[ANNOUNCE] xorg-server 1.14.3.901

Matt Dew marcoz at osource.org
Sat Oct 26 22:17:50 CEST 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

All,
  Here's 1.14.4-rc1.   Please beat on it.

Major highlight:
  CVE-2013-4396 -
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4396


I pulled and cherry-picked these late in the 6-week cycle.

Considering that the CVE-2013-4396 is in here, I'm extending this
another week.  I want to get this out for the security patch, but I
want a little testing on it. So, if there are no issues between now
and next Thursday, I will release it then.


Alan Coopersmith (2):
      Avoid use-after-free in dix/dixfonts.c: doImageText()
[CVE-2013-4396]
      Allow disabling XFree86-DGA, DRI, VidModeExtension extensions

Egbert Eich (1):
      DIX/Xi: Pass correct client to CheckDeviceGrabAndHintWindow()

Julien Cristau (3):
      test: include dix-config.h in hashtabletest.c
      xfree86: improve check for posix saved ids
      dix: add missing include for DeleteWindowFromAnySelections

Matt Dew (1):
      Bump version from 1.14.3 to 1.14.3.901.

Peter Hutterer (14):
      test: fix the gcc diagnostics pragma
      dix: check for grab type before checking XI2 mask
      Xi: allow for XIAllowEvent requests larger than XI < 2.2 size
(#68554)
      dix: only allow button and key events to freeze a sync'd pointer
      include: change grabtypes to start at 1
      dix: don't attempt to deliver an event for a different grabtype
      dix: only deliver for the current grab type
      sync: compress two if statements
      sync: always call BracketValues when recalculating upper/lower
brackets
      sync: supply the counter from IdleTimeBlockHandler
      dix: provide accessor methods for the last device event time
      sync: if the idle time was reset, force alarms to trigger (#70476)
      sync: always set the brackets (#59644)
      sync: split updating and triggering a counter up

git tag: xorg-server-1.14.3.901

http://xorg.freedesktop.org/archive/individual/xserver/xorg-server-1.14.3.901.tar.bz2
MD5:  8b59f9964103706f7b1bf4ba8395f91b  xorg-server-1.14.3.901.tar.bz2
SHA1: b253807d4f3110e8297859d7a94a2820e277ef9d
xorg-server-1.14.3.901.tar.bz2
SHA256:
3d8481f60d6ef67bb9b72c1ee375f5a64e69ba32c613c01367b3c2b5c154ab0a
xorg-server-1.14.3.901.tar.bz2

http://xorg.freedesktop.org/archive/individual/xserver/xorg-server-1.14.3.901.tar.gz
MD5:  af10685c61957b3fd10fd32a7eed0af3  xorg-server-1.14.3.901.tar.gz
SHA1: a0a9f60f465fdb536e885b293e3cb4f6f93533fe
xorg-server-1.14.3.901.tar.gz
SHA256:
6339d38d314435a8d6d0926aeef939b8e74c8f167890870d7bb585f37bd90cd4
xorg-server-1.14.3.901.tar.gz



- -- 
Matt Dew <marcoz at osource.org>       Key signature: 0xF7C3 BEC3
Fingerprint: FDB1 9D94 C573 DC29 BCCB 2F9F A6BF 3771 F7C3 BEC3
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJSbCNrAAoJEKa/N3H3w77DnM4H/0ALx+Qft5Nf+H7/c96DONn/
Fqjf9HUy1TAqsQr1u5deLxDYgl60RBUB0Yq6UA+u1v/XhavRLJBM6Zvvyd+2Dc8n
rqwNuNfIztPsh+j4L/G+zbsP7odoH875Wj0du/+5OvcwL4G7ImwChPqZo0MG0L0K
YF4/uhqrkksFjFwQhZhayf7R5mJpP8gillbtDMj3vrvDHHx33yeymW8Ysfu0TYlt
KxQmoRVrnIYFxHTn1HZQ5i90TpZHVX6Hgar+ra4lSNMp90HTBOpRabTVGO7gbJ4B
uLgt5FrinDpkgHoY7c75JxDOGNJpobBwczNaCGaXemCkZaZiWUBGQjaUFuEoDto=
=Y2pb
-----END PGP SIGNATURE-----


More information about the xorg mailing list