xorg-server: Changes to 'refs/tags/xorg-server-2_1.4.1-git20080118-1'
Tag 'xorg-server-2_1.4.1-git20080118-1' created by Brice Goglin <bgoglin@debian.org> at 2008-01-18 22:11 +0000
Tagging upload of xorg-server 2:1.4.1~git20080118-1 to unstable.
Changes since xorg-server-2_1.4.1-git20080105-2:
Adam Jackson (1):
CVE-2007-6429: Don't spuriously reject <8bpp shm pixmaps.
Brice Goglin (2):
Apply grab fix for password authentication bypass
Prepare changelog for upload
Daniel Stone (3):
OS: IO: Zero out client buffers
XKB: XkbCopyKeymap: Don't leak all the sections
Xephyr: One-time keyboard leak fix
Julien Cristau (2):
Merge branch 'server-1.4-branch' of git://anongit.freedesktop.org/git/xorg/xserver into debian-unstable
Update changelogs, and drop security patches applied upstream.
Matthieu Herrb (6):
Fix for CVE-2007-5760 - XFree86 Misc extension out of bounds array index
Fix for CVE-2007-6428 - TOG-cup extension memory corruption.
Fix for CVE-2007-6427 - Xinput extension memory corruption.
Fix for CVE-2007-6429 - MIT-SHM and EVI extensions integer overflows.
Fix for CVE-2008-0006 - PCF Font parser buffer overflow.
Fix for CVE-2007-5958 - File existence disclosure.
---
ChangeLog | 624 ++++++++++
Xext/EVI.c | 15
Xext/cup.c | 3
Xext/sampleEVI.c | 29
Xext/security.c | 4
Xext/shm.c | 50
Xi/chgfctl.c | 7
Xi/chgkmap.c | 13
Xi/chgprop.c | 10
Xi/grabdev.c | 12
Xi/grabdevb.c | 10
Xi/grabdevk.c | 9
Xi/selectev.c | 11
Xi/sendexev.c | 14
debian/changelog | 14
debian/control | 2
debian/patches/15_CVE-2007-6427.diff | 241 ---
debian/patches/16_CVE-2007-6428.diff | 12
debian/patches/17_CVE-2007-6429.diff | 190 ---
debian/patches/18_CVE-2007-5760.diff | 13
debian/patches/19_CVE-2007-5958.diff | 20
debian/patches/20_CVE-2008-0006.diff | 18
debian/patches/42_dont_break_grab_and_focus_for_window_when_redirecting.diff | 35
debian/patches/series | 7
dix/dixfonts.c | 7
hw/kdrive/ephyr/ephyr.c | 1
hw/xfree86/common/xf86MiscExt.c | 4
os/io.c | 2
xkb/xkbUtils.c | 1
29 files changed, 806 insertions(+), 572 deletions(-)
---
Reply to: