~ubuntu-branches/ubuntu/gutsy/xorg-server/gutsy-security : changes

~ubuntu-branches/ubuntu/gutsy/xorg-server/gutsy-security » Changes from revision 62

From Revision 59 to 40

Rev	Summary	Authors	Tags	Date
59	* SECURITY UPDATE: multiple memory corruption flaws. * SECURITY UPDATE: multiple memory corruption flaws. * Added fix_CVE-2007-5958.patch: upstream fix from Matthieu Herrb. * Added fix_CVE-2007-5760.patch: backported upstream fixes (bbde5b62a137ba726a747b838d81e92d72c1b42b) for XFree86 Misc extension out of bounds array index. * Added fix_CVE-2007-6427.patch: backported upstream fixes (dd5e0f5cd5f3a87fee86d99c073ffa7cf89b0a27) for Xinput extension memory corruption. * Added fix_CVE-2007-6428.patch: backported upstream fixes (7dc1717ff0f96b99271a912b8948dfce5164d5ad) for TOG-cup extension memory corruption. * Added fix_CVE-2007-6429.patch: backported upstream fixes (6de61f82728df22ea01f9659df6581b87f33f11d) for MIT-SHM and EVI extensions integer overflows. * Added fix_CVE-2008-0006.patch: backported upstream fixes (8e133d96740d010a4fd969a8188e6e71fb2cafe2) for PCF Font parser buffer overflow.	Kees Cook	2:1.3.0.0.dfsg-12ubuntu8.1	16 years ago
58	Add 145_glx_visuals_bound_check.patch to fix issue where mes... Add 145_glx_visuals_bound_check.patch to fix issue where mesa incorrectly counts its visuals and can free too many of them during video mode changes (VT switch, restart, hibernate, etc.) such as when running Compiz. (closes LP: #127101)	Bryce Harrington	2:1.3.0.0.dfsg-12ubuntu8	16 years ago
57	Drop 143_fedora_xserver-1.3.0-randr12-config-hack.patch Drop 143_fedora_xserver-1.3.0-randr12-config-hack.patch as it causes failure to detect proper resolution on some intel hardware. (closes LP: #144956)	Bryce Harrington	2:1.3.0.0.dfsg-12ubuntu7	16 years ago
56	Drop 214_Bug_9680-_Remove_bogus_blank_length_limiting_in_xf8... Drop 214_Bug_9680-_Remove_bogus_blank_length_limiting_in_xf86SetModeCrtc.patch as it is causing black bars to appear on screen for i810 users. (closes LP: #137604several dupes)	Bryce Harrington	2:1.3.0.0.dfsg-12ubuntu6	16 years ago
55	[ Kees Cook ] [ Kees Cook ] * debian/patches/132_composite-no-clipping.diff: Adjusted WindowRec structure order and RedirectDraw logic to avoid nvidia crashes (fixes LP: #130325). * debian/patches/100_security_fdo-bug-7447.diff: Composite used for pixmap population on redirect. [CVE-2007-4730]	Bryce Harrington	2:1.3.0.0.dfsg-12ubuntu5	16 years ago
54	* debian/patches/133_psb_auto.patch: Add automatic detectio... * debian/patches/133_psb_auto.patch: Add automatic detection of Poulsbo hardware when running without a Device definition. * Added some cherry-picked patches from fedora: - 134_fedorda_xorg-x11-server-1.1.1-vt-activate-is-a-terrible-api.patch: Fixes race condition where someone does a VT_ACTIVATE between another ACTIVATE/WAITACTIVE by adding a fail. (Potentially might address Ubuntu bugs 134478 and/or 134982) - 135_fedora_xorg-x11-server-1.1.1-xkb-in-xnest.patch: Fixes issue when starting a session in an xnest nest environment as a different user, where keyboard map does not get preserved. Removes NO_HW_ONLY_EXTS check to address this issue. (RedHat bug 193431; Potentially may address Ubuntu bug 44846) - 136_fedora_xserver-1.2.0-honor-displaysize.patch: Fixes issue if monitor width and height have been specified, xserver would override them with the hsize/vsize detected from DDC. - 137_fedora_xserver-1.2.0-vfprintf.patch: Fixes typo 'vfprinf' - 138_fedora_xserver-1.3.0-default-dpi.patch: Changes default dpi to 100. (Addresses Ubuntu bugs 118745, 107320, many others...) - 139_fedora_xserver-1.3.0-document-fontpath-correctly.patch: Fixes document fontpaths shown in the man page. - 140_fedora_xserver-1.3.0-domain-obiwan.patch: Fixes longstanding bug in domain support. - 141_fedora_xserver-1.3.0-edid-quirk-backports.patch: Adds quirk for Samsung SyncMaster 225BW. - 142_fedora_xserver-1.3.0-no-pseudocolor-composite.patch: Composite on 8bpp pseudocolor root windows appears to fail, so just disable it on anything pseudocolor for safety. - 143_fedora_xserver-1.3.0-randr12-config-hack.patch: Adds check to use the screen's xrandr modes if a preferred mode was not specified. - 144_fedora_xserver-1.3.0-xnest-exposures.patch: Only collect xnest exposures for xexposes with non-zero height and width.	Bryce Harrington	2:1.3.0.0.dfsg-12ubuntu4	16 years ago
53	* Added some cherry-picked patches from xserver 1.3.99: * Added some cherry-picked patches from xserver 1.3.99: - 202_Add_quirk_for_Acer_AL1706_monitor_to_force_60hz_refresh.patch: The Acer AL1706 monitor reports support for 75hz via EDID, but does not sync when this range is given, so force it to 60hz. - 205_Bug_10770-_Inputdevs_isnt_a_valid_config_file_keyword.patch: Fixes typo in config file parser. - 208_Bug_6620-_Fixed_a_missing_else_in_ATIPseudoDMAInit.patch: Fixes issue where registers were written twice on R200, sometimes also putting bad values in atis->cce_pri_size. - 214_Bug_9680-_Remove_bogus_blank_length_limiting_in_xf86SetModeCrtc.patch: Fixes situation where when a specific mode is requested by monitor or user, xorg would tweak it to something incorrect. - 216_Bug_9041-_Check_the_return_code_in_xf86MapDomainMemory.patch: Fixes issue where mmap return value was being ignored and failing to issue fatal error as it should. - 221_ExaOffscreenMarkUsed-_Dont_crash_when_theres_no_offscreen_memory.patch: Fixes crash when there is no offscreen memory for EXA. - 222_Fix_a_crash_when_rotating_the_screen.patch: Fixes crash when rotating screen with xrandr. - 223_Fix_bug_8871-scrolling_corruption_with_a_compositing_manager.patch: Fixes scrolling corruption with composite due to incorrectly generated GraphicsExposes. - 224_Fix_calculations_in_x86_emulator_for_the_long_long_case_Andreas_Schwab.patch: Fixes long long multiplication when in x86 emulator. - 227_Fix_sync_polarity_on_Samsung_SyncMaster_205BW_monitor.patch: Adds quirk for Samsung SyncMaster 205BW - 230_In___glXCreateARGBConfig_insert_the_new_GL_mode_at_the__end__of_the_linked_list.patch: Fixes insertion order of linked list that can cause GLX clients to fail when attempting to use the last GLX mode/visual. - 231_In_dmxBackendMouGetInfo_initialize_the_info-minval_maxval_arrays_to_the_size_of_the_backend_display.patch: Fixes potential issue in X input where axis clipping code in GetPointerEvents() constrains the pointer's coordinate range to a max of 0, causing the mouse to not move. - 234_Reapply_patch_to_fix_AMD_CPU_detection.patch: Fixes AMD Geode CPU detection. - 236_Syncmaster_226_monitor_needs_60Hz_refresh_10545.patch: Adds quirk for Samsung SyncMaster 226BW. - 238_Update_pci.ids_to_2007-07-16_snapshot.patch: Updates our pci ids to support more current hardware. Remove nvidia ids in extrapci.ids that are now in pci.ids. Add nvidia ids to extrapci.ids that are in xf86-video-nv but not pci.ids - 241_XFree86-_Treat_evdev_and_vmmouse_as_mouse_drivers_bug_10512_10559.patch: Fix issue where a default mouse device gets automatically added when an evdev or vmmouse section has already been specified. - 243_exaDriverInit-_Fail_if_pScreenInfo_or_a_member_of_it_is_invalid.patch: Fix crash in EXA when pScreenInfo or a member of it is invalid. - 244_fix_an_occasional_crash_in_GetWindowName_bug-_9798.patch: Fixes crash by adding check of XmbTextPropertyToTextList()'s return code. - 245_regenerated_to_fix_bug_10371.patch: Fixes issue where if DRI is disabled, GL_MAX_TEXTURE_COORDS_ARB value is not returned correctly from glGetIntegerv().	Bryce Harrington	2:1.3.0.0.dfsg-12ubuntu3	16 years ago
52	Don't send a configuration change event just because somebod... Don't send a configuration change event just because somebody's pressed a brightness key	Matthew Garrett	2:1.3.0.0.dfsg-12ubuntu2	16 years ago
51	* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes: - debian/control: + set Conflicts: xkb-data (<< 0.9), since xkb-path is different from previous releases + do not Conflict with xserver-xorg-video + xvfb Depends on xauth, xfonts-base + Set Maintainer to Ubuntu Core Developers - debian/rules: + --with-os-vendor=Ubuntu - debian/xserver-xorg-core.install: + Add ioport, pcitweak, scanpci scripts & man pages - debian/patches: + 102_ubuntu_sharevts_load_cpu.patch: close console fd only when ShareVTs + 104_fedora_init_origins_fix.patch: multihead initialization + 106_ubuntu_fpic_libxf86config.patch: Add -fPIC to makefiles for xfree86/parser + 107_fedora_dont_backfill_bg_none.patch 110_fedora_no_move_damage.patch, 114_fedora_no_composite_in_xnest.patch, 120_fedora_disable_offscreen_pixmaps.patch: further aiglx support + 119_ubuntu_enable_composite.diff: enable composite + 121_only_switch_vt_when_active.diff: Add a check to prevent the X server from changing the VT when killing GDM from the console. + 123_no_composite_for_xvfb_run.patch: use "-extension Composite" to fix xvfb-run crashing + 125_glx_remove-stray__GLinterface.diff, 126_glxproxy_remove-stray__GLinterface.diff, 127_mesa-6.5.3-compat.diff: Patches needed to build against newer Mesa. + 132_composite-no-clipping.diff: Change the semantics of manual-redirect Composite windows so that they do not clip sibling or parent drawing. Needed by hildon-desktop to prevent home applets from clipping. - debian/apport.py: Add apport hook for automatically attaching files useful for debugging X crashes: Xorg.0.log, xorg.conf, lsmod, lspci, and /proc/version	Timo Aaltonen	2:1.3.0.0.dfsg-12ubuntu1	16 years ago
50	* debian/patches/series: * debian/patches/series: - Re-enable 132_composite-no-clipping.diff with fix from upstream	Bryce Harrington	2:1.3.0.0.dfsg-6ubuntu3	16 years ago
49	* debian/patches/series: * debian/patches/series: - don't apply 132_composite-no-clipping.diff for now, it doesn't work correctly when using compiz	Sebastien Bacher	2:1.3.0.0.dfsg-6ubuntu2	16 years ago
48	* Merge from Debian unstable. Remaining Ubuntu changes: * Merge from Debian unstable. Remaining Ubuntu changes: - debian/control: + set Conflicts: xkb-data (<< 0.9), since xkb-path is different from previous releases + do not Conflict with xserver-xorg-video + xvfb Depends on xauth, xfonts-base + Set Maintainer to Ubuntu Core Developers - debian/rules: + build using -fno-stack-protector + --with-os-vendor=Ubuntu - debian/xserver-xorg-core.install: + Add ioport, pcitweak, scanpci scripts & man pages - debian/patches: + 102_ubuntu_sharevts_load_cpu.patch: close console fd only when ShareVTs + 104_fedora_init_origins_fix.patch: multihead initialization + 106_ubuntu_fpic_libxf86config.patch: Add -fPIC to makefiles for xfree86/parser + 107_fedora_dont_backfill_bg_none.patch: Re-enable to see if it helps with performance regressions. + 108_fedora_gl_include_inferiors.patch, 110_fedora_no_move_damage.patch, 114_fedora_no_composite_in_xnest.patch: further aiglx support + 119_ubuntu_enable_composite.diff: enable composite + 120_fedora_disable_offscreen_pixmaps.patch: update to the latest version from Fedora (rev. 1.6, was 1.1) Despite being a hack, it works and is needed for compositing managers to work properly. + 121_only_switch_vt_when_active.diff: Add a check to prevent the X server from changing the VT when killing GDM from the console. + 123_no_composite_for_xvfb_run.patch: use "-extension Composite" to fix xvfb-run crashing - 125_glx_remove-stray__GLinterface.diff, 126_glxproxy_remove-stray__GLinterface.diff, 127_mesa-6.5.3-compat.diff: Mesa 6.5.3 build support * debian/apport.py: Add apport hook for automatically attaching files useful for debugging X crashes: Xorg.0.log, xorg.conf, lsmod, lspci, and /proc/version * debian/patches/132_composite-no-clipping.diff: Change the semantics of manual-redirect Composite windows so that they do not clip sibling or parent drawing. Needed by hildon-desktop to prevent home applets from clipping.	Bryce Harrington	2:1.3.0.0.dfsg-6ubuntu1	16 years ago
47	* Build-Depend on mesa 6.5.3 * Build-Depend on mesa 6.5.3 * Apply Mandriva patches to build against mesa 6.5.3 - 125_glx_remove-stray__GLinterface.diff - 126_glxproxy_remove-stray__GLinterface.diff - 127_mesa-6.5.3-compat.diff	Kyle McMartin	2:1.3.0.0.dfsg-4ubuntu2	16 years ago
46	* Merge from Debian unstable. Remaining Ubuntu changes: * Merge from Debian unstable. Remaining Ubuntu changes: - debian/control: + set Conflicts: xkb-data (<< 0.9), since xkb-path is different from previous releases + do not Conflict with xserver-xorg-video + xvfb Depends on xauth, xfonts-base + Set Maintainer to Ubuntu Core Developers - debian/rules: + build using -fno-stack-protector + --with-os-vendor=Ubuntu - debian/xserver-xorg-core.install: + Add ioport, pcitweak, scanpci scripts & man pages - debian/patches: + 102_ubuntu_sharevts_load_cpu.patch: close console fd only when ShareVTs + 104_fedora_init_origins_fix.patch: multihead initialization + 106_ubuntu_fpic_libxf86config.patch: Add -fPIC to makefiles for xfree86/parser + 107_fedora_dont_backfill_bg_none.patch: Re-enable to see if it helps with performance regressions. + 108_fedora_gl_include_inferiors.patch, 110_fedora_no_move_damage.patch, 114_fedora_no_composite_in_xnest.patch: further aiglx support + 119_ubuntu_enable_composite.diff: enable composite + 120_fedora_disable_offscreen_pixmaps.patch: update to the latest version from Fedora (rev. 1.6, was 1.1) Despite being a hack, it works and is needed for compositing managers to work properly. + 121_only_switch_vt_when_active.diff: Add a check to prevent the X server from changing the VT when killing GDM from the console. + 123_no_composite_for_xvfb_run.patch: use "-extension Composite" to fix xvfb-run crashing * Drop 124_fix-pdripriv_null_deref.patch. Already fixed in GLX code. See upstream FDO bug #8537	Bryce Harrington	2:1.3.0.0.dfsg-4ubuntu1	17 years ago
45	* SECURITY UPDATE: arbitrary code execution with root privs ... * SECURITY UPDATE: arbitrary code execution with root privs via integer overflows in MISC-XC. * Add debian/patches/131_misc_xc_overflows.patch: upstream fixes. * References CVE-2007-1003	Kees Cook	2:1.2.0-3ubuntu8	17 years ago
44	* debian/patches/120_fedora_disable_offscreen_pixmaps.patch * debian/patches/120_fedora_disable_offscreen_pixmaps.patch - update to the latest version from Fedora (rev. 1.6, was 1.1)	Timo Aaltonen	2:1.2.0-3ubuntu7	17 years ago
43	* debian/{rules,xsfbs/xsfbs.mk,serverminver,inputabiver} * debian/{rules,xsfbs/xsfbs.mk,serverminver,inputabiver} - Import changes from current debian package, needed for the new intel driver. - Rename serverabiver to videoabiver, value 1.0. - Set serverminver as this version. * debian/patches: 129_remove_extra_i2c_bittimeout.patch 130_slow_down_ddc_i2c.patch - Patches from server-1.3 branch, which make probing the monitor more robust.	Timo Aaltonen	2:1.2.0-3ubuntu6	17 years ago
42	* debian/patches/120_fedora_disable_offscreen_pixmaps.diff * debian/patches/120_fedora_disable_offscreen_pixmaps.diff - Re-enable. Despite being a hack, it works and is needed for compositing managers to work properly. (LP: #89189)	Timo Aaltonen	2:1.2.0-3ubuntu5	17 years ago
41	* debian/patches/107_fedora_dont_backfill_bg_none.patch: * debian/patches/107_fedora_dont_backfill_bg_none.patch: - Re-enable to see if it helps with performance regressions. * debian/patches/127_check_for_clientgone.patch: - A fix from upstream. (LP: #60288) * debian/patches/128_fix_client_privates_leak.patch - Plug a memory leak. (LP: #92882) * debian/rules - Fix a typo in --with-default-font-path.	Timo Aaltonen	2:1.2.0-3ubuntu4	17 years ago
40	* debian/patches: * debian/patches: - Rename 019_ubuntu_enable_composite.diff to 119_* so that it is in line with the rest of our patches - Re-add 126_debian_always_use_default_font_path.diff. This was dropped by Debian but needed by us since we still have legacy fontpaths in old configurations, so new paths need to be appended to the list.	Timo Aaltonen	2:1.2.0-3ubuntu3	17 years ago

Older »