Ubuntu
xorg-server-hwe-16.04 package

xorg-server-hwe-16.04 2:1.18.4-1ubuntu6.1~16.04.2 source package in Ubuntu

Changelog

xorg-server-hwe-16.04 (2:1.18.4-1ubuntu6.1~16.04.2) xenial-security; urgency=medium

  * SECURITY UPDATE: DoS and possible code execution in endianness
    conversion of X Events
    - debian/patches/CVE-2017-10971-1.patch: do not try to swap
      GenericEvent in Xi/sendexev.c.
    - debian/patches/CVE-2017-10971-2.patch: verify all events in
      ProcXSendExtensionEvent in Xi/sendexev.c.
    - debian/patches/CVE-2017-10971-3.patch: disallow GenericEvent in
      SendEvent request in dix/events.c, dix/swapreq.c.
    - CVE-2017-10971
  * SECURITY UPDATE: information leak in XEvent handling
    - debian/patches/CVE-2017-10972.patch: zero target buffer in
      SProcXSendExtensionEvent in Xi/sendexev.c.
    - CVE-2017-10972
  * SECURITY UPDATE: MIT-MAGIC-COOKIES timing attack
    - debian/patches/CVE-2017-2624.patch: use timingsafe_memcmp() in
      configure.ac, include/dix-config.h.in, include/os.h,
      os/mitauth.c, os/timingsafe_memcmp.c.
    - CVE-2017-2624

 -- Marc Deslauriers <email address hidden>  Mon, 17 Jul 2017 13:16:04 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Xenial
Original maintainer:
Ubuntu X-SWAT
Architectures:
any all
Section:
x11
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
xorg-server-hwe-16.04_1.18.4.orig.tar.gz 8.0 MiB 4ba0e6c2c96650f1d1606572196143054005eb88d31c33b15a81d50886f26713
xorg-server-hwe-16.04_1.18.4-1ubuntu6.1~16.04.2.diff.gz 312.0 KiB 49298694771d85e95dbb28c0a22815af5294fe0f1294a5f6915a37f4b2f7dc5c
xorg-server-hwe-16.04_1.18.4-1ubuntu6.1~16.04.2.dsc 4.9 KiB 0d70ad9d318616b074725ad63a9a76998a562a9fa981e25b5e91314773f64f9d

View changes file

Binary packages built by this source

xmir-hwe-16.04: Xmir X server

 This package provides an X server running on top of Mir, using Mir
 input devices for input and forwarding either the root window or individual
 top-level windows as wayland surfaces.

xmir-hwe-16.04-dbgsym: debug symbols for package xmir-hwe-16.04

 This package provides an X server running on top of Mir, using Mir
 input devices for input and forwarding either the root window or individual
 top-level windows as wayland surfaces.

xorg-server-source-hwe-16.04: Xorg X server - source files

 This package provides original Debian (with Debian patches already
 applied, and autotools files updated) sources for the X.Org ('Xorg')
 X server shipped in a tarball. This enables other projects re-using
 X server codebase (e.g. VNC servers) to (re-)use officially
 Debian-supported version of the X xserver for their builds.
 .
 Unless you are building a software product using X server sources,
 you probably want xserver-xorg and/or xserver-xorg-core instead.

xserver-xephyr-hwe-16.04: nested X server

 Xephyr is an X server that can be run inside another X server,
 much like Xnest. It is based on the kdrive X server, and as a
 result it supports newer extensions than Xnest, including render and
 composite.
 .
 More information about X.Org can be found at:
 <URL:https://www.x.org>
 .
 This package is built from the X.org xserver module.

xserver-xephyr-hwe-16.04-dbgsym: debug symbols for package xserver-xephyr-hwe-16.04

 Xephyr is an X server that can be run inside another X server,
 much like Xnest. It is based on the kdrive X server, and as a
 result it supports newer extensions than Xnest, including render and
 composite.
 .
 More information about X.Org can be found at:
 <URL:https://www.x.org>
 .
 This package is built from the X.org xserver module.

xserver-xorg-core-hwe-16.04: Xorg X server - core server

 The Xorg X server is an X server for several architectures and operating
 systems, which is derived from the XFree86 4.x series of X servers.
 .
 The Xorg server supports most modern graphics hardware from most vendors,
 and supersedes all XFree86 X servers.
 .
 More information about X.Org can be found at:
 <URL:https://www.x.org>
 .
 This package is built from the X.org xserver module.

xserver-xorg-core-hwe-16.04-dbg: No summary available for xserver-xorg-core-hwe-16.04-dbg in ubuntu xenial.

No description available for xserver-xorg-core-hwe-16.04-dbg in ubuntu xenial.

xserver-xorg-core-hwe-16.04-dbgsym: debug symbols for package xserver-xorg-core-hwe-16.04

 The Xorg X server is an X server for several architectures and operating
 systems, which is derived from the XFree86 4.x series of X servers.
 .
 The Xorg server supports most modern graphics hardware from most vendors,
 and supersedes all XFree86 X servers.
 .
 More information about X.Org can be found at:
 <URL:https://www.x.org>
 .
 This package is built from the X.org xserver module.

xserver-xorg-dev-hwe-16.04: Xorg X server - development files

 This package provides development files for the X.Org ('Xorg') X server.
 This is not quite the same as the DDK (Driver Development Kit) from the
 XFree86 4.x and X.Org 6.7, 6.8 and 6.9 series of servers; it provides
 headers and a pkg-config file for drivers using autotools to build
 against.
 .
 Unless you are developing or building a driver, you probably want
 xserver-xorg and/or xserver-xorg-core instead.
 .
 More information about X.Org can be found at:
 <URL:https://www.x.org>
 .
 This package is built from the X.org xserver module.

xserver-xorg-legacy-hwe-16.04: setuid root Xorg server wrapper

 This package provides a wrapper for the Xorg X server, which is
 necessary for legacy drivers and non-Linux kernels.

xserver-xorg-legacy-hwe-16.04-dbgsym: debug symbols for package xserver-xorg-legacy-hwe-16.04

 This package provides a wrapper for the Xorg X server, which is
 necessary for legacy drivers and non-Linux kernels.

xwayland-hwe-16.04: Xwayland X server

 This package provides an X server running on top of wayland, using wayland
 input devices for input and forwarding either the root window or individual
 top-level windows as wayland surfaces.

xwayland-hwe-16.04-dbgsym: debug symbols for package xwayland-hwe-16.04

 This package provides an X server running on top of wayland, using wayland
 input devices for input and forwarding either the root window or individual
 top-level windows as wayland surfaces.