1. Forum
  2. Usenet
  3. LINUX.DEBIAN.ANNOUNCE.SEC

  • [SECURITY] [DSA 2661-1] xorg-server security update

    From Yves-Alexis Perez@1:229/2 to All on Wed Apr 17 21:40:02 2013
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-2661-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez
    April 17, 2013 http://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : xorg-server
    Vulnerability : information disclosure
    Problem type : local
    Debian-specific: no
    CVE ID : CVE-2013-1940

    David Airlie and Peter Hutterer of Red Hat discovered that xorg-server,
    the Xorg X server was vulnerable to an information disclosure flaw
    related to input handling and devices hotplug.

    When an X server is running but not on front (for example because of a VT switch), a newly plugged input device would still be recognized and
    handled by the X server, which would actually transmit input events to
    its clients on the background.

    This could allow an attacker to recover some input events not intended
    for the X clients, including sensitive information.

    For the stable distribution (squeeze), this problem has been fixed in
    version 2:1.7.7-16.

    For the testing distribution (wheezy), this problem has been fixed in
    version 2:1.12.4-6.

    For the unstable distribution (sid), this problem has been fixed in
    version 2:1.12.4-6.

    We recommend that you upgrade your xorg-server packages.

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: http://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v2.0.19 (GNU/Linux)

    iQEcBAEBCgAGBQJRbvkmAAoJEG3bU/KmdcClqqgH/1OnXR3/xP1OcrxzhmGAKvBw hvU8z9V7+q3qjRzUwV0k98EM84AJbh3EmtvxNg3WgWismD/x70iYuI/9X+jaj0DY nlHhfICOE9MwXT0tU0q4QEV67Ft864+LW/BPr6gWbL0rpR5BwmmEn7Bf5I54wBSY Su32QCtgN/kNzyhKrQW/NptucodULvjDxwk+Ce2w+3xDtQ+XZMK+tA7ijlilTHjF G7/M4m81ENj5F6Gk2RZyuD/6ZI9tgxJpdDBI+adAG+MZyRyvOYNFHpyA8zkS26Nb rdfjbWUmBjyAXnRVqQz+C+s2BX9WHZKLCsBzxUGGTLk03873iwJ1qk6GhKLw/ls=
    =BAj2
    -----END PGP SIGNATURE-----


    --
    To UNSUBSCRIBE, email to [email protected]
    with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: http://lists.debian.org/[email protected]

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)