This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch 3.5.0.x in repository nx-libs. commit 96efadac50bf40bc502680072570a2950f132fe3 Author: Mihai Moldovan <ionic@ionic.de> Date: Sun Apr 26 23:32:32 2015 +0200 CVE patches were previously not included in release tarballs. Rename: - 1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-lib-X.patch => 1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-.full.patch - 1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.-ups.patch => 1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.full.patch - 1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageText-C.patch => 1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageT.full.patch - 1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-buffe.patch => 1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-.full.patch - 1005-CVE-2014-0209-integer-overflow-of-realloc-size-in-Fo.patch => 1005-CVE-2014-0209-integer-overflow-of-realloc-size-.full.patch - 1006-CVE-2014-0209-integer-overflow-of-realloc-size-in-le.patch => 1006-CVE-2014-0209-integer-overflow-of-realloc-size-.full.patch - 1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch => 1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_co.full.patch - 1008-Don-t-crash-when-we-receive-an-FS_Error-from-the-fon.patch => 1008-Don-t-crash-when-we-receive-an-FS_Error-from-th.full.patch - 1009-CVE-2014-0210-unvalidated-lengths-when-reading-repli.patch => 1009-CVE-2014-0210-unvalidated-lengths-when-reading-.full.patch - 1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-_fs_s.patch => 1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-.full.patch - 1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch => 1011-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch - 1012-CVE-2014-0211-integer-overflow-in-fs_read_extent_inf.patch => 1012-CVE-2014-0211-integer-overflow-in-fs_read_exten.full.patch - 1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyphs-fr.patch => 1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyp.full.patch - 1014-CVE-2014-0210-unvalidated-length-fields-in-fs_read_e.patch => 1014-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch - 1015-CVE-2014-0210-unvalidated-length-fields-in-fs_read_g.patch => 1015-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch - 1016-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch => 1016-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch - 1017-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch => 1017-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch - 1018-unchecked-malloc-may-allow-unauthed-client-to-crash-.patch => 1018-unchecked-malloc-may-allow-unauthed-client-to-c.full.patch - 1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8092-1.patch => 1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8.full.patch - 1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch => 1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-.full.patch - 1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8092-3.patch => 1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8.full.patch - 1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-2014-.patch => 1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-.full.patch - 1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls-CVE-.patch => 1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls.full.patch - 1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-2014-.patch => 1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-.full.patch - 1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDList-C.patch => 1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDL.full.patch - 1026-Xv-unvalidated-lengths-in-XVideo-extension-swapped-p.patch => 1026-Xv-unvalidated-lengths-in-XVideo-extension-swap.full.patch - 1027-render-check-request-size-before-reading-it-CVE-2014.patch => 1027-render-check-request-size-before-reading-it-CVE.full.patch - 1028-render-unvalidated-lengths-in-Render-extn.-swapped-p.patch => 1028-render-unvalidated-lengths-in-Render-extn.-swap.full.patch - 1029-xfixes-unvalidated-length-in-SProcXFixesSelectSelect.patch => 1029-xfixes-unvalidated-length-in-SProcXFixesSelectS.full.patch - 1030-randr-unvalidated-lengths-in-RandR-extension-swapped.patch => 1030-randr-unvalidated-lengths-in-RandR-extension-sw.full.patch - 1031-glx-Be-more-paranoid-about-variable-length-requests-.patch => 1031-glx-Be-more-paranoid-about-variable-length-requ.full.patch - 1032-glx-Be-more-strict-about-rejecting-invalid-image-siz.patch => 1032-glx-Be-more-strict-about-rejecting-invalid-imag.full.patch - 1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer-__GL.patch => 1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer.full.patch - 1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-v4.patch => 1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-.full.patch - 1035-glx-Length-checking-for-GLXRender-requests-v2-CVE-20.patch => 1035-glx-Length-checking-for-GLXRender-requests-v2-C.full.patch - 1036-glx-Integer-overflow-protection-for-non-generated-re.patch => 1036-glx-Integer-overflow-protection-for-non-generat.full.patch - 1037-glx-Top-level-length-checking-for-swapped-VendorPriv.patch => 1037-glx-Top-level-length-checking-for-swapped-Vendo.full.patch - 1038-glx-Length-checking-for-non-generated-single-request.patch => 1038-glx-Length-checking-for-non-generated-single-re.full.patch - 1039-glx-Length-checking-for-RenderLarge-requests-v2-CVE-.patch => 1039-glx-Length-checking-for-RenderLarge-requests-v2.full.patch - 1040-glx-Pass-remaining-request-length-into-varsize-v2-CV.patch => 1040-glx-Pass-remaining-request-length-into-varsize-.full.patch - 1041-nx-X11-lib-font-fc-fserve.c-initialize-remaining-buf.patch => 1041-nx-X11-lib-font-fc-fserve.c-initialize-remainin.full.patch - 1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch => 1042-Do-proper-input-validation-to-fix-for-CVE-2011-.full.patch - 1101-Coverity-844-845-846-Fix-memory-leaks.patch => 1101-Coverity-844-845-846-Fix-memory-leaks.full.patch - 1102-include-introduce-byte-counting-functions.patch => 1102-include-introduce-byte-counting-functions.full.patch - 1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input-buff.patch => 1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input.full.patch - 1104-xkb-Check-strings-length-against-request-size.patch => 1104-xkb-Check-strings-length-against-request-size.full.patch --- debian/changelog | 94 ++++++++++++++++++++ ...ss-fix-for-CVE-2011-2895-From-xorg-.full.patch} | 0 ...-4028-File-disclosure-vulnerability.full.patch} | 0 ...ter-free-in-dix-dixfonts.c-doImageT.full.patch} | 0 ...2-unlimited-sscanf-overflows-stack-.full.patch} | 0 ...9-integer-overflow-of-realloc-size-.full.patch} | 0 ...9-integer-overflow-of-realloc-size-.full.patch} | 0 ...0-unvalidated-length-in-_fs_recv_co.full.patch} | 0 ...when-we-receive-an-FS_Error-from-th.full.patch} | 0 ...0-unvalidated-lengths-when-reading-.full.patch} | 0 ...1-Integer-overflow-in-fs_get_reply-.full.patch} | 0 ...0-unvalidated-length-fields-in-fs_r.full.patch} | 0 ...1-integer-overflow-in-fs_read_exten.full.patch} | 0 ...1-integer-overflow-in-fs_alloc_glyp.full.patch} | 0 ...0-unvalidated-length-fields-in-fs_r.full.patch} | 0 ...0-unvalidated-length-fields-in-fs_r.full.patch} | 0 ...0-unvalidated-length-fields-in-fs_r.full.patch} | 0 ...0-unvalidated-length-fields-in-fs_r.full.patch} | 0 ...lloc-may-allow-unauthed-client-to-c.full.patch} | 0 ...overflow-in-ProcPutImage-CVE-2014-8.full.patch} | 0 ...overflow-in-GetHosts-CVE-2014-8092-.full.patch} | 0 ...overflow-in-RegionSizeof-CVE-2014-8.full.patch} | 0 ...overflow-in-REQUEST_FIXED_SIZE-CVE-.full.patch} | 0 ...ted-lengths-in-DbeSwapBuffers-calls.full.patch} | 0 ...ed-lengths-in-Xinput-extension-CVE-.full.patch} | 0 ...idated-length-in-SProcXCMiscGetXIDL.full.patch} | 0 ...ed-lengths-in-XVideo-extension-swap.full.patch} | 0 ...-request-size-before-reading-it-CVE.full.patch} | 0 ...idated-lengths-in-Render-extn.-swap.full.patch} | 0 ...idated-length-in-SProcXFixesSelectS.full.patch} | 0 ...dated-lengths-in-RandR-extension-sw.full.patch} | 0 ...paranoid-about-variable-length-requ.full.patch} | 0 ...strict-about-rejecting-invalid-imag.full.patch} | 0 ...al-paranoia-in-__glXGetAnswerBuffer.full.patch} | 0 ..._-add-mul-pad-v3-CVE-2014-8093-4-6-.full.patch} | 0 ...hecking-for-GLXRender-requests-v2-C.full.patch} | 0 ...overflow-protection-for-non-generat.full.patch} | 0 ...l-length-checking-for-swapped-Vendo.full.patch} | 0 ...hecking-for-non-generated-single-re.full.patch} | 0 ...hecking-for-RenderLarge-requests-v2.full.patch} | 0 ...aining-request-length-into-varsize-.full.patch} | 0 ...ont-fc-fserve.c-initialize-remainin.full.patch} | 0 ...put-validation-to-fix-for-CVE-2011-.full.patch} | 0 ...verity-844-845-846-Fix-memory-leaks.full.patch} | 0 ...e-introduce-byte-counting-functions.full.patch} | 0 ...ap-XkbSetGeometry-data-in-the-input.full.patch} | 0 ...strings-length-against-request-size.full.patch} | 0 debian/patches/series | 92 +++++++++---------- 48 files changed, 140 insertions(+), 46 deletions(-) diff --git a/debian/changelog b/debian/changelog index 079b2de..09dca43 100644 --- a/debian/changelog +++ b/debian/changelog @@ -17,6 +17,100 @@ nx-libs (2:3.5.0.32-0x2go1) UNRELEASED; urgency=low * nx-X11: add more NULL guards to TEST and DEBUG sections of Render.c. Affects: - 0990_fix-DEBUG-and-TEST-builds.full.patch + * CVE patches were previously not included in release tarballs. + Rename: + - 1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-lib-X.patch => + 1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-.full.patch + - 1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.-ups.patch => + 1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.full.patch + - 1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageText-C.patch => + 1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageT.full.patch + - 1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-buffe.patch => + 1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-.full.patch + - 1005-CVE-2014-0209-integer-overflow-of-realloc-size-in-Fo.patch => + 1005-CVE-2014-0209-integer-overflow-of-realloc-size-.full.patch + - 1006-CVE-2014-0209-integer-overflow-of-realloc-size-in-le.patch => + 1006-CVE-2014-0209-integer-overflow-of-realloc-size-.full.patch + - 1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch => + 1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_co.full.patch + - 1008-Don-t-crash-when-we-receive-an-FS_Error-from-the-fon.patch => + 1008-Don-t-crash-when-we-receive-an-FS_Error-from-th.full.patch + - 1009-CVE-2014-0210-unvalidated-lengths-when-reading-repli.patch => + 1009-CVE-2014-0210-unvalidated-lengths-when-reading-.full.patch + - 1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-_fs_s.patch => + 1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-.full.patch + - 1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch => + 1011-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch + - 1012-CVE-2014-0211-integer-overflow-in-fs_read_extent_inf.patch => + 1012-CVE-2014-0211-integer-overflow-in-fs_read_exten.full.patch + - 1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyphs-fr.patch => + 1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyp.full.patch + - 1014-CVE-2014-0210-unvalidated-length-fields-in-fs_read_e.patch => + 1014-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch + - 1015-CVE-2014-0210-unvalidated-length-fields-in-fs_read_g.patch => + 1015-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch + - 1016-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch => + 1016-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch + - 1017-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch => + 1017-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch + - 1018-unchecked-malloc-may-allow-unauthed-client-to-crash-.patch => + 1018-unchecked-malloc-may-allow-unauthed-client-to-c.full.patch + - 1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8092-1.patch => + 1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8.full.patch + - 1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch => + 1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-.full.patch + - 1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8092-3.patch => + 1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8.full.patch + - 1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-2014-.patch => + 1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-.full.patch + - 1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls-CVE-.patch => + 1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls.full.patch + - 1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-2014-.patch => + 1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-.full.patch + - 1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDList-C.patch => + 1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDL.full.patch + - 1026-Xv-unvalidated-lengths-in-XVideo-extension-swapped-p.patch => + 1026-Xv-unvalidated-lengths-in-XVideo-extension-swap.full.patch + - 1027-render-check-request-size-before-reading-it-CVE-2014.patch => + 1027-render-check-request-size-before-reading-it-CVE.full.patch + - 1028-render-unvalidated-lengths-in-Render-extn.-swapped-p.patch => + 1028-render-unvalidated-lengths-in-Render-extn.-swap.full.patch + - 1029-xfixes-unvalidated-length-in-SProcXFixesSelectSelect.patch => + 1029-xfixes-unvalidated-length-in-SProcXFixesSelectS.full.patch + - 1030-randr-unvalidated-lengths-in-RandR-extension-swapped.patch => + 1030-randr-unvalidated-lengths-in-RandR-extension-sw.full.patch + - 1031-glx-Be-more-paranoid-about-variable-length-requests-.patch => + 1031-glx-Be-more-paranoid-about-variable-length-requ.full.patch + - 1032-glx-Be-more-strict-about-rejecting-invalid-image-siz.patch => + 1032-glx-Be-more-strict-about-rejecting-invalid-imag.full.patch + - 1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer-__GL.patch => + 1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer.full.patch + - 1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-v4.patch => + 1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-.full.patch + - 1035-glx-Length-checking-for-GLXRender-requests-v2-CVE-20.patch => + 1035-glx-Length-checking-for-GLXRender-requests-v2-C.full.patch + - 1036-glx-Integer-overflow-protection-for-non-generated-re.patch => + 1036-glx-Integer-overflow-protection-for-non-generat.full.patch + - 1037-glx-Top-level-length-checking-for-swapped-VendorPriv.patch => + 1037-glx-Top-level-length-checking-for-swapped-Vendo.full.patch + - 1038-glx-Length-checking-for-non-generated-single-request.patch => + 1038-glx-Length-checking-for-non-generated-single-re.full.patch + - 1039-glx-Length-checking-for-RenderLarge-requests-v2-CVE-.patch => + 1039-glx-Length-checking-for-RenderLarge-requests-v2.full.patch + - 1040-glx-Pass-remaining-request-length-into-varsize-v2-CV.patch => + 1040-glx-Pass-remaining-request-length-into-varsize-.full.patch + - 1041-nx-X11-lib-font-fc-fserve.c-initialize-remaining-buf.patch => + 1041-nx-X11-lib-font-fc-fserve.c-initialize-remainin.full.patch + - 1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch => + 1042-Do-proper-input-validation-to-fix-for-CVE-2011-.full.patch + - 1101-Coverity-844-845-846-Fix-memory-leaks.patch => + 1101-Coverity-844-845-846-Fix-memory-leaks.full.patch + - 1102-include-introduce-byte-counting-functions.patch => + 1102-include-introduce-byte-counting-functions.full.patch + - 1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input-buff.patch => + 1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input.full.patch + - 1104-xkb-Check-strings-length-against-request-size.patch => + 1104-xkb-Check-strings-length-against-request-size.full.patch [ Bernard Cafarelli ] * nx-X11: link to libdl to fix undefined references to 'dlopen' and 'dlsym'. diff --git a/debian/patches/1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-lib-X.patch b/debian/patches/1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-.full.patch similarity index 100% rename from debian/patches/1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-lib-X.patch rename to debian/patches/1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-.full.patch diff --git a/debian/patches/1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.-ups.patch b/debian/patches/1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.full.patch similarity index 100% rename from debian/patches/1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.-ups.patch rename to debian/patches/1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.full.patch diff --git a/debian/patches/1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageText-C.patch b/debian/patches/1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageT.full.patch similarity index 100% rename from debian/patches/1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageText-C.patch rename to debian/patches/1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageT.full.patch diff --git a/debian/patches/1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-buffe.patch b/debian/patches/1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-.full.patch similarity index 100% rename from debian/patches/1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-buffe.patch rename to debian/patches/1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-.full.patch diff --git a/debian/patches/1005-CVE-2014-0209-integer-overflow-of-realloc-size-in-Fo.patch b/debian/patches/1005-CVE-2014-0209-integer-overflow-of-realloc-size-.full.patch similarity index 100% rename from debian/patches/1005-CVE-2014-0209-integer-overflow-of-realloc-size-in-Fo.patch rename to debian/patches/1005-CVE-2014-0209-integer-overflow-of-realloc-size-.full.patch diff --git a/debian/patches/1006-CVE-2014-0209-integer-overflow-of-realloc-size-in-le.patch b/debian/patches/1006-CVE-2014-0209-integer-overflow-of-realloc-size-.full.patch similarity index 100% rename from debian/patches/1006-CVE-2014-0209-integer-overflow-of-realloc-size-in-le.patch rename to debian/patches/1006-CVE-2014-0209-integer-overflow-of-realloc-size-.full.patch diff --git a/debian/patches/1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch b/debian/patches/1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_co.full.patch similarity index 100% rename from debian/patches/1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch rename to debian/patches/1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_co.full.patch diff --git a/debian/patches/1008-Don-t-crash-when-we-receive-an-FS_Error-from-the-fon.patch b/debian/patches/1008-Don-t-crash-when-we-receive-an-FS_Error-from-th.full.patch similarity index 100% rename from debian/patches/1008-Don-t-crash-when-we-receive-an-FS_Error-from-the-fon.patch rename to debian/patches/1008-Don-t-crash-when-we-receive-an-FS_Error-from-th.full.patch diff --git a/debian/patches/1009-CVE-2014-0210-unvalidated-lengths-when-reading-repli.patch b/debian/patches/1009-CVE-2014-0210-unvalidated-lengths-when-reading-.full.patch similarity index 100% rename from debian/patches/1009-CVE-2014-0210-unvalidated-lengths-when-reading-repli.patch rename to debian/patches/1009-CVE-2014-0210-unvalidated-lengths-when-reading-.full.patch diff --git a/debian/patches/1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-_fs_s.patch b/debian/patches/1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-.full.patch similarity index 100% rename from debian/patches/1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-_fs_s.patch rename to debian/patches/1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-.full.patch diff --git a/debian/patches/1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch b/debian/patches/1011-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch similarity index 100% rename from debian/patches/1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch rename to debian/patches/1011-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch diff --git a/debian/patches/1012-CVE-2014-0211-integer-overflow-in-fs_read_extent_inf.patch b/debian/patches/1012-CVE-2014-0211-integer-overflow-in-fs_read_exten.full.patch similarity index 100% rename from debian/patches/1012-CVE-2014-0211-integer-overflow-in-fs_read_extent_inf.patch rename to debian/patches/1012-CVE-2014-0211-integer-overflow-in-fs_read_exten.full.patch diff --git a/debian/patches/1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyphs-fr.patch b/debian/patches/1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyp.full.patch similarity index 100% rename from debian/patches/1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyphs-fr.patch rename to debian/patches/1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyp.full.patch diff --git a/debian/patches/1014-CVE-2014-0210-unvalidated-length-fields-in-fs_read_e.patch b/debian/patches/1014-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch similarity index 100% rename from debian/patches/1014-CVE-2014-0210-unvalidated-length-fields-in-fs_read_e.patch rename to debian/patches/1014-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch diff --git a/debian/patches/1015-CVE-2014-0210-unvalidated-length-fields-in-fs_read_g.patch b/debian/patches/1015-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch similarity index 100% rename from debian/patches/1015-CVE-2014-0210-unvalidated-length-fields-in-fs_read_g.patch rename to debian/patches/1015-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch diff --git a/debian/patches/1016-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch b/debian/patches/1016-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch similarity index 100% rename from debian/patches/1016-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch rename to debian/patches/1016-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch diff --git a/debian/patches/1017-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch b/debian/patches/1017-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch similarity index 100% rename from debian/patches/1017-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch rename to debian/patches/1017-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch diff --git a/debian/patches/1018-unchecked-malloc-may-allow-unauthed-client-to-crash-.patch b/debian/patches/1018-unchecked-malloc-may-allow-unauthed-client-to-c.full.patch similarity index 100% rename from debian/patches/1018-unchecked-malloc-may-allow-unauthed-client-to-crash-.patch rename to debian/patches/1018-unchecked-malloc-may-allow-unauthed-client-to-c.full.patch diff --git a/debian/patches/1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8092-1.patch b/debian/patches/1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8.full.patch similarity index 100% rename from debian/patches/1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8092-1.patch rename to debian/patches/1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8.full.patch diff --git a/debian/patches/1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch b/debian/patches/1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-.full.patch similarity index 100% rename from debian/patches/1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch rename to debian/patches/1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-.full.patch diff --git a/debian/patches/1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8092-3.patch b/debian/patches/1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8.full.patch similarity index 100% rename from debian/patches/1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8092-3.patch rename to debian/patches/1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8.full.patch diff --git a/debian/patches/1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-2014-.patch b/debian/patches/1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-.full.patch similarity index 100% rename from debian/patches/1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-2014-.patch rename to debian/patches/1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-.full.patch diff --git a/debian/patches/1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls-CVE-.patch b/debian/patches/1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls.full.patch similarity index 100% rename from debian/patches/1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls-CVE-.patch rename to debian/patches/1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls.full.patch diff --git a/debian/patches/1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-2014-.patch b/debian/patches/1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-.full.patch similarity index 100% rename from debian/patches/1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-2014-.patch rename to debian/patches/1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-.full.patch diff --git a/debian/patches/1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDList-C.patch b/debian/patches/1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDL.full.patch similarity index 100% rename from debian/patches/1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDList-C.patch rename to debian/patches/1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDL.full.patch diff --git a/debian/patches/1026-Xv-unvalidated-lengths-in-XVideo-extension-swapped-p.patch b/debian/patches/1026-Xv-unvalidated-lengths-in-XVideo-extension-swap.full.patch similarity index 100% rename from debian/patches/1026-Xv-unvalidated-lengths-in-XVideo-extension-swapped-p.patch rename to debian/patches/1026-Xv-unvalidated-lengths-in-XVideo-extension-swap.full.patch diff --git a/debian/patches/1027-render-check-request-size-before-reading-it-CVE-2014.patch b/debian/patches/1027-render-check-request-size-before-reading-it-CVE.full.patch similarity index 100% rename from debian/patches/1027-render-check-request-size-before-reading-it-CVE-2014.patch rename to debian/patches/1027-render-check-request-size-before-reading-it-CVE.full.patch diff --git a/debian/patches/1028-render-unvalidated-lengths-in-Render-extn.-swapped-p.patch b/debian/patches/1028-render-unvalidated-lengths-in-Render-extn.-swap.full.patch similarity index 100% rename from debian/patches/1028-render-unvalidated-lengths-in-Render-extn.-swapped-p.patch rename to debian/patches/1028-render-unvalidated-lengths-in-Render-extn.-swap.full.patch diff --git a/debian/patches/1029-xfixes-unvalidated-length-in-SProcXFixesSelectSelect.patch b/debian/patches/1029-xfixes-unvalidated-length-in-SProcXFixesSelectS.full.patch similarity index 100% rename from debian/patches/1029-xfixes-unvalidated-length-in-SProcXFixesSelectSelect.patch rename to debian/patches/1029-xfixes-unvalidated-length-in-SProcXFixesSelectS.full.patch diff --git a/debian/patches/1030-randr-unvalidated-lengths-in-RandR-extension-swapped.patch b/debian/patches/1030-randr-unvalidated-lengths-in-RandR-extension-sw.full.patch similarity index 100% rename from debian/patches/1030-randr-unvalidated-lengths-in-RandR-extension-swapped.patch rename to debian/patches/1030-randr-unvalidated-lengths-in-RandR-extension-sw.full.patch diff --git a/debian/patches/1031-glx-Be-more-paranoid-about-variable-length-requests-.patch b/debian/patches/1031-glx-Be-more-paranoid-about-variable-length-requ.full.patch similarity index 100% rename from debian/patches/1031-glx-Be-more-paranoid-about-variable-length-requests-.patch rename to debian/patches/1031-glx-Be-more-paranoid-about-variable-length-requ.full.patch diff --git a/debian/patches/1032-glx-Be-more-strict-about-rejecting-invalid-image-siz.patch b/debian/patches/1032-glx-Be-more-strict-about-rejecting-invalid-imag.full.patch similarity index 100% rename from debian/patches/1032-glx-Be-more-strict-about-rejecting-invalid-image-siz.patch rename to debian/patches/1032-glx-Be-more-strict-about-rejecting-invalid-imag.full.patch diff --git a/debian/patches/1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer-__GL.patch b/debian/patches/1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer.full.patch similarity index 100% rename from debian/patches/1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer-__GL.patch rename to debian/patches/1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer.full.patch diff --git a/debian/patches/1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-v4.patch b/debian/patches/1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-.full.patch similarity index 100% rename from debian/patches/1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-v4.patch rename to debian/patches/1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-.full.patch diff --git a/debian/patches/1035-glx-Length-checking-for-GLXRender-requests-v2-CVE-20.patch b/debian/patches/1035-glx-Length-checking-for-GLXRender-requests-v2-C.full.patch similarity index 100% rename from debian/patches/1035-glx-Length-checking-for-GLXRender-requests-v2-CVE-20.patch rename to debian/patches/1035-glx-Length-checking-for-GLXRender-requests-v2-C.full.patch diff --git a/debian/patches/1036-glx-Integer-overflow-protection-for-non-generated-re.patch b/debian/patches/1036-glx-Integer-overflow-protection-for-non-generat.full.patch similarity index 100% rename from debian/patches/1036-glx-Integer-overflow-protection-for-non-generated-re.patch rename to debian/patches/1036-glx-Integer-overflow-protection-for-non-generat.full.patch diff --git a/debian/patches/1037-glx-Top-level-length-checking-for-swapped-VendorPriv.patch b/debian/patches/1037-glx-Top-level-length-checking-for-swapped-Vendo.full.patch similarity index 100% rename from debian/patches/1037-glx-Top-level-length-checking-for-swapped-VendorPriv.patch rename to debian/patches/1037-glx-Top-level-length-checking-for-swapped-Vendo.full.patch diff --git a/debian/patches/1038-glx-Length-checking-for-non-generated-single-request.patch b/debian/patches/1038-glx-Length-checking-for-non-generated-single-re.full.patch similarity index 100% rename from debian/patches/1038-glx-Length-checking-for-non-generated-single-request.patch rename to debian/patches/1038-glx-Length-checking-for-non-generated-single-re.full.patch diff --git a/debian/patches/1039-glx-Length-checking-for-RenderLarge-requests-v2-CVE-.patch b/debian/patches/1039-glx-Length-checking-for-RenderLarge-requests-v2.full.patch similarity index 100% rename from debian/patches/1039-glx-Length-checking-for-RenderLarge-requests-v2-CVE-.patch rename to debian/patches/1039-glx-Length-checking-for-RenderLarge-requests-v2.full.patch diff --git a/debian/patches/1040-glx-Pass-remaining-request-length-into-varsize-v2-CV.patch b/debian/patches/1040-glx-Pass-remaining-request-length-into-varsize-.full.patch similarity index 100% rename from debian/patches/1040-glx-Pass-remaining-request-length-into-varsize-v2-CV.patch rename to debian/patches/1040-glx-Pass-remaining-request-length-into-varsize-.full.patch diff --git a/debian/patches/1041-nx-X11-lib-font-fc-fserve.c-initialize-remaining-buf.patch b/debian/patches/1041-nx-X11-lib-font-fc-fserve.c-initialize-remainin.full.patch similarity index 100% rename from debian/patches/1041-nx-X11-lib-font-fc-fserve.c-initialize-remaining-buf.patch rename to debian/patches/1041-nx-X11-lib-font-fc-fserve.c-initialize-remainin.full.patch diff --git a/debian/patches/1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch b/debian/patches/1042-Do-proper-input-validation-to-fix-for-CVE-2011-.full.patch similarity index 100% rename from debian/patches/1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch rename to debian/patches/1042-Do-proper-input-validation-to-fix-for-CVE-2011-.full.patch diff --git a/debian/patches/1101-Coverity-844-845-846-Fix-memory-leaks.patch b/debian/patches/1101-Coverity-844-845-846-Fix-memory-leaks.full.patch similarity index 100% rename from debian/patches/1101-Coverity-844-845-846-Fix-memory-leaks.patch rename to debian/patches/1101-Coverity-844-845-846-Fix-memory-leaks.full.patch diff --git a/debian/patches/1102-include-introduce-byte-counting-functions.patch b/debian/patches/1102-include-introduce-byte-counting-functions.full.patch similarity index 100% rename from debian/patches/1102-include-introduce-byte-counting-functions.patch rename to debian/patches/1102-include-introduce-byte-counting-functions.full.patch diff --git a/debian/patches/1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input-buff.patch b/debian/patches/1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input.full.patch similarity index 100% rename from debian/patches/1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input-buff.patch rename to debian/patches/1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input.full.patch diff --git a/debian/patches/1104-xkb-Check-strings-length-against-request-size.patch b/debian/patches/1104-xkb-Check-strings-length-against-request-size.full.patch similarity index 100% rename from debian/patches/1104-xkb-Check-strings-length-against-request-size.patch rename to debian/patches/1104-xkb-Check-strings-length-against-request-size.full.patch diff --git a/debian/patches/series b/debian/patches/series index 2856cbe..80a0e5e 100644 --- a/debian/patches/series +++ b/debian/patches/series @@ -83,52 +83,52 @@ 0991_fix-hr-typos.full+lite.patch 0991_fix-hr-typos.full.patch 0999_nxagent_unbrand-nxagent-brand-x2goagent.full.patch -1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-lib-X.patch -1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.-ups.patch -1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageText-C.patch -1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-buffe.patch -1005-CVE-2014-0209-integer-overflow-of-realloc-size-in-Fo.patch -1006-CVE-2014-0209-integer-overflow-of-realloc-size-in-le.patch -1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch -1008-Don-t-crash-when-we-receive-an-FS_Error-from-the-fon.patch -1009-CVE-2014-0210-unvalidated-lengths-when-reading-repli.patch -1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-_fs_s.patch -1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch -1012-CVE-2014-0211-integer-overflow-in-fs_read_extent_inf.patch -1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyphs-fr.patch -1014-CVE-2014-0210-unvalidated-length-fields-in-fs_read_e.patch -1015-CVE-2014-0210-unvalidated-length-fields-in-fs_read_g.patch -1016-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch -1017-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch -1018-unchecked-malloc-may-allow-unauthed-client-to-crash-.patch -1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8092-1.patch -1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch -1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8092-3.patch -1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-2014-.patch -1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls-CVE-.patch -1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-2014-.patch -1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDList-C.patch -1026-Xv-unvalidated-lengths-in-XVideo-extension-swapped-p.patch -1027-render-check-request-size-before-reading-it-CVE-2014.patch -1028-render-unvalidated-lengths-in-Render-extn.-swapped-p.patch -1029-xfixes-unvalidated-length-in-SProcXFixesSelectSelect.patch -1030-randr-unvalidated-lengths-in-RandR-extension-swapped.patch -1031-glx-Be-more-paranoid-about-variable-length-requests-.patch -1032-glx-Be-more-strict-about-rejecting-invalid-image-siz.patch -1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer-__GL.patch -1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-v4.patch -1035-glx-Length-checking-for-GLXRender-requests-v2-CVE-20.patch -1036-glx-Integer-overflow-protection-for-non-generated-re.patch -1037-glx-Top-level-length-checking-for-swapped-VendorPriv.patch -1038-glx-Length-checking-for-non-generated-single-request.patch -1039-glx-Length-checking-for-RenderLarge-requests-v2-CVE-.patch -1040-glx-Pass-remaining-request-length-into-varsize-v2-CV.patch -1041-nx-X11-lib-font-fc-fserve.c-initialize-remaining-buf.patch -1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch -1101-Coverity-844-845-846-Fix-memory-leaks.patch -1102-include-introduce-byte-counting-functions.patch -1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input-buff.patch -1104-xkb-Check-strings-length-against-request-size.patch +1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-.full.patch +1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.full.patch +1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageT.full.patch +1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-.full.patch +1005-CVE-2014-0209-integer-overflow-of-realloc-size-.full.patch +1006-CVE-2014-0209-integer-overflow-of-realloc-size-.full.patch +1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_co.full.patch +1008-Don-t-crash-when-we-receive-an-FS_Error-from-th.full.patch +1009-CVE-2014-0210-unvalidated-lengths-when-reading-.full.patch +1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-.full.patch +1011-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch +1012-CVE-2014-0211-integer-overflow-in-fs_read_exten.full.patch +1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyp.full.patch +1014-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch +1015-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch +1016-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch +1017-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch +1018-unchecked-malloc-may-allow-unauthed-client-to-c.full.patch +1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8.full.patch +1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-.full.patch +1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8.full.patch +1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-.full.patch +1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls.full.patch +1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-.full.patch +1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDL.full.patch +1026-Xv-unvalidated-lengths-in-XVideo-extension-swap.full.patch +1027-render-check-request-size-before-reading-it-CVE.full.patch +1028-render-unvalidated-lengths-in-Render-extn.-swap.full.patch +1029-xfixes-unvalidated-length-in-SProcXFixesSelectS.full.patch +1030-randr-unvalidated-lengths-in-RandR-extension-sw.full.patch +1031-glx-Be-more-paranoid-about-variable-length-requ.full.patch +1032-glx-Be-more-strict-about-rejecting-invalid-imag.full.patch +1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer.full.patch +1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-.full.patch +1035-glx-Length-checking-for-GLXRender-requests-v2-C.full.patch +1036-glx-Integer-overflow-protection-for-non-generat.full.patch +1037-glx-Top-level-length-checking-for-swapped-Vendo.full.patch +1038-glx-Length-checking-for-non-generated-single-re.full.patch +1039-glx-Length-checking-for-RenderLarge-requests-v2.full.patch +1040-glx-Pass-remaining-request-length-into-varsize-.full.patch +1041-nx-X11-lib-font-fc-fserve.c-initialize-remainin.full.patch +1042-Do-proper-input-validation-to-fix-for-CVE-2011-.full.patch +1101-Coverity-844-845-846-Fix-memory-leaks.full.patch +1102-include-introduce-byte-counting-functions.full.patch +1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input.full.patch +1104-xkb-Check-strings-length-against-request-size.full.patch 1200-CVE-2013-7439-MakeBigReq-don-t-move-the-last-wo.full.patch 0016_nx-X11_install-location.debian.patch 0102_xserver-xext_set-securitypolicy-path.debian.patch -- Alioth's /srv/git/code.x2go.org/nx-libs.git//..//_hooks_/post-receive-email on /srv/git/code.x2go.org/nx-libs.git