[Touch-packages] [Bug 1516831] Re: XDMCP Request packet with no addresses crashes LightDM

2015-12-16 Thread Launchpad Bug Tracker 
This bug was fixed in the package lightdm - 1.14.4-0ubuntu1

---
lightdm (1.14.4-0ubuntu1) vivid; urgency=medium

  * New upstream release:
- Handle XDMCP Request packet with no addresses. (LP: #1516831)
- Don't start LightDM if the XDMCP server is configured with a key that
  doesn't exist. (LP: #1517685)
- Add IP addresses to XDMCP log messages.
- Refactor XDMCP error handling.
- Add more tests.

 -- Robert Ancell   Fri, 20 Nov 2015
16:01:15 +1300

** Changed in: lightdm (Ubuntu Vivid)
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1516831

Title:
  XDMCP Request packet with no addresses crashes LightDM

Status in Light Display Manager:
  Fix Released
Status in Light Display Manager 1.14 series:
  Fix Released
Status in Light Display Manager 1.16 series:
  Fix Released
Status in lightdm package in Ubuntu:
  Fix Released
Status in lightdm source package in Vivid:
  Fix Released
Status in lightdm source package in Wily:
  Fix Released

Bug description:
  [Impact]
  If LightDM receives an XDMCP Request packet with no addresses then it will 
attempt to access a negative index into an array and crash. This only occurs if 
the XDMCP server is enabled.

  [Test Case]
  1. Enable XDMCP in lightdm.conf:
  [XDMCPServer]
  enabled=true
  2. Start LightDM
  3. Send an XDMCP Request without an empty addresses field (valid XDMCP 
servers do not send this).

  Expected result:
  The request is ignored.

  Observed result:
  LightDM crashes.

To manage notifications about this bug go to:
https://bugs.launchpad.net/lightdm/+bug/1516831/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

[Touch-packages] [Bug 1516831] Re: XDMCP Request packet with no addresses crashes LightDM

2015-12-10 Thread Launchpad Bug Tracker 
This bug was fixed in the package lightdm - 1.16.6-0ubuntu1

---
lightdm (1.16.6-0ubuntu1) wily; urgency=medium

  * New upstream release:
- Handle XDMCP Request packet with no addresses. (LP: #1516831)
- Don't start LightDM if the XDMCP server is configured with a key that
  doesn't exist. (LP: #1517685)
- Add IP addresses to XDMCP log messages.
- Refactor XDMCP error handling.
- Add more tests.

 -- Robert Ancell   Fri, 20 Nov 2015
15:46:15 +1300

** Changed in: lightdm (Ubuntu Wily)
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1516831

Title:
  XDMCP Request packet with no addresses crashes LightDM

Status in Light Display Manager:
  Fix Released
Status in Light Display Manager 1.14 series:
  Fix Released
Status in Light Display Manager 1.16 series:
  Fix Released
Status in lightdm package in Ubuntu:
  Fix Released
Status in lightdm source package in Vivid:
  Fix Committed
Status in lightdm source package in Wily:
  Fix Released

Bug description:
  [Impact]
  If LightDM receives an XDMCP Request packet with no addresses then it will 
attempt to access a negative index into an array and crash. This only occurs if 
the XDMCP server is enabled.

  [Test Case]
  1. Enable XDMCP in lightdm.conf:
  [XDMCPServer]
  enabled=true
  2. Start LightDM
  3. Send an XDMCP Request without an empty addresses field (valid XDMCP 
servers do not send this).

  Expected result:
  The request is ignored.

  Observed result:
  LightDM crashes.

To manage notifications about this bug go to:
https://bugs.launchpad.net/lightdm/+bug/1516831/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

[Touch-packages] [Bug 1516831] Re: XDMCP Request packet with no addresses crashes LightDM

2015-12-03 Thread Brian Murray 
Hello Robert, or anyone else affected,

Accepted lightdm into vivid-proposed. The package will build now and be
available at
https://launchpad.net/ubuntu/+source/lightdm/1.14.4-0ubuntu1 in a few
hours, and then in the -proposed repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to
enable and use -proposed.  Your feedback will aid us getting this update
out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested, and change the tag
from verification-needed to verification-done. If it does not fix the
bug for you, please add a comment stating that, and change the tag to
verification-failed.  In either case, details of your testing will help
us make a better decision.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance!

** Also affects: lightdm (Ubuntu Vivid)
   Importance: Undecided
   Status: New

** Changed in: lightdm (Ubuntu Vivid)
   Importance: Undecided => Critical

** Changed in: lightdm (Ubuntu Vivid)
   Status: New => Fix Committed

** Changed in: lightdm (Ubuntu Vivid)
   Status: Fix Committed => Triaged

** Changed in: lightdm (Ubuntu Vivid)
   Status: Triaged => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1516831

Title:
  XDMCP Request packet with no addresses crashes LightDM

Status in Light Display Manager:
  Fix Released
Status in Light Display Manager 1.14 series:
  Fix Released
Status in Light Display Manager 1.16 series:
  Fix Released
Status in lightdm package in Ubuntu:
  Fix Committed
Status in lightdm source package in Vivid:
  Fix Committed
Status in lightdm source package in Wily:
  Fix Committed

Bug description:
  [Impact]
  If LightDM receives an XDMCP Request packet with no addresses then it will 
attempt to access a negative index into an array and crash. This only occurs if 
the XDMCP server is enabled.

  [Test Case]
  1. Enable XDMCP in lightdm.conf:
  [XDMCPServer]
  enabled=true
  2. Start LightDM
  3. Send an XDMCP Request without an empty addresses field (valid XDMCP 
servers do not send this).

  Expected result:
  The request is ignored.

  Observed result:
  LightDM crashes.

To manage notifications about this bug go to:
https://bugs.launchpad.net/lightdm/+bug/1516831/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

[Touch-packages] [Bug 1516831] Re: XDMCP Request packet with no addresses crashes LightDM

2015-12-03 Thread Brian Murray 
Hello Robert, or anyone else affected,

Accepted lightdm into wily-proposed. The package will build now and be
available at
https://launchpad.net/ubuntu/+source/lightdm/1.16.6-0ubuntu1 in a few
hours, and then in the -proposed repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to
enable and use -proposed.  Your feedback will aid us getting this update
out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested, and change the tag
from verification-needed to verification-done. If it does not fix the
bug for you, please add a comment stating that, and change the tag to
verification-failed.  In either case, details of your testing will help
us make a better decision.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance!

** Tags added: verification-needed

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1516831

Title:
  XDMCP Request packet with no addresses crashes LightDM

Status in Light Display Manager:
  Fix Released
Status in Light Display Manager 1.14 series:
  Fix Released
Status in Light Display Manager 1.16 series:
  Fix Released
Status in lightdm package in Ubuntu:
  Fix Committed
Status in lightdm source package in Wily:
  Fix Committed

Bug description:
  [Impact]
  If LightDM receives an XDMCP Request packet with no addresses then it will 
attempt to access a negative index into an array and crash. This only occurs if 
the XDMCP server is enabled.

  [Test Case]
  1. Enable XDMCP in lightdm.conf:
  [XDMCPServer]
  enabled=true
  2. Start LightDM
  3. Send an XDMCP Request without an empty addresses field (valid XDMCP 
servers do not send this).

  Expected result:
  The request is ignored.

  Observed result:
  LightDM crashes.

To manage notifications about this bug go to:
https://bugs.launchpad.net/lightdm/+bug/1516831/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

[Touch-packages] [Bug 1516831] Re: XDMCP Request packet with no addresses crashes LightDM

2015-12-03 Thread Robert Ancell 
** Changed in: lightdm (Ubuntu)
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1516831

Title:
  XDMCP Request packet with no addresses crashes LightDM

Status in Light Display Manager:
  Fix Released
Status in Light Display Manager 1.14 series:
  Fix Released
Status in Light Display Manager 1.16 series:
  Fix Released
Status in lightdm package in Ubuntu:
  Fix Released
Status in lightdm source package in Vivid:
  Fix Committed
Status in lightdm source package in Wily:
  Fix Committed

Bug description:
  [Impact]
  If LightDM receives an XDMCP Request packet with no addresses then it will 
attempt to access a negative index into an array and crash. This only occurs if 
the XDMCP server is enabled.

  [Test Case]
  1. Enable XDMCP in lightdm.conf:
  [XDMCPServer]
  enabled=true
  2. Start LightDM
  3. Send an XDMCP Request without an empty addresses field (valid XDMCP 
servers do not send this).

  Expected result:
  The request is ignored.

  Observed result:
  LightDM crashes.

To manage notifications about this bug go to:
https://bugs.launchpad.net/lightdm/+bug/1516831/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

[Touch-packages] [Bug 1516831] Re: XDMCP Request packet with no addresses crashes LightDM

2015-12-03 Thread Robert Ancell 
** Changed in: lightdm (Ubuntu)
 Assignee: (unassigned) => Robert Ancell (robert-ancell)

** Changed in: lightdm (Ubuntu Vivid)
 Assignee: (unassigned) => Robert Ancell (robert-ancell)

** Changed in: lightdm (Ubuntu Wily)
 Assignee: (unassigned) => Robert Ancell (robert-ancell)

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1516831

Title:
  XDMCP Request packet with no addresses crashes LightDM

Status in Light Display Manager:
  Fix Released
Status in Light Display Manager 1.14 series:
  Fix Released
Status in Light Display Manager 1.16 series:
  Fix Released
Status in lightdm package in Ubuntu:
  Fix Released
Status in lightdm source package in Vivid:
  Fix Committed
Status in lightdm source package in Wily:
  Fix Committed

Bug description:
  [Impact]
  If LightDM receives an XDMCP Request packet with no addresses then it will 
attempt to access a negative index into an array and crash. This only occurs if 
the XDMCP server is enabled.

  [Test Case]
  1. Enable XDMCP in lightdm.conf:
  [XDMCPServer]
  enabled=true
  2. Start LightDM
  3. Send an XDMCP Request without an empty addresses field (valid XDMCP 
servers do not send this).

  Expected result:
  The request is ignored.

  Observed result:
  LightDM crashes.

To manage notifications about this bug go to:
https://bugs.launchpad.net/lightdm/+bug/1516831/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

[Touch-packages] [Bug 1516831] Re: XDMCP Request packet with no addresses crashes LightDM

2015-12-03 Thread Robert Ancell 
** Tags removed: verification-needed
** Tags added: verification-done-vivid verification-done-wily

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1516831

Title:
  XDMCP Request packet with no addresses crashes LightDM

Status in Light Display Manager:
  Fix Released
Status in Light Display Manager 1.14 series:
  Fix Released
Status in Light Display Manager 1.16 series:
  Fix Released
Status in lightdm package in Ubuntu:
  Fix Released
Status in lightdm source package in Vivid:
  Fix Committed
Status in lightdm source package in Wily:
  Fix Committed

Bug description:
  [Impact]
  If LightDM receives an XDMCP Request packet with no addresses then it will 
attempt to access a negative index into an array and crash. This only occurs if 
the XDMCP server is enabled.

  [Test Case]
  1. Enable XDMCP in lightdm.conf:
  [XDMCPServer]
  enabled=true
  2. Start LightDM
  3. Send an XDMCP Request without an empty addresses field (valid XDMCP 
servers do not send this).

  Expected result:
  The request is ignored.

  Observed result:
  LightDM crashes.

To manage notifications about this bug go to:
https://bugs.launchpad.net/lightdm/+bug/1516831/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

[Touch-packages] [Bug 1516831] Re: XDMCP Request packet with no addresses crashes LightDM

2015-11-24 Thread Yves-Alexis Perez 
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2015-8316

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1516831

Title:
  XDMCP Request packet with no addresses crashes LightDM

Status in Light Display Manager:
  Fix Released
Status in Light Display Manager 1.14 series:
  Fix Released
Status in Light Display Manager 1.16 series:
  Fix Released
Status in lightdm package in Ubuntu:
  Fix Committed
Status in lightdm source package in Wily:
  Fix Committed

Bug description:
  [Impact]
  If LightDM receives an XDMCP Request packet with no addresses then it will 
attempt to access a negative index into an array and crash. This only occurs if 
the XDMCP server is enabled.

  [Test Case]
  1. Enable XDMCP in lightdm.conf:
  [XDMCPServer]
  enabled=true
  2. Start LightDM
  3. Send an XDMCP Request without an empty addresses field (valid XDMCP 
servers do not send this).

  Expected result:
  The request is ignored.

  Observed result:
  LightDM crashes.

To manage notifications about this bug go to:
https://bugs.launchpad.net/lightdm/+bug/1516831/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

[Touch-packages] [Bug 1516831] Re: XDMCP Request packet with no addresses crashes LightDM

2015-11-20 Thread Robert Ancell 
The way I found this was by testing the SRU in vivid - for some reason
the X server was sending Request packets with a addresses field empty.
Other Ubuntu releases are not doing this. I haven't yet investigated if
why it was doing this.

** Also affects: lightdm (Ubuntu)
   Importance: Undecided
   Status: New

** Also affects: lightdm (Ubuntu Wily)
   Importance: Undecided
   Status: New

** Changed in: lightdm (Ubuntu)
   Status: New => Fix Committed

** Changed in: lightdm (Ubuntu Wily)
   Status: New => Fix Committed

** Changed in: lightdm (Ubuntu)
   Importance: Undecided => Critical

** Changed in: lightdm (Ubuntu Wily)
   Importance: Undecided => Critical

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1516831

Title:
  XDMCP Request packet with no addresses crashes LightDM

Status in Light Display Manager:
  Fix Released
Status in Light Display Manager 1.14 series:
  Fix Released
Status in Light Display Manager 1.16 series:
  Fix Released
Status in lightdm package in Ubuntu:
  Fix Committed
Status in lightdm source package in Wily:
  Fix Committed

Bug description:
  [Impact]
  If LightDM receives an XDMCP Request packet with no addresses then it will 
attempt to access a negative index into an array and crash. This only occurs if 
the XDMCP server is enabled.

  [Test Case]
  1. Enable XDMCP in lightdm.conf:
  [XDMCPServer]
  enabled=true
  2. Start LightDM
  3. Send an XDMCP Request without an empty addresses field (valid XDMCP 
servers do not send this).

  Expected result:
  The request is ignored.

  Observed result:
  LightDM crashes.

To manage notifications about this bug go to:
https://bugs.launchpad.net/lightdm/+bug/1516831/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp