nx-libs, branch pr/Xext-cve-fixesNXv3 (redistributed)
https://openid.arctica-project.org/nx-libs/atom?h=pr%2FXext-cve-fixes2015-05-31T02:19:23+00:00Xv: unvalidated lengths in XVideo extension swapped procs [CVE-2014-8099]2015-05-31T02:19:23+00:00Alan Coopersmithalan.coopersmith@oracle.com2014-01-27T03:23:17+00:00urn:sha1:d1ca2119a25e60f9577d2b709a9cee8677e1a3fe
v2: backport to nx-libs 3.6.x (Mike DePaulo)
v3: port to NXxvdisp.c rather than xvdisp.c (Mike DePaulo)
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
Conflicts:
Xext/xvdisp.c
nxcomp/README.on-retroactive-DXPC-license: Some layout and interpunctuation fixes.2015-05-29T09:15:19+00:00Mike Gabrielmike.gabriel@das-netzwerkteam.de2015-05-29T09:15:19+00:00urn:sha1:4ed85e8ef572130d7862b155d3ee9c1e52743230nxcomp/Misc.cpp: fix build failure introduced in 1f44331574bdbe4069d13e4c26df18094b49e658.2015-05-28T20:37:22+00:00Mihai Moldovanionic@ionic.de2015-05-28T20:36:59+00:00urn:sha1:5bc91ad49ffaf48af7240871aa2cdf50d07c6eccMerge branch 'sunweaver-pr/DXPC-re-license-retroactively' into arctica-3.6.x2015-05-26T14:51:38+00:00Mihai Moldovanionic@ionic.de2015-05-26T14:51:38+00:00urn:sha1:beb08f96c9b04beb11c1ce930fdb7363d6423977
Attributes GH PR #31: https://github.com/ArcticaProject/nx-libs/pull/31
Merge pull request #36 from ArcticaProject/pr/render-cve-fixes2015-05-26T08:31:46+00:00Mike Gabrielmike.gabriel@das-netzwerkteam.de2015-05-26T08:31:46+00:00urn:sha1:e364fde72b064143a16d4f51ed34fa5e27f96004
XRender CVE fixes for nxagent (X.Org CVE-2014-8100)Document retroactive re-licensing of the original DXPC code (closes #30).2015-05-26T07:15:15+00:00Mike Gabrielmike.gabriel@das-netzwerkteam.de2015-05-21T10:25:13+00:00urn:sha1:1f44331574bdbe4069d13e4c26df18094b49e658
* Update nxcomp/LICENSE.
* Add nxcomp/README.on-retroactive-DXPC-license, giving a
short overview of the flow of discussions
* Add "modified or unmodified" to the license information
printed out to stdout in nxcomp/Misc.cpp
* Fix copyright year (2006->2003) for Gian Filippo Pinzari
(and move him to the GPL-2 section).
* Add the complete .mbox file of Debian bug #748565.
Merge branch 'sunweaver-pr/libxrandr-cleanup' into arctica-3.6.x2015-05-25T21:23:22+00:00Mihai Moldovanionic@ionic.de2015-05-25T21:23:22+00:00urn:sha1:230852e0e77985e1d62593fe393059dc0053c043
Attributes GH PR #21: https://github.com/ArcticaProject/nx-libs/pull/21
render: unvalidated lengths in Render extn. swapped procs [CVE-2014-8100 2/2]2015-05-24T23:03:10+00:00Alan Coopersmithalan.coopersmith@oracle.com2014-01-27T03:51:29+00:00urn:sha1:a0c90ad34fa89e5358893701723bd2f96a4bd3b2
v2: backport to nx-libs 3.6.x (Mike DePaulo)
v3: port to NXrender.c rather than render.c (Mike DePaulo)
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
Conflicts:
render/render.c
render: check request size before reading it [CVE-2014-8100 1/2]2015-05-24T23:02:56+00:00Julien Cristaujcristau@debian.org2014-10-28T09:30:04+00:00urn:sha1:e469cff02d3093062ce9243185d55c516efdad0b
Otherwise we may be reading outside of the client request.
v2: backport to nx-libs 3.6.x (Mike DePaulo)
v3: port to NXrender.c rather than render.c (Mike DePaulo)
Signed-off-by: Julien Cristau <jcristau@debian.org>
Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Conflicts:
render/render.c
README.md: replace simple link with a text link, capitalization.2015-05-21T22:58:38+00:00Mihai Moldovanionic@ionic.de2015-05-21T22:58:38+00:00urn:sha1:608ee99284dc92e3751ba1ceb2fc5c5ac610f3ec