This bug was fixed in the package xorg-server - 2:1.11.4-0ubuntu10.5
---
xorg-server (2:1.11.4-0ubuntu10.5) precise-security; urgency=low
* SECURITY UPDATE: do not use input device names in logging format
strings (LP: #996250):
- debian/patches/509_log-format-fix.patch:
** Branch linked: lp:ubuntu/precise-security/xorg-server
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/996250
Title:
input device names used in logging format strings
To manage notifications about
After experimenting with a reproducer from Kees Cook, I was unable to
reproduce this issue with the X server in either oneiric or natty. I'm
going to close the tasks for those releases. Thanks!
** Changed in: xorg-server (Ubuntu Natty)
Status: In Progress = Won't Fix
** Changed in:
** Changed in: xorg-server (Ubuntu Natty)
Assignee: (unassigned) = Steve Beattie (sbeattie)
** Changed in: xorg-server (Ubuntu Oneiric)
Assignee: (unassigned) = Steve Beattie (sbeattie)
** Changed in: xorg-server (Ubuntu Precise)
Assignee: (unassigned) = Steve Beattie (sbeattie)
** Changed in: xorg-server (Ubuntu Quantal)
Status: Confirmed = Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/996250
Title:
input device names used in logging format strings
To
Rebase onto latest precise xorg-server. Tested on amd64, evil HID no
longer crashes xorg.
** Patch added: xorg-server_1.11.4-0ubuntu10.3.debdiff
https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/996250/+attachment/3209315/+files/xorg-server_1.11.4-0ubuntu10.3.debdiff
--
You
Bug was introduced in xserver 1.10.
** Changed in: xorg-server (Ubuntu Lucid)
Status: Confirmed = Invalid
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/996250
Title:
input device names used
** Changed in: xorg-server (Ubuntu Lucid)
Status: New = Confirmed
** Changed in: xorg-server (Ubuntu Lucid)
Importance: Undecided = Low
** Changed in: xorg-server (Ubuntu Natty)
Status: New = Confirmed
** Changed in: xorg-server (Ubuntu Natty)
Importance: Undecided = Low
**
** Patch added: xorg-server_1.11.4-0ubuntu10.2.debdiff
https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/996250/+attachment/3136013/+files/xorg-server_1.11.4-0ubuntu10.2.debdiff
** Also affects: xorg-server (Ubuntu Lucid)
Importance: Undecided
Status: New
** Also affects:
** Tags added: patch
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/996250
Title:
input device names used in logging format strings
To manage notifications about this bug go to:
10 matches
Mail list logo