nx-libs, branch master NXv3 (redistributed) https://openid.arctica-project.org/nx-libs/atom?h=master 2015-02-18T12:43:20+00:00 X.org CVE-2015-0255 patch and its 3 prereq patches 2015-02-18T12:43:20+00:00 Mike DePaulo mikedep333@gmail.com 2015-02-18T12:43:20+00:00 urn:sha1:2b2a02f93f552a38de8f72a971fa3f3ff42b3298 1101-Coverity-844-845-846-Fix-memory-leaks.patch 1102-include-introduce-byte-counting-functions.patch 1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input-buff.patc 1104-xkb-Check-strings-length-against-request-size.patch (The last patch is the CVE-2015-0255 patch.) Update 1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch. Fix broken comment paragraph, whitespace fix. 2015-02-16T09:05:33+00:00 Mike Gabriel mike.gabriel@das-netzwerkteam.de 2015-02-16T08:57:17+00:00 urn:sha1:ac2937e717f29e38583eca34657988e7b6da7eb6 CVE security review: Add 1041-nx-X11-lib-font-fc-fserve.c-initialize-remaining-buf.patch & 1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch. 2015-02-16T09:05:29+00:00 Mihai Moldovan ionic@ionic.de 2015-02-16T08:40:16+00:00 urn:sha1:650181c23b32378b4ec829880cc20700bf5b2ddf - Add 1041-nx-X11-lib-font-fc-fserve.c-initialize-remaining-buf.patch. Initialize remaining bufleft variables (nx-X11/lib/font/fc/fserve.c). - Add 1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch. Do proper input validation to fix for CVE-2011-2895. CVE security review [1/2]. 2015-02-16T09:04:20+00:00 Mihai Moldovan ionic@ionic.de 2015-02-16T08:35:47+00:00 urn:sha1:ae898ff13b4782239a152b43125aa1fc0b80ba3d * CVE security review [1/2]: - Update 1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch. Use xfree() instead of free() in nx-libs. - Update 1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch. Apply correctly on nx-libs 3.6.x. - Update 1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch. Human-readable version of "1 MB". debian/changelog: fix too-long lines 2015-02-16T05:19:54+00:00 Mike Gabriel mike.gabriel@das-netzwerkteam.de 2015-02-16T05:19:54+00:00 urn:sha1:f74f59d2f3962b227753d5eb0ecc1af82f41dbbc Makefile.nx-libs: Fix uninstall-lite rule. The nxproxy and nxcomp uninstallation has to be in uninstall-lite, not in uninstall-full. 2015-02-16T05:09:24+00:00 Mike Gabriel mike.gabriel@das-netzwerkteam.de 2015-02-16T04:51:02+00:00 urn:sha1:ffb64d2b0794af8aa59751b0d757110325b74e55 Make install-lite rule in Makefile.nx-libs more predictable and not rely on nxproxy/Makefile.in. 2015-02-16T05:09:24+00:00 Mike Gabriel mike.gabriel@das-netzwerkteam.de 2015-02-16T04:45:17+00:00 urn:sha1:d2ff2138b4710faab79145e8ac020d295754a8d6 Install "%{_libdir}/nx/bin" into nxproxy package. 2015-02-16T04:00:22+00:00 Mike Gabriel mike.gabriel@das-netzwerkteam.de 2015-02-14T20:55:30+00:00 urn:sha1:0a423ce8f689bb934831f1fecc41b6db5c5c8fdb nx-libs.spec: Typo fix in comment. 2015-02-16T04:00:22+00:00 Mike Gabriel mike.gabriel@das-netzwerkteam.de 2015-02-14T20:53:00+00:00 urn:sha1:db328b616e76ce5f33fc782b69e8fb2e568350fb Fix FTBFS due to the nxproxy executable already existing under /usr/lib/nx/bin/nx 2015-02-14T22:07:21+00:00 Mike DePaulo mikedep333@gmail.com 2015-02-14T22:07:21+00:00 urn:sha1:7b0c8a2acdb866f23c0569b4ba549e9e8c94428e