Format: 1.8 Date: Mon, 17 Jul 2017 09:38:58 -0400 Source: xorg-server Binary: xserver-xorg-core xserver-xorg-core-udeb xserver-xorg-dev xdmx xdmx-tools xnest xvfb xserver-xephyr xserver-xorg-core-dbg xserver-common xmir xserver-xorg-xmir xorg-server-source xwayland xserver-xorg-legacy Architecture: armhf armhf_translations Version: 2:1.18.4-0ubuntu0.3 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: xdmx - distributed multihead X server xdmx-tools - Distributed Multihead X tools xmir - Xmir X server xnest - Nested X server xorg-server-source - Xorg X server - source files xserver-common - common files used by various X servers xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-dbg - Xorg - the X.Org X server (debugging symbols) xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xserver-xorg-xmir - Xmir X server (transitional package) xvfb - Virtual Framebuffer 'fake' X server xwayland - Xwayland X server Changes: xorg-server (2:1.18.4-0ubuntu0.3) xenial-security; urgency=medium . * SECURITY UPDATE: DoS and possible code execution in endianness conversion of X Events - debian/patches/CVE-2017-10971-1.patch: do not try to swap GenericEvent in Xi/sendexev.c. - debian/patches/CVE-2017-10971-2.patch: verify all events in ProcXSendExtensionEvent in Xi/sendexev.c. - debian/patches/CVE-2017-10971-3.patch: disallow GenericEvent in SendEvent request in dix/events.c, dix/swapreq.c. - CVE-2017-10971 * SECURITY UPDATE: information leak in XEvent handling - debian/patches/CVE-2017-10972.patch: zero target buffer in SProcXSendExtensionEvent in Xi/sendexev.c. - CVE-2017-10972 * SECURITY UPDATE: MIT-MAGIC-COOKIES timing attack - debian/patches/CVE-2017-2624.patch: use timingsafe_memcmp() in configure.ac, include/dix-config.h.in, include/os.h, os/mitauth.c, os/timingsafe_memcmp.c. - CVE-2017-2624 Checksums-Sha1: d6aa33e14199e196670caf1cc653054c5fd6fa4c 2336358 xdmx-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb 952fa90d21ba95845541efd247876349747d414b 110882 xdmx-tools-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb d1c5a63db6202aba4a0351d6c5bdcc76c9a23602 48086 xdmx-tools_1.18.4-0ubuntu0.3_armhf.deb 733c5f9c02d1680b0d466c691b43439355dc8d91 649334 xdmx_1.18.4-0ubuntu0.3_armhf.deb 1adb759f31c5de9f0641649829efad80de7bb989 2622496 xmir-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb 357d1a805201519383a2af25f32fce87a9e93ff0 721936 xmir_1.18.4-0ubuntu0.3_armhf.deb 6578c581004ee581849c25d547157a5fc68dd75a 1854116 xnest-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb 33d9a6370be364874cbe6400244aebad7aa8e059 531360 xnest_1.18.4-0ubuntu0.3_armhf.deb d78cb56621568453e11e9a12152fda95a9b65988 27998 xorg-server_1.18.4-0ubuntu0.3_armhf_translations.tar.gz 6c7e930f659569376bfe8c2dcd8523dd57bf114b 2819090 xserver-xephyr-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb 1f79fd6800d531cdba0e0b58a63b24937b0fa551 772654 xserver-xephyr_1.18.4-0ubuntu0.3_armhf.deb b206fb2c09d1a7fe6aa0860083d57114b55d39a4 6339714 xserver-xorg-core-dbg_1.18.4-0ubuntu0.3_armhf.deb 50c2b5435a3a5aca3f9a0d01f4bbb20a7a466699 4005910 xserver-xorg-core-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb f7a1af06b78f6b424cc4e550dd4424d07c7c6e04 