Apply a patch for fixing TDIS-5990 (CVE-2013-1940 allow physically proximate attacker...

Change-Id: I176a88b408726edac16dbb7518398b3f157f7ee4

diff --git a/hw/xfree86/os-support/shared/posix_tty.c b/hw/xfree86/os-support/shared/posix_tty.c
index ab3757a..4d08c1e 100644 (file)
--- a/hw/xfree86/os-support/shared/posix_tty.c
+++ b/hw/xfree86/os-support/shared/posix_tty.c
@@ -421,7 +421,8 @@ xf86FlushInput(int fd)
 {
     fd_set fds;
     struct timeval timeout;
-    char c[4];
+    /* this needs to be big enough to flush an evdev event. */
+    char c[256];
 
     DebugF("FlushingSerial\n");
     if (tcflush(fd, TCIFLUSH) == 0)

diff --git a/packaging/xorg-x11-server.spec b/packaging/xorg-x11-server.spec
index ac0273d..1eff488 100755 (executable)
--- a/packaging/xorg-x11-server.spec
+++ b/packaging/xorg-x11-server.spec
@@ -1,6 +1,6 @@
 Name:      xorg-x11-server
 Summary:    X.Org X11 X server
-Version:    1.13.4
+Version:    1.13.5
 Release:    12
 Group:      System/X11
 License:    MIT