xorg-server 2:1.4.1~git20080105-1ubuntu2 source package in Ubuntu

Changelog

xorg-server (2:1.4.1~git20080105-1ubuntu2) hardy; urgency=low

  * Added security patches:
    - 145_cve_2007_5760_out_of_bounds.patch:  Verify screen index is
      within the index bounds of xf86Screens[].
    - 146_cve_2007_6427_xinput_extension_memory_corruption.patch:  Handle
      swapping of long integer pointers more carefully.
    - 147_cve_2007_6428_tog_cup_extension_memory_corruption.patch:  Verify
      screen index is within the bounds of the number of screens available.
    - 148_cve_2007_6429_mit_shm_and_evi_ext_integer_overflows.patch:  Count
      the number of visuals and check that the requested visual is within
      that limit, to prevent an overflow in REQUEST_FIXED_SIZE.  Improve
      checking of height/width values of pixmaps in SHM.
    - 149_cve_2008_0006_pcf_font_parser_buffer_overflow.patch:  Add checks
      of values for firstCol, lastCol, firstRow, and lastRow before
      allocating.
    - 150_fopen_privs_check.patch:  Switch from directly calling fopen()
      to Fopen(), which includes checks for privileges before calling
      open().

 -- Bryce Harrington <email address hidden>   Thu, 17 Jan 2008 13:57:26 -0800