Home page logo
/

bugtraq logo Bugtraq mailing list archives

[CLA-2002:533] Conectiva Linux Security Announcement - XFree86
From: secure () conectiva com br
Date: Wed, 16 Oct 2002 20:01:02 -0200

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
CONECTIVA LINUX SECURITY ANNOUNCEMENT 
- --------------------------------------------------------------------------

PACKAGE   : XFree86
SUMMARY   : Several vulnerabilities
DATE      : 2002-10-16 19:55:00
ID        : CLA-2002:533
RELEVANT
RELEASES  : 6.0, 7.0

- -------------------------------------------------------------------------

DESCRIPTION
 XFree86 is a freely redistributable open-source implementation of the
 X Window System, which is a client/server interface between display
 hardware and the desktop environment.
 
 This advisory addresses several vulnerabilities[1] in XFree86-4.0.1
 in Conectiva Linux 6.0 and XFree86-4.0.3 in Conectiva Linux 7.0.
 Conectiva Linux 8 was previously updated[2] and already contains
 these fixes.
 
 It also fixes several vulnerabilities present in XFree86 version
 3.3.6a, which was distributed for compatibility reasons with
 Conectiva Linux 6.0 and 7.0.
 
 
 - MIT-SHM extension vulnerability
 
 Roberto Zunino discovered a vulnerability in the MIT-SHM extension of
 XFree86 prior to versions 4.2.1. The vulnerability allows a local
 user who can run XFree86 to gain read/write access to any shared
 memory segment in the system. Although the use of shared memory
 segments to store trusted data is not a comom practice, by exploiting
 this vulnerability the attacker potentially can get and/or change
 sensitive information.
 
 
 - Buffer overflow in glyph clipping for large origin.
 
 A buffer overflow vulnerability[3] was found in the glyph code when
 clipping large origins. A remote attacker could exploit this
 vulnerability to cause a denial of service and possibly run arbitrary
 code by, for example, using a large number of characters through web
 page search forms of some web browsers.
 
 The Common Vulnerabilities and Exposures project (cve.mitre.org) has
 assigned the name CAN-2001-0955 to this issue[4].
 
 
 Additional fixes from the XFree86 CVS tree are listed below and have
 also been applied to this update.
 
 
 - Check for negative reply length/overflow in _XAsyncReply().
 
 Mike A. Harris sent[5] a patch to the XFree86 3.3 source tree to fix
 an overflow vulnerability. The vulnerability is also present in
 XFree86 4.x versions, and the patch was adapted to fix it.
 
 
 - XDM restrictions bypassed by non existent directory
 
 If the xdm auth directory did not exist, any user could connect to
 the Xserver using xdm. This was reported by Galen Hancock and the fix
 was made[6] by setting the authComplain variable to true as default.
 This is the expected behavior and is specified in the manual page of
 the xdm configuration.
 
 
 - Authentication issues with mmap() on drm devices
 
 Jeff Hartmann sent a fix[7] for a vulnerability in the way the mmap()
 system call was being used on DRM devices.
 
 
 - Kernel security hole in Linux int10 module
 
 Marc La France commited[8] to the XFree86 CVS tree a fix for a
 vulnerability in the linux int10 module.
 
 
 XFree86 3.3.6 compatiblity packages are being upgraded with the
 latest branch patches available. The changelog[9] entries from the
 XFree86 source related to security fixes since our last update are
 below:
 
 - Avoid DoS attacks on xdm (Keith Packard).
 - Check for negative reply length/overflow in _XAsyncReply (Xlib)
   (#4601, Mike Harris).
 - Fix possible buffer overflow (NOT on stack) in xdm xdmcp code
   (patch69 from Red Hat SRPMS).
 - Pull in fixes from 4.0.2 for the following problems:
   . XlibInt buffer overflow
   . libICE denial of service
   . XOpenDisplay buffer overflow (#4450, Branden Robinson)
 - Fix temp file problem in Imake.rules, InstallManPageAliases
   (Matthieu Herrb)
 - Pull in fixes from the main branch:
   . xfs DoS (Paulo Cesar Pereira de Andrade and Keith Packard),
   . _XAsyncReply() Xlib stack corruption,
   . Xaw temp file handling (Branden Robinson).
 - Safe tempfile handling for imake's probing of glibc version (based
   on #4257, Colin Phipps).
 - Fix a 1-byte overflow in Xtrans.c (#4182, Aaron Campbell).
 - Back port fix for http://www.securityfocus.com/archive/1/139436
   from 4.0 (#4181, Matthieu Herrb).


SOLUTION
 All XFree86 users are advised to upgrade.
 
