Accepted libxfixes 1:5.0-4+deb7u2 (source amd64) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 14 Oct 2016 10:21:40 +0200
Source: libxfixes
Binary: libxfixes3 libxfixes3-udeb libxfixes3-dbg libxfixes-dev
Architecture: source amd64
Version: 1:5.0-4+deb7u2
Distribution: wheezy-security
Urgency: high
Maintainer: Debian X Strike Force <debian-x@lists.debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Description:
libxfixes-dev - X11 miscellaneous 'fixes' extension library (development headers)
libxfixes3 - X11 miscellaneous 'fixes' extension library
libxfixes3-dbg - X11 miscellaneous 'fixes' extension library (debug package)
libxfixes3-udeb - X11 miscellaneous 'fixes' extension library (udeb)
Closes: 840442
Changes:
libxfixes (1:5.0-4+deb7u2) wheezy-security; urgency=high
.
* CVE-2016-7944: Fix integer overflow on illegal server response.
The 32 bit field "rep.length" was not checked for validity, which allowed
an integer overflow on 32 bit systems. A malicious server could send
INT_MAX as "length" which was multiplied by the size of XRectangle. In that
case the client won't read the whole data from server, getting out of sync.
(Closes: #840442)
Checksums-Sha1:
0896218caf5a4013673d0990c6d76e8aea9c233b 2130 libxfixes_5.0-4+deb7u2.dsc
694ef9e36e4fa4e1e8fb7c129e839019f8c12e1b 314994 libxfixes_5.0.orig.tar.gz
3f84180939ba243dcae4901451343b290d8996c7 7805 libxfixes_5.0-4+deb7u2.diff.gz
e5bafa9239b2eb030809952c0cff532e61a682c2 21588 libxfixes3_5.0-4+deb7u2_amd64.deb
3af9f07960180335e27ecf7e13e3289055bc7168 7176 libxfixes3-udeb_5.0-4+deb7u2_amd64.udeb
0ba85e561f360a70794303fe2f06e6a694082658 57558 libxfixes3-dbg_5.0-4+deb7u2_amd64.deb
54a4ec5b1e4405429de6680f2d18d171ef787581 23274 libxfixes-dev_5.0-4+deb7u2_amd64.deb
Checksums-Sha256:
9b16359ca4a97f286d3f8a61cdca99dbeb74cb5c8ae8228b56fad408ac163b55 2130 libxfixes_5.0-4+deb7u2.dsc
3c25f2fcf2983834b932756399cb538e69beb0d739f992f9719073fcedaa4405 314994 libxfixes_5.0.orig.tar.gz
89c814567b952964ba347f84443d546aa98f02107af711ba48575c2cf10fa7fd 7805 libxfixes_5.0-4+deb7u2.diff.gz
a48d7d6cf93ffdfced80a0d263f6ed2dc10199ac836745cbe1345b06b73c3920 21588 libxfixes3_5.0-4+deb7u2_amd64.deb
0fab66fe026ca40ebade6e5e1175cbbe06fadb433261efb5139a3b1be0af5a48 7176 libxfixes3-udeb_5.0-4+deb7u2_amd64.udeb
ef7808a005a2b42a10a586ce086e701e08a89d577d9e15a2bb12fb521f005dec 57558 libxfixes3-dbg_5.0-4+deb7u2_amd64.deb
0dfe159438d21faee4c872b46175a71477ea08bf03cc5fa6e1dc6f905cf96d46 23274 libxfixes-dev_5.0-4+deb7u2_amd64.deb
Files:
401175fa0f283174fe7dfddae513b00d 2130 x11 optional libxfixes_5.0-4+deb7u2.dsc
0a2139e91df4758218e0fddbd549e13c 314994 x11 optional libxfixes_5.0.orig.tar.gz
4ccbf018c1ebdb3ca14fb3cbe76e6e54 7805 x11 optional libxfixes_5.0-4+deb7u2.diff.gz
f3078d64c17de8eadf501785cea8dd93 21588 libs optional libxfixes3_5.0-4+deb7u2_amd64.deb
214e555100a8acafc2e95bcdc0ed66aa 7176 debian-installer optional libxfixes3-udeb_5.0-4+deb7u2_amd64.udeb
72928e8e98762fce58a1b257d2d30de9 57558 debug extra libxfixes3-dbg_5.0-4+deb7u2_amd64.deb
75b2eb5ab2ec939ffc3d022e88a834f3 23274 libdevel optional libxfixes-dev_5.0-4+deb7u2_amd64.deb
Package-Type: udeb
-----BEGIN PGP SIGNATURE-----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=JZkc
-----END PGP SIGNATURE-----