[Cucumber-linux-security] xorg-server (security update is available)

[Z5T1 <z5...@z5...>]

  Update Information

A security update is available for xorg-server for the following
versions of Cucumber Linux:

  * 1.0.rc

Here are the details from the Cucumber 1.0.rc changelog:

+----------------+
Thu Jul 6 17:26:26 EDT 2017
x-base/xorg-server rebuilt (build 3) to fix some stack overflow related security
	issues which could, amongst other things, result in an X server crash or
	arbitrary code execution at the privilege level of the X server by an
	unprivileged, authenticated user. For more information see:
		https://nvd.nist.gov/vuln/detail/CVE-2017-10971
		https://nvd.nist.gov/vuln/detail/CVE-2017-10972
		https://bugzilla.suse.com/show_bug.cgi?id=1035283
* SECURITY FIX *
+----------------+

------------------------------------------------------------------------


  Installing the Update

The updated package can be installed via Pickle by running the following
commands (as root):

# pickle --update
# pickle

Make sure xorg-server is selected on the update list, and then select
Ok. Pickle will then install the updated package.

If you prefer to download the updated package manually, it can be found
at the following location:

Cucumber 1.0.rc i686:
http://mirror.cucumberlinux.com/cucumber/cucumber-1.0.rc/cucumber-i686/x-base/xorg-server-1.18.1-i686-3.txz

Cucumber 1.0.rc x86_64:
http://mirror.cucumberlinux.com/cucumber/cucumber-1.0.rc/cucumber-x86_64/x-base/xorg-server-1.18.1-x86_64-3.txz

To upgrade the package manually, download the new package and run the
following command (as root):

# upgradepkg xorg-server-1.18.1-i686-3.txz


------------------------------------------------------------------------
The Cucumber Linux Security Team
cuc...@li...
http://www.cucumberlinux.com/security.php