http://packages.ubuntu.com/precise-updates/xserver-xorg-core xorg-server (2:1.11.4-0ubuntu10.16) precise-security; urgency=medium * SECURITY UPDATE: Dec 2014 security issues - additional fixes - debian/patches/CVE-2014-8xxx/003[467]*.patch: add additional fixes not included in original pre-advisory bundle. -- Marc Deslauriers Tue, 09 Dec 2014 17:22:41 -0500 xorg-server (2:1.11.4-0ubuntu10.15) precise-security; urgency=medium * SECURITY UPDATE: Dec 2014 protocol handling security issues - debian/patches/CVE-2014-8xxx/*.patch: patches from upstream to fix a multitude of security issues, including a couple of pre-requisite fixes from git. - CVE-2014-8091 - CVE-2014-8092 - CVE-2014-8093 - CVE-2014-8094 - CVE-2014-8095 - CVE-2014-8096 - CVE-2014-8097 - CVE-2014-8098 - CVE-2014-8099 - CVE-2014-8100 - CVE-2014-8101 - CVE-2014-8102 -- Marc Deslauriers Fri, 05 Dec 2014 12:48:25 -0500 xorg-server (2:1.11.4-0ubuntu10.14) precise-security; urgency=low * SECURITY UPDATE: denial of service and possible code execution via use after free in ImageText request handling. - debian/patches/CVE-2013-4396.patch: avoid use after free in dix/dixfonts.c. - CVE-2013-4396 * SECURITY UPDATE: unsafe use of xkb cache files - debian/patches/190_cache-xkbcomp_output_for_fast_start_up.patch: updated to not use xkb cache files in /tmp when running a non-root server. - CVE-2013-1056 -- Marc Deslauriers Wed, 16 Oct 2013 07:31:05 -0400