This is an automated email from the git hooks/post-receive script. x2go pushed a change to branch 3.5.0.x in repository nx-libs. from bccb275 Fix build when LDFLAGS (etc) contains spaces. new 863119e Revert "Fix build when LDFLAGS (etc) contains spaces." new 8c98a40 Use proper quoting on build flag vars (they may contain spaces). new 09d2732 Patch system: Prepend a "0" to every patch file name in debian/patches/. Adapt only this changelog stanza to this modification. new f46d117 remove item from changelog that got reverted new 4587881 40 patches, fixing several X.Org CVEs in NX. The 5 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference. Summary of changes: debian/changelog | 104 +++- ...0_add-NX-redistribution-README.full+lite.patch} | 0 ...xcompshad_build-against-nx-x11-only.full.patch} | 0 ...full.patch => 0003_nxcompshad_gcc43.full.patch} | 0 ...=> 0004_nx-X11_fix-nxcompshad-build.full.patch} | 0 ...ite.patch => 0005_nxcomp_gcc43.full+lite.patch} | 0 ....patch => 0006_nxcomp_libpng15.full+lite.patch} | 0 ... => 0007_nxcompshad_clean-gch-files.full.patch} | 0 ...tch => 0008_nxcomp_sa-restorer.full+lite.patch} | 0 ....patch => 0009_nxagent_add-man-page.full.patch} | 0 ...h => 0009_nxproxy_add-man-page.full+lite.patch} | 0 ..._nxauth_fix-binary-name-in-man-page.full.patch} | 0 ...mp_makefile-uninstall+autoconf.full+lite.patch} | 0 ...compext_makefile-uninstall+autoconf.full.patch} | 0 ...ompshad_makefile-uninstall+autoconf.full.patch} | 0 ...015_nxproxy_makefile-uninstall.full+lite.patch} | 0 ...h => 0016_nx-X11_install-location.debian.patch} | 0 ...tch => 0016_nx-X11_install-location.full.patch} | 0 ...e.patch => 0024_fix-make-clean.full+lite.patch} | 0 ...n.full.patch => 0024_fix-make-clean.full.patch} | 0 ...xcomp-fix-ftbfs-against-jpeg9a.full+lite.patch} | 0 ...=> 0026_nxcomp_honour-optflags.full+lite.patch} | 0 ...h => 0026_nxcompext_honour-optflags.full.patch} | 0 ... => 0026_nxcompshad_honour-optflags.full.patch} | 0 ...027_nxcomp_abstract-X11-socket.full+lite.patch} | 0 ...0028_nx-X11_abstract-kernel-sockets.full.patch} | 0 ...ite.patch => 0029_nxcomp_ppc64.full+lite.patch} | 0 ...patch => 0030_nx-X11_configure-args.full.patch} | 0 ....patch => 0031_nx-X11_parallel-make.full.patch} | 0 ...> 0051_nxcomp_macos105-fdisset.full+lite.patch} | 0 ...nxcomp_macos10-nxauth-location.full+lite.patch} | 0 ...053_nx-X11_no-xcomp1-install-target.full.patch} | 0 ...ll.patch => 0054_nx-X11_ppc64-ftbfs.full.patch} | 0 ...nx-X11_imake-Werror-format-security.full.patch} | 0 ... 0056_nx-X11_Werror-format-security.full.patch} | 0 ... => 0057_nx-X11_sanitize-eventmasks.full.patch} | 0 ....patch => 0101_nxagent_set-rgb-path.full.patch} | 0 ...rver-xext_set-securitypolicy-path.debian.patch} | 0 ...server-xext_set-securitypolicy-path.full.patch} | 0 ... => 0103_nxagent_set-X0-config-path.full.patch} | 0 ...agent_export-remote-keyboard-config.full.patch} | 0 ...=> 0106_nxagent_utf8-copy-clipboard.full.patch} | 0 ...oard-compound-text+small-bed-sheets.full.patch} | 0 ...ch => 0108_nxagent_wine-close-delay.full.patch} | 0 ...0_nxagent_createpixmap-bounds-check.full.patch} | 0 ...0_nxagent_check-binary-x2go-flavour.full.patch} | 0 ..._set-x2go-icon-if-x2goagent-flavour.full.patch} | 0 ...atch => 0202_nx-X11_enable-xinerama.full.patch} | 0 ... 