lp:ubuntu/hardy-security/xorg-server

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

81. By Kees Cook on 2010-05-06

* SECURITY UPDATE: incorrect mod() macro could result in crashes
  caused by remote attackers (LP: #551193).
  - Added debian/patches/xaa-fbcomposite-fix-negative-size.patch
  - CVE-2010-1166
* SECURITY UPDATE: xvfb MCOOKIE value could be hijacked due to
  visiblity on the command-line,
  - Updated debian/local/xvfb-run from Debian upstream:
    http://git.debian.org/?p=pkg-xorg/xserver/xorg-server.git;a=commitdiff;h=ecf09e571198ee16256a5efd1c23fd286a4f2249;hp=cbccf51785b500f51dc974ed05f5512181d4c51f
  - CVE-2009-1573

80. By Bryce Harrington on 2008-06-11

* Fix multiple security issues:
  + CVE-2008-2360 - RENDER Extension heap buffer overflow
  + CVE-2008-2361 - RENDER Extension crash
  + CVE-2008-2362 - RENDER Extension memory corruption
  + CVE-2008-1379 - MIT-SHM arbitrary memory read
  + CVE-2008-1377 - RECORD and Security extensions memory corruption

79. By Alexander Sack on 2008-04-15

* debian/patches/series,
  debian/patches/165_fedora_xserver-1.5.0-xaa-option-inversion.patch:
  - Turn on patch included in previous commit - obviously accidentially
    forgotten.
  - Now that its really enabled, make it apply to 1.4.1 code base
    accordingly. (LP: #182038)

78. By Bryce Harrington on 2008-04-14

* debian/patches/165_fedora_xserver-1.5.0-xaa-option-inversion.patch:
  - Turn XAA Offscreen Pixmaps off by default, and use
    XaaOffscreenPixmaps "true" to turn them on. This setting was an
    early pre-EXA HW optimization attempt that didn't pan out; upstream is
    deprecating XAA in favor of EXA generally, and for situations where
    XAA is still in use recommends NOT using this optimization hack, since
    they found it often just made performance worse, and sometimes created
    visualization bugs. People wishing to gain added performance should be
    experimenting with EXA anyway, not this setting. (closes LP: #182038)

77. By Timo Aaltonen on 2008-04-09

* 159_xkb_default_to_null.diff:
  When copying the keymap, make sure the structs default to 0/NULL.
  (LP: #184651)
* 160_default_to_intel.diff:
  Default to using intel instead of i810. (LP: #158709)
* 161_fix_big_endian_cursor.diff:
  Fix RandR 1.2 driver interface conversion of two colour cursors to
  ARGB. (LP: #141118)
* Fixes from the upstream 1.4-branch:
  - 162_cve-2007-6429.diff:
    CVE-2007-6429: Always test for size+offset wrapping.
  - 163_fix_untrusted_access.diff:
    Security: Fix for fdo bug #14480: untrusted access broken in 7.3.
  - 164_fix_context_sharing.diff:
    Fix context sharing between direct/indirect contexts

76. By Timo Aaltonen on 2008-03-30

* 157_fix_exa_pixmap_width.diff:
  A patch from upstream to allow wider pixmaps with EXA (LP: #205599)
* 158_xkb_wrapping.diff:
  A patch reviewed by upstream that prevents keys from getting stuck under
  certain situations. (LP: #194214)
* 51_xkb-and-loathing.diff:
  Re-enable. Ignore SIGALRM around calls to Popen()/Pclose() to fix a hang
  when opening menus in OpenOffice.org. (LP: #204137)

75. By Timo Aaltonen on 2008-03-13

* Add some patches from upstream 1.4-branch or proposed set:
  - 109_glx_fail_if_no_texture_bound.diff
    + __glXDRIbindTexImage: Fail if no texture bound to pixmap's texture
      target.
  - 153_exa_skip_empty_glyphs.diff
    + Fix a crasher when EXA and RenderAccel is in use.
  - 154_fix_rotation_for_multimon.diff
    + Fix rotation for multi-monitor situation.
  - 155_exa_fix_off-by-one.diff
    + Fix off-by-one in polyline drawing.
  - 156_resize_composite_overlay.diff
    + Resize composite overlay window when the root window changes.
      (LP: #199700)

74. By Bryce Harrington on 2008-02-19

Add 152_xserver_exa_force_greedy.patch to provide a mechanism for
drivers to force greedy mode on. (LP: #177492, others)

73. By Timo Aaltonen on 2008-02-19

[ Bryce Harrington ]
* Add 150_edid_quirk_lp154w01.patch to fix font size on LGPhilipsLCD
  LP154W01-TLAE (LP: #127827)
* Add 149_add_quirks_for_physical_screen_size_issues.patch to help
  address various common EDID issues (like monitors that report in
  centimeters instead of millimeters, etc.) (LP: #151311)

[ Timo Aaltonen ]
* Add 151_x86emu_handle_cpuid.patch to fix X86EMU CPUID handling.
  (LP: #180742)

72. By Steve Kowalik on 2008-02-08

Add a patch from Matthew Garrett to fix touchscreen issues with DIX.