Univention Bugzilla – Bug 31458
mesa: Multiple issues (3.1)
Last modified: 2013-11-19 06:44:31 CET
+++ This bug was initially created as a clone of Bug #31457 +++ +++ This bug was initially created as a clone of Bug #31456 +++ CVE-2013-1993 Ilja van Sprundel of IOActive discovered several security issues in multiple components of the X.org graphics stack and the related libraries: Various integer overflows, sign handling errors in integer conversions, buffer overflows, memory corruption and missing input sanitising may lead to privilege escalation or denial of service.
Memory corruption when processing shaders (CVE-2013-1872)
(In reply to Moritz Muehlenhoff from comment #1) > Memory corruption when processing shaders (CVE-2013-1872) Not affected: The affected code was introduced later
Fixed in 3.2 through the import of Debian 6.0.8. The QA should ideally be made by the same person as for Bug 31956.
(In reply to Moritz Muehlenhoff from comment #2) > Not affected: The affected code was introduced later Correct (In reply to Moritz Muehlenhoff from comment #3) > Fixed in 3.2 through the import of Debian 6.0.8. Correct
UCS 3.2 has been released: http://docs.univention.de/release-notes-3.2-en.html http://docs.univention.de/release-notes-3.2-de.html If this error occurs again, please use "Clone This Bug".