-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Thu, 29 May 2008 12:25:37 +0200 Source: xorg-server Binary: xserver-xephyr xserver-xorg-core xvfb xdmx xserver-xorg-dev xdmx-tools xnest Architecture: source i386 Version: 2:1.1.1-21etch5 Distribution: stable-security Urgency: high Maintainer: Debian X Strike Force <debian-x@lists.debian.org> Changed-By: Julien Cristau <jcristau@debian.org> Description: xdmx - Distributed Multihead X server xdmx-tools - Distributed Multihead X tools xnest - Nested X server xserver-xephyr - Next Generation Nested X Server xserver-xorg-core - X.Org X server -- core server xserver-xorg-dev - X.Org X server -- development files xvfb - Virtual Framebuffer 'fake' X server Changes: xorg-server (2:1.1.1-21etch5) stable-security; urgency=high . * Security update, fixes several vulnerabilities. References: CVE-2008-2360 - RENDER Extension heap buffer overflow CVE-2008-2361 - RENDER Extension crash CVE-2008-2362 - RENDER Extension memory corruption CVE-2008-1379 - MIT-SHM arbitrary memory read CVE-2008-1377 - RECORD and Security extensions memory corruption Files: fc534ccff948c702a4ef0cf531deaccf 2024 x11 optional xorg-server_1.1.1-21etch5.dsc c982d4e00ede14d7627297a457d0320b 632764 x11 optional xorg-server_1.1.1-21etch5.diff.gz 44748e455c0430134e2b81704276ab64 3655134 x11 optional xserver-xorg-core_1.1.1-21etch5_i386.deb 72c2acb632d6c86fdcd2b05759747ec8 345606 x11 optional xserver-xorg-dev_1.1.1-21etch5_i386.deb f243812b25df4f648a428fbe0e53f387 808458 x11 optional xdmx_1.1.1-21etch5_i386.deb ed0f888cfc27db61a3e8f723b93ad1bb 121818 x11 optional xdmx-tools_1.1.1-21etch5_i386.deb 2d75e017e06d12fef00abd3516b19aa1 1388494 x11 optional xnest_1.1.1-21etch5_i386.deb cd554920bc9601c748383d64bd4072ac 1538312 x11 optional xvfb_1.1.1-21etch5_i386.deb a68b5bb2ded4aaeb38af7bb1d069eaa1 1563522 x11 optional xserver-xephyr_1.1.1-21etch5_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFIQyx4mEvTgKxfcAwRAmrWAKCeMbTrQS0Ilr29axufBu//N0h09gCgrFPO Spr9LXhM3Gmf7g9L6ww7GZM= =1OCX -----END PGP SIGNATURE----- Accepted: xdmx-tools_1.1.1-21etch5_i386.deb to pool/main/x/xorg-server/xdmx-tools_1.1.1-21etch5_i386.deb xdmx_1.1.1-21etch5_i386.deb to pool/main/x/xorg-server/xdmx_1.1.1-21etch5_i386.deb xnest_1.1.1-21etch5_i386.deb to pool/main/x/xorg-server/xnest_1.1.1-21etch5_i386.deb xorg-server_1.1.1-21etch5.diff.gz to pool/main/x/xorg-server/xorg-server_1.1.1-21etch5.diff.gz xorg-server_1.1.1-21etch5.dsc to pool/main/x/xorg-server/xorg-server_1.1.1-21etch5.dsc xserver-xephyr_1.1.1-21etch5_i386.deb to pool/main/x/xorg-server/xserver-xephyr_1.1.1-21etch5_i386.deb xserver-xorg-core_1.1.1-21etch5_i386.deb to pool/main/x/xorg-server/xserver-xorg-core_1.1.1-21etch5_i386.deb xserver-xorg-dev_1.1.1-21etch5_i386.deb to pool/main/x/xorg-server/xserver-xorg-dev_1.1.1-21etch5_i386.deb xvfb_1.1.1-21etch5_i386.deb to pool/main/x/xorg-server/xvfb_1.1.1-21etch5_i386.deb