----------------------------------------------------------------------

Did you know that a change in our assessment rating, exploit code
availability, or if an updated patch is released by the vendor, is
not part of this mailing-list?

Click here to learn more:
http://secunia.com/advisories/business_solutions/

----------------------------------------------------------------------

TITLE:
Debian update for xterm

SECUNIA ADVISORY ID:
SA33397

VERIFY ADVISORY:
http://secunia.com/advisories/33397/

CRITICAL:
Moderately critical

IMPACT:
System access

WHERE:
>From remote

OPERATING SYSTEM:
Debian GNU/Linux 4.0
http://secunia.com/advisories/product/13844/
Debian GNU/Linux unstable alias sid
http://secunia.com/advisories/product/530/

DESCRIPTION:
Debian has issued an update for xterm. This fixes a vulnerability,
which can be exploited by malicious people to compromise a user's
system.

For more information:
SA33318

SOLUTION:
Apply updated packages.

-- Debian GNU/Linux 4.0 alias etch --

Source archives:

http://security.debian.org/pool/updates/main/x/xterm/xterm_222-1etch3.dsc
Size/MD5 checksum: 1123 3bcc850fe7c9057e5d5d03617cc95195
http://security.debian.org/pool/updates/main/x/xterm/xterm_222-1etch3.diff.gz
Size/MD5 checksum: 61664 f1e11e4f4c85db1e2ffa67c5d132d2e6
http://security.debian.org/pool/updates/main/x/xterm/xterm_222.orig.tar.gz
Size/MD5 checksum: 802986 bb77882a33083632a9c6c9de004a54fb

alpha architecture (DEC Alpha)

http://security.debian.org/pool/updates/main/x/xterm/xterm_222-1etch3_alpha.deb
Size/MD5 checksum: 437394 2a16b16a6ed79a908987769b9b5a68d8

amd64 architecture (AMD x86_64 (AMD64))

http://security.debian.org/pool/updates/main/x/xterm/xterm_222-1etch3_amd64.deb
Size/MD5 checksum: 416434 46ba9b4430c313464afeaa856d02f09a

arm architecture (ARM)

http://security.debian.org/pool/updates/main/x/xterm/xterm_222-1etch3_arm.deb
Size/MD5 checksum: 412020 9119d878ffedf54c843ec84a98022a3d

hppa architecture (HP PA RISC)

http://security.debian.org/pool/updates/main/x/xterm/xterm_222-1etch3_hppa.deb
Size/MD5 checksum: 421890 9b3326921fbbd0ba014b3717b20c53fb

i386 architecture (Intel ia32)

http://security.debian.org/pool/updates/main/x/xterm/xterm_222-1etch3_i386.deb
Size/MD5 checksum: 403908 f54263828a01af2af86f25c1fedc7aa6

ia64 architecture (Intel ia64)

http://security.debian.org/pool/updates/main/x/xterm/xterm_222-1etch3_ia64.deb
Size/MD5 checksum: 509374 052861cf2a23d7a414c038d510fc7f01

mips architecture (MIPS (Big Endian))

http://security.debian.org/pool/updates/main/x/xterm/xterm_222-1etch3_mips.deb
Size/MD5 checksum: 428858 63615939a4de2f4e3ba0cc61adbf0e47

mipsel architecture (MIPS (Little Endian))

http://security.debian.org/pool/updates/main/x/xterm/xterm_222-1etch3_mipsel.deb
Size/MD5 checksum: 425604 9d18da53eea366eb2688dfe629d95e82

powerpc architecture (PowerPC)

http://security.debian.org/pool/updates/main/x/xterm/xterm_222-1etch3_powerpc.deb
Size/MD5 checksum: 409986 824e743d4a6a1abeb5c1fdc0a9e7d006

s390 architecture (IBM S/390)

http://security.debian.org/pool/updates/main/x/xterm/xterm_222-1etch3_s390.deb
Size/MD5 checksum: 422196 9b78491ef8fb34da8d5e183e91fc6c65

sparc architecture (Sun SPARC/UltraSPARC)

http://security.debian.org/pool/updates/main/x/xterm/xterm_222-1etch3_sparc.deb
Size/MD5 checksum: 409994 e284b9163d0da06f932f8e243ccaee2b

-- Debian GNU/Linux unstable alias sid --

Reportedly, this will be fixed soon.

ORIGINAL ADVISORY:
DSA-1694-1:
http://lists.debian.org/debian-security-announce/2009/msg00000.html

OTHER REFERENCES:
SA33318:
http://secunia.com/advisories/33318/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------