<div dir="ltr"><div dir="ltr"><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small"><br></div><br><div class="gmail_quote"><div dir="ltr">On Tue, Oct 30, 2018 at 11:26 AM Peter Tribble <<a href="mailto:peter.tribble@gmail.com">peter.tribble@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div dir="ltr"><br><br><div class="gmail_quote"><div dir="ltr">On Tue, Oct 30, 2018 at 10:13 AM Udo Grabowski (IMK) <<a href="mailto:udo.grabowski@kit.edu" target="_blank">udo.grabowski@kit.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">This Xorg patch should be immediately merged in Hipster:<br></blockquote><div><br></div><div>It was merged and updated packages published last Thursday, by the looks of it:<br><br>commit b694face8cd955399d90fae658d6a01fb1fa9c5b<br>Author: Aurelien Larcher <<a href="mailto:aurelien.larcher@gmail.com" target="_blank">aurelien.larcher@gmail.com</a>><br>Date: Thu Oct 25 19:31:53 2018 +0200<br><br> xorg-server: CVE-2018-14665<br></div></div></div></div></blockquote><div><br></div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default">Indeed :)</div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default">I also posted on Twitter: <a href="https://twitter.com/OpenIndiana/status/1055559789831430144">https://twitter.com/OpenIndiana/status/1055559789831430144</a><br></div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default"></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div dir="ltr"><div class="gmail_quote"><div><br> <br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<<a href="https://gitlab.freedesktop.org/xorg/xserver/commit/50c0cf885a6e91c0ea71fb49fa8f1b7c86fe330e" rel="noreferrer" target="_blank">https://gitlab.freedesktop.org/xorg/xserver/commit/50c0cf885a6e91c0ea71fb49fa8f1b7c86fe330e</a>><br>
<br>
That check had been part of older Xorgs ,e.g., on oi_151a9.<br>
<br>
See the really nasty CVE-2018-14665:<br>
<<a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14665" rel="noreferrer" target="_blank">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14665</a>><br>
-- <br>
Dr.Udo Grabowski Inst.f.Meteorology & Climate Research IMK-ASF-SAT<br>
<a href="http://www.imk-asf.kit.edu/english/sat.php" rel="noreferrer" target="_blank">http://www.imk-asf.kit.edu/english/sat.php</a><br>
KIT - Karlsruhe Institute of Technology <a href="http://www.kit.edu" rel="noreferrer" target="_blank">http://www.kit.edu</a><br>
Postfach 3640,76021 Karlsruhe,Germany T:(+49)721 608-26026 F:-926026<br>
<br>
_______________________________________________<br>
oi-dev mailing list<br>
<a href="mailto:oi-dev@openindiana.org" target="_blank">oi-dev@openindiana.org</a><br>
<a href="https://openindiana.org/mailman/listinfo/oi-dev" rel="noreferrer" target="_blank">https://openindiana.org/mailman/listinfo/oi-dev</a></blockquote></div><br clear="all"><br>-- <br><div dir="ltr" class="gmail-m_3436732218098904483gmail_signature">-Peter Tribble<br><a href="http://www.petertribble.co.uk/" target="_blank">http://www.petertribble.co.uk/</a> - <a href="http://ptribble.blogspot.com/" target="_blank">http://ptribble.blogspot.com/</a></div></div></div>
_______________________________________________<br>
oi-dev mailing list<br>
<a href="mailto:oi-dev@openindiana.org" target="_blank">oi-dev@openindiana.org</a><br>
<a href="https://openindiana.org/mailman/listinfo/oi-dev" rel="noreferrer" target="_blank">https://openindiana.org/mailman/listinfo/oi-dev</a></blockquote></div><br clear="all"><br>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><font style="font-family:courier new,monospace" size="1">---<br>Praise the Caffeine embeddings<br></font></div></div></div></div></div></div>