libxfixes: CVE-2016-7944

Debian Bug report logs - #840442
libxfixes: CVE-2016-7944

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: libxfixes: CVE-2016-7944

Date: Tue, 11 Oct 2016 17:46:04 +0200

Source: libxfixes
Version: 1:5.0.2-1
Severity: important
Tags: security upstream patch

Hi,

the following vulnerability was published for libxfixes.

CVE-2016-7944[0]

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-7944

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore

Message #16 received at 840442-close@bugs.debian.org (full text, mbox, reply):

From: Emilio Pozuelo Monfort <pochu@debian.org>

To: 840442-close@bugs.debian.org

Subject: Bug#840442: fixed in libxfixes 1:5.0.3-1

Date: Mon, 05 Dec 2016 19:18:24 +0000

Source: libxfixes
Source-Version: 1:5.0.3-1

We believe that the bug you reported is fixed in the latest version of
libxfixes, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 840442@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Emilio Pozuelo Monfort <pochu@debian.org> (supplier of updated libxfixes package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 05 Dec 2016 19:17:34 +0100
Source: libxfixes
Binary: libxfixes3 libxfixes3-udeb libxfixes-dev
Architecture: source
Version: 1:5.0.3-1
Distribution: unstable
Urgency: medium
Maintainer: Debian X Strike Force <debian-x@lists.debian.org>
Changed-By: Emilio Pozuelo Monfort <pochu@debian.org>
Description:
 libxfixes-dev - X11 miscellaneous 'fixes' extension library (development headers)
 libxfixes3 - X11 miscellaneous 'fixes' extension library
 libxfixes3-udeb - X11 miscellaneous 'fixes' extension library (udeb)
Closes: 840442
Changes:
 libxfixes (1:5.0.3-1) unstable; urgency=medium
 .
   [ Andreas Boll ]
   * New upstream release.
     - Fixes CVE-2016-7944 (Closes: #840442).
   * Update d/upstream/signing-key.asc with Matthieu Herrb's key.
   * Fix Vcs-* URLs.
   * Update a bunch of URLs in packaging to https.
 .
   [ Emilio Pozuelo Monfort ]
   * Bump debhelper compat to 10.
     + dh-autoreconf is now enabled by default.
     + --disable-silent-rules is passed to configure automatically.
Checksums-Sha1:
 4cf306512eedac397aa7be73996f684b385fcdba 2040 libxfixes_5.0.3-1.dsc
 5b3f9ae580286eeb90ef6833f22ccc95c45011fa 360412 libxfixes_5.0.3.orig.tar.gz
 29694ad77f022ac7833f45c2d78452ad9a0e6c0b 15140 libxfixes_5.0.3-1.diff.gz
Checksums-Sha256:
 87c1c491d8ff261b5a723c6c6aa974f315ff6f25f47425285a62065cbf944025 2040 libxfixes_5.0.3-1.dsc
 9ab6c13590658501ce4bd965a8a5d32ba4d8b3bb39a5a5bc9901edffc5666570 360412 libxfixes_5.0.3.orig.tar.gz
 95b9688465531c60ff372bf8a2eb5fdd456970cbbb679ba13e54d24af44fb904 15140 libxfixes_5.0.3-1.diff.gz
Files:
 61c0ec988bbcbec5b2a881b0b35082b2 2040 x11 optional libxfixes_5.0.3-1.dsc
 fd07d0d77e92b0a72ca1740a72322837 360412 x11 optional libxfixes_5.0.3.orig.tar.gz
 a8bb9daa2a26e508ec4cf7dbe0605da0 15140 x11 optional libxfixes_5.0.3-1.diff.gz

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAlhFuIgACgkQnUbEiOQ2
gwIh+RAAnsSKAXAGwlcUycnL+kVlx2cm+tLT8Y24UuX9EoSTjzhjsHptqGQ7ih4o
oY9xydzwrhY29d5ZlvinZZKmjmbRqu7umcnOrbnXZlQWqal4384EhEgRwR/Ym6zq
l49RzlehAORFRep5kT6Ymyj/q0QVd3GlUcx89193AJOY38h/QuUOlkcRQYDC7jha
tThTCSAZ3NJqkky2f1pDgSG38+R8ojsXNANWM6nmujsvoB4lbxgMBgKotLdFv9Zw
xtTwMJvvycMAKSmnosVVrhVk968OY4In0om/bn/II/6w0RHyRDaKzF4uzod11bbk
7nGzr3Bg/KKQhdWaB6lZXy51T2h+7acZFr0p4cEy4lHbeUhAYTvRshmNJOjrOmiu
C7PvmpiG3Vmyejvjyi5+UxgzcA95AFEYO1C0W6cGSNQNhmp+yuFVVK22ov/UJsZQ
YMe/WGOP9Zi0hYiPjl/bAytAef6fRDSzEjgEUGducP95JmDhprFm32u0QWOdskmz
Mjp+7CNKNt3ovhSeT8oIRGCSbq5/Ue23ImXZ85oJ7ST+OxFolR3kd/n9sFzquKom
RQwScXRWdu6WWbxFh6+NRcsyA/lWQ92PUx6si1jzHb0khxvBr3xcM0dTzF3VlcQs
Il7H9deCjbn+OsSVJ6pclxpdVSCUi2Pu3CTNN52ByX7FdGGAuXo=
=n0ka
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.