[CLA-2002:533] Conectiva Linux Security Announcement - XFree86

From: secureat_private
Date: Wed Oct 16 2002 - 15:01:02 PDT

  • Next message: secureat_private: "[CLA-2002:531] Conectiva Linux Security Announcement - fetchmail"

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1
    
    - --------------------------------------------------------------------------
    CONECTIVA LINUX SECURITY ANNOUNCEMENT 
    - --------------------------------------------------------------------------
    
    PACKAGE   : XFree86
    SUMMARY   : Several vulnerabilities
    DATE      : 2002-10-16 19:55:00
    ID        : CLA-2002:533
    RELEVANT
    RELEASES  : 6.0, 7.0
    
    - -------------------------------------------------------------------------
    
    DESCRIPTION
     XFree86 is a freely redistributable open-source implementation of the
     X Window System, which is a client/server interface between display
     hardware and the desktop environment.
     
     This advisory addresses several vulnerabilities[1] in XFree86-4.0.1
     in Conectiva Linux 6.0 and XFree86-4.0.3 in Conectiva Linux 7.0.
     Conectiva Linux 8 was previously updated[2] and already contains
     these fixes.
     
     It also fixes several vulnerabilities present in XFree86 version
     3.3.6a, which was distributed for compatibility reasons with
     Conectiva Linux 6.0 and 7.0.
     
     
     - MIT-SHM extension vulnerability
     
     Roberto Zunino discovered a vulnerability in the MIT-SHM extension of
     XFree86 prior to versions 4.2.1. The vulnerability allows a local
     user who can run XFree86 to gain read/write access to any shared
     memory segment in the system. Although the use of shared memory
     segments to store trusted data is not a comom practice, by exploiting
     this vulnerability the attacker potentially can get and/or change
     sensitive information.
     
     
     - Buffer overflow in glyph clipping for large origin.
     
     A buffer overflow vulnerability[3] was found in the glyph code when
     clipping large origins. A remote attacker could exploit this
     vulnerability to cause a denial of service and possibly run arbitrary
     code by, for example, using a large number of characters through web
     page search forms of some web browsers.
     
     The Common Vulnerabilities and Exposures project (cve.mitre.org) has
     assigned the name CAN-2001-0955 to this issue[4].
     
     
     Additional fixes from the XFree86 CVS tree are listed below and have
     also been applied to this update.
     
     
     - Check for negative reply length/overflow in _XAsyncReply().
     
     Mike A. Harris sent[5] a patch to the XFree86 3.3 source tree to fix
     an overflow vulnerability. The vulnerability is also present in
     XFree86 4.x versions, and the patch was adapted to fix it.
     
     
     - XDM restrictions bypassed by non existent directory
     
     If the xdm auth directory did not exist, any user could connect to
     the Xserver using xdm. This was reported by Galen Hancock and the fix
     was made[6] by setting the authComplain variable to true as default.
     This is the expected behavior and is specified in the manual page of
     the xdm configuration.
     
     
     - Authentication issues with mmap() on drm devices
     
     Jeff Hartmann sent a fix[7] for a vulnerability in the way the mmap()
     system call was being used on DRM devices.
     
     
     - Kernel security hole in Linux int10 module
     
     Marc La France commited[8] to the XFree86 CVS tree a fix for a
     vulnerability in the linux int10 module.
     
     
     XFree86 3.3.6 compatiblity packages are being upgraded with the
     latest branch patches available. The changelog[9] entries from the
     XFree86 source related to security fixes since our last update are
     below:
     
     - Avoid DoS attacks on xdm (Keith Packard).
     - Check for negative reply length/overflow in _XAsyncReply (Xlib)
       (#4601, Mike Harris).
     - Fix possible buffer overflow (NOT on stack) in xdm xdmcp code
       (patch69 from Red Hat SRPMS).
     - Pull in fixes from 4.0.2 for the following problems:
       . XlibInt buffer overflow
       . libICE denial of service
       . XOpenDisplay buffer overflow (#4450, Branden Robinson)
     - Fix temp file problem in Imake.rules, InstallManPageAliases
       (Matthieu Herrb)
     - Pull in fixes from the main branch:
       . xfs DoS (Paulo Cesar Pereira de Andrade and Keith Packard),
       . _XAsyncReply() Xlib stack corruption,
       . Xaw temp file handling (Branden Robinson).
     - Safe tempfile handling for imake's probing of glibc version (based
       on #4257, Colin Phipps).
     - Fix a 1-byte overflow in Xtrans.c (#4182, Aaron Campbell).
     - Back port fix for http://www.securityfocus.com/archive/1/139436
       from 4.0 (#4181, Matthieu Herrb).
    
    
    SOLUTION
     All XFree86 users are advised to upgrade.
     
