-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 --------------------------------------------------------------------------
   Turbolinux Security Advisory TLSA-2007-14
   http://www.turbolinux.co.jp/security/
                                             security-team@turbolinux.co.jp
 --------------------------------------------------------------------------

 Original released date: 06 Mar 2007
 Last revised: 29 Mar 2007

 Package: xorg-x11, XFree86

 Summary: Three vulnerabilities discovered in xorg-x11

 More information:
    The xorg-x11/XFree86 is an implementation of the X Window System, providing
 a core
    graphical user interface and video drivers.

    The xorg-x11 and XFree86 have Three integer overflow vulnerabilities.

 Impact:
    This vulnerability may allow local users to execute arbitrary code
    via a crafted X protocol request.

 Affected Products:
    - wizpy
    - Turbolinux FUJI
    - Turbolinux 10 Server x64 Edition
    - Turbolinux 10 Server
    - Turbolinux Home
    - Turbolinux 10 F...
    - Turbolinux 10 Desktop
    - Turbolinux Multimedia
    - Turbolinux Personal
    - Turbolinux 8 Server


 <wizpy>

   Source Packages
   Size: MD5

   xorg-x11-6.8.2-48.src.rpm
     67223525 e59ca0e1790340845b3af49cac7232c9

   Binary Packages
   Size: MD5

   xorg-x11-6.8.2-48.i386.rpm
     16646545 19c2d65899766fd78be7d7f98b69a731
   xorg-x11-75dpi-fonts-6.8.2-48.i386.rpm
     11331786 82ea43421738eae36dbd13749c018e92
   xorg-x11-fonts-6.8.2-48.i386.rpm
      9239148 6f4b2175ca2dcc146242b7233d378627
   xorg-x11-libs-6.8.2-48.i386.rpm
      3006854 56f9ab879db8c1000cd0b552c3fe7f7b
   xorg-x11-xcursor-6.8.2-48.i386.rpm
        50145 c0515c08c99e5412051dff51924f3729
   xorg-x11-xft-6.8.2-48.i386.rpm
        84013 541c4256e373dfbbb584e2e5d6bef48f

 <Turbolinux FUJI>

   Source Packages
   Size: MD5

   xorg-x11-6.8.2-48.src.rpm
     67223525 24ffd0f962eabc57df71c49e5945f87e

   Binary Packages
   Size: MD5

   xorg-x11-100dpi-fonts-6.8.2-48.i686.rpm
     12987423 ea26c176c8d8f6798ca617035910ea61
   xorg-x11-6.8.2-48.i686.rpm
     18164653 aa44a4848bd80a05b0c7f2b75207ed9c
   xorg-x11-75dpi-fonts-6.8.2-48.i686.rpm
     11364258 673a38f9335eea1b2e798f2a789aa6d1
   xorg-x11-Xvfb-6.8.2-48.i686.rpm
      1616527 94ee076346029856635a8f7acebb31c5
   xorg-x11-contrib-6.8.2-48.i686.rpm
       534603 795ef75ec0261d8de985f0f7b1d207c8
   xorg-x11-cyrillic-fonts-6.8.2-48.i686.rpm
       421164 70a1e5cdf70411435061b40276e36bf5
   xorg-x11-devel-6.8.2-48.i686.rpm
      5678215 0d46318e9c1fc2d8dd037e785b806a08
   xorg-x11-fonts-6.8.2-48.i686.rpm
      9458201 97191c199d67c0533e665d8157db03bb
   xorg-x11-libs-6.8.2-48.i686.rpm
      3402817 b8239c67038d0c0c64b34a9f055fbcc7
   xorg-x11-twm-6.8.2-48.i686.rpm
       116100 ee0301e175cf3fbb5594de6f888dd1a9
   xorg-x11-xcursor-6.8.2-48.i686.rpm
        51701 b7148af20b750cb2433fdce63f8ac304
   xorg-x11-xcursor-devel-6.8.2-48.i686.rpm
        46365 99d211154b8f1d3b2fb225023eb026c2
   xorg-x11-xf86config-6.8.2-48.i686.rpm
       278153 11581c0cfa1743b86b299c9e1393d342
   xorg-x11-xfs-6.8.2-48.i686.rpm
        70878 f71881caffb5739bccc4e21131959609
   xorg-x11-xft-6.8.2-48.i686.rpm
        95637 39e59cb89c089fe8d890503540d27b1c
   xorg-x11-xft-devel-6.8.2-48.i686.rpm
        71307 312cf0d5c2fe3808f87390075452faac

