[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#689233: marked as done (xserver-xorg-core: /usr/bin/X contains hardcoded obsolete /var/lib/defoma font path)



Your message dated Tue, 08 Oct 2013 21:21:09 +0000
with message-id <E1VTeiL-0003Gh-Md@franck.debian.org>
and subject line Bug#689233: fixed in xorg-server 2:1.14.3-4
has caused the Debian Bug report #689233,
regarding xserver-xorg-core: /usr/bin/X contains hardcoded obsolete /var/lib/defoma font path
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
689233: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=689233
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: xserver-xorg-core
Version: 2:1.12.3.902-1
Severity: minor


Debian's custom defoma font configuration system has been withdrawn from service,
but the latest(?) Debian Xorg binary from  xserver-xorg-core  2:1.12.3.902-1
still contains a hard coded path to a defoma directory.

Xorg.0.log reports the warning

[   182.193] (WW) The directory "/var/lib/defoma/x-ttcidfont-conf.d/dirs/TrueType" does not exist.

strings /usr/bin/Xorg | grep defoma
/usr/share/fonts/X11/misc,/usr/share/fonts/X11/cyrillic,/usr/share/fonts/X11/100dpi/:unscaled,
/usr/share/fonts/X11/75dpi/:unscaled,/usr/share/fonts/X11/Type1,/usr/share/fonts/X11/100dpi,
/usr/share/fonts/X11/75dpi,/var/lib/defoma/x-ttcidfont-conf.d/dirs/TrueType,built-ins
                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^


-- Package-specific info:
X server symlink status:
------------------------
lrwxrwxrwx 1 root root 13 Mar  3  2011 /etc/X11/X -> /usr/bin/Xorg
-rwxr-xr-x 1 root root 2027892 Aug 22 11:38 /usr/bin/Xorg

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-4-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages xserver-xorg-core depends on:
ii  keyboard-configuration  1.82
ii  libaudit0               1:1.7.18-1.1
ii  libc6                   2.13-35
ii  libdrm2                 2.4.33-3
ii  libgcrypt11             1.5.0-3
ii  libpciaccess0           0.13.1-2
ii  libpixman-1-0           0.26.0-3
ii  libselinux1             2.1.9-5
ii  libudev0                175-7
ii  libxau6                 1:1.0.7-1
ii  libxdmcp6               1:1.1.1-1
ii  libxfont1               1:1.4.5-2
ii  udev                    175-7
ii  xserver-common          2:1.12.3.902-1

Versions of packages xserver-xorg-core recommends:
ii  libgl1-mesa-dri  8.0.4-2

Versions of packages xserver-xorg-core suggests:
ii  xfonts-100dpi    1:1.0.3
ii  xfonts-75dpi     1:1.0.3
ii  xfonts-scalable  1:1.0.3-1

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: xorg-server
Source-Version: 2:1.14.3-4

We believe that the bug you reported is fixed in the latest version of
xorg-server, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 689233@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Julien Cristau <jcristau@debian.org> (supplier of updated xorg-server package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Sat, 05 Oct 2013 15:57:55 +0200
Source: xorg-server
Binary: xserver-xorg-core xserver-xorg-core-udeb xserver-xorg-dev xdmx xdmx-tools xnest xvfb xserver-xephyr xserver-xfbdev xserver-xorg-core-dbg xserver-common
Architecture: source all amd64
Version: 2:1.14.3-4
Distribution: sid
Urgency: high
Maintainer: Debian X Strike Force <debian-x@lists.debian.org>
Changed-By: Julien Cristau <jcristau@debian.org>
Description: 
 xdmx       - distributed multihead X server
 xdmx-tools - Distributed Multihead X tools
 xnest      - Nested X server
 xserver-common - common files used by various X servers
 xserver-xephyr - nested X server
 xserver-xfbdev - Linux framebuffer device tiny X server
 xserver-xorg-core - Xorg X server - core server
 xserver-xorg-core-dbg - Xorg - the X.Org X server (debugging symbols)
 xserver-xorg-core-udeb - Xorg X server - core server (udeb)
 xserver-xorg-dev - Xorg X server - development files
 xvfb       - Virtual Framebuffer 'fake' X server
Closes: 689233
Changes: 
 xorg-server (2:1.14.3-4) unstable; urgency=high
 .
   [ Timo Aaltonen ]
   * rules: Drop defoma support from the font path. (Closes: #689233,
     LP: #986061)
 .
   [ Julien Cristau ]
   * Avoid use-after-free in dix/dixfonts.c: doImageText().  Addresses
     CVE-2013-4396.
Checksums-Sha1: 
 2b0b79e32d85bdde18cb3051b249097f62cfcb30 4145 xorg-server_1.14.3-4.dsc
 3013b9b24ebb77506c22e3a96c8a7557bfda3cd9 87392 xorg-server_1.14.3-4.diff.gz
 1ec146a93e809ddc1b309008f10446b1a6da0217 1520936 xserver-common_1.14.3-4_all.deb
 76e24424c4e8c675583954e0f7de042c43501048 1273750 xserver-xorg-core_1.14.3-4_amd64.deb
 309c05636f71786398af268cf1ca60b8bde2733e 882330 xserver-xorg-core-udeb_1.14.3-4_amd64.udeb
 416cc2d64a06152e3ad9739d085333eaf5dce1a7 240446 xserver-xorg-dev_1.14.3-4_amd64.deb
 d708f67490b225bb79201406952a8fc319276496 770716 xdmx_1.14.3-4_amd64.deb
 393d1948bcaa09a1b62464771d23f30469db4056 92020 xdmx-tools_1.14.3-4_amd64.deb
 0accf74d1ed1c78bd222e42503d9bbf9f1109b22 621202 xnest_1.14.3-4_amd64.deb
 7ccee12d9577b4324c85888b135d3531cb26c69d 772326 xvfb_1.14.3-4_amd64.deb
 e6c674e577f0c95b58e5f298c667c7d1e5d8e81f 844098 xserver-xephyr_1.14.3-4_amd64.deb
 c977afd35c90a3a7950a4278d7a9e9c9163ff018 721712 xserver-xfbdev_1.14.3-4_amd64.deb
 ae3908198e7aa550cc3d0b371d456cc463a81a3e 3876418 xserver-xorg-core-dbg_1.14.3-4_amd64.deb
Checksums-Sha256: 
 8811789711a866f0908818348e19f35e2bf277d63082ddc1441f17a88fe66e44 4145 xorg-server_1.14.3-4.dsc
 d545556608b00bc2dfc5e218cbab99a657605b5d97a539795d462b0a0d19c590 87392 xorg-server_1.14.3-4.diff.gz
 7d4ffa4f831192e414cebeb0fa991e3ae40596453c6077c616cf6c02e4a2bd02 1520936 xserver-common_1.14.3-4_all.deb
 8c19acf88bc9b58e04c379b830cc14f1ae49f6b8b685d0fb515f7c794c9fb3ac 1273750 xserver-xorg-core_1.14.3-4_amd64.deb
 96cc42bf639adef98757f5657df41fe797b48f6f8e76e8d0bc825cfdb680d4b2 882330 xserver-xorg-core-udeb_1.14.3-4_amd64.udeb
 2b4e2b1d84ac3f4542b1d1caa2a9a87340d38aeb04dd29f4d4eb5e417fd475c1 240446 xserver-xorg-dev_1.14.3-4_amd64.deb
 0d97a3cb92b81e0e41d772337fe1fd7dc31fd112e41eb463896dd5e97b4df4f0 770716 xdmx_1.14.3-4_amd64.deb
 6b7f598538541825230dc45ca4ccb8310b6908792e843f1c9ea5f6757cc2facf 92020 xdmx-tools_1.14.3-4_amd64.deb
 53811d92067e562362d87a1f062d8a4446aa290d6d38addafd2aa47e956c2077 621202 xnest_1.14.3-4_amd64.deb
 a737097d6ee84ae5b7501ae3c773a47c3914ed362f1849abf38017c1182b0555 772326 xvfb_1.14.3-4_amd64.deb
 8813f81711281b8199e67656195f6eb8d054483bab64a8f749b4c358605aac9c 844098 xserver-xephyr_1.14.3-4_amd64.deb
 e619660ba314ecbddba0551d4c9a6e67991fa7da5bfd336455f5219abeebc399 721712 xserver-xfbdev_1.14.3-4_amd64.deb
 70aa70be5814b3ab65c25ffe00bab953f02aab73fd90eb5e8eebac67914752f8 3876418 xserver-xorg-core-dbg_1.14.3-4_amd64.deb
Files: 
 a9f40110cc4ddd439d479466cbc3c943 4145 x11 optional xorg-server_1.14.3-4.dsc
 a9f45aa3c461d94a15f135d96e1b4fd2 87392 x11 optional xorg-server_1.14.3-4.diff.gz
 671ea5a249e9e29b1b754c1bac4eb8dd 1520936 x11 optional xserver-common_1.14.3-4_all.deb
 bbba92e74365540008f7ffd5f5dd8553 1273750 x11 optional xserver-xorg-core_1.14.3-4_amd64.deb
 a23b99306f746ee67b5a0045b42eec15 882330 debian-installer optional xserver-xorg-core-udeb_1.14.3-4_amd64.udeb
 e4283a0ea4af9dccc421cd02dda31d6c 240446 x11 optional xserver-xorg-dev_1.14.3-4_amd64.deb
 a79574f6a754e0cdb42c74b230fe19fa 770716 x11 optional xdmx_1.14.3-4_amd64.deb
 2b2e7030a980e65a4a4b9cfa9faabc01 92020 x11 optional xdmx-tools_1.14.3-4_amd64.deb
 2c576feea10e7396bc0a23615e33e31e 621202 x11 optional xnest_1.14.3-4_amd64.deb
 e29503880512b5cfc7afeedb2675bc02 772326 x11 optional xvfb_1.14.3-4_amd64.deb
 31d4515377d4037353116f64f4557068 844098 x11 optional xserver-xephyr_1.14.3-4_amd64.deb
 fea91d91d2eded11443af1c1a003fb65 721712 x11 optional xserver-xfbdev_1.14.3-4_amd64.deb
 fa8d80062cd6a4331327d22c44ae6d70 3876418 debug extra xserver-xorg-core-dbg_1.14.3-4_amd64.deb
Package-Type: udeb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)

iQIcBAEBAgAGBQJSVGt2AAoJEDEBgAUJBeQMPRsP/RUdNHvDqpzRxA0ox4th4Lth
DrV5PK7RCs4o1s3KJyItrmWl4nd5qhk3NbrOleIgbEc9pFnXAXCaZHdnk4Gcv4u0
eY04gSZqmOcjzkqtGttMYC6iAuSvEaXMAU1vxWtD9SBQI5bmFiEi5+8pFdhOdrvu
qYgyfmyi8M/6U9UlwV06dEWqZY2nR6zmShieUIGZM1XrZQXpBOh4SpfKYUwuM3pj
T26ii6/MFTxokOZgOuyVbCVmhzmqpBTGWzPCz4GVQ6RtP2W00Yf7aTvbU9cGEUuE
pGTcnkEYpF8CByCpp5qUM+tqhM0zXy2Z/j1MnXrZkubtYIJX9g7I4ch/IHEk3zV5
FD03mn12Si6y0bffexQaRei0IFOBlUFnWwIHi5YICKq6+768ENvOd+egJPBkXzM6
2muDT2TlhM+DtWuwACXDXOoDrRy8KNOmWaqSLFEUx/abWu18RUBjVrrQOkyhjPtg
QJgbjI2OETw9V8555Vwfa1rc2uRUuqU2TUZI+ekdwJAvWAJ51s1lQB7AQkZ12VhT
VXYHD/pfB2ud44BaqJ1FePq9HP46lJKyNsmyNFFtk7f+v+UXjSp1fKszTvoEL8TY
S9b3gkcdKgrXuiET4kdxKtvY4KRGBKlUOK71f5H4VrLcB57ZktNY0oq8s6bvRA39
LpRQWlE5WFM9RnxBwbHu
=SZLB
-----END PGP SIGNATURE-----

--- End Message ---

Reply to: