[X2Go-Dev] [X2Go-Commits] [nx-libs] 23/52: CVE-2014-0210: unvalidated length fields in fs_read_query_info() from xorg/lib/libXfont commit 491291cabf78efdeec8f18b09e14726a9030cc8f

[Michael DePaulo]

On Mon, Feb 16, 2015 at 12:20 AM, Mihai Moldovan <ionic at ionic.de> wrote:
> On 15.02.2015 09:17 PM, Mihai Moldovan wrote:
>> Will do (later), but only once I'm through all the other commits.
>
> http://code.x2go.org/gitweb?p=nx-libs.git;a=commitdiff;h=e29bbd5bf0565eaf7c02f85a57b87f66531fa6b3;hp=5fc2f57fb5520bb61e2c1f8b6fd2522b203b3b9d
>

Thanks.

However, it is worth noting that the CentOS 7 patch (that you linked
to) differs from both the upstream patch and the CentOS 5 patch. If
you feel that upstream's patch was insufficient, we should tell them
about it.

-Mike