bugzilla.
Attachment:
signature.asc
Description: OpenPGP digital signature
-- fedora-legacy-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-legacy-list
