This is a multi-part message in MIME format...

------------=_1189563193-7034-1996


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________
 
 Mandriva Linux Security Advisory                         MDKSA-2007:178
 http://www.mandriva.com/security/
 _______________________________________________________________________
 
 Package : x11-server
 Date    : September 11, 2007
 Affected: 2007.0, 2007.1
 _______________________________________________________________________
 
 Problem Description:
 
 Aaron Plattner discovered a buffer overflow in the Composite extension
 of the X.org X server, which if exploited could lead to local privilege
 escalation.
 
 Updated packages have been patched to prevent these issues.
 _______________________________________________________________________

 References:
 
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4730
 _______________________________________________________________________
 
 Updated Packages:
 
 Mandriva Linux 2007.0:
 b7f65f220a7e0d60468de2591480c81f 
 2007.0/i586/x11-server-1.1.1-12.2mdv2007.0.i586.rpm
 6531fccbefc159f11ab350a5005a2a37 
 2007.0/i586/x11-server-common-1.1.1-12.2mdv2007.0.i586.rpm
 d226660aa402ad02c1a6409a530315a4 
 2007.0/i586/x11-server-devel-1.1.1-12.2mdv2007.0.i586.rpm
 1cbd8d452b28b3ef33fb87bd62627472 
 2007.0/i586/x11-server-xati-1.1.1-12.2mdv2007.0.i586.rpm
 5ae5f6604245486ae6c4fe5718b4708d 
 2007.0/i586/x11-server-xchips-1.1.1-12.2mdv2007.0.i586.rpm
 f5a5d272c45a70c27b10c01c4d5fedbe 
 2007.0/i586/x11-server-xdmx-1.1.1-12.2mdv2007.0.i586.rpm
 97b8a31e97ce2560b084b31400f8db19 
 2007.0/i586/x11-server-xephyr-1.1.1-12.2mdv2007.0.i586.rpm
 08215333e77aedf5295a2a7f3de363a6 
 2007.0/i586/x11-server-xepson-1.1.1-12.2mdv2007.0.i586.rpm
 251281eb2c8bbc593c64c8431da23264 
 2007.0/i586/x11-server-xfake-1.1.1-12.2mdv2007.0.i586.rpm
 2da1f5f9b51c5dc6382ddd75c6f21705 
 2007.0/i586/x11-server-xfbdev-1.1.1-12.2mdv2007.0.i586.rpm
 649c70b4548c0a2c9cff273f6050b49a 
 2007.0/i586/x11-server-xgl-0.0.1-0.20060714.11.2mdv2007.0.i586.rpm
 d9e4f46fc32a7ef7e0867d0be8c8d5a5 
 2007.0/i586/x11-server-xi810-1.1.1-12.2mdv2007.0.i586.rpm
 031ae580506097876217fb649112d883 
 2007.0/i586/x11-server-xmach64-1.1.1-12.2mdv2007.0.i586.rpm
 2239a80521a1b74505bff4b03eae9ade 
 2007.0/i586/x11-server-xmga-1.1.1-12.2mdv2007.0.i586.rpm
 5c0ba6b312c07e8aa54d220be66dcccb 
 2007.0/i586/x11-server-xneomagic-1.1.1-12.2mdv2007.0.i586.rpm
 d589cf3b29b764b0155f6fc4ccef7560 
 2007.0/i586/x11-server-xnest-1.1.1-12.2mdv2007.0.i586.rpm
 4a4d7944f435dccd6e6d14a419451add 
 2007.0/i586/x11-server-xnvidia-1.1.1-12.2mdv2007.0.i586.rpm
 a4dfc77d69799d1fff4cdd740afe97fc 
 2007.0/i586/x11-server-xorg-1.1.1-12.2mdv2007.0.i586.rpm
 940ca130c5173a96be8a02d1cca00900 
 2007.0/i586/x11-server-xpm2-1.1.1-12.2mdv2007.0.i586.rpm
 1a79715f3811769ccd6ebc9024e2c188 
 2007.0/i586/x11-server-xprt-1.1.1-12.2mdv2007.0.i586.rpm
 763825c0b68ac98ef45d7b17191d5b6f 
 2007.0/i586/x11-server-xr128-1.1.1-12.2mdv2007.0.i586.rpm
 afcddc9001954e94e25c71802dc3dbb0 
 2007.0/i586/x11-server-xsdl-1.1.1-12.2mdv2007.0.i586.rpm
 88c03e6cf97ce32a58b867a323b749e0 
 2007.0/i586/x11-server-xsmi-1.1.1-12.2mdv2007.0.i586.rpm
 f021f41f108226046db77b55c0ac893b 
 2007.0/i586/x11-server-xvesa-1.1.1-12.2mdv2007.0.i586.rpm
 4095bf9b8b47e31234603e4edacb7116 
 2007.0/i586/x11-server-xvfb-1.1.1-12.2mdv2007.0.i586.rpm
 503e8cd0668ede239bc78a0f855c5ab9 
 2007.0/i586/x11-server-xvia-1.1.1-12.2mdv2007.0.i586.rpm 
 e65256c48101eb1f0d51f8e246b74f9e 
 2007.0/SRPMS/x11-server-1.1.1-12.2mdv2007.0.src.rpm
 c94f94783b9a833f9ba84a2c6447360b 
 2007.0/SRPMS/x11-server-xgl-0.0.1-0.20060714.11.2mdv2007.0.src.rpm