 
 REFERENCES:
 1.http://www.xfree86.org/security/
 2.http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000529&idioma=en
 3.http://marc.theaimsgroup.com/?l=vuln-dev&m=100118958310463&w=2
 4.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2001-0955
 5.http://www.xfree86.org/devel/archives/patch/2001-Apr/0069.shtml
 6.http://www.xfree86.org/pipermail/cvs-commit/2001-October/003140.html
 7.http://www.xfree86.org/pipermail/cvs-commit/2001-May/002350.html
 8.http://www.xfree86.org/pipermail/cvs-commit/2001-March/001633.html
 9.http://cvsweb.xfree86.org/cvsweb/~checkout~/xc/programs/Xserver/hw/xfree86/CHANGELOG?rev=3.390.2.341


DIRECT DOWNLOAD LINKS TO THE UPDATED PACKAGES
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-3DLabs-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-8514-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-AGX-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-FBDev-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-I128-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-Mach32-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-Mach64-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-Mach8-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-Mono-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-P9000-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-S3-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-S3V-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-SVGA-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-VGA16-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-W32-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-apm-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-ati-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-chips-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-cirrus-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-cyrix-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-devel-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-fbdev-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-glint-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-i740-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-i810-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-imstt-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-libs-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-mga-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-neomagic-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-nv-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-r128-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-rendition-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-s3virge-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-Server-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-sis-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-tdfx-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-trident-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-tseng-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-vesa-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-vga-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-xfs-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-Xnest-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-Xvfb-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/SRPMS/XFree86_3-3.3.6a-5U60_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/6.0/SRPMS/XFree86-4.0.1-35U60_3cl.src.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-3DLabs-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-8514-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-AGX-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-base-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-I128-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-Mach32-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-Mach64-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-Mach8-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-Mono-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-P9000-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-S3-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-S3V-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-SVGA-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-W32-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/rstart-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-apm-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-ark-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-ati-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-ati-dri-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-bench-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-chips-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-cirrus-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-common-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-config-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-cyrix-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-devel-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-devel-static-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-dps-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-fbdev-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-GL-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-GL-devel-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-glide-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-glint-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-i128-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-i740-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-i810-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-i810-dri-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-libs-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-libs-common-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-libs-Xaw-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-libs-Xaw6-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-manpages-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-mga-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-mga-dri-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-minimal-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-misc-locales-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-afb-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-cfb-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-codeconv-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-extended-input-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-fb-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-fb-lowcolor-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-fb-multi-depths-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-freetype-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-xaa-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-xtt-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-neomagic-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-nv-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-pex5-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-progs-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-proxy-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-rendition-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-s3virge-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-savage-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Server-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Server-common-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-siliconmotion-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-sis-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-tdfx-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-tdfx-dri-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-tga-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-trident-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-tseng-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-twm-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-vesa-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-vga-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-xdm-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-xfs-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-xie-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-xkb-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Xnest-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Xprt-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Xvfb-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/xterm-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/SRPMS/XFree86-4.0.3-26U70_3cl.src.rpm


ADDITIONAL INSTRUCTIONS
 Users of Conectiva Linux version 6.0 or higher may use apt to perform 
 upgrades of RPM packages:
 - add the following line to /etc/apt/sources.list if it is not there yet
   (you may also use linuxconf to do this):

 rpm [cncbr] ftp://atualizacoes.conectiva.com.br 6.0/conectiva updates

(replace 6.0 with the correct version number if you are not running CL6.0)

 - run:                 apt-get update
 - after that, execute: apt-get upgrade

 Detailed instructions reagarding the use of apt and upgrade examples 
 can be found at http://distro.conectiva.com.br/atualizacoes/#apt?idioma=en


- -------------------------------------------------------------------------
All packages are signed with Conectiva's GPG key. The key and instructions
on how to import it can be found at 
http://distro.conectiva.com.br/seguranca/chave/?idioma=en
Instructions on how to check the signatures of the RPM packages can be
found at http://distro.conectiva.com.br/seguranca/politica/?idioma=en
- -------------------------------------------------------------------------
All our advisories and generic update instructions can be viewed at
http://distro.conectiva.com.br/atualizacoes/?idioma=en

- -------------------------------------------------------------------------
subscribe: conectiva-updates-subscribe () papaleguas conectiva com br
unsubscribe: conectiva-updates-unsubscribe () papaleguas conectiva com br
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE9reGd42jd0JmAcZARAmGNAKCkp2g/ANyKp3jpv0TKxvJD81MmWwCgif4l
Zz5T68G8Z6HukYinaqT+ul4=
=a3qR
-----END PGP SIGNATURE-----


  By Date           By Thread  

Current thread:
  • [CLA-2002:533] Conectiva Linux Security Announcement - XFree86 secure (Oct 16)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault