-
Committer:
Package Import Robot
-
Author(s):
Marc Deslauriers
-
Date:
2013-05-29 10:40:33 UTC
-
Revision ID:
package-import@ubuntu.com-20130529104033-3se4uao2nm5dcvhr
Tags: 2:1.3-3ubuntu0.2
* SECURITY UPDATE: denial of service and possible code execution via
incorrect memory size calculations
- debian/patches/CVE-2013-1984.patch: fix multiple integer overflows.
- CVE-2013-1984
* SECURITY UPDATE: denial of service and possible code execution via
incorrect memory size calculations from signedness issues
- debian/patches/CVE-2013-1995.patch: fix signedness issues in
src/XListDev.c.
- CVE-2013-1995
* SECURITY UPDATE: denial of service and possible code execution via
incorrect length and bounds checking
- debian/patches/CVE-2013-1998.patch: properly check lengths and
indexes in src/XGetBMap.c, src/XIPassiveGrab.c, src/XQueryDv.c.
- CVE-2013-1998