This is an automated email from the git hooks/post-receive script. x2go pushed a change to branch 3.5.0.x in repository nx-libs. from 7bdc7ef debian/changelog: add entry for last change. adds ae590fe debian/: add x2goagent.options file for compatibility with x2goserver nightly. adds 7c531a5 debian/roll-tarballs.sh: copy new debian/x2goagent.options file into real tarball environment. adds 9b08689 debian/Makefile.nx-libs: install/destroot new x2goagent.options file. adds 112f0f8 debian/rules: symlink and remove new debian/x2goagent.options file into/from build environment. adds f3c5f88 debian/x2goagent.install: add new x2goagent.options file. adds b8d8fda nx-libs.spec: copy new debian/x2goagent.options file into build environment, analogous to what debian/roll-tarballs.sh does. adds b6bcc24 nx-libs.spec: add new x2goagent.options file to installed file list of x2goagent package. adds 81f2c9c nx-libs.spec: let x2goagent package satisfy x2goagent-virtual. adds 9744c10 debian/changelog: whitespace only. adds debe460 debian/control: add Breaks statement on pre-4.1.0.0 x2goserver to x2goagent package. adds c2b050e nx-X11: Backport CVE-2017-2624 (timingsafe_memcmp) adds 4537ad4 Refresh: - 0016_nx-X11_install-location.debian.patch - 9900-dxpc-license-history.full+lite.patch adds fb55fc3 nx-X11: use the "old", non-NX header location. adds 1537eb0 debian/Makefile.nx-libs: make sure that 'make all' only calls 'make build' and _not_ the global '%:' ruleset afterwards. adds 0c9852a {debian/control,nx-libs.spec}: add proper dependencies upon xkbcomp for RPM and DEB packages. adds a4fb30f debian/changelog: add missing bug closure. adds 6ae091c debian/patches: refresh all patches. adds ab28855 nxcomp: Set TokenSize to 1536 for link type ADSL and WAN. adds 1077270 nx-X11: Render.c: Improve situation for multiple trapezoid requests. adds e73464e nxcomp: Reduce control->TokenSize slightly again in order to fix fragmentation of packages when on VPN (or otherwise encapsulated) connections. adds df3944d debian/patches: fixup series file to include previous patch. adds 9d750c6 nx-libs.spec: add -mno-vxs to general C(XX)FLAGS on ppc64le. adds 13aed24 OPTFLAGS: Properly propagate build option flags to nxcomp{,ext,shad} and the nx-X11 build scripts. adds f54e56d debian/changelog: fixup changelog. adds 07d3083 nx-libs.spec: drop ugly sed hack to push optflags to build system. adds d017d21 nx-libs.spec: pass CDEBUGSFLAGS and friends directly to the make command in %build. adds b5230d3 debian/control: change Breaks statement to pre-4.0.1.21 x2goserver and add a Replaces: x2goserver << 4.0.1.21 section to x2goagent package. adds 288cc6f nx-libs.spec: let x2goagent conflict with pre-4.0.1.21 x2goserver versions. adds e095b8f nxcomp: Handle launchd sockets in DISPLAY variable correctly when fetching X cookie. adds 2c75b00 nxcomp: Hardcode X11 and (legacy/xfs) font UNIX paths. adds 7dacd79 release 3.5.0.33 adds 09bb93e Mid-release fixup: rename debian/patches/1400_nx-X11_Render.c-Improve-situation-fo.full+lite.patch to debian/patches/1400_nx-X11_Render.c-Improve-situation-fo.full.patch. adds 4154463 Mid-release fixup: split up debian/patches/1500_all_propagate-optflags-to-subcompone.full+lite.patch. No new revisions were added by this update. Summary of changes: debian/Makefile.nx-libs | 19 +- debian/changelog | 121 +++++++++- debian/control | 6 + ...nxcompshad_build-against-nx-x11-only.full.patch | 6 +- .../0004_nx-X11_fix-nxcompshad-build.full.patch | 2 +- debian/patches/0005_nxcomp_gcc43.full+lite.patch | 20 +- .../patches/0006_nxcomp_libpng15.full+lite.patch | 10 +- .../0007_nxcompshad_clean-gch-files.full.patch | 2 +- .../0008_nxcomp_sa-restorer.full+lite.patch | 4 +- ...0_nxauth_fix-binary-name-in-man-page.full.patch | 6 +- ...omp_makefile-uninstall+autoconf.full+lite.patch | 4 +- ...xcompext_makefile-uninstall+autoconf.full.patch | 4 +- ...compshad_makefile-uninstall+autoconf.full.patch | 4 +- ...0015_nxproxy_makefile-uninstall.full+lite.patch | 4 +- .../0016_nx-X11_install-location.debian.patch | 2 +- .../0016_nx-X11_install-location.full.patch | 26 +-- debian/patches/0024_fix-make-clean.full+lite.patch | 4 +- debian/patches/0024_fix-make-clean.full.patch | 8 +- ...nxcomp-fix-ftbfs-against-jpeg9a.full+lite.patch | 12 +- .../0026_nxcomp_honour-optflags.full+lite.patch | 10 +- .../0026_nxcompext_honour-optflags.full.patch | 5 +- .../0026_nxcompshad_honour-optflags.full.patch | 5 +- ...0027_nxcomp_abstract-X11-socket.full+lite.patch | 6 +- .../0028_nx-X11_abstract-kernel-sockets.full.patch | 44 ++-- debian/patches/0029_nxcomp_ppc64.full+lite.patch | 2 +- .../patches/0030_nx-X11_configure-args.full.patch | 4 - .../patches/0031_nx-X11_parallel-make.full.patch | 17 +- ...alpha-premultiplication-in-XRenderPa.full.patch | 2 +- .../0051_nxcomp_macos105-fdisset.full+lite.patch | 4 +- ..._nxcomp_macos10-nxauth-location.full+lite.patch | 2 +- ...0053_nx-X11_no-xcomp1-install-target.full.patch | 4 +- debian/patches/0054_nx-X11_ppc64-ftbfs.full.patch | 5 +- ..._nx-X11_imake-Werror-format-security.full.patch | 5 +- .../0056_nx-X11_Werror-format-security.full.patch | 16 +- .../0057_nx-X11_sanitize-eventmasks.full.patch | 8 +- .../patches/0101_nxagent_set-rgb-path.full.patch | 2 +- ...erver-xext_set-securitypolicy-path.debian.patch | 2 +- ...xserver-xext_set-securitypolicy-path.full.patch | 2 +- .../0103_nxagent_set-X0-config-path.full.patch | 6 +- ...xagent_export-remote-keyboard-config.full.patch | 10 +- .../0106_nxagent_utf8-copy-clipboard.full.patch | 6 +- ...board-compound-text+small-bed-sheets.full.patch | 6 +- .../0108_nxagent_wine-close-delay.full.patch | 6 +- ...10_nxagent_createpixmap-bounds-check.full.patch | 2 +- ...00_nxagent_check-binary-x2go-flavour.full.patch | 6 +- ...t_set-x2go-icon-if-x2goagent-flavour.full.patch | 6 +- .../patches/0202_nx-X11_enable-xinerama.full.patch | 24 +- .../0203_nxagent_disable-rootless-exit.full.patch | 10 +- .../0204_nxagent_repaint-solidpict.full.patch | 16 +- .../patches/0205_nxagent_refresh-adsl.full.patch | 5 +- .../0206_nxagent_clipboard-as-nxoption.full.patch | 6 +- .../0207_nxagent_fix-xfixes-selection.full.patch | 12 +- .../0210_nxagent_save_session_state.full.patch | 30 +-- .../0210_nxcomp_save_session_state.full+lite.patch | 2 +- ...0211_nxcomp_set_default_options.full+lite.patch | 4 +- .../0212_nxcomp_build-on-Android.full+lite.patch | 32 +-- ...0220_nxproxy_bind-loopback-only.full+lite.patch | 16 +- .../patches/0300_nxagent_set-wm-class.full.patch | 2 +- .../patches/0301_nx-X11_use-shared-libs.full.patch | 6 - .../0302_nx-X11_xkbbasedir-detection.full.patch | 6 +- debian/patches/0400_nxcomp-version.full+lite.patch | 10 +- ...nxcompext+nxcompshad_unique-libnames.full.patch | 186 +++++++-------- ...changes-to-not-use-bundled-libraries.full.patch | 14 +- debian/patches/0602_nx-X11_initgroups.full.patch | 6 +- .../0603_nx-X11_compilation_warnings.full.patch | 18 +- ...ont-use-STL-internals-on-libc++.full+lite.patch | 10 +- .../0606_nx-X11_build-on-aarch64.full.patch | 8 +- ...osx-X11-launcher-in-private-tmp.full+lite.patch | 2 +- ...nx-X11_fix-underlinking-dlopen-dlsym.full.patch | 4 +- ...inking-libNX_Xcomposite_damage_fixes.full.patch | 2 +- .../0990_fix-DEBUG-and-TEST-builds.full.patch | 16 +- debian/patches/0991_fix-hr-typos.full+lite.patch | 16 +- debian/patches/0991_fix-hr-typos.full.patch | 6 +- ...P-FLUSH-TOKEN-PING-et-al-builds.full+lite.patch | 10 +- ...gent_unbrand-nxagent-brand-x2goagent.full.patch | 22 +- ...ess-fix-for-CVE-2011-2895-From-xorg-.full.patch | 5 - ...1-4028-File-disclosure-vulnerability.full.patch | 5 - ...fter-free-in-dix-dixfonts.c-doImageT.full.patch | 20 +- ...62-unlimited-sscanf-overflows-stack-.full.patch | 7 +- ...09-integer-overflow-of-realloc-size-.full.patch | 7 +- ...09-integer-overflow-of-realloc-size-.full.patch | 7 +- ...10-unvalidated-length-in-_fs_recv_co.full.patch | 11 +- ...-when-we-receive-an-FS_Error-from-th.full.patch | 7 +- ...10-unvalidated-lengths-when-reading-.full.patch | 21 +- ...11-Integer-overflow-in-fs_get_reply-.full.patch | 7 +- ...10-unvalidated-length-fields-in-fs_r.full.patch | 17 +- ...11-integer-overflow-in-fs_read_exten.full.patch | 9 +- ...11-integer-overflow-in-fs_alloc_glyp.full.patch | 7 +- ...10-unvalidated-length-fields-in-fs_r.full.patch | 7 +- ...10-unvalidated-length-fields-in-fs_r.full.patch | 11 +- ...10-unvalidated-length-fields-in-fs_r.full.patch | 9 +- ...10-unvalidated-length-fields-in-fs_r.full.patch | 11 +- ...alloc-may-allow-unauthed-client-to-c.full.patch | 5 - ...-overflow-in-ProcPutImage-CVE-2014-8.full.patch | 2 +- ...-overflow-in-GetHosts-CVE-2014-8092-.full.patch | 5 - ...-overflow-in-RegionSizeof-CVE-2014-8.full.patch | 9 +- ...-overflow-in-REQUEST_FIXED_SIZE-CVE-.full.patch | 5 - ...ated-lengths-in-DbeSwapBuffers-calls.full.patch | 5 - ...ted-lengths-in-Xinput-extension-CVE-.full.patch | 11 - ...lidated-length-in-SProcXCMiscGetXIDL.full.patch | 5 - ...ted-lengths-in-XVideo-extension-swap.full.patch | 28 +-- ...lidated-lengths-in-Render-extn.-swap.full.patch | 4 +- ...lidated-length-in-SProcXFixesSelectS.full.patch | 7 +- ...idated-lengths-in-RandR-extension-sw.full.patch | 5 - ...-paranoid-about-variable-length-requ.full.patch | 15 +- ...-strict-about-rejecting-invalid-imag.full.patch | 35 ++- ...nal-paranoia-in-__glXGetAnswerBuffer.full.patch | 5 - ...e_-add-mul-pad-v3-CVE-2014-8093-4-6-.full.patch | 7 +- ...checking-for-GLXRender-requests-v2-C.full.patch | 19 +- ...-overflow-protection-for-non-generat.full.patch | 25 +- ...el-length-checking-for-swapped-Vendo.full.patch | 9 +- ...checking-for-non-generated-single-re.full.patch | 79 +++---- ...checking-for-RenderLarge-requests-v2.full.patch | 39 ++-- ...maining-request-length-into-varsize-.full.patch | 91 ++++---- ...font-fc-fserve.c-initialize-remainin.full.patch | 9 +- ...nput-validation-to-fix-for-CVE-2011-.full.patch | 7 +- ...overity-844-845-846-Fix-memory-leaks.full.patch | 5 - ...de-introduce-byte-counting-functions.full.patch | 5 - ...wap-XkbSetGeometry-data-in-the-input.full.patch | 5 - ...-strings-length-against-request-size.full.patch | 5 - ...18-dix-Allow-zero-height-PutImage-re.full.patch | 2 +- ...51375-Xorg-doesn_t-set-status-for-RR.full.patch | 2 - ...-a-reference-to-user-mode-after-crea.full.patch | 2 - ...-randr-crtc-and-output-pointer-array.full.patch | 2 - ...r-check-for-virtual-size-limits-befo.full.patch | 2 - ...r-fix-server-crash-in-RRGetScreenInf.full.patch | 2 - ...deCreate-plug-memory-leak-of-newMode.full.patch | 2 - ...RRGetScreenInfo-swap-configTimestamp.full.patch | 2 - ...r-Fix-REQUEST-vs-REQUEST_SIZE_MATCH-.full.patch | 4 +- ...r-Clean-up-compiler-warnings-about-u.full.patch | 12 +- ...-RANDR-_set_-timestamps-follow-clien.full.patch | 4 - ...ver-Avoid-sending-uninitialized-padd.full.patch | 12 +- ...2017-2624-Use-timingsafe_memcmp-to-c.full.patch | 162 +++++++++++++ ...p_Set-TokenSize-to-1536-for-lin.full+lite.patch | 61 +++++ ...p_Reduce-TokenSize-slightly-for.full+lite.patch | 34 +++ ...nx-X11_Render.c-Improve-situation-fo.full.patch | 68 ++++++ ...all_propagate-optflags-to-subcompone.full.patch | 254 +++++++++++++++++++++ ...ropagate-optflags-to-subcompone.full+lite.patch | 105 +++++++++ ...p-handle-launchd-socket-in-Auth.full+lite.patch | 60 +++++ ...p-harcode-some-UNIX-socket-path.full+lite.patch | 60 +++++ .../9900-dxpc-license-history.full+lite.patch | 25 +- debian/patches/series | 8 + debian/roll-tarballs.sh | 1 + debian/rules | 5 +- debian/x2goagent.install | 1 + debian/x2goagent.options | 36 +++ nx-libs.spec | 32 ++- 147 files changed, 1617 insertions(+), 920 deletions(-) create mode 100644 debian/patches/1270_nx-X11_CVE-2017-2624-Use-timingsafe_memcmp-to-c.full.patch create mode 100644 debian/patches/1300_nxcomp_Set-TokenSize-to-1536-for-lin.full+lite.patch create mode 100644 debian/patches/1301_nxcomp_Reduce-TokenSize-slightly-for.full+lite.patch create mode 100644 debian/patches/1400_nx-X11_Render.c-Improve-situation-fo.full.patch create mode 100644 debian/patches/1500_all_propagate-optflags-to-subcompone.full.patch create mode 100644 debian/patches/1510_all_propagate-optflags-to-subcompone.full+lite.patch create mode 100644 debian/patches/1600_nxcomp-handle-launchd-socket-in-Auth.full+lite.patch create mode 100644 debian/patches/1610_nxcomp-harcode-some-UNIX-socket-path.full+lite.patch create mode 100644 debian/x2goagent.options -- Alioth's /srv/git/code.x2go.org/nx-libs.git//..//_hooks_/post-receive-email on /srv/git/code.x2go.org/nx-libs.git