nx-libs, branch redist-client/3.5.0.30 NXv3 (redistributed) https://openid.arctica-project.org/nx-libs/atom?h=redist-client%2F3.5.0.30 2015-03-14T13:38:18+00:00 release 3.5.0.30 2015-03-14T13:38:18+00:00 Mike Gabriel mike.gabriel@das-netzwerkteam.de 2015-03-14T13:38:18+00:00 urn:sha1:9c9b892fd447b0e6d1a31a0dfba41d123fb73584 Continue development 2015-03-13T15:14:30+00:00 X2Go Release Manager git-admin@x2go.org 2015-03-13T15:14:30+00:00 urn:sha1:69b82c8f71c1ad4cf0c863544833bc6835ffd56b debian/roll-tarballs.sh: fix tarball creation in lite mode: do not try to fixup NX-X11 directory (it won't be there.) 2015-03-13T15:14:14+00:00 X2Go Release Manager git-admin@x2go.org 2015-03-13T15:13:36+00:00 urn:sha1:12a395aac60fe44ffadf80033de5854cc69e61fd release 3.5.0.29 2015-03-13T14:55:08+00:00 X2Go Release Manager git-admin@x2go.org 2015-03-13T14:55:08+00:00 urn:sha1:8367380eb479e8cd6e917e814028703f95b2d2bf X.org CVE-2015-0255 patch and its 3 prereq patches 2015-02-18T12:43:20+00:00 Mike DePaulo mikedep333@gmail.com 2015-02-18T12:43:20+00:00 urn:sha1:2b2a02f93f552a38de8f72a971fa3f3ff42b3298 1101-Coverity-844-845-846-Fix-memory-leaks.patch 1102-include-introduce-byte-counting-functions.patch 1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input-buff.patc 1104-xkb-Check-strings-length-against-request-size.patch (The last patch is the CVE-2015-0255 patch.) Update 1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch. Fix broken comment paragraph, whitespace fix. 2015-02-16T09:05:33+00:00 Mike Gabriel mike.gabriel@das-netzwerkteam.de 2015-02-16T08:57:17+00:00 urn:sha1:ac2937e717f29e38583eca34657988e7b6da7eb6 CVE security review: Add 1041-nx-X11-lib-font-fc-fserve.c-initialize-remaining-buf.patch & 1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch. 2015-02-16T09:05:29+00:00 Mihai Moldovan ionic@ionic.de 2015-02-16T08:40:16+00:00 urn:sha1:650181c23b32378b4ec829880cc20700bf5b2ddf - Add 1041-nx-X11-lib-font-fc-fserve.c-initialize-remaining-buf.patch. Initialize remaining bufleft variables (nx-X11/lib/font/fc/fserve.c). - Add 1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch. Do proper input validation to fix for CVE-2011-2895. CVE security review [1/2]. 2015-02-16T09:04:20+00:00 Mihai Moldovan ionic@ionic.de 2015-02-16T08:35:47+00:00 urn:sha1:ae898ff13b4782239a152b43125aa1fc0b80ba3d * CVE security review [1/2]: - Update 1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch. Use xfree() instead of free() in nx-libs. - Update 1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch. Apply correctly on nx-libs 3.6.x. - Update 1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch. Human-readable version of "1 MB". debian/changelog: fix too-long lines 2015-02-16T05:19:54+00:00 Mike Gabriel mike.gabriel@das-netzwerkteam.de 2015-02-16T05:19:54+00:00 urn:sha1:f74f59d2f3962b227753d5eb0ecc1af82f41dbbc Makefile.nx-libs: Fix uninstall-lite rule. The nxproxy and nxcomp uninstallation has to be in uninstall-lite, not in uninstall-full. 2015-02-16T05:09:24+00:00 Mike Gabriel mike.gabriel@das-netzwerkteam.de 2015-02-16T04:51:02+00:00 urn:sha1:ffb64d2b0794af8aa59751b0d757110325b74e55