-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 --------------------------------------------------------------------------
   Turbolinux Security Advisory TLSA-2007-26
   http://www.turbolinux.co.jp/security/
                                             security-team@turbolinux.co.jp
 --------------------------------------------------------------------------

 Original released date: 17 Apr 2007
 Last revised: 17 Apr 2007

 Package: xorg-x11, XFree86

 Summary: Multiple vulnerabilities in xorg-x11, XFree86

 More information:
    The xorg-x11/XFree86 is an implementation of the X Window System, providing a core
    graphical user interface and video drivers.

    The xorg-x11 and XFree86 have multiple integer overflow vulnerabilities.

 Impact:
    These vulnerabilities may allow attackers to execute arbitrary code.

 Affected Products:
    - wizpy
    - Turbolinux FUJI
    - Turbolinux 10 Server x64 Edition
    - Turbolinux 10 Server
    - Turbolinux Home
    - Turbolinux 10 F...
    - Turbolinux 10 Desktop
    - Turbolinux Multimedia
    - Turbolinux Personal
    - Turbolinux 8 Server


 <wizpy>

   Source Packages
   Size: MD5

   xorg-x11-6.8.2-49.src.rpm
     67225811 cea9c69d4b53cbd63a686db661fa1812

   Binary Packages
   Size: MD5

   xorg-x11-6.8.2-49.i386.rpm
     16644160 2bd6eb2f5d79bda315422fefce52db84
   xorg-x11-75dpi-fonts-6.8.2-49.i386.rpm
     11332271 8ffb48d7d60f5992750abb157ebb529b
   xorg-x11-fonts-6.8.2-49.i386.rpm
      9237332 dba3bff310bc8234b0384f1f972718f6
   xorg-x11-libs-6.8.2-49.i386.rpm
      3006664 400493e83c1327b5074de7e94963760f
   xorg-x11-xcursor-6.8.2-49.i386.rpm
        50272 206f92c7f01cae6dbff99c304d39597f
   xorg-x11-xft-6.8.2-49.i386.rpm
        84154 297f82d0fe67ad881e9afefaf205047b

 <Turbolinux FUJI>

   Source Packages
   Size: MD5

   xorg-x11-6.8.2-49.src.rpm
     67225811 b6e2803a2629561c32894d6e00fdbed8

   Binary Packages
   Size: MD5

   xorg-x11-100dpi-fonts-6.8.2-49.i686.rpm
     12990459 a91412bfc9b235a6cfb9f7fe0a7c3bd3
   xorg-x11-6.8.2-49.i686.rpm
     18162405 2be858f1e261e7835d0f1943f73daab8
   xorg-x11-75dpi-fonts-6.8.2-49.i686.rpm
     11366792 554dbfd4aedcf5969202b04863e8e7f0
   xorg-x11-Xvfb-6.8.2-49.i686.rpm
      1615153 a3058efc8d846c44781bae11572f8835
   xorg-x11-contrib-6.8.2-49.i686.rpm
       534703 c7dc33b7482dfdf25b56745c4f6714eb
   xorg-x11-cyrillic-fonts-6.8.2-49.i686.rpm
       421633 70b38b6307c29252b9b7f39efa6f4489
   xorg-x11-devel-6.8.2-49.i686.rpm
      5677728 044f895f28c131983320ea2a47eca7e4
   xorg-x11-fonts-6.8.2-49.i686.rpm
      9455992 a2e9c947ac5b114bab47fe91f2f2412d
   xorg-x11-libs-6.8.2-49.i686.rpm
      3401391 7e92dbdd69977fc69b1352a65324a468
   xorg-x11-twm-6.8.2-49.i686.rpm
       116255 776452f97ef152da9f754fa048cc0f63
   xorg-x11-xcursor-6.8.2-49.i686.rpm
        51934 b19cbe5accd116d934b55c1c293ca6e4
   xorg-x11-xcursor-devel-6.8.2-49.i686.rpm
        46400 4d17e481ef98fc056ed4b3f63e7541f5
   xorg-x11-xf86config-6.8.2-49.i686.rpm
       278189 908d22b40d2cac844af70f9f76ae112e
   xorg-x11-xfs-6.8.2-49.i686.rpm
        70978 a4899fb55a9ea93edeade0728c00c0b5
   xorg-x11-xft-6.8.2-49.i686.rpm
        95761 3c6bcba601bccfa97010c74fb40d06d1
   xorg-x11-xft-devel-6.8.2-49.i686.rpm
        71662 e8af346bacc1968ce89d1af53f2524fd

 <Turbolinux 10 Server x64 Edition>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/SRPMS/XFree86-4.3.0-95.src.rpm
     57697097 b69ba5f204da3d18e4890ab1140233c7

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/XFree86-100dpi-fonts-4.3.0-95.x86_64.rpm
     12439971 c9ed0e24dd1d634ff28d21d604bcf108
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/XFree86-4.3.0-95.x86_64.rpm
     19123259 95f91419b0e2aaff04af8971952547f7
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/XFree86-75dpi-fonts-4.3.0-95.x86_64.rpm
     10770409 5c402956d48454233f3a251d3873a1b3
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/XFree86-Xvfb-4.3.0-95.x86_64.rpm
      2050947 06c51174cac6ef6ac4af7c28c184f9af
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/XFree86-contrib-4.3.0-95.x86_64.rpm
       528996 16292a5c48b6f6ee723f7f425992314e
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/XFree86-cyrillic-fonts-4.3.0-95.x86_64.rpm
       414170 9a5c78791ab6705d84313a9b228d9ae3
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/XFree86-debug-4.3.0-95.x86_64.rpm
      1749601 0b1c5786fa42882f336ca966970e7559
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/XFree86-devel-4.3.0-95.x86_64.rpm
      5295843 8344fc41c52e20c3817213373f3b4fdd
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/XFree86-fonts-4.3.0-95.x86_64.rpm
      8771581 1705bb0f469ec42790392bd0915469a3
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/XFree86-libs-4.3.0-95.x86_64.rpm
      2888921 8dab232416f4687d5ac85755f5fbae85
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/XFree86-twm-4.3.0-95.x86_64.rpm
       133626 b560009cfe9dce7495b1b55762421661
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/XFree86-xcursor-4.3.0-95.x86_64.rpm
        54883 9ec0170a512e4a4cdf968c39bf085746
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/XFree86-xcursor-devel-4.3.0-95.x86_64.rpm
        52497 31c40ebbfb7f11ad52cebd3d7b4b579d
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/XFree86-xf86config-4.3.0-95.x86_64.rpm
       369673 81ac38ae2a4108da1821a6deb11b1332
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/XFree86-xfs-4.3.0-95.x86_64.rpm
        95539 539cd4c989f1ee65c45ffb5cdd00511c
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/XFree86-xft-4.3.0-95.x86_64.rpm
        87172 e7bd8e2048ae493862e41073b3bd53fa
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/XFree86-xft-devel-4.3.0-95.x86_64.rpm
        72259 9d1ef23fdf875e519e63605fbdadfc6a

 <Turbolinux 10 Server>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/SRPMS/XFree86-4.3.0-95.src.rpm
     57697097 317c66038050a6bf90c606d17fd8307a

   Binary Packages
   Size: MD5

   XFree86-4.3.0-95.i586.rpm
     18315753 558f72298703d2377865f23ce870b940
   XFree86-75dpi-fonts-4.3.0-95.i586.rpm
     10770955 5d8747d9da29f5c284383e33aace23c6
   XFree86-100dpi-fonts-4.3.0-95.i586.rpm
     12440375 2b442c5fa302947f35bcd5d8d693bf81
   XFree86-Xvfb-4.3.0-95.i586.rpm
      1770483 c46844934406408dc9cf68506056c34c
   XFree86-contrib-4.3.0-95.i586.rpm
       468518 211a39f4a321821c940bd805b26b11a0
   XFree86-cyrillic-fonts-4.3.0-95.i586.rpm
       414205 e28bdaf0c9da38f60c069198b109da06
   XFree86-debug-4.3.0-95.i586.rpm
      1482471 7219b83dbac0c150281ff639af034d1a
   XFree86-devel-4.3.0-95.i586.rpm
      5023898 59d1abbe1237e6e8a3565749c0461e78
   XFree86-fonts-4.3.0-95.i586.rpm
      8771173 f15d5e17542f060eb05201981a3bfafe
   XFree86-libs-4.3.0-95.i586.rpm
      2653132 4ca098ca7484eb577f722e9742faff55
   XFree86-twm-4.3.0-95.i586.rpm
       119902 b3a940d6e697d108ec8fdac795c17731
   XFree86-xcursor-4.3.0-95.i586.rpm
        52757 3f04029e04385528b33d4877d86d26d8
   XFree86-xcursor-devel-4.3.0-95.i586.rpm
        50052 87663dfb3dd32fd98e42940da25afa72
   XFree86-xf86config-4.3.0-95.i586.rpm
       336106 de68fc00b679eddeebd46ace974d662e
   XFree86-xfs-4.3.0-95.i586.rpm
        85657 fe22a8e4414295d4a40ee6f9a66d7d25
   XFree86-xft-4.3.0-95.i586.rpm
        81865 55d00019b01461bf3b4c6914c8bb87f0
   XFree86-xft-devel-4.3.0-95.i586.rpm
        67847 fa7f102f2eefd456df1b8deeb3504d6c

 <Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home, Turbolinux Multimedia, Turbolinux Personal>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/SRPMS/XFree86-4.3.0-95.src.rpm
     57697097 8d511ec7d566fd0b730d94a2f937f212

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/XFree86-4.3.0-95.i586.rpm
     18309080 c7c3c47f6a62555e949c893ef9200dc9
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/XFree86-75dpi-fonts-4.3.0-95.i586.rpm
     10770828 30d43ef898433ec5dc4cbfc3a76b770d
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/XFree86-100dpi-fonts-4.3.0-95.i586.rpm
     12440095 f14545d23f66c4736807f841c4be80d9
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/XFree86-Xvfb-4.3.0-95.i586.rpm
      1773802 9372a21d8f092eb1e4221130f2004171
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/XFree86-contrib-4.3.0-95.i586.rpm
       470969 ff7cd6875e436f8426be8cd809acccd1
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/XFree86-cyrillic-fonts-4.3.0-95.i586.rpm
       414268 2d7bdb20756601a137549a41126b2d6e
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/XFree86-devel-4.3.0-95.i586.rpm
      5047227 47e7ba8f394b178d9426e9537420007c
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/XFree86-fonts-4.3.0-95.i586.rpm
      8771832 ccbfe94f478c9a44e70bad9409e47521
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/XFree86-libs-4.3.0-95.i586.rpm
      2655858 99c36e08fe8d3602606ec89116a793b0
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/XFree86-twm-4.3.0-95.i586.rpm
       120173 940f1d132f948e608bf14ffbfd812b69
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/XFree86-xcursor-4.3.0-95.i586.rpm
        52907 67b3b3734c21e54a09ab12c4e34b41d2
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/XFree86-xcursor-devel-4.3.0-95.i586.rpm
        46113 e92b55b6ed832fdf301b11d6977e76bc
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/XFree86-xf86config-4.3.0-95.i586.rpm
       337605 b156ee94e1d2f03f7cb21c609705e8ba
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/XFree86-xfs-4.3.0-95.i586.rpm
        86024 bbc751f946703910ce58a64de772d146
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/XFree86-xft-4.3.0-95.i586.rpm
        81952 285307846efe8a8bc408995a030f7d0e
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/XFree86-xft-devel-4.3.0-95.i586.rpm
        67961 2a9af08e76ca3b83cf14ca10f3b179d3

 <Turbolinux 8 Server>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/SRPMS/XFree86-4.2.0-35.src.rpm
     59407135 9e9d740bdc444bffff64d3f4f3fd2155

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/XFree86-100dpi-fonts-4.2.0-35.i586.rpm
     12400356 ebf80398fc8499b8396fcabd65bb335f
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/XFree86-4.2.0-35.i586.rpm
     22743850 a4508f94aabff1dcdde6343cd89368fc
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/XFree86-75dpi-fonts-4.2.0-35.i586.rpm
     10731201 726f98b6334e808a1b47b5e9e3d87d21
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/XFree86-contrib-4.2.0-35.i586.rpm
       308355 894d51f41ffe655b67478345d3bb664e
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/XFree86-cyrillic-fonts-4.2.0-35.i586.rpm
       397853 a6091c30d0b52e0b4e60518db32ec4ee
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/XFree86-devel-4.2.0-35.i586.rpm
      4614313 7a555e707d76e778c0ebb3d5931100cd
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/XFree86-libs-4.2.0-35.i586.rpm
      2129895 6c31315b24e735d81930f5c1ec83e31e
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/XFree86-xfs-4.2.0-35.i586.rpm
        72169 91e6ddfff0ce47f4270b45de09423912


 References:

 CVE
   [CVE-2007-1003]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1003
   [CVE-2007-1351]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1351
   [CVE-2007-1352]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1352
   [CVE-2007-1667]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1667

 --------------------------------------------------------------------------
 Revision History
    17 Apr 2007 Initial release
 --------------------------------------------------------------------------

 Copyright(C) 2007 Turbolinux, Inc. All rights reserved. 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFGJJaqK0LzjOqIJMwRAoaxAKCsmpOxt71Xhb5ugScU7bWWNth3QACgpt5W
GzBDBkHAjLCLoUSyVBjABBA=
=TX3k
-----END PGP SIGNATURE-----