[CLA-2002:533] Conectiva Linux Security Announcement - XFree86
Date: Wed, 16 Oct 2002 20:01:02 -0200
From: [email protected]
To: [email protected], [email protected],
Subject: [CLA-2002:533] Conectiva Linux Security Announcement - XFree86
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- --------------------------------------------------------------------------
CONECTIVA LINUX SECURITY ANNOUNCEMENT
- --------------------------------------------------------------------------
PACKAGE : XFree86
SUMMARY : Several vulnerabilities
DATE : 2002-10-16 19:55:00
ID : CLA-2002:533
RELEVANT
RELEASES : 6.0, 7.0
- -------------------------------------------------------------------------
DESCRIPTION
XFree86 is a freely redistributable open-source implementation of the
X Window System, which is a client/server interface between display
hardware and the desktop environment.
This advisory addresses several vulnerabilities[1] in XFree86-4.0.1
in Conectiva Linux 6.0 and XFree86-4.0.3 in Conectiva Linux 7.0.
Conectiva Linux 8 was previously updated[2] and already contains
these fixes.
It also fixes several vulnerabilities present in XFree86 version
3.3.6a, which was distributed for compatibility reasons with
Conectiva Linux 6.0 and 7.0.
- MIT-SHM extension vulnerability
Roberto Zunino discovered a vulnerability in the MIT-SHM extension of
XFree86 prior to versions 4.2.1. The vulnerability allows a local
user who can run XFree86 to gain read/write access to any shared
memory segment in the system. Although the use of shared memory
segments to store trusted data is not a comom practice, by exploiting
this vulnerability the attacker potentially can get and/or change
sensitive information.
- Buffer overflow in glyph clipping for large origin.
A buffer overflow vulnerability[3] was found in the glyph code when
clipping large origins. A remote attacker could exploit this
vulnerability to cause a denial of service and possibly run arbitrary
code by, for example, using a large number of characters through web
page search forms of some web browsers.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CAN-2001-0955 to this issue[4].
Additional fixes from the XFree86 CVS tree are listed below and have
also been applied to this update.
- Check for negative reply length/overflow in _XAsyncReply().
Mike A. Harris sent[5] a patch to the XFree86 3.3 source tree to fix
an overflow vulnerability. The vulnerability is also present in
XFree86 4.x versions, and the patch was adapted to fix it.
- XDM restrictions bypassed by non existent directory
If the xdm auth directory did not exist, any user could connect to
the Xserver using xdm. This was reported by Galen Hancock and the fix
was made[6] by setting the authComplain variable to true as default.
This is the expected behavior and is specified in the manual page of
the xdm configuration.
- Authentication issues with mmap() on drm devices
Jeff Hartmann sent a fix[7] for a vulnerability in the way the mmap()
system call was being used on DRM devices.
- Kernel security hole in Linux int10 module
Marc La France commited[8] to the XFree86 CVS tree a fix for a
vulnerability in the linux int10 module.
XFree86 3.3.6 compatiblity packages are being upgraded with the
latest branch patches available. The changelog[9] entries from the
XFree86 source related to security fixes since our last update are
below:
- Avoid DoS attacks on xdm (Keith Packard).
- Check for negative reply length/overflow in _XAsyncReply (Xlib)
(#4601, Mike Harris).
- Fix possible buffer overflow (NOT on stack) in xdm xdmcp code
(patch69 from Red Hat SRPMS).
- Pull in fixes from 4.0.2 for the following problems:
. XlibInt buffer overflow
. libICE denial of service
. XOpenDisplay buffer overflow (#4450, Branden Robinson)
- Fix temp file problem in Imake.rules, InstallManPageAliases
(Matthieu Herrb)
- Pull in fixes from the main branch:
. xfs DoS (Paulo Cesar Pereira de Andrade and Keith Packard),
. _XAsyncReply() Xlib stack corruption,
. Xaw temp file handling (Branden Robinson).
- Safe tempfile handling for imake's probing of glibc version (based
on #4257, Colin Phipps).
- Fix a 1-byte overflow in Xtrans.c (#4182, Aaron Campbell).
- Back port fix for http://www.securityfocus.com/archive/1/139436
from 4.0 (#4181, Matthieu Herrb).
SOLUTION
All XFree86 users are advised to upgrade.
