diff -Nru /tmp/YnDJNIma0H/ltsp-5.0.7/client/ldm /tmp/rI6qOBATMy/ltsp-5.0.7.1/client/ldm --- /tmp/YnDJNIma0H/ltsp-5.0.7/client/ldm 2007-04-11 00:39:45.000000000 +0000 +++ /tmp/rI6qOBATMy/ltsp-5.0.7.1/client/ldm 2008-05-06 16:34:21.000000000 +0000 @@ -60,7 +60,7 @@ os.dup2(logfile.fileno(), sys.stderr.fileno()) while True: - server_opts = ['-br', '-ac', '-noreset'] + server_opts = ['-br', '-noreset'] if self.use_xfs: server_opts += ['-fp', self.fontpath] diff -Nru /tmp/YnDJNIma0H/ltsp-5.0.7/debian/changelog /tmp/rI6qOBATMy/ltsp-5.0.7.1/debian/changelog --- /tmp/YnDJNIma0H/ltsp-5.0.7/debian/changelog 2007-04-11 00:39:46.000000000 +0000 +++ /tmp/rI6qOBATMy/ltsp-5.0.7.1/debian/changelog 2008-05-06 16:35:30.000000000 +0000 @@ -1,3 +1,10 @@ +ltsp (5.0.7.1) feisty-security; urgency=low + + * fix CVE-2008-1293 (LP: #227295) that made unauthenticated access to the + local X server on the client possible. + + -- Oliver Grawert Tue, 6 May 2008 16:34:24 +0000 + ltsp (5.0.7) feisty; urgency=low * cosmetical fix, make sure we switch to vt 7 between usplash end