[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

libxinerama: Changes to 'debian-wheezy'



New branch 'debian-wheezy' available with the following commits:
commit 0a024e79b44f0c2800a33a5bed3e27b5a21b47c9
Author: Julien Cristau <jcristau@debian.org>
Date:   Tue May 14 16:49:22 2013 +0200

    Upload to wheezy-security

commit 0e1cc86e8fc9f56ac97a60ed22270b230207a1cf
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Fri Mar 8 19:55:55 2013 -0800

    integer overflow in XineramaQueryScreens() [CVE-2013-1985]
    
    If the reported number of screens is too large, the calculations to
    allocate memory for them may overflow, leaving us writing beyond the
    bounds of the allocation.
    
    Reported-by: Ilja Van Sprundel <ivansprundel@ioactive.com>
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Signed-off-by: Julien Cristau <jcristau@debian.org>

commit 8c1bc19660e55761b2418d0d12e63eec5e423932
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sat May 4 09:21:14 2013 -0700

    Use _XEatDataWords to avoid overflow of _XEatData calculations
    
    rep.length is a CARD32, so rep.length << 2 could overflow in 32-bit builds
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Signed-off-by: Julien Cristau <jcristau@debian.org>


Reply to: