xorg-server (2:1.16.2.901-1ubuntu4) vivid; urgency=medium
* SECURITY UPDATE: information leak and denial of service in
XkbSetGeometry
- debian/patches/CVE-2015-0255.patch: properly check lengths in
xkb/xkb.c.
- CVE-2015-0255
* debian/patches/dix-allow-zero-height-putimage-requests.patch: fix
regression in CVE-2014-8092 security update by allowing zero-height
PutImage requests in dix/dispatch.c.
Date: Tue, 17 Feb 2015 07:56:08 -0500
Changed-By: Marc Deslauriers <[email protected]>
Maintainer: Ubuntu X-SWAT <[email protected]>
https://launchpad.net/ubuntu/+source/xorg-server/2:1.16.2.901-1ubuntu4
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 17 Feb 2015 07:56:08 -0500
Source: xorg-server
Binary: xserver-xorg-core xserver-xorg-core-udeb xserver-xorg-dev xdmx
xdmx-tools xnest xvfb xserver-xephyr xserver-xorg-core-dbg xserver-common
xserver-xorg-xmir xorg-server-source xwayland
Architecture: source
Version: 2:1.16.2.901-1ubuntu4
Distribution: vivid
Urgency: medium
Maintainer: Ubuntu X-SWAT <[email protected]>
Changed-By: Marc Deslauriers <[email protected]>
Description:
xdmx - distributed multihead X server
xdmx-tools - Distributed Multihead X tools
xnest - Nested X server
xorg-server-source - Xorg X server - source files
xserver-common - common files used by various X servers
xserver-xephyr - nested X server
xserver-xorg-core - Xorg X server - core server
xserver-xorg-core-dbg - Xorg - the X.Org X server (debugging symbols)
xserver-xorg-core-udeb - Xorg X server - core server (udeb)
xserver-xorg-dev - Xorg X server - development files
xserver-xorg-xmir - Xorg - the X.Org X server (module for running nested in
Mir)
xvfb - Virtual Framebuffer 'fake' X server
xwayland - Xwayland X server
Changes:
xorg-server (2:1.16.2.901-1ubuntu4) vivid; urgency=medium
.
* SECURITY UPDATE: information leak and denial of service in
XkbSetGeometry
- debian/patches/CVE-2015-0255.patch: properly check lengths in
xkb/xkb.c.
- CVE-2015-0255
* debian/patches/dix-allow-zero-height-putimage-requests.patch: fix
regression in CVE-2014-8092 security update by allowing zero-height
PutImage requests in dix/dispatch.c.
Checksums-Sha1:
64145dcbf6630a79cc69cae8f708e97b85e2cd13 4972
xorg-server_1.16.2.901-1ubuntu4.dsc
5f1344e3d66b6c75d2b41174be4da016539d975c 189772
xorg-server_1.16.2.901-1ubuntu4.diff.gz
Checksums-Sha256:
296fac6c50e4e38569538653689f2012ff26d547b4a0bc86de0b0293031162a0 4972
xorg-server_1.16.2.901-1ubuntu4.dsc
620efea0f5828f79efdeb9db9ac5b7c130c585856cc46dbc5b6afe454c5637a1 189772
xorg-server_1.16.2.901-1ubuntu4.diff.gz
Files:
86909cfe1fc066d39da868b73d4cfe4f 4972 x11 optional
xorg-server_1.16.2.901-1ubuntu4.dsc
12e12cf2b7bb0d9a3d5449508d45744b 189772 x11 optional
xorg-server_1.16.2.901-1ubuntu4.diff.gz
Original-Maintainer: Debian X Strike Force <[email protected]>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=mDMF
-----END PGP SIGNATURE-----
--
Vivid-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/vivid-changes