 Mandriva Linux 2007.0/X86_64:
 0e28499a5c6b439a25d9fabb1a9a4b47 
 2007.0/x86_64/x11-server-1.1.1-12.2mdv2007.0.x86_64.rpm
 f20c62bbccc71f6c501d25b4ea913a74 
 2007.0/x86_64/x11-server-common-1.1.1-12.2mdv2007.0.x86_64.rpm
 c96011aa8acbab908139604c05ab23e4 
 2007.0/x86_64/x11-server-devel-1.1.1-12.2mdv2007.0.x86_64.rpm
 729bc1d5ad879d4c1942899a4df7c59b 
 2007.0/x86_64/x11-server-xdmx-1.1.1-12.2mdv2007.0.x86_64.rpm
 0d4c1599d50f76b792bbecc904f01567 
 2007.0/x86_64/x11-server-xephyr-1.1.1-12.2mdv2007.0.x86_64.rpm
 90f0260b44b5fb3bedf77bd2cd0f6ceb 
 2007.0/x86_64/x11-server-xfake-1.1.1-12.2mdv2007.0.x86_64.rpm
 1db3512f3401934ffd82a12e74d3a3bf 
 2007.0/x86_64/x11-server-xfbdev-1.1.1-12.2mdv2007.0.x86_64.rpm
 24812e53f83a6751fad94544814fbb63 
 2007.0/x86_64/x11-server-xgl-0.0.1-0.20060714.11.2mdv2007.0.x86_64.rpm
 84b70cd0146b642215596eec51dcb7b1 
 2007.0/x86_64/x11-server-xnest-1.1.1-12.2mdv2007.0.x86_64.rpm
 b16678c47a6f526e904eb764d1aa5c68 
 2007.0/x86_64/x11-server-xorg-1.1.1-12.2mdv2007.0.x86_64.rpm
 5466332d5fd645bd0b1de06f41f2e7d7 
 2007.0/x86_64/x11-server-xprt-1.1.1-12.2mdv2007.0.x86_64.rpm
 071baaa67706c90aac05e9362b32f1de 
 2007.0/x86_64/x11-server-xsdl-1.1.1-12.2mdv2007.0.x86_64.rpm
 d0cfa2a81086e55ad3a024da165e1570 
 2007.0/x86_64/x11-server-xvfb-1.1.1-12.2mdv2007.0.x86_64.rpm 
 e65256c48101eb1f0d51f8e246b74f9e 
 2007.0/SRPMS/x11-server-1.1.1-12.2mdv2007.0.src.rpm
 c94f94783b9a833f9ba84a2c6447360b 
 2007.0/SRPMS/x11-server-xgl-0.0.1-0.20060714.11.2mdv2007.0.src.rpm

