[oi-dev] Security patch for Xorg 19.x

[Aurélien Larcher]

On Tue, Oct 30, 2018 at 11:26 AM Peter Tribble <peter.tribble at gmail.com>
wrote:

>
>
> On Tue, Oct 30, 2018 at 10:13 AM Udo Grabowski (IMK) <
> udo.grabowski at kit.edu> wrote:
>
>> This Xorg patch should be immediately merged in Hipster:
>>
>
> It was merged and updated packages published last Thursday, by the looks
> of it:
>
> commit b694face8cd955399d90fae658d6a01fb1fa9c5b
> Author: Aurelien Larcher <aurelien.larcher at gmail.com>
> Date:   Thu Oct 25 19:31:53 2018 +0200
>
>     xorg-server: CVE-2018-14665
>

Indeed :)
I also posted on Twitter:
https://twitter.com/OpenIndiana/status/1055559789831430144

>
>
>
>> <
>> https://gitlab.freedesktop.org/xorg/xserver/commit/50c0cf885a6e91c0ea71fb49fa8f1b7c86fe330e
>> >
>>
>> That check had been part of older Xorgs ,e.g., on oi_151a9.
>>
>> See the really nasty CVE-2018-14665:
>> <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14665>
>> --
>> Dr.Udo Grabowski   Inst.f.Meteorology & Climate Research IMK-ASF-SAT
>> http://www.imk-asf.kit.edu/english/sat.php
>> KIT - Karlsruhe Institute of Technology           http://www.kit.edu
>> Postfach 3640,76021 Karlsruhe,Germany T:(+49)721 608-26026 F:-926026
>>
>> _______________________________________________
>> oi-dev mailing list
>> oi-dev at openindiana.org
>> https://openindiana.org/mailman/listinfo/oi-dev
>
>
>
> --
> -Peter Tribble
> http://www.petertribble.co.uk/ - http://ptribble.blogspot.com/
> _______________________________________________
> oi-dev mailing list
> oi-dev at openindiana.org
> https://openindiana.org/mailman/listinfo/oi-dev



-- 
---
Praise the Caffeine embeddings
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://openindiana.org/pipermail/oi-dev/attachments/20181030/4c06f8bb/attachment-0005.html>