Debian 3.1 DSA 1249-1: Critical Xfree86 Privilege Escalation

Sean Larsson discovered an integer overflow in the Render extension,
which might lead to denial of service or local privilege escalation.

CVE-2006-6102

Sean Larsson discovered an integer overflow in the DBE extension,
which might lead to denial of service or local privilege escalation.

CVE-2006-6103

Sean Larsson discovered an integer overflow in the DBE extension,
which might lead to denial of service or local privilege escalation.

For the stable distribution (sarge) these problems have been fixed in
version 4.3.0.dfsg.1-14sarge3. This update lacks builds for the
Motorola 680x0 architecture, which had build problems. Packages will be
released once this problem has been resolved.

For the upcoming stable distribution (etch) these problems have been fixed
in version 1.1.1-15 of xorg-server.

For the unstable distribution (sid) these problems have been fixed
in version 1.1.1-15 of xorg-server.

We recommend that you upgrade your XFree86 packages.

Upgrade ...