X.Org security advisory: multiple vulnerabilities in the X server

[Alexander E. Patrakov]

Matthieu Herrb wrote:

> ftp://ftp.freedesktop.org/pub/xorg/X11R7.2/patches/xorg-xserver-1.2-multiple-overflows.diff
> ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-multiple-overflows.diff

The freedesktop FTP server still contains buggy patches that cause regressions. 
This is very irresponsible. Why should I extract the correct fixes from Debian 
packaging, instead of the official place?

Attached (for others to look at) are both the bad (official) diff for the SHM 
problem and the diff that went into Debian.

-- 
Alexander E. Patrakov
-------------- next part --------------
A non-text attachment was scrubbed...
Name: bad.diff
Type: text/x-diff
Size: 3121 bytes
Desc: not available
URL: <http://lists.x.org/archives/xorg/attachments/20080120/8f8637ee/attachment.diff>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: good.diff
Type: text/x-diff
Size: 3369 bytes
Desc: not available
URL: <http://lists.x.org/archives/xorg/attachments/20080120/8f8637ee/attachment-0001.diff>