81438 2002-10-17 00:25 /304 rader/ <secure@conectiva.com.br> Importerad: 2002-10-17 00:25 av Brevbäraren Extern mottagare: conectiva-updates@papaleguas.conectiva.com.br Extern mottagare: lwn@lwn.net Extern mottagare: bugtraq@securityfocus.com Extern mottagare: security-alerts@linuxsecurity.com Mottagare: Bugtraq (import) <1968> Ärende: [CLA-2002:533] Conectiva Linux Security Announcement - XFree86 ------------------------------------------------------------ -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- CONECTIVA LINUX SECURITY ANNOUNCEMENT - -------------------------------------------------------------------------- PACKAGE : XFree86 SUMMARY : Several vulnerabilities DATE : 2002-10-16 19:55:00 ID : CLA-2002:533 RELEVANT RELEASES : 6.0, 7.0 - ------------------------------------------------------------------------- DESCRIPTION XFree86 is a freely redistributable open-source implementation of the X Window System, which is a client/server interface between display hardware and the desktop environment. This advisory addresses several vulnerabilities[1] in XFree86-4.0.1 in Conectiva Linux 6.0 and XFree86-4.0.3 in Conectiva Linux 7.0. Conectiva Linux 8 was previously updated[2] and already contains these fixes. It also fixes several vulnerabilities present in XFree86 version 3.3.6a, which was distributed for compatibility reasons with Conectiva Linux 6.0 and 7.0. - MIT-SHM extension vulnerability Roberto Zunino discovered a vulnerability in the MIT-SHM extension of XFree86 prior to versions 4.2.1. The vulnerability allows a local user who can run XFree86 to gain read/write access to any shared memory segment in the system. Although the use of shared memory segments to store trusted data is not a comom practice, by exploiting this vulnerability the attacker potentially can get and/or change sensitive information. - Buffer overflow in glyph clipping for large origin. A buffer overflow vulnerability[3] was found in the glyph code when clipping large origins. A remote attacker could exploit this vulnerability to cause a denial of service and possibly run arbitrary code by, for example, using a large number of characters through web page search forms of some web browsers. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2001-0955 to this issue[4]. Additional fixes from the XFree86 CVS tree are listed below and have also been applied to this update. - Check for negative reply length/overflow in _XAsyncReply(). Mike A. Harris sent[5] a patch to the XFree86 3.3 source tree to fix an overflow vulnerability. The vulnerability is also present in XFree86 4.x versions, and the patch was adapted to fix it. - XDM restrictions bypassed by non existent directory If the xdm auth directory did not exist, any user could connect to the Xserver using xdm. This was reported by Galen Hancock and the fix was made[6] by setting the authComplain variable to true as default. This is the expected behavior and is specified in the manual page of the xdm configuration. - Authentication issues with mmap() on drm devices Jeff Hartmann sent a fix[7] for a vulnerability in the way the mmap() system call was being used on DRM devices. - Kernel security hole in Linux int10 module Marc La France commited[8] to the XFree86 CVS tree a fix for a vulnerability in the linux int10 module. XFree86 3.3.6 compatiblity packages are being upgraded with the latest branch patches available. The changelog[9] entries from the XFree86 source related to security fixes since our last update are below: - Avoid DoS attacks on xdm (Keith Packard). - Check for negative reply length/overflow in _XAsyncReply (Xlib) (#4601, Mike Harris). - Fix possible buffer overflow (NOT on stack) in xdm xdmcp code (patch69 from Red Hat SRPMS). - Pull in fixes from 4.0.2 for the following problems: . XlibInt buffer overflow . libICE denial of service . XOpenDisplay buffer overflow (#4450, Branden Robinson) - Fix temp file problem in Imake.rules, InstallManPageAliases (Matthieu Herrb) - Pull in fixes from the main branch: . xfs DoS (Paulo Cesar Pereira de Andrade and Keith Packard), . _XAsyncReply() Xlib stack corruption, . Xaw temp file handling (Branden Robinson). - Safe tempfile handling for imake's probing of glibc version (based on #4257, Colin Phipps). - Fix a 1-byte overflow in Xtrans.c (#4182, Aaron Campbell). - Back port fix for http://www.securityfocus.com/archive/1/139436 from 4.0 (#4181, Matthieu Herrb). SOLUTION All XFree86 users are advised to upgrade. REFERENCES: 1.http://www.xfree86.org/security/ 2.http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000529&idioma=en 3.http://marc.theaimsgroup.com/?l=vuln-dev&m=100118958310463&w=2 4.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2001-0955 5.http://www.xfree86.org/devel/archives/patch/2001-Apr/0069.shtml 6.http://www.xfree86.org/pipermail/cvs-commit/2001-October/003140.html 7.http://www.xfree86.org/pipermail/cvs-commit/2001-May/002350.html 8.http://www.xfree86.org/pipermail/cvs-commit/2001-March/001633.html 9.http://cvsweb.xfree86.org/cvsweb/~checkout~/xc/programs/Xserver/hw/xfree86/CHANGELOG?rev=3.390.2.341 DIRECT DOWNLOAD LINKS TO THE UPDATED PACKAGES ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-3DLabs-3.3.6a-5U60_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-8514-3.3.6a-5U60_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-AGX-3.3.6a-5U60_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-FBDev-3.3.6a-5U60_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-I128-3.3.6a-5U60_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-Mach32-3.3.6a-5U60_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-Mach64-3.3.6a-5U60_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-Mach8-3.3.6a-5U60_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-Mono-3.3.6a-5U60_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-P9000-3.3.6a-5U60_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-S3-3.3.6a-5U60_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-S3V-3.3.6a-5U60_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-SVGA-3.3.6a-5U60_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-VGA16-3.3.6a-5U60_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-W32-3.3.6a-5U60_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-apm-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-ati-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-chips-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-cirrus-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-cyrix-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-devel-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-fbdev-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-glint-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-i740-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-i810-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-imstt-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-libs-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-mga-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-neomagic-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-nv-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-r128-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-rendition-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-s3virge-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-Server-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-sis-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-tdfx-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-trident-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-tseng-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-vesa-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-vga-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-xfs-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-Xnest-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-Xvfb-4.0.1-35U60_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/SRPMS/XFree86_3-3.3.6a-5U60_1cl.src.rpm ftp://atualizacoes.conectiva.com.br/6.0/SRPMS/XFree86-4.0.1-35U60_3cl.src.