 <Turbolinux 10 Server x64 Edition>

   Source Packages
   Size: MD5

   XFree86-4.3.0-92.src.rpm
     57690662 bad55dfcae967dc180e3c20220705bbf

   Binary Packages
   Size: MD5

   XFree86-100dpi-fonts-4.3.0-92.x86_64.rpm
     12438616 78ebb6f021e25a31c144b9b1045a393f
   XFree86-4.3.0-92.x86_64.rpm
     19122908 7a6e72580479b95019ba333b429ea019
   XFree86-75dpi-fonts-4.3.0-92.x86_64.rpm
     10768973 68f4978377d736475b5458da863de944
   XFree86-Xvfb-4.3.0-92.x86_64.rpm
      2050279 cf86e062941b116ac05e0d8214006882
   XFree86-contrib-4.3.0-92.x86_64.rpm
       528427 a204a44443a2655cd4a855d794f31ba8
   XFree86-cyrillic-fonts-4.3.0-92.x86_64.rpm
       413822 dc688c7b55438be653bcb689056b2f7c
   XFree86-debug-4.3.0-92.x86_64.rpm
      1750415 6c6410f863413fe14cb1f99771358627
   XFree86-devel-4.3.0-92.x86_64.rpm
      5293676 27ec7fe247bd7f2b43ff96c4543a02c1
   XFree86-fonts-4.3.0-92.x86_64.rpm
      8770974 181dece890e5cb44c42510b6274ab2c5
   XFree86-libs-4.3.0-92.x86_64.rpm
      2889257 77684d860207d2b840185155de2a9e27
   XFree86-twm-4.3.0-92.x86_64.rpm
       133207 346f118cac774cea4cbe0a0b9048665a
   XFree86-xcursor-4.3.0-92.x86_64.rpm
        54433 e271ae9b352c3c2e283f07e2dceb6f7e
   XFree86-xcursor-devel-4.3.0-92.x86_64.rpm
        52060 ad2be3cc13719d60f75b362578689c6a
   XFree86-xf86config-4.3.0-92.x86_64.rpm
       368981 5c697f85eefcf1db433d588facb049df
   XFree86-xfs-4.3.0-92.x86_64.rpm
        95028 60f8c0e0df55c4fe737ab09a4e86f559
   XFree86-xft-4.3.0-92.x86_64.rpm
        86595 a12aff87aee6a3b5162eba5eb2b0213b
   XFree86-xft-devel-4.3.0-92.x86_64.rpm
        71770 66f865b8ef9800d80033d5c16abf27a2

 <Turbolinux 10 Server>

   Source Packages
   Size: MD5

   XFree86-4.3.0-92.src.rpm
     57690662 1254a997aa3ea35d5448b13b0493a677

   Binary Packages
   Size: MD5

   XFree86-4.3.0-92.i586.rpm
     18316857 1b5e08fc161799b994548e3b61c553f2
   XFree86-75dpi-fonts-4.3.0-92.i586.rpm
     10769235 e2cc6a7d72d6f6028dbd6e4dc064f17d
   XFree86-100dpi-fonts-4.3.0-92.i586.rpm
     12439635 193de6fa1950587aa274c1292605f7b6
   XFree86-Xvfb-4.3.0-92.i586.rpm
      1769601 f1ebe6ca27e33e39aec305dcda4aee8b
   XFree86-contrib-4.3.0-92.i586.rpm
       468150 b91469c16487f0980e33a8ddefbdf8f3
   XFree86-cyrillic-fonts-4.3.0-92.i586.rpm
       413757 310e6ceb6d230d2c380f084b21c84b8c
   XFree86-debug-4.3.0-92.i586.rpm
      1482302 f66d1bb276799c166dee5c8e6619320b
   XFree86-devel-4.3.0-92.i586.rpm
      5024679 a64f480834e9a25021e0d43143c00c52
   XFree86-fonts-4.3.0-92.i586.rpm
      8771439 567fc7b218840593d6ffc59fff35cb9e
   XFree86-libs-4.3.0-92.i586.rpm
      2653040 ed10f655d31e83cb18e667c917f763ca
   XFree86-twm-4.3.0-92.i586.rpm
       119444 315c69799a56463e6371f14aca86b9df
   XFree86-xcursor-4.3.0-92.i586.rpm
        52295 762be13f1d065963855adb53272665b5
   XFree86-xcursor-devel-4.3.0-92.i586.rpm
        49607 46e00be461f80ab6f5a31b037730c8bc
   XFree86-xf86config-4.3.0-92.i586.rpm
       335721 438635f3b8d35872069ec1f7c7f90a7a
   XFree86-xfs-4.3.0-92.i586.rpm
        85220 c19ff63ef0be1b8ff77d066357baf0b5
   XFree86-xft-4.3.0-92.i586.rpm
        81391 2177b758b3a1c4b48ed7d9466733f76e
   XFree86-xft-devel-4.3.0-92.i586.rpm
        67397 0aa962c01593bae1e33e2cd664ac19ef

 <Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home, Turbolinux
 Multimedia, Turbolinux Personal>

   Source Packages
   Size: MD5

   XFree86-4.3.0-92.src.rpm
     57690662 57b66b47b80487c2843312c8f147fa60

   Binary Packages
   Size: MD5

   XFree86-4.3.0-92.i586.rpm
     18306549 a86093fb0327f71f9f807d267c3079a0
   XFree86-75dpi-fonts-4.3.0-92.i586.rpm
     10769686 05a021b7e2411f182d5ef7f032cdbbe0
   XFree86-100dpi-fonts-4.3.0-92.i586.rpm
     12439524 955421fc99a3b8173b86da8757571d4f
   XFree86-Xvfb-4.3.0-92.i586.rpm
      1773212 f697782bdcf9eb2040c70587dd369e52
   XFree86-contrib-4.3.0-92.i586.rpm
       470670 ce373af812d93ebbe224c481a9ba3b24
   XFree86-cyrillic-fonts-4.3.0-92.i586.rpm
       413704 e645d71b731e2184454e4fb5f7b166cc
   XFree86-devel-4.3.0-92.i586.rpm
      5047771 a60d79c7be7f6377573591de87e4beba
   XFree86-fonts-4.3.0-92.i586.rpm
      8771082 4e339b424cdddfdbcc62df0eb147862e
   XFree86-libs-4.3.0-92.i586.rpm
      2655388 b700e837d275722a0cefc3c91c1bab9b
   XFree86-twm-4.3.0-92.i586.rpm
       119699 7606f303a74e93afaa8ea9243ababdb0
   XFree86-xcursor-4.3.0-92.i586.rpm
        52455 570ffc55ce8a039687afcac222fcaf14
   XFree86-xcursor-devel-4.3.0-92.i586.rpm
        45686 b060006acd12548a5c0a96e4b9201edb
   XFree86-xf86config-4.3.0-92.i586.rpm
       336982 bdb3cfa9d4ac0604687f6b8651b7eb00
   XFree86-xfs-4.3.0-92.i586.rpm
        85588 3ddcebe2fb9e7c677eb2dd9ba4b1db42
   XFree86-xft-4.3.0-92.i586.rpm
        81438 bdb388185d811d64c917ec93bdf7bd5e
   XFree86-xft-devel-4.3.0-92.i586.rpm
        67495 6a4be704a04285a9cd04d6402e6ed4bb

 <Turbolinux 8 Server>

   Source Packages
   Size: MD5

   XFree86-4.2.0-33.src.rpm
     59405365 d5d57aa4894f6a00153a7ff2d5775cc5

   Binary Packages
   Size: MD5

   XFree86-100dpi-fonts-4.2.0-33.i586.rpm
     12406987 e3d295a1599bc018294939f10e49f5d0
   XFree86-4.2.0-33.i586.rpm
     22741096 76bf1661cab157843a289eacbb33e077
   XFree86-75dpi-fonts-4.2.0-33.i586.rpm
     10737762 2e2d37c48aef5b7c42c253f7e0865aeb
   XFree86-contrib-4.2.0-33.i586.rpm
       308352 85feb4af064da03aa59af72a38fddf14
   XFree86-cyrillic-fonts-4.2.0-33.i586.rpm
       398039 b5580789524594d2c15cae9e2b3466bc
   XFree86-devel-4.2.0-33.i586.rpm
      4623890 ccbc5fb055ad827ab6c92445259940f9
   XFree86-libs-4.2.0-33.i586.rpm
      2130185 b695595545f4c11f2d19e0fce7d4b56c
   XFree86-xfs-4.2.0-33.i586.rpm
        72040 fd558e6e1e1e4594d6e557dfc355e0af


 References:

 CVE
   [CVE-2006-6101]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6101
   [CVE-2006-6102]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6102
   [CVE-2006-6103]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6103

 --------------------------------------------------------------------------
 Revision History
    06 Mar 2007 Initial release
    29 Mar 2007 Added wizpy
 --------------------------------------------------------------------------

 Copyright(C) 2006 Turbolinux, Inc. All rights reserved. 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFGC3qUK0LzjOqIJMwRAl/zAJ90hzXfEAg3FTyZ2ihCi5NM5G57ZQCfbdYz
i+9QIEsIcxzSXoZIoJ19td8=
=Th/c
-----END PGP SIGNATURE-----