touch-packages team mailing list archive

[Brian Murray <brian@xxxxxxxxxx>]

Hello Robert, or anyone else affected,

Accepted lightdm into vivid-proposed. The package will build now and be
available at
https://launchpad.net/ubuntu/+source/lightdm/1.14.4-0ubuntu1 in a few
hours, and then in the -proposed repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to
enable and use -proposed.  Your feedback will aid us getting this update
out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested, and change the tag
from verification-needed to verification-done. If it does not fix the
bug for you, please add a comment stating that, and change the tag to
verification-failed.  In either case, details of your testing will help
us make a better decision.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance!

** Also affects: lightdm (Ubuntu Vivid)
   Importance: Undecided
       Status: New

** Changed in: lightdm (Ubuntu Vivid)
   Importance: Undecided => Critical

** Changed in: lightdm (Ubuntu Vivid)
       Status: New => Fix Committed

** Changed in: lightdm (Ubuntu Vivid)
       Status: Fix Committed => Triaged

** Changed in: lightdm (Ubuntu Vivid)
       Status: Triaged => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1516831

Title:
  XDMCP Request packet with no addresses crashes LightDM

Status in Light Display Manager:
  Fix Released
Status in Light Display Manager 1.14 series:
  Fix Released
Status in Light Display Manager 1.16 series:
  Fix Released
Status in lightdm package in Ubuntu:
  Fix Committed
Status in lightdm source package in Vivid:
  Fix Committed
Status in lightdm source package in Wily:
  Fix Committed

Bug description:
  [Impact]
  If LightDM receives an XDMCP Request packet with no addresses then it will attempt to access a negative index into an array and crash. This only occurs if the XDMCP server is enabled.

  [Test Case]
  1. Enable XDMCP in lightdm.conf:
  [XDMCPServer]
  enabled=true
  2. Start LightDM
  3. Send an XDMCP Request without an empty addresses field (valid XDMCP servers do not send this).

  Expected result:
  The request is ignored.

  Observed result:
  LightDM crashes.

To manage notifications about this bug go to:
https://bugs.launchpad.net/lightdm/+bug/1516831/+subscriptions