2734280 xserver-xorg-core-udeb-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb cc3161612e24ea67d407c9614b0059ba8979a74e 776334 xserver-xorg-core-udeb_1.18.4-0ubuntu0.3_armhf.udeb 8319a76689786df36d8f6ec6abb21be4dd450016 1119378 xserver-xorg-core_1.18.4-0ubuntu0.3_armhf.deb b70df1f9a57d1941cd92aaa476e2ca0accdca425 197340 xserver-xorg-dev_1.18.4-0ubuntu0.3_armhf.deb ad019bc7d5086a39c779eeaddfd25a94ac7e0489 8150 xserver-xorg-legacy-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb 68af1d19e2972cd2db1575982e531e24e4b73f6a 35824 xserver-xorg-legacy_1.18.4-0ubuntu0.3_armhf.deb 15a41217f9f1c5be8e5dd33a4b860c4e89c22ee9 2266402 xvfb-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb 2bffc73ae66683d552a43ec5c880b6549c7ed0da 650636 xvfb_1.18.4-0ubuntu0.3_armhf.deb 0db05e1268e124a35a753c694b7c4b2b2bbfba9c 2588542 xwayland-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb 55e944d74d5d0e0f0d848b8b10a433f136dce8b6 712516 xwayland_1.18.4-0ubuntu0.3_armhf.deb Checksums-Sha256: 19b6feb937ff99fe7f14890411aea7384f71d5f7fb278720e863c9d211c202db 2336358 xdmx-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb 49302a0673805dec148a7e8c1e96d21ef6d05e7788be00eed53e2438a68c9a31 110882 xdmx-tools-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb a779d42baede00851040c88d560ed5470f17966160889588b7a1e1d450c3c2ba 48086 xdmx-tools_1.18.4-0ubuntu0.3_armhf.deb b1ef7fa92458fbb4c87cc7887c9f5e5fb2780598f5fd4e9dad04533d960b473b 649334 xdmx_1.18.4-0ubuntu0.3_armhf.deb 395f7d90b3ff3ef5d0e1f5388d043c04910df483d5aaa588cd55370f77cde10d 2622496 xmir-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb 6593aa41b80007acfd16128379aa970e7dffa7646f9a061614792f53f448cae6 721936 xmir_1.18.4-0ubuntu0.3_armhf.deb 0d95673d71ba11fc56e24a84bd6ef7141eb0f4470469562d3ec964f3e60f8b86 1854116 xnest-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb 972878acb1c1a4b163a9882c441f45c720cd2f17749034372b42883df974d418 531360 xnest_1.18.4-0ubuntu0.3_armhf.deb fea2511d94c5979a032c1f9c6cc14a186f5113db3110c6d1be2715b50d0a0a9e 27998 xorg-server_1.18.4-0ubuntu0.3_armhf_translations.tar.gz b01049bf376ab6211a525e13187bf9bc554209e393be327c7ee151835d2f0e9a 2819090 xserver-xephyr-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb f0dcacfa6d1026a57a5794fd894714bde49273d29732e8d051a5b0aac3aa911d 772654 xserver-xephyr_1.18.4-0ubuntu0.3_armhf.deb 2b8b8455c7e03657613a19d2599637765b7039766f480485961d47b7576cc765 6339714 xserver-xorg-core-dbg_1.18.4-0ubuntu0.3_armhf.deb bb625160dc5a53db85c0a0bce182f0f28bb99f829d3e1b86d15802458377de5b 4005910 xserver-xorg-core-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb ec09ced53c3c8adb6cd8c6e9e941b10c94d3b1999a8f42aa9a9d0ee046e8340b 2734280 xserver-xorg-core-udeb-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb 13038fac9d82137661bb2270992253dd0fe83b64c09b7855677946a4be8530b4 776334 xserver-xorg-core-udeb_1.18.4-0ubuntu0.3_armhf.udeb 7e82ffc4e24255ec5dc3cf4d0584e93dc2178dc6bc9f869f9e3c8c53925277cd 1119378 xserver-xorg-core_1.18.4-0ubuntu0.3_armhf.deb 77f90824000c24fc88625038dc5575a72440ffc31e25e6aa677efb583b45761a 197340 xserver-xorg-dev_1.18.4-0ubuntu0.3_armhf.deb 158330101d7f20a3f27e91d96a57ccee537de570df8e2df2c96dcfb1a9a3b1db 