REFERENCES:
1.http://www.xfree86.org/security/
2.http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000529&idioma=en
3.http://marc.theaimsgroup.com/?l=vuln-dev&m=100118958310463&w=2
4.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2001-0955
5.http://www.xfree86.org/devel/archives/patch/2001-Apr/0069.shtml
6.http://www.xfree86.org/pipermail/cvs-commit/2001-October/003140.html
7.http://www.xfree86.org/pipermail/cvs-commit/2001-May/002350.html
8.http://www.xfree86.org/pipermail/cvs-commit/2001-March/001633.html
9.http://cvsweb.xfree86.org/cvsweb/~checkout~/xc/programs/Xserver/hw/xfree86/CHANGELOG?rev=3.390.2.341
DIRECT DOWNLOAD LINKS TO THE UPDATED PACKAGES
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-3DLabs-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-8514-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-AGX-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-FBDev-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-I128-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-Mach32-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-Mach64-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-Mach8-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-Mono-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-P9000-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-S3-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-S3V-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-SVGA-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-VGA16-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86_3-W32-3.3.6a-5U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-apm-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-ati-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-chips-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-cirrus-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-cyrix-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-devel-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-fbdev-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-glint-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-i740-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-i810-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-imstt-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-libs-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-mga-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-neomagic-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-nv-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-r128-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-rendition-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-s3virge-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-Server-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-sis-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-tdfx-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-trident-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-tseng-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-vesa-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-vga-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-xfs-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-Xnest-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/XFree86-Xvfb-4.0.1-35U60_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/SRPMS/XFree86_3-3.3.6a-5U60_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/6.0/SRPMS/XFree86-4.0.1-35U60_3cl.src.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-3DLabs-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-8514-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-AGX-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-base-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-I128-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-Mach32-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-Mach64-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-Mach8-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-Mono-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-P9000-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-S3-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-S3V-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-SVGA-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/compat-XFree86-W32-3.3.6-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/rstart-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-apm-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-ark-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-ati-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-ati-dri-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-bench-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-chips-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-cirrus-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-common-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-config-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-cyrix-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-devel-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-devel-static-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-dps-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-fbdev-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-GL-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-GL-devel-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-glide-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-glint-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-i128-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-i740-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-i810-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-i810-dri-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-libs-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-libs-common-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-libs-Xaw-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-libs-Xaw6-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-manpages-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-mga-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-mga-dri-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-minimal-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-misc-locales-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-afb-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-cfb-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-codeconv-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-extended-input-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-fb-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-fb-lowcolor-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-fb-multi-depths-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-freetype-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-xaa-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-modules-xtt-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-neomagic-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-nv-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-pex5-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-progs-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-proxy-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-rendition-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-s3virge-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-savage-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Server-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Server-common-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-siliconmotion-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-sis-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-tdfx-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-tdfx-dri-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-tga-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-trident-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-tseng-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-twm-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-vesa-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-vga-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-xdm-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-xfs-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-xie-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-xkb-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Xnest-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Xprt-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/XFree86-Xvfb-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/xterm-4.0.3-26U70_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/SRPMS/XFree86-4.0.3-26U70_3cl.src.rpm
ADDITIONAL INSTRUCTIONS
Users of Conectiva Linux version 6.0 or higher may use apt to perform
upgrades of RPM packages:
- add the following line to /etc/apt/sources.list if it is not there yet
(you may also use linuxconf to do this):
rpm [cncbr] ftp://atualizacoes.conectiva.com.br 6.0/conectiva updates
(replace 6.0 with the correct version number if you are not running CL6.0)
- run: apt-get update
- after that, execute: apt-get upgrade
Detailed instructions reagarding the use of apt and upgrade examples
can be found at http://distro.conectiva.com.br/atualizacoes/#apt?idioma=en
- -------------------------------------------------------------------------
All packages are signed with Conectiva's GPG key. The key and instructions
on how to import it can be found at
http://distro.conectiva.com.br/seguranca/chave/?idioma=en
Instructions on how to check the signatures of the RPM packages can be
found at http://distro.conectiva.com.br/seguranca/politica/?idioma=en
- -------------------------------------------------------------------------
All our advisories and generic update instructions can be viewed at
http://distro.conectiva.com.br/atualizacoes/?idioma=en
- -------------------------------------------------------------------------
subscribe: [email protected]
unsubscribe: [email protected]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE9reGd42jd0JmAcZARAmGNAKCkp2g/ANyKp3jpv0TKxvJD81MmWwCgif4l
Zz5T68G8Z6HukYinaqT+ul4=
=a3qR
-----END PGP SIGNATURE-----