     
     REFERENCES:
     1.http://www.xfree86.org/security/
     2.http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000529&idioma=en
     3.http://marc.theaimsgroup.com/?l=vuln-dev&m=100118958310463&w=2
     4.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2001-0955
     5.http://www.xfree86.org/devel/archives/patch/2001-Apr/0069.shtml
     6.http://www.xfree86.org/pipermail/cvs-commit/2001-October/003140.html
     7.http://www.xfree86.org/pipermail/cvs-commit/2001-May/002350.html
     8.http://www.xfree86.org/pipermail/cvs-commit/2001-March/001633.html
     9.http://cvsweb.xfree86.org/cvsweb/~checkout~/xc/programs/Xserver/hw/xfree86/CHANGELOG?rev=3.390.2.341
    
    
    DIRECT DOWNLOAD LINKS TO THE UPDATED PACKAGES
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-3DLabs-3.3.6a-5U60_1cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-8514-3.3.6a-5U60_1cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-AGX-3.3.6a-5U60_1cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-FBDev-3.3.6a-5U60_1cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-I128-3.3.6a-5U60_1cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-Mach32-3.3.6a-5U60_1cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-Mach64-3.3.6a-5U60_1cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-Mach8-3.3.6a-5U60_1cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-Mono-3.3.6a-5U60_1cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-P9000-3.3.6a-5U60_1cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-S3-3.3.6a-5U60_1cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-S3V-3.3.6a-5U60_1cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-SVGA-3.3.6a-5U60_1cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-VGA16-3.3.6a-5U60_1cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-W32-3.3.6a-5U60_1cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-apm-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-ati-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-chips-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-cirrus-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-cyrix-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-devel-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-fbdev-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-glint-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-i740-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-i810-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-imstt-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-libs-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-mga-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-neomagic-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-nv-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-r128-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-rendition-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-s3virge-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-Server-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-sis-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-tdfx-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-trident-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-tseng-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-vesa-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-vga-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-xfs-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-Xnest-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-Xvfb-4.0.1-35U60_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/SRPMS/XFree86_3-3.3.6a-5U60_1cl.src.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/SRPMS/XFree86-4.0.1-35U60_3cl.src.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-3DLabs-3.3.6-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-8514-3.3.6-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-AGX-3.3.6-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-base-3.3.6-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-I128-3.3.6-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-Mach32-3.3.6-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-Mach64-3.3.6-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-Mach8-3.3.6-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-Mono-3.3.6-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-P9000-3.3.6-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-S3-3.3.6-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-S3V-3.3.6-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-SVGA-3.3.6-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-W32-3.3.6-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/rstart-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-apm-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-ark-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-ati-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-ati-dri-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-bench-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-chips-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-cirrus-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-common-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-config-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-cyrix-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-devel-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-devel-static-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-dps-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-fbdev-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-GL-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-GL-devel-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-glide-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-glint-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-i128-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-i740-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-i810-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-i810-dri-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-libs-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-libs-common-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-libs-Xaw-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-libs-Xaw6-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-manpages-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-mga-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-mga-dri-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-minimal-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-misc-locales-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-afb-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-cfb-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-codeconv-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-extended-input-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-fb-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-fb-lowcolor-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-fb-multi-depths-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-freetype-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-xaa-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-xtt-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-neomagic-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-nv-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-pex5-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-progs-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-proxy-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-rendition-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-s3virge-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-savage-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Server-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Server-common-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-siliconmotion-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-sis-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-tdfx-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-tdfx-dri-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-tga-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-trident-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-tseng-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-twm-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-vesa-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-vga-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-xdm-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-xfs-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-xie-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-xkb-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Xnest-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Xprt-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Xvfb-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/xterm-4.0.3-26U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/SRPMS/XFree86-4.0.3-26U70_3cl.src.rpm
    
    
    ADDITIONAL INSTRUCTIONS
     Users of Conectiva Linux version 6.0 or higher may use apt to perform 
     upgrades of RPM packages:
     - add the following line to /etc/apt/sources.list if it is not there yet
       (you may also use linuxconf to do this):
    
     rpm [cncbr] ftp://atualizacoes.conectiva.com.br 6.0/conectiva updates
    
    (replace 6.0 with the correct version number if you are not running CL6.0)
    
     - run:                 apt-get update
     - after that, execute: apt-get upgrade
    
     Detailed instructions reagarding the use of apt and upgrade examples 
     can be found at http://distro.conectiva.com.br/atualizacoes/#apt?idioma=en
    
    
    - -------------------------------------------------------------------------
    All packages are signed with Conectiva's GPG key. The key and instructions
    on how to import it can be found at 
    http://distro.conectiva.com.br/seguranca/chave/?idioma=en
    Instructions on how to check the signatures of the RPM packages can be
    found at http://distro.conectiva.com.br/seguranca/politica/?idioma=en
    - -------------------------------------------------------------------------
    All our advisories and generic update instructions can be viewed at
    http://distro.conectiva.com.br/atualizacoes/?idioma=en
    
    - -------------------------------------------------------------------------
    subscribe: conectiva-updates-subscribeat_private
    unsubscribe: conectiva-updates-unsubscribeat_private
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.0.6 (GNU/Linux)
    Comment: For info see http://www.gnupg.org
    
    iD8DBQE9reGd42jd0JmAcZARAmGNAKCkp2g/ANyKp3jpv0TKxvJD81MmWwCgif4l
    Zz5T68G8Z6HukYinaqT+ul4=
    =a3qR
    -----END PGP SIGNATURE-----
    



    This archive was generated by hypermail 2b30 : Wed Oct 16 2002 - 15:24:02 PDT