xorg-x11-server-1.13.0-23.1.0.1.AXS4

X.Org X11 X server

Security issues fixed with this release:

• CVE-2013-1940
X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty.

• CVE-2013-6424
Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.

Fixed bug :

• Fixed the aspect ratio when using a tablet in relative mode: the horizontal and vertical movement ratio of the cursor did not match the ratio of the stylus.

• When the Xephyr X server was made resizable with a previous update, the resize functionality was not on by default. This has been fixed and X sandboxes are now resizable.

• The X Access Control Extension (XACE) replaces the X Security extension (XC-SECURITY) in Asianux Server 4. However, XACE does not have all the functionalities of XC-SECURITY so XC-SECURITY is enabled again in the xorg-x11-server spec file.

• An error in the upstream code disabled the GLX extension in Xvfb, preventing headless 3D applications from working correctly. This has been fixed.