-
libxi (2:1.3-3ubuntu0.2) lucid-security; urgency=low
* SECURITY UPDATE: denial of service and possible code execution via
incorrect memory size calculations
- debian/patches/CVE-2013-1984.patch: fix multiple integer overflows.
- CVE-2013-1984
* SECURITY UPDATE: denial of service and possible code execution via
incorrect memory size calculations from signedness issues
- debian/patches/CVE-2013-1995.patch: fix signedness issues in
src/XListDev.c.
- CVE-2013-1995
* SECURITY UPDATE: denial of service and possible code execution via
incorrect length and bounds checking
- debian/patches/CVE-2013-1998.patch: properly check lengths and
indexes in src/XGetBMap.c, src/XIPassiveGrab.c, src/XQueryDv.c.
- CVE-2013-1998
-- Marc Deslauriers <email address hidden> Wed, 29 May 2013 10:40:33 -0400
-
libxi (2:1.3-3ubuntu0.1) lucid-proposed; urgency=low
* Add libxi-unknown-device-class.patch: Backport from upstream commit
22e9ace88d on the 1.4 branch to not corrupt memory when the server
sends unknown device classes.
(LP: #968218)
-- Bryce Harrington <email address hidden> Thu, 19 Apr 2012 11:43:47 -0700
-
libxi (2:1.3-3) unstable; urgency=low
[ Julien Cristau ]
* Rename the build directory to not include DEB_BUILD_GNU_TYPE for no
good reason. Thanks, Colin Watson!
* Remove myself from Uploaders
* Update patch from 2:1.3-2 to not crash if an app (like, say, anything
using Qt3) calls libXi functions but the extension isn't available
(closes: #568323). Thanks, Roman Mamedov!
[ Brice Goglin ]
* Remove Jamey Sharp and Josh Triplett from Uploaders, closes: #568276.
[ Cyril Brulebois ]
* Bump Standards-Version from 3.8.3 to 3.8.4 (no changes needed).
* Upload to unstable.
-- Timo Aaltonen <email address hidden> Mon, 22 Mar 2010 19:07:59 +0000
-
libxi (2:1.3-2) unstable; urgency=low
* Initialize extension with the right number of events. This should fix
issues when libXi announces more events than the X server will actually
send for that extension, and thus smashes Xlib's event vector (closes:
#515734, #515946). Patch by Peter Hutterer, analysis by Nathan Kidd.
* Upload to unstable.
-- Ubuntu Archive Auto-Sync <email address hidden> Mon, 18 Jan 2010 07:31:42 +0000
-
libxi (2:1.3-1) experimental; urgency=low
* Bump Standards-Version to 3.8.3.
* Add build-deps on xmlto and asciidoc to build the manpages.
* New upstream release.
libxi (2:1.2.99.4-1) experimental; urgency=low
[ Timo Aaltonen ]
* Add README.source from xsfbs. Bump Standards-Version to 3.8.1.
[ Julien Cristau ]
* Move libxi6-dbg to section 'debug'.
* Drop libxi-dev pre-dependency on x11-common, only needed for upgrades from
sarge.
* New upstream release candidate.
* XInput.h moved here from x11proto-input-dev; add Replaces.
* Also remove config.h.in in clean.
* Bump shlibs and update symbols.
-- Bryce Harrington <email address hidden> Thu, 03 Dec 2009 21:56:57 +0000
-
libxi (2:1.2.1-2ubuntu1) karmic; urgency=low
* Merge with Debian experimental, remaining changes:
- debian/control: libxi-dev Replaces x11proto-input-dev (<= 1.4.3-2)
- copy XInput.h from inputproto 1.5.0, libxi-dev includes it.
Upstream decided not to move it for 1.2.0, but we already had it so
continue shipping it in libxi-dev.
- 100_install_xinput.h.diff: Modify the Makefile.am to install
XInput.h.
- 101_fix_devicepresence_declaration_cplusplus.diff:
Use extern "C" in the declaration for DevicePresence (in
XInput.h) so that it can be accessed from C++.
libxi (2:1.2.1-2) unstable; urgency=low
* Fix typo in debian/rules, which made us build with make -j if
DEB_BUILD_OPTIONS didn't ask for it. Thanks to Samuel Thibault for
reporting the problem!
libxi (2:1.2.1-1) unstable; urgency=low
* New upstream release.
libxi (2:1.2.0-2) unstable; urgency=low
* Add symbols file.
* Upload to unstable.
-- Timo Aaltonen <email address hidden> Fri, 15 May 2009 11:22:00 +0300
