Bug#360388: xserver-xorg: local user DoS and arbitrary code execution as root [CVE-2006-0745]

2006-04-01 Thread Steve Langasek
On Sat, Apr 01, 2006 at 05:07:42PM -0500, Filipus Klutiero wrote:

> P.S. : If your mail implies there's a way to mark a bug as fixed at the 
> same time as it's open, I'd be glad to improve my debbugs skills as usual :)

Unfortunately, opening and closing the bug have to happen as separate steps.

-- 
Steve Langasek   Give me a lever long enough and a Free OS
Debian Developer   to set it on, and I can move the world.
[EMAIL PROTECTED]   http://www.debian.org/


signature.asc
Description: Digital signature


Bug#360388: marked as done (xserver-xorg: local user DoS and arbitrary code execution as root [CVE-2006-0745])

2006-04-01 Thread Debian Bug Tracking System
Your message dated Sat, 1 Apr 2006 13:55:27 -0800
with message-id <[EMAIL PROTECTED]>
and subject line Bug#360388: xserver-xorg: local user DoS and arbitrary code 
execution as root [CVE-2006-0745]
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---
Package: xserver-xorg
Version: 6.9.0.dfsg.1-4
Severity: grave
Tags: security, upstream
Justification: user security hole

An upstream vulnerability rated as critical by upstream (bug #6213) was
fixed in 6.9.0.dfsg.1-5, which was uploaded with urgency high. I'm
opening this bug to track this nevertheless, as the transition to
testing appears to be problematic.

--- End Message ---
--- Begin Message ---
Version: 6.9.0.dfsg.1-5
On Sat, Apr 01, 2006 at 04:05:16PM -0500, Filipus Klutiero wrote:
> Package: xserver-xorg
> Version: 6.9.0.dfsg.1-4
> Severity: grave
> Tags: security, upstream
> Justification: user security hole

> An upstream vulnerability rated as critical by upstream (bug #6213) was
> fixed in 6.9.0.dfsg.1-5, which was uploaded with urgency high. I'm
> opening this bug to track this nevertheless, as the transition to
> testing appears to be problematic.

Then you should also mark it as *closed* in -5, otherwise you're
*complicating* the transition to testing.

-- 
Steve Langasek   Give me a lever long enough and a Free OS
Debian Developer   to set it on, and I can move the world.
[EMAIL PROTECTED]   http://www.debian.org/


signature.asc
Description: Digital signature
--- End Message ---


Bug#360388: xserver-xorg: local user DoS and arbitrary code execution as root [CVE-2006-0745]

2006-04-01 Thread Filipus Klutiero

Steve Langasek a écrit :


Then you should also mark it as *closed* in -5, otherwise you're
*complicating* the transition to testing.
 


Hi Steve,
you're right. The mail you just sent should do that for me. Thanks.

P.S. : If your mail implies there's a way to mark a bug as fixed at the 
same time as it's open, I'd be glad to improve my debbugs skills as usual :)




Bug#360388: xserver-xorg: local user DoS and arbitrary code execution as root [CVE-2006-0745]

2006-04-01 Thread Filipus Klutiero
Package: xserver-xorg
Version: 6.9.0.dfsg.1-4
Severity: grave
Tags: security, upstream
Justification: user security hole

An upstream vulnerability rated as critical by upstream (bug #6213) was
fixed in 6.9.0.dfsg.1-5, which was uploaded with urgency high. I'm
opening this bug to track this nevertheless, as the transition to
testing appears to be problematic.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#358751: xserver-xorg: evdev with MX 1000 mouse doesn't work anymore

2006-04-01 Thread Jeremy Nickurak
Christian Marillat wrote:
> retitle 358751 tilt buttons are inverted with MX 1000 mouse
> thanks
>
> Hi,
>
> Would be very nice if the bug submitter can receive a Cc when somebody
> post to a bug...
>
> For Elmimar, not I'm not blind, I read the changelog, and your
> configuration doesn't work for me, X segfault when launched.
>
>   
Hmm. I get the same behavior here if I try to use the Name field, which
is to say that X segfaults, and due to #347681, left the system unusable
until I ssh'd in to reverse the config, start a new X server, and kill
the X server.

Instead, i'm using "Device" "/dev/input/event-mx1000", which works, but
isn't supported in upstream anymore, after the evdev rewrite.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#358751: xserver-xorg: evdev with MX 1000 mouse doesn't work anymore

2006-04-01 Thread Frank Hart
On Sat, Apr 01, 2006 at 05:22:07PM +0200, Christian Marillat wrote:
> Would be very nice if the bug submitter can receive a Cc when somebody
> post to a bug...

Yes, sorry for that.

> Frank, your configuration works for me
> but the "tilt" (tilt is explained here
> http://floam.sh.nu/guides/mx1000)buttons are now inverted in mozilla 
> and galeon.

You can correct that in about:config:
mousewheel.horizscroll.withnokey.action = 0
mousewheel.horizscroll.withnokey.sysnumlines = false

Frank
-- 
gpg:FBB8E53A
jabber: [EMAIL PROTECTED]


signature.asc
Description: Digital signature


Bug#358751: xserver-xorg: evdev with MX 1000 mouse doesn't work anymore

2006-04-01 Thread Elimar Riesebieter
On Sat, 01 Apr 2006 the mental interface of
Christian Marillat told:

> retitle 358751 tilt buttons are inverted with MX 1000 mouse
> thanks
> 
> Hi,
> 
> Would be very nice if the bug submitter can receive a Cc when somebody
> post to a bug...
> 
> For Elmimar, not I'm not blind, I read the changelog, and your
> configuration doesn't work for me, X segfault when launched.

Yeah, if you don't use the wron input out of
$cat /proc/bus/input/devices. BTW you must use the one which is
listet by N: Name="Logitech USB RECEIVER" ;)


> Frank, your configuration works for me
> 
> ,
> | Section "InputDevice"
> | Identifier  "MX1000"
> | Driver  "evdev"
> | Option  "CorePointer"
> | Option  "Name"  "Logitech USB Receiver"
> | EndSection
> `
> 
> but the "tilt" (tilt is explained here
> http://floam.sh.nu/guides/mx1000)buttons are now inverted in mozilla and
> galeon.

Did you ever try something like
Option "XRelativeAxisButtons" "number number" for remapping your
mousebuttons 6 and 7? The X-axis should be the right one for the
tilt, isn't it?

Elimar

-- 
  On the keyboard of life you have always
  to keep a finger at the escape key;-)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#358751: xserver-xorg: evdev with MX 1000 mouse doesn't work anymore

2006-04-01 Thread Christian Marillat
retitle 358751 tilt buttons are inverted with MX 1000 mouse
thanks

Hi,

Would be very nice if the bug submitter can receive a Cc when somebody
post to a bug...

For Elmimar, not I'm not blind, I read the changelog, and your
configuration doesn't work for me, X segfault when launched.

Frank, your configuration works for me

,
| Section "InputDevice"
|   Identifier  "MX1000"
|   Driver  "evdev"
|   Option  "CorePointer"
| Option  "Name"  "Logitech USB Receiver"
| EndSection
`

but the "tilt" (tilt is explained here
http://floam.sh.nu/guides/mx1000)buttons are now inverted in mozilla and
galeon.

Christian


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Processed: Re: Bug#358751: xserver-xorg: evdev with MX 1000 mouse doesn't work anymore

2006-04-01 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

> retitle 358751 tilt buttons are inverted with MX 1000 mouse
Bug#358751: xserver-xorg: evdev with MX 1000 mouse doesn't work anymore
Changed Bug title.

> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#358254: fix found in bug #358682, reinstalled libxft-dev

2006-04-01 Thread Thomas Koeppen
Package: libxft-dev
Version: 2.1.8.2-5.1
Followup-For: Bug #358254


Preparing to replace libxft-dev 2.1.8.2-3 (using
.../libxft-dev_2.1.8.2-5.1_amd64.deb) ...
Unpacking replacement libxft-dev ...
dpkg: warning - unable to delete old directory `/usr/include/X11/Xft':
Directory not empty
Preparing to replace libxft2 2.1.8.2-3 (using
.../libxft2_2.1.8.2-5.1_amd64.deb) ...
Unpacking replacement libxft2 ...



Preparing to replace libxft-dev 2.1.8.2-3 (using
.../libxft-dev_2.1.8.2-5.1_amd64.deb) ...
Unpacking replacement libxft-dev ...
dpkg: warning - unable to delete old directory `/usr/include/X11/Xft':
Directory not empty
Preparing to replace libxft2 2.1.8.2-3 (using
.../libxft2_2.1.8.2-5.1_amd64.deb) ...
Unpacking replacement libxft2 ...

...

that works for me,
apt-get upgrade now possible again.

Thomas

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15.1
Locale: LANG=de_DE.ISO-8859-1, LC_CTYPE=de_DE.ISO-8859-1 (charmap=ISO-8859-1)

Versions of packages libxft-dev depends on:
ii  libc6-dev [libc-dev]  2.3.6-4GNU C Library: Development Librari
ii  libfontconfig1-dev2.3.2-1.1  generic font configuration library
ii  libfreetype6-dev  2.1.10-2   FreeType 2 font engine, developmen
ii  libx11-dev6.9.0.dfsg.1-5 X Window System protocol client li
ii  libxft2   2.1.8.2-5.1FreeType-based font drawing librar
ii  libxrender-dev1:0.9.0.2-1X Rendering Extension client libra
ii  x-dev 6.9.0.dfsg.1-5 X protocol development files
ii  x11-common6.9.0.dfsg.1-4 X Window System (X.Org) infrastruc
ii  zlib1g-dev [libz-dev] 1:1.2.3-9  compression library - development

libxft-dev recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#358254: libxft-dev: same behaviour with amd64 sid

2006-04-01 Thread Thomas Koeppen
Package: libxft-dev
Version: 2.1.8.2-3
Followup-For: Bug #358254


(Reading database ... 114257 files and directories currently installed.)
Preparing to replace x11-common 6.9.0.dfsg.1-4 (using
.../x11-common_6.9.0.dfsg. 1-5_all.deb) ...
Unpacking replacement x11-common ...
dpkg: error processing
/var/cache/apt/archives/x11-common_6.9.0.dfsg.1-5_all.deb  (--unpack):
 trying to overwrite `/usr/include/X11', which is also in package
 libxft-dev
  System startup links for /etc/init.d/x11-common already exist.
  Setting up X server socket directory /tmp/.X11-unix...done.
  Setting up ICE socket directory /tmp/.ICE-unix...done.
  Errors were encountered while processing:
   /var/cache/apt/archives/x11-common_6.9.0.dfsg.1-5_all.deb
   E: Sub-process /usr/bin/dpkg returned an error code (1)



-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15.1
Locale: LANG=de_DE.ISO-8859-1, LC_CTYPE=de_DE.ISO-8859-1 (charmap=ISO-8859-1)

Versions of packages libxft-dev depends on:
pn  libc6-dev | libc-dev   (no description available)
ii  libfontconfig1-dev   2.3.2-1.1   generic font configuration library
pn  libfreetype6-dev   (no description available)
pn  libx11-dev (no description available)
ii  libxft2  2.1.8.2-3   FreeType-based font drawing librar
ii  libxrender-dev   1:0.9.0.2-1 X Rendering Extension client libra
pn  x-dev  (no description available)
ii  zlib1g-dev [libz-dev]1:1.2.3-9   compression library - development

libxft-dev recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]