desktop-packages team mailing list archive

[Launchpad Bug Tracker <1197921@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package xorg-server - 2:1.11.4-0ubuntu10.17

---------------
xorg-server (2:1.11.4-0ubuntu10.17) precise-security; urgency=medium

  * SECURITY UPDATE: information leak and denial of service in
    XkbSetGeometry
    - debian/patches/CVE-2015-0255.patch: properly check lengths in
      xkb/xkb.c.
    - CVE-2015-0255
  * SECURITY UPDATE: denial of service via invalid trapezoid (LP: #1197921)
    - debian/patches/CVE-2013-6424.patch: don't render invalid trapezoids
      in exa/exa_render.c, fix underflow in render/picture.h.
    - CVE-2013-6424
  * debian/patches/CVE-2014-8xxx/0038-CVE-2014-8092-*: fix regression in
    previous security update by allowing zero-height PutImage requests in
    dix/dispatch.c.
 -- Marc Deslauriers <marc.deslauriers@xxxxxxxxxx>   Thu, 12 Feb 2015 08:57:17 -0500

** Changed in: xorg-server (Ubuntu Precise)
       Status: Confirmed => Fix Released

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-8092

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2015-0255

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to pixman in Ubuntu.
https://bugs.launchpad.net/bugs/1197921

Title:
  LibreOffice spreadsheet causes full Xorg crash with Anti-Aliasing
  enabled

Status in Pixman:
  Fix Released
Status in libreoffice package in Ubuntu:
  Invalid
Status in pixman package in Ubuntu:
  Fix Released
Status in xorg-server package in Ubuntu:
  Fix Released
Status in pixman source package in Precise:
  Fix Released
Status in xorg-server source package in Precise:
  Fix Released
Status in pixman source package in Quantal:
  Fix Released
Status in xorg-server source package in Quantal:
  Invalid
Status in pixman source package in Raring:
  Fix Released
Status in xorg-server source package in Raring:
  Won't Fix
Status in pixman source package in Saucy:
  Fix Released
Status in xorg-server source package in Saucy:
  Fix Released

Bug description:
  [Impact]

   * Opening spreadsheets in libreoffice crashes X .

  [Test Case]

   * Open the attached document ( plantage-mai-only-empty.ods )

  [Regression Potential]

   * n/a

  [Other Info]

   * Patch is backport from upstream - http://cgit.freedesktop.org/pixman/commit/?id=5e14da97f16e421d084a9e735be21b1025150f0c .
   * Alternate test case, http://cgit.freedesktop.org/pixman/commit/?id=2f876cf86718d3dd9b3b04ae9552530edafe58a1

To manage notifications about this bug go to:
https://bugs.launchpad.net/pixman/+bug/1197921/+subscriptions