 Mandriva Linux 2007.1:
 68d47b19c4b867ee11f15b71f3c8226a 
 2007.1/i586/x11-server-1.2.0-9.3mdv2007.1.i586.rpm
 39872d0705024f838c47bdeb5c01b63b 
 2007.1/i586/x11-server-common-1.2.0-9.3mdv2007.1.i586.rpm
 58c57bf66d436909db3aa46332f1161d 
 2007.1/i586/x11-server-devel-1.2.0-9.3mdv2007.1.i586.rpm
 7f46aea7b12cc7d63ca1094e45fd8185 
 2007.1/i586/x11-server-xati-1.2.0-9.3mdv2007.1.i586.rpm
 ce49e5eb2b938d0b2439c4d23cc6c886 
 2007.1/i586/x11-server-xchips-1.2.0-9.3mdv2007.1.i586.rpm
 1b8288fa1550e75e506ebb5613fab8b1 
 2007.1/i586/x11-server-xdmx-1.2.0-9.3mdv2007.1.i586.rpm
 051d34d81ae1e041fbec3d2d3142178e 
 2007.1/i586/x11-server-xephyr-1.2.0-9.3mdv2007.1.i586.rpm
 d3771704e8094acc9a19f31d0a3e5b23 
 2007.1/i586/x11-server-xepson-1.2.0-9.3mdv2007.1.i586.rpm
 d1af00fd18f02cebe28c319319b7147a 
 2007.1/i586/x11-server-xfake-1.2.0-9.3mdv2007.1.i586.rpm
 b742892b760c61c6ea689a5541246c5d 
 2007.1/i586/x11-server-xfbdev-1.2.0-9.3mdv2007.1.i586.rpm
 3e9ab8e79ccd908056943704eb849659 
 2007.1/i586/x11-server-xgl-0.0.1-0.20070105.4.2mdv2007.1.i586.rpm
 170e7f0b8cae29dcd4fbd54ece1c89f8 
 2007.1/i586/x11-server-xi810-1.2.0-9.3mdv2007.1.i586.rpm
 491413b40e7dc71b86cba615bca7c465 
 2007.1/i586/x11-server-xmach64-1.2.0-9.3mdv2007.1.i586.rpm
 5890faac3b923e21c0dc5bded02d086e 
 2007.1/i586/x11-server-xmga-1.2.0-9.3mdv2007.1.i586.rpm
 f494f66f71ddc5b69479a23ce201a41d 
 2007.1/i586/x11-server-xneomagic-1.2.0-9.3mdv2007.1.i586.rpm
 c8e42471bdbbdc4a66ffd91b1f0cb182 
 2007.1/i586/x11-server-xnest-1.2.0-9.3mdv2007.1.i586.rpm
 701cd236e6a50d072bf10e2d739dea99 
 2007.1/i586/x11-server-xnvidia-1.2.0-9.3mdv2007.1.i586.rpm
 6c0a51eb71c5e08a514065a86940345b 
 2007.1/i586/x11-server-xorg-1.2.0-9.3mdv2007.1.i586.rpm
 2dd8ca5bbce666924593f66ed7e9186c 
 2007.1/i586/x11-server-xpm2-1.2.0-9.3mdv2007.1.i586.rpm
 d53a2928b2068609b8429baa3de55098 
 2007.1/i586/x11-server-xprt-1.2.0-9.3mdv2007.1.i586.rpm
 a167c69874d9122d19806af6ac57e10c 
 2007.1/i586/x11-server-xr128-1.2.0-9.3mdv2007.1.i586.rpm
 e21ed3731dbf7e5345e4c57223e1c47d 
 2007.1/i586/x11-server-xsdl-1.2.0-9.3mdv2007.1.i586.rpm
 3642c4ab48e21c5f810e83502aec4ff0 
 2007.1/i586/x11-server-xsmi-1.2.0-9.3mdv2007.1.i586.rpm
 24004ec8195d11e8fb0e13ba19c700a7 
 2007.1/i586/x11-server-xvesa-1.2.0-9.3mdv2007.1.i586.rpm
 74bd661eaf42b16fe38c4b08a268600b 
 2007.1/i586/x11-server-xvfb-1.2.0-9.3mdv2007.1.i586.rpm
 5d340c30d104e1396436f6d6a83b21db 
 2007.1/i586/x11-server-xvia-1.2.0-9.3mdv2007.1.i586.rpm
 9abbbeae06a1e0c527d96236ca9cc41e 
 2007.1/i586/x11-server-xvnc-1.2.0-9.3mdv2007.1.i586.rpm 
 893f78ce4f78b7def6d01c02d28262b7 
 2007.1/SRPMS/x11-server-1.2.0-9.3mdv2007.1.src.rpm
 6df770cb70e3eb4bc5cd9baa9af8b0c9 
 2007.1/SRPMS/x11-server-xgl-0.0.1-0.20070105.4.2mdv2007.1.src.rpm

