-
xorg-server (2:1.20.13-1ubuntu1.2) impish-security; urgency=medium
* SECURITY UPDATE: ProcXkbSetGeometry Out-Of-Bounds Access
- debian/patches/CVE-2022-2319-pre1.patch: switch to array index loops
to moving pointers in xkb/xkb.c.
- debian/patches/CVE-2022-2319.patch: add request length validation for
XkbSetGeometry in xkb/xkb.c.
- CVE-2022-2319
* SECURITY UPDATE: ProcXkbSetDeviceInfo Out-Of-Bounds Access
- debian/patches/CVE-2022-2320.patch: swap XkbSetDeviceInfo and
XkbSetDeviceInfoCheck in xkb/xkb.c.
- CVE-2022-2320
-- Marc Deslauriers <email address hidden> Wed, 06 Jul 2022 09:48:59 -0400
-
xorg-server (2:1.20.13-1ubuntu1.1) impish-security; urgency=medium
* SECURITY UPDATE: SProcRenderCompositeGlyphs out-of-bounds access
- debian/patches/CVE-2021-4008.patch: check lengths in render/render.c.
- CVE-2021-4008
* SECURITY UPDATE: SProcXFixesCreatePointerBarrier out-of-bounds access
- debian/patches/CVE-2021-4009.patch: use sizes in xfixes/cursor.c.
- CVE-2021-4009
* SECURITY UPDATE: SProcScreenSaverSuspend out-of-bounds access
- debian/patches/CVE-2021-4010.patch: fix logic in Xext/saver.c.
- CVE-2021-4010
* SECURITY UPDATE: SwapCreateRegister out-of-bounds access
- debian/patches/CVE-2021-4011.patch: fix length in record/record.c.
- CVE-2021-4011
-- Marc Deslauriers <email address hidden> Tue, 14 Dec 2021 09:07:57 -0500
-
xorg-server (2:1.20.13-1ubuntu1) impish; urgency=medium
* Merge from Debian.
* modesetting-disable-reverse-prime-offload-udl.diff: Dropped,
upstream.
-- Timo Aaltonen <email address hidden> Tue, 10 Aug 2021 12:32:48 +0300
-
xorg-server (2:1.20.11-1ubuntu2) impish; urgency=medium
* modesetting-disable-reverse-prime-offload-udl.diff: Fix a regression
on displaylink devices after mesa update. (LP: #1931547)
-- Timo Aaltonen <email address hidden> Tue, 06 Jul 2021 13:17:51 +0300
-
xorg-server (2:1.20.11-1ubuntu1) hirsute; urgency=medium
* Merge from Debian.
xorg-server (2:1.20.11-1) unstable; urgency=medium
* New upstream release.
- CVE-2021-3472
* Add signing key for Matt Turner.
-- Timo Aaltonen <email address hidden> Tue, 13 Apr 2021 19:15:17 +0300