Date: Fri, 5 Jun 1998 10:35:39 -0400 (EDT)
From: Erik Troan <ewt@redhat.com>
To: redhat-announce-list@redhat.com
Subject: SECURITY: new XFree86 packages now available

-----BEGIN PGP SIGNED MESSAGE-----


Major security holes have been found in the X libraries and xterm, which
allow local users access to the root user. All Red Hat 4.x and 5.x systems
which X-Windows installed should update their systems. Packages for the
SPARC are not yet available. When they are, we will post a separate 
announcement so sparc-list@redhat.com providing full information on those
fixes.

Thanks to the XFree86 group for providing patches for these problems.

Red Hat 5.0 and 5.1
- -------------------

i386:
rpm -Uvh ftp://ftp.redhat.com/updates/5.0/i386/XFree86-3.3.2-11.i386.rpm
rpm -Uvh ftp://ftp.redhat.com/updates/5.0/i386/XFree86-libs-3.3.2-11.i386.rpm

alpha:
rpm -Uvh ftp://ftp.redhat.com/updates/5.0/alpha/XFree86-3.3.2-11.alpha.rpm
rpm -Uvh ftp://ftp.redhat.com/updates/5.0/alpha/XFree86-libs-3.3.2-11.alpha.rpm

Red Hat 4.2
- -------------

i386:
rpm -Uvh ftp://ftp.redhat.com/updates/4.2/i386/XFree86-3.3.2-1.i386.rpm
rpm -Uvh ftp://ftp.redhat.com/updates/4.2/i386/XFree86-libs-3.3.2-1.i386.rpm

alpha:
rpm -Uvh ftp://ftp.redhat.com/updates/4.2/alpha/XFree86-3.3.2-1.alpha.rpm
rpm -Uvh ftp://ftp.redhat.com/updates/4.2/alpha/XFree86-libs-3.3.2-1.alpha.rpm


-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBNXgCQKUg6PHLopv5AQHotAP/aEZfyPZB9H4m0zYY03PvHqKwZq76699Z
MIaDeURLma9fwc/ey1+2GASlm08mfFtTCIww5+RzbdE4dLsxNMXdKONnVFMMahe8
1sJaSzYQap1yphv1sUQCX/AFrlk/eC6UVhbYMYLTI/YAvt49/O2gZ3mrT0u2nZun
JgoHSq8JUc4=
=MY9C
-----END PGP SIGNATURE-----

-- 
To unsubscribe:
mail -s unsubscribe redhat-announce-list-request@redhat.com < /dev/null