 Mandriva Linux 2007.1/X86_64:
 fe1fb94aff46fdfb0b8a1f1d325267b6 
 2007.1/x86_64/x11-server-1.2.0-9.3mdv2007.1.x86_64.rpm
 50451c60869e8790c386de687462b208 
 2007.1/x86_64/x11-server-common-1.2.0-9.3mdv2007.1.x86_64.rpm
 7dd32f5f112988c8ea7260f0ce21123e 
 2007.1/x86_64/x11-server-devel-1.2.0-9.3mdv2007.1.x86_64.rpm
 886994cfc8ee33d2ec47f8c5fd5498f6 
 2007.1/x86_64/x11-server-xdmx-1.2.0-9.3mdv2007.1.x86_64.rpm
 746ffd08c46db2b3c1d3d6978aa4750c 
 2007.1/x86_64/x11-server-xephyr-1.2.0-9.3mdv2007.1.x86_64.rpm
 1245fecc83cf5be468248891a64ff533 
 2007.1/x86_64/x11-server-xfake-1.2.0-9.3mdv2007.1.x86_64.rpm
 c298bd4969d404cf917496daf93fae2e 
 2007.1/x86_64/x11-server-xfbdev-1.2.0-9.3mdv2007.1.x86_64.rpm
 6deb0b784971e39c3a488ec8cbd14393 
 2007.1/x86_64/x11-server-xgl-0.0.1-0.20070105.4.2mdv2007.1.x86_64.rpm
 7e17896d835ba51451c04d075db91894 
 2007.1/x86_64/x11-server-xnest-1.2.0-9.3mdv2007.1.x86_64.rpm
 2aab234827f3c4d61c47d5ebd7af4a8b 
 2007.1/x86_64/x11-server-xorg-1.2.0-9.3mdv2007.1.x86_64.rpm
 8cfcf665a3979e1faaab471444adcd64 
 2007.1/x86_64/x11-server-xprt-1.2.0-9.3mdv2007.1.x86_64.rpm
 657e13900d1e6a9844261e4428fb2776 
 2007.1/x86_64/x11-server-xsdl-1.2.0-9.3mdv2007.1.x86_64.rpm
 61186f95dc6356f5be674d0497fc2251 
 2007.1/x86_64/x11-server-xvfb-1.2.0-9.3mdv2007.1.x86_64.rpm
 287707c225cb7f3069ed2393b7f6dcbb 
 2007.1/x86_64/x11-server-xvnc-1.2.0-9.3mdv2007.1.x86_64.rpm 
 893f78ce4f78b7def6d01c02d28262b7 
 2007.1/SRPMS/x11-server-1.2.0-9.3mdv2007.1.src.rpm
 6df770cb70e3eb4bc5cd9baa9af8b0c9 
 2007.1/SRPMS/x11-server-xgl-0.0.1-0.20070105.4.2mdv2007.1.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFG5xaqmqjQ0CJFipgRAhRuAJ9Y5j0mYanN/+HMYvdSBybAFfIm2QCcC1Ul
fqRU1TTiYp26HW5hDH6qFLc=
=qpa2
-----END PGP SIGNATURE-----


------------=_1189563193-7034-1996
Content-Type: text/plain; name="message-footer.txt"
Content-Disposition: inline; filename="message-footer.txt"
Content-Transfer-Encoding: 8bit

To unsubscribe, send a email to sympa@mandrivalinux.org
with this subject : unsubscribe security-announce
_______________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://www.mandrivastore.com
Join the Club : http://www.mandrivaclub.com
_______________________________________________________

------------=_1189563193-7034-1996--