[Touch-packages] [Bug 1516831] Re: XDMCP Request packet with no addresses crashes LightDM
This bug was fixed in the package lightdm - 1.14.4-0ubuntu1 --- lightdm (1.14.4-0ubuntu1) vivid; urgency=medium * New upstream release: - Handle XDMCP Request packet with no addresses. (LP: #1516831) - Don't start LightDM if the XDMCP server is configured with a key that doesn't exist. (LP: #1517685) - Add IP addresses to XDMCP log messages. - Refactor XDMCP error handling. - Add more tests. -- Robert Ancell Fri, 20 Nov 2015 16:01:15 +1300 ** Changed in: lightdm (Ubuntu Vivid) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1516831 Title: XDMCP Request packet with no addresses crashes LightDM Status in Light Display Manager: Fix Released Status in Light Display Manager 1.14 series: Fix Released Status in Light Display Manager 1.16 series: Fix Released Status in lightdm package in Ubuntu: Fix Released Status in lightdm source package in Vivid: Fix Released Status in lightdm source package in Wily: Fix Released Bug description: [Impact] If LightDM receives an XDMCP Request packet with no addresses then it will attempt to access a negative index into an array and crash. This only occurs if the XDMCP server is enabled. [Test Case] 1. Enable XDMCP in lightdm.conf: [XDMCPServer] enabled=true 2. Start LightDM 3. Send an XDMCP Request without an empty addresses field (valid XDMCP servers do not send this). Expected result: The request is ignored. Observed result: LightDM crashes. To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1516831/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1516831] Re: XDMCP Request packet with no addresses crashes LightDM
This bug was fixed in the package lightdm - 1.16.6-0ubuntu1 --- lightdm (1.16.6-0ubuntu1) wily; urgency=medium * New upstream release: - Handle XDMCP Request packet with no addresses. (LP: #1516831) - Don't start LightDM if the XDMCP server is configured with a key that doesn't exist. (LP: #1517685) - Add IP addresses to XDMCP log messages. - Refactor XDMCP error handling. - Add more tests. -- Robert Ancell Fri, 20 Nov 2015 15:46:15 +1300 ** Changed in: lightdm (Ubuntu Wily) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1516831 Title: XDMCP Request packet with no addresses crashes LightDM Status in Light Display Manager: Fix Released Status in Light Display Manager 1.14 series: Fix Released Status in Light Display Manager 1.16 series: Fix Released Status in lightdm package in Ubuntu: Fix Released Status in lightdm source package in Vivid: Fix Committed Status in lightdm source package in Wily: Fix Released Bug description: [Impact] If LightDM receives an XDMCP Request packet with no addresses then it will attempt to access a negative index into an array and crash. This only occurs if the XDMCP server is enabled. [Test Case] 1. Enable XDMCP in lightdm.conf: [XDMCPServer] enabled=true 2. Start LightDM 3. Send an XDMCP Request without an empty addresses field (valid XDMCP servers do not send this). Expected result: The request is ignored. Observed result: LightDM crashes. To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1516831/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1516831] Re: XDMCP Request packet with no addresses crashes LightDM
** Changed in: lightdm (Ubuntu) Assignee: (unassigned) => Robert Ancell (robert-ancell) ** Changed in: lightdm (Ubuntu Vivid) Assignee: (unassigned) => Robert Ancell (robert-ancell) ** Changed in: lightdm (Ubuntu Wily) Assignee: (unassigned) => Robert Ancell (robert-ancell) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1516831 Title: XDMCP Request packet with no addresses crashes LightDM Status in Light Display Manager: Fix Released Status in Light Display Manager 1.14 series: Fix Released Status in Light Display Manager 1.16 series: Fix Released Status in lightdm package in Ubuntu: Fix Released Status in lightdm source package in Vivid: Fix Committed Status in lightdm source package in Wily: Fix Committed Bug description: [Impact] If LightDM receives an XDMCP Request packet with no addresses then it will attempt to access a negative index into an array and crash. This only occurs if the XDMCP server is enabled. [Test Case] 1. Enable XDMCP in lightdm.conf: [XDMCPServer] enabled=true 2. Start LightDM 3. Send an XDMCP Request without an empty addresses field (valid XDMCP servers do not send this). Expected result: The request is ignored. Observed result: LightDM crashes. To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1516831/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1516831] Re: XDMCP Request packet with no addresses crashes LightDM
** Tags removed: verification-needed ** Tags added: verification-done-vivid verification-done-wily -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1516831 Title: XDMCP Request packet with no addresses crashes LightDM Status in Light Display Manager: Fix Released Status in Light Display Manager 1.14 series: Fix Released Status in Light Display Manager 1.16 series: Fix Released Status in lightdm package in Ubuntu: Fix Released Status in lightdm source package in Vivid: Fix Committed Status in lightdm source package in Wily: Fix Committed Bug description: [Impact] If LightDM receives an XDMCP Request packet with no addresses then it will attempt to access a negative index into an array and crash. This only occurs if the XDMCP server is enabled. [Test Case] 1. Enable XDMCP in lightdm.conf: [XDMCPServer] enabled=true 2. Start LightDM 3. Send an XDMCP Request without an empty addresses field (valid XDMCP servers do not send this). Expected result: The request is ignored. Observed result: LightDM crashes. To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1516831/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1516831] Re: XDMCP Request packet with no addresses crashes LightDM
** Changed in: lightdm (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1516831 Title: XDMCP Request packet with no addresses crashes LightDM Status in Light Display Manager: Fix Released Status in Light Display Manager 1.14 series: Fix Released Status in Light Display Manager 1.16 series: Fix Released Status in lightdm package in Ubuntu: Fix Released Status in lightdm source package in Vivid: Fix Committed Status in lightdm source package in Wily: Fix Committed Bug description: [Impact] If LightDM receives an XDMCP Request packet with no addresses then it will attempt to access a negative index into an array and crash. This only occurs if the XDMCP server is enabled. [Test Case] 1. Enable XDMCP in lightdm.conf: [XDMCPServer] enabled=true 2. Start LightDM 3. Send an XDMCP Request without an empty addresses field (valid XDMCP servers do not send this). Expected result: The request is ignored. Observed result: LightDM crashes. To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1516831/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1516831] Re: XDMCP Request packet with no addresses crashes LightDM
Hello Robert, or anyone else affected, Accepted lightdm into vivid-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/lightdm/1.14.4-0ubuntu1 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance! ** Also affects: lightdm (Ubuntu Vivid) Importance: Undecided Status: New ** Changed in: lightdm (Ubuntu Vivid) Importance: Undecided => Critical ** Changed in: lightdm (Ubuntu Vivid) Status: New => Fix Committed ** Changed in: lightdm (Ubuntu Vivid) Status: Fix Committed => Triaged ** Changed in: lightdm (Ubuntu Vivid) Status: Triaged => Fix Committed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1516831 Title: XDMCP Request packet with no addresses crashes LightDM Status in Light Display Manager: Fix Released Status in Light Display Manager 1.14 series: Fix Released Status in Light Display Manager 1.16 series: Fix Released Status in lightdm package in Ubuntu: Fix Committed Status in lightdm source package in Vivid: Fix Committed Status in lightdm source package in Wily: Fix Committed Bug description: [Impact] If LightDM receives an XDMCP Request packet with no addresses then it will attempt to access a negative index into an array and crash. This only occurs if the XDMCP server is enabled. [Test Case] 1. Enable XDMCP in lightdm.conf: [XDMCPServer] enabled=true 2. Start LightDM 3. Send an XDMCP Request without an empty addresses field (valid XDMCP servers do not send this). Expected result: The request is ignored. Observed result: LightDM crashes. To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1516831/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1516831] Re: XDMCP Request packet with no addresses crashes LightDM
Hello Robert, or anyone else affected, Accepted lightdm into wily-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/lightdm/1.16.6-0ubuntu1 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance! ** Tags added: verification-needed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1516831 Title: XDMCP Request packet with no addresses crashes LightDM Status in Light Display Manager: Fix Released Status in Light Display Manager 1.14 series: Fix Released Status in Light Display Manager 1.16 series: Fix Released Status in lightdm package in Ubuntu: Fix Committed Status in lightdm source package in Wily: Fix Committed Bug description: [Impact] If LightDM receives an XDMCP Request packet with no addresses then it will attempt to access a negative index into an array and crash. This only occurs if the XDMCP server is enabled. [Test Case] 1. Enable XDMCP in lightdm.conf: [XDMCPServer] enabled=true 2. Start LightDM 3. Send an XDMCP Request without an empty addresses field (valid XDMCP servers do not send this). Expected result: The request is ignored. Observed result: LightDM crashes. To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1516831/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1516831] Re: XDMCP Request packet with no addresses crashes LightDM
** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2015-8316 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1516831 Title: XDMCP Request packet with no addresses crashes LightDM Status in Light Display Manager: Fix Released Status in Light Display Manager 1.14 series: Fix Released Status in Light Display Manager 1.16 series: Fix Released Status in lightdm package in Ubuntu: Fix Committed Status in lightdm source package in Wily: Fix Committed Bug description: [Impact] If LightDM receives an XDMCP Request packet with no addresses then it will attempt to access a negative index into an array and crash. This only occurs if the XDMCP server is enabled. [Test Case] 1. Enable XDMCP in lightdm.conf: [XDMCPServer] enabled=true 2. Start LightDM 3. Send an XDMCP Request without an empty addresses field (valid XDMCP servers do not send this). Expected result: The request is ignored. Observed result: LightDM crashes. To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1516831/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1516831] Re: XDMCP Request packet with no addresses crashes LightDM
The way I found this was by testing the SRU in vivid - for some reason the X server was sending Request packets with a addresses field empty. Other Ubuntu releases are not doing this. I haven't yet investigated if why it was doing this. ** Also affects: lightdm (Ubuntu) Importance: Undecided Status: New ** Also affects: lightdm (Ubuntu Wily) Importance: Undecided Status: New ** Changed in: lightdm (Ubuntu) Status: New => Fix Committed ** Changed in: lightdm (Ubuntu Wily) Status: New => Fix Committed ** Changed in: lightdm (Ubuntu) Importance: Undecided => Critical ** Changed in: lightdm (Ubuntu Wily) Importance: Undecided => Critical -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1516831 Title: XDMCP Request packet with no addresses crashes LightDM Status in Light Display Manager: Fix Released Status in Light Display Manager 1.14 series: Fix Released Status in Light Display Manager 1.16 series: Fix Released Status in lightdm package in Ubuntu: Fix Committed Status in lightdm source package in Wily: Fix Committed Bug description: [Impact] If LightDM receives an XDMCP Request packet with no addresses then it will attempt to access a negative index into an array and crash. This only occurs if the XDMCP server is enabled. [Test Case] 1. Enable XDMCP in lightdm.conf: [XDMCPServer] enabled=true 2. Start LightDM 3. Send an XDMCP Request without an empty addresses field (valid XDMCP servers do not send this). Expected result: The request is ignored. Observed result: LightDM crashes. To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1516831/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
