Fix a potential SEGV in xauth. Vulnerabilities have been found in the XFree86 X servers. The problems are associated with buffer overflows in code that processes user-supplied data. All releases of XFree86 up to and including 3.3.2 patch 2 are vulnerable to these problems. A source patch for these problems is available now.
Updated binaries are also available.
The updated binaries can be found in the X3323upd.tgz files and Servers and PC98-Servers directories in the appropriate subdirectories of the XFree86 3.3.2 binaries directory . Information about installing the updated binaries can be found in an updated version of the XFree86 3.3.2 Release Notes . These affect xterm and all other setuid-root programs that use these libraries. The problems are associated with buffer overflows in code that processes user-supplied data. The Xt library problems include those fixed in TOG's recent public patch 3 for X11R6.3.