SECURITY: new XFree86 packages now available (fwd)

[Arturo Espinosa Aldama <arturo en acopio estadistica unam mx>]

---------- Forwarded message ----------
Date: Fri, 5 Jun 1998 10:35:39 -0400 (EDT)
From: Erik Troan <ewt en redhat com>
Reply-To: redhat-list en redhat com
To: redhat-announce-list en redhat com
Subject: SECURITY: new XFree86 packages now available
Resent-Date: 5 Jun 1998 14:33:11 -0000
Resent-From: redhat-announce-list en redhat com
Resent-cc: recipient list not shown: ;

-----BEGIN PGP SIGNED MESSAGE-----


Major security holes have been found in the X libraries and xterm, which
allow local users access to the root user. All Red Hat 4.x and 5.x systems
which X-Windows installed should update their systems. Packages for the
SPARC are not yet available. When they are, we will post a separate 
announcement so sparc-list en redhat com providing full information on those
fixes.

Thanks to the XFree86 group for providing patches for these problems.

Red Hat 5.0 and 5.1
- -------------------

i386:
rpm -Uvh ftp://ftp.redhat.com/updates/5.0/i386/XFree86-3.3.2-11.i386.rpm
rpm -Uvh ftp://ftp.redhat.com/updates/5.0/i386/XFree86-libs-3.3.2-11.i386.rpm

alpha:
rpm -Uvh ftp://ftp.redhat.com/updates/5.0/alpha/XFree86-3.3.2-11.alpha.rpm
rpm -Uvh ftp://ftp.redhat.com/updates/5.0/alpha/XFree86-libs-3.3.2-11.alpha.rpm

Red Hat 4.2
- -------------

i386:
rpm -Uvh ftp://ftp.redhat.com/updates/4.2/i386/XFree86-3.3.2-1.i386.rpm
rpm -Uvh ftp://ftp.redhat.com/updates/4.2/i386/XFree86-libs-3.3.2-1.i386.rpm

alpha:
rpm -Uvh ftp://ftp.redhat.com/updates/4.2/alpha/XFree86-3.3.2-1.alpha.rpm
rpm -Uvh ftp://ftp.redhat.com/updates/4.2/alpha/XFree86-libs-3.3.2-1.alpha.rpm


-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBNXgCQKUg6PHLopv5AQHotAP/aEZfyPZB9H4m0zYY03PvHqKwZq76699Z
MIaDeURLma9fwc/ey1+2GASlm08mfFtTCIww5+RzbdE4dLsxNMXdKONnVFMMahe8
1sJaSzYQap1yphv1sUQCX/AFrlk/eC6UVhbYMYLTI/YAvt49/O2gZ3mrT0u2nZun
JgoHSq8JUc4=
=MY9C
-----END PGP SIGNATURE-----

-- 
To unsubscribe:
mail -s unsubscribe redhat-announce-list-request en redhat com < /dev/null