8150 xserver-xorg-legacy-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb 58d19fb5e82dae8443c833383ca696fb865b871e678ecd5701355e79c2c18571 35824 xserver-xorg-legacy_1.18.4-0ubuntu0.3_armhf.deb 53005fccdf8d4a2188dc7b09bf39b3335c03010fed5c29397af9ae6fa32e49f5 2266402 xvfb-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb 7fcad5a684e5623c7d5821a13adac719a16d2c136c725d637c68f22ef4885f50 650636 xvfb_1.18.4-0ubuntu0.3_armhf.deb c59a22f9e3274b18233253b87362027f85d1c8f71c834da51163a4fb4e1eee67 2588542 xwayland-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb f3699393d589e8c5184104b0dec4bcda3c111e96eff2e4ad31bcc85c3f08dedc 712516 xwayland_1.18.4-0ubuntu0.3_armhf.deb Files: 9a8701aa75aee84c6a25f618be1024e2 2336358 x11 extra xdmx-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb 5f76bcb4a66a0c2901fb7db340d0e207 110882 x11 extra xdmx-tools-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb 34ae766c9069dfb2b20a7f48d366f4db 48086 x11 optional xdmx-tools_1.18.4-0ubuntu0.3_armhf.deb 25e3128ddbb7c4e8c6292740f85d4d59 649334 x11 optional xdmx_1.18.4-0ubuntu0.3_armhf.deb 42ecd7d85c3feaa3298c8d3e165dd1e2 2622496 x11 extra xmir-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb 80a3f7ebedc02ee2ab570587960e2aa9 721936 x11 optional xmir_1.18.4-0ubuntu0.3_armhf.deb 2f6cce8419aca9649026bc5c60527ba8 1854116 x11 extra xnest-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb bc70abab1075ef3969e4fa43a6bb15f1 531360 x11 optional xnest_1.18.4-0ubuntu0.3_armhf.deb 061d62108fa39ac6f20537a0711c5955 27998 raw-translations - xorg-server_1.18.4-0ubuntu0.3_armhf_translations.tar.gz d0910c4add715fca804571db072fea2f 2819090 x11 extra xserver-xephyr-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb ae2cbf35f9fa5590ea23703355a9c89e 772654 x11 optional xserver-xephyr_1.18.4-0ubuntu0.3_armhf.deb 29ac0c5ab1b0a83c9545c9f5d9ee8e5f 6339714 debug extra xserver-xorg-core-dbg_1.18.4-0ubuntu0.3_armhf.deb 98381a847bfba6ebd38c5c30f86d8203 4005910 x11 extra xserver-xorg-core-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb 5e7fe4c56f69a68c30d72b22f841abb8 2734280 debian-installer extra xserver-xorg-core-udeb-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb 61d019c7fcb03e60de7f36d83f37baa1 776334 debian-installer optional xserver-xorg-core-udeb_1.18.4-0ubuntu0.3_armhf.udeb 6150087aac02c8eb3eeaef262e5e98a2 1119378 x11 optional xserver-xorg-core_1.18.4-0ubuntu0.3_armhf.deb 6ded19b2574c1d8d96b61ee81d5beeac 197340 x11 optional xserver-xorg-dev_1.18.4-0ubuntu0.3_armhf.deb 1e7242f68f8b34a6783eb0e4714187b7 8150 x11 extra xserver-xorg-legacy-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb cc1b28cf7fc5aad98e4fe168a23a9e6e 35824 x11 extra xserver-xorg-legacy_1.18.4-0ubuntu0.3_armhf.deb 90ae57fdcf417596c7d29a09d6a4d0b9 2266402 x11 extra xvfb-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb 4e408bf1b9473e3fd698aaf41b3abb7f 650636 x11 optional xvfb_1.18.4-0ubuntu0.3_armhf.deb 16fb04f2706b1fa7e3d1d80f412ca58d 2588542 x11 extra xwayland-dbgsym_1.18.4-0ubuntu0.3_armhf.ddeb f8896c5a9ee68ad36adde38b2b853fdd 712516 x11 optional xwayland_1.18.4-0ubuntu0.3_armhf.deb Original-Maintainer: Debian X Strike Force Package-Type: udeb