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-3DLabs-3.3.6-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-8514-3.3.6-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-AGX-3.3.6-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-base-3.3.6-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-I128-3.3.6-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-Mach32-3.3.6-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-Mach64-3.3.6-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-Mach8-3.3.6-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-Mono-3.3.6-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-P9000-3.3.6-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-S3-3.3.6-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-S3V-3.3.6-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-SVGA-3.3.6-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-W32-3.3.6-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/rstart-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-apm-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-ark-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-ati-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-ati-dri-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-bench-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-chips-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-cirrus-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-common-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-config-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-cyrix-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-devel-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-devel-static-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-dps-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-fbdev-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-GL-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-GL-devel-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-glide-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-glint-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-i128-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-i740-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-i810-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-i810-dri-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-libs-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-libs-common-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-libs-Xaw-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-libs-Xaw6-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-manpages-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-mga-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-mga-dri-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-minimal-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-misc-locales-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-afb-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-cfb-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-codeconv-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-extended-input-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-fb-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-fb-lowcolor-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-fb-multi-depths-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-freetype-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-xaa-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-xtt-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-neomagic-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-nv-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-pex5-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-progs-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-proxy-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-rendition-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-s3virge-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-savage-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Server-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Server-common-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-siliconmotion-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-sis-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-tdfx-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-tdfx-dri-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-tga-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-trident-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-tseng-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-twm-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-vesa-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-vga-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-xdm-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-xfs-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-xie-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-xkb-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Xnest-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Xprt-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Xvfb-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/xterm-4.0.3-26U70_3cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/SRPMS/XFree86-4.0.3-26U70_3cl.src.rpm ADDITIONAL INSTRUCTIONS Users of Conectiva Linux version 6.0 or higher may use apt to perform upgrades of RPM packages: - add the following line to /etc/apt/sources.list if it is not there yet (you may also use linuxconf to do this): rpm [cncbr] ftp://atualizacoes.conectiva.com.br 6.0/conectiva updates (replace 6.0 with the correct version number if you are not running CL6.0) - run: apt-get update - after that, execute: apt-get upgrade Detailed instructions reagarding the use of apt and upgrade examples can be found at http://distro.conectiva.com.br/atualizacoes/#apt?idioma=en - ------------------------------------------------------------------------- All packages are signed with Conectiva's GPG key. The key and instructions on how to import it can be found at http://distro.conectiva.com.br/seguranca/chave/?idioma=en Instructions on how to check the signatures of the RPM packages can be found at http://distro.conectiva.com.br/seguranca/politica/?idioma=en - ------------------------------------------------------------------------- All our advisories and generic update instructions can be viewed at http://distro.conectiva.com.br/atualizacoes/?idioma=en - ------------------------------------------------------------------------- subscribe: conectiva-updates-subscribe@papaleguas.conectiva.com.br unsubscribe: conectiva-updates-unsubscribe@papaleguas.conectiva.com.br -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE9reGd42jd0JmAcZARAmGNAKCkp2g/ANyKp3jpv0TKxvJD81MmWwCgif4l Zz5T68G8Z6HukYinaqT+ul4= =a3qR -----END PGP SIGNATURE----- (81438) / <secure@conectiva.com.br>/------(Ombruten)