0203_nxagent_disable-rootless-exit.full.patch} | 0 ...h => 0204_nxagent_repaint-solidpict.full.patch} | 0 ....patch => 0205_nxagent_refresh-adsl.full.patch} | 0 ... 0206_nxagent_clipboard-as-nxoption.full.patch} | 0 ...> 0207_nxagent_fix-xfixes-selection.full.patch} | 0 ...atch => 0209_x2goagent_add-man-page.full.patch} | 0 ... => 0210_nxagent_save_session_state.full.patch} | 0 ...0210_nxcomp_save_session_state.full+lite.patch} | 0 ...211_nxcomp_set_default_options.full+lite.patch} | 0 ...> 0212_nxcomp_build-on-Android.full+lite.patch} | 0 ...220_nxproxy_bind-loopback-only.full+lite.patch} | 0 ....patch => 0300_nxagent_set-wm-class.full.patch} | 0 ...atch => 0301_nx-X11_use-shared-libs.full.patch} | 0 ...=> 0302_nx-X11_xkbbasedir-detection.full.patch} | 0 ...320_nxagent_configurable-keystrokes.full.patch} | 0 ...gent_x2go-specific-keystroke-config.full.patch} | 0 ...e.patch => 0400_nxcomp-version.full+lite.patch} | 0 ...ts-and-genericevent-extensions.full+lite.patch} | 0 ...xcompext+nxcompshad_unique-libnames.full.patch} | 0 ...hanges-to-not-use-bundled-libraries.full.patch} | 0 ...ull.patch => 0602_nx-X11_initgroups.full.patch} | 0 ...=> 0603_nx-X11_compilation_warnings.full.patch} | 0 ...nt-use-STL-internals-on-libc++.full+lite.patch} | 0 ...tch => 0606_nx-X11_build-on-aarch64.full.patch} | 0 ...sx-X11-launcher-in-private-tmp.full+lite.patch} | 0 ...h => 0990_fix-DEBUG-and-TEST-builds.full.patch} | 0 ...ite.patch => 0991_fix-hr-typos.full+lite.patch} | 0 ...pos.full.patch => 0991_fix-hr-typos.full.patch} | 0 ...ent_unbrand-nxagent-brand-x2goagent.full.patch} | 0 ...ess-fix-for-CVE-2011-2895-From-xorg-lib-X.patch | 29 + ...1-4028-File-disclosure-vulnerability.-ups.patch | 29 + ...fter-free-in-dix-dixfonts.c-doImageText-C.patch | 74 +++ ...62-unlimited-sscanf-overflows-stack-buffe.patch | 30 + ...09-integer-overflow-of-realloc-size-in-Fo.patch | 43 ++ ...09-integer-overflow-of-realloc-size-in-le.patch | 46 ++ ...10-unvalidated-length-in-_fs_recv_conn_se.patch | 73 +++ ...-when-we-receive-an-FS_Error-from-the-fon.patch | 27 + ...10-unvalidated-lengths-when-reading-repli.patch | 158 +++++ ...11-Integer-overflow-in-fs_get_reply-_fs_s.patch | 65 ++ ...10-unvalidated-length-fields-in-fs_read_q.patch | 137 +++++ ...11-integer-overflow-in-fs_read_extent_inf.patch | 48 ++ ...11-integer-overflow-in-fs_alloc_glyphs-fr.patch | 34 ++ ...10-unvalidated-length-fields-in-fs_read_e.patch | 38 ++ ...10-unvalidated-length-fields-in-fs_read_g.patch | 75 +++ ...10-unvalidated-length-fields-in-fs_read_l.patch | 61 ++ ...10-unvalidated-length-fields-in-fs_read_l.patch | 112 ++++ ...alloc-may-allow-unauthed-client-to-crash-.patch | 43 ++ ...-overflow-in-ProcPutImage-CVE-2014-8092-1.patch | 42 ++ ...er-overflow-in-GetHosts-CVE-2014-8092-2-4.patch | 53 ++ ...-overflow-in-RegionSizeof-CVE-2014-8092-3.patch | 205 +++++++ ...-overflow-in-REQUEST_FIXED_SIZE-CVE-2014-.patch | 46 ++ ...ated-lengths-in-DbeSwapBuffers-calls-CVE-.patch | 80 +++ ...ted-lengths-in-Xinput-extension-CVE-2014-.patch | 114 ++++ ...lidated-length-in-SProcXCMiscGetXIDList-C.patch | 29 + ...ted-lengths-in-XVideo-extension-swapped-p.patch | 184 ++++++ ...k-request-size