~ubuntu-branches/ubuntu/trusty/libxi/trusty-security : changes

~ubuntu-branches/ubuntu/trusty/libxi/trusty-security » Changes from revision 27

From Revision 24 to 5

Rev	Summary	Authors	Tags	Date
24	* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via incorrect memory size calculations - debian/patches/CVE-2013-1984.patch: fix multiple integer overflows. - CVE-2013-1984 * SECURITY UPDATE: denial of service and possible code execution via incorrect memory size calculations from signedness issues - debian/patches/CVE-2013-1995.patch: fix signedness issues in src/XListDev.c. - CVE-2013-1995 * SECURITY UPDATE: denial of service and possible code execution via incorrect length and bounds checking - debian/patches/CVE-2013-1998.patch: properly check lengths and indexes in src/XGetBMap.c, src/XIPassiveGrab.c, src/XQueryDv.c. - CVE-2013-1998	Marc Deslauriers	2:1.6.99.1-0ubuntu4	10 years ago
23	revert-xi2.3.diff: Change .pc file to set version back to 1.... revert-xi2.3.diff: Change .pc file to set version back to 1.6.1, to avoid tricking module checks of reverse dependencies into thinking that the installed libxi supports pointer barrier events. Fixes mutter FTBFS.	Martin Pitt	2:1.6.99.1-0ubuntu3	11 years ago
22	revert support for the new pointer barrier events for now, u... revert support for the new pointer barrier events for now, until the rest of the stack is ready.	Timo Aaltonen	2:1.6.99.1-0ubuntu2	11 years ago
21	* Sync from unreleased debian git. * Sync from unreleased debian git. - new upstream release	Timo Aaltonen	2:1.6.99.1-0ubuntu1	11 years ago
20	[ Julien Cristau ] [ Julien Cristau ] * Don't require (fake)root for debian/rules clean. [ Cyril Brulebois ] * New upstream release.	Cyril Brulebois	2:1.6.1-1	12 years ago
19	* Report button state and labels correctly (LP: #980041) * Report button state and labels correctly (LP: #980041) - Add patch 0001_fix_button_mask_and_labels.patch from upstream	Chase Douglas	2:1.6.0-0ubuntu2	12 years ago
18	* New upstream release * New upstream release - Bug fixes only * Drop 0001_scroll_increment_value.patch, merged upstream	Chase Douglas	2:1.6.0-0ubuntu1	12 years ago
17	* Fix scroll valuator increment value on 32-bit machines (LP... * Fix scroll valuator increment value on 32-bit machines (LP: #949465) - Added 0001_scroll_increment_value.patch * Bump lintian standards to 3.9.3	Chase Douglas	2:1.5.99.3-0ubuntu2	12 years ago
16	* New upstream release candidate * New upstream release candidate * Bump deps on x11proto-input-dev to 2.1.99.6 * Fix libxi6.symbols (delete errant XIUngrabTouchBegin from ubuntu version)	Chase Douglas	2:1.5.99.3-0ubuntu1	12 years ago
15	Bump build depends on x11proto-input-dev to 2.1.99.5. Our 2... Bump build depends on x11proto-input-dev to 2.1.99.5. Our 2.1.99.4 package is really 2.0.2, so 2.1.99.5 is the first version with MT support.	Christopher James Ha...	2:1.5.99.2-0ubuntu3	12 years ago
14	* Merge from Debian unstable, remaining changes: * Merge from Debian unstable, remaining changes: - Add xi 2.1 support * Update 1_xi2.1.patch to apply. * Drop 100_len_raw_events.patch, included upstream.	Timo Aaltonen	2:1.4.3-3ubuntu1	12 years ago
13	Add 100_len_raw_events.patch: Cherrypick upstream patch to c... Add 100_len_raw_events.patch: Cherrypick upstream patch to correct the use of the calculated structure length for memory allocations. Fixes issue where incorrect memory size was allocated, leading to valuator data overwriting memory, resulting in an error "Invalid write of size 1" and heap corruption causing applications to crash when they use Raw Events. (LP: #770522)	Bryce Harrington	2:1.4.1-1ubuntu3	13 years ago
12	FFe LP: #733501: build for multiarch. FFe LP: #733501: build for multiarch.	Steve Langasek	2:1.4.1-1ubuntu2	13 years ago
11	* Add xi 2.1 support * Add xi 2.1 support - Added 1_xi2.1.patch - Bump dependency on x11proto-input-dev for xi 2.1 - Add new xi 2.1 symbols to symbols file * Update maintainer for Ubuntu upload	Chase Douglas	2:1.4.1-1ubuntu1	13 years ago
10	* New upstream release. * New upstream release. * Use xorg-sgml-doctool's copy of xorg.css. * Upload to unstable.	Julien Cristau	2:1.4.1-1	13 years ago
9	WireToEvent: Set display member of all events as well (cherr... WireToEvent: Set display member of all events as well (cherry-pick from upstream).	Julien Cristau	2:1.3-6	13 years ago
8	* Cherry-picked fixes from upstream: * Cherry-picked fixes from upstream: - man: fix types for XGetSelectedExtensionEvents - Initialize extension with the right number of events (obsoletes our quilt patch) - Don't unlock the Display twice - Fix usage of uninitialized value - Fix memory leak in XIGetSelectedEvents - Always unlock display correctly - man: improve readability of XAllowDeviceEvents - man: fix typo in XIQueryDevice doc (closes: #598964) - Fix typo when converting raw events from the wire - man: XGetDeviceProperty(3) has no parameter 'pending'	Julien Cristau	2:1.3-5	13 years ago
7	* Add udeb needed for the graphical installer: libxi6-udeb. * Add udeb needed for the graphical installer: libxi6-udeb. * Version/Bump some B-D to make sure the udeb gets its dependencies on the (recently-added) udebs rather than on the libraries: - libx11-dev - libxext-dev * Add myself to Uploaders.	Cyril Brulebois	2:1.3-4	14 years ago
6	[ Julien Cristau ] [ Julien Cristau ] * Rename the build directory to not include DEB_BUILD_GNU_TYPE for no good reason. Thanks, Colin Watson! * Remove myself from Uploaders * Update patch from 2:1.3-2 to not crash if an app (like, say, anything using Qt3) calls libXi functions but the extension isn't available (closes: #568323). Thanks, Roman Mamedov! [ Brice Goglin ] * Remove Jamey Sharp and Josh Triplett from Uploaders, closes: #568276. [ Cyril Brulebois ] * Bump Standards-Version from 3.8.3 to 3.8.4 (no changes needed). * Upload to unstable.	Cyril Brulebois		14 years ago
5	* Initialize extension with the right number of events. Thi... * Initialize extension with the right number of events. This should fix issues when libXi announces more events than the X server will actually send for that extension, and thus smashes Xlib's event vector (closes: #515734, #515946). Patch by Peter Hutterer, analysis by Nathan Kidd. * Upload to unstable.	Julien Cristau		14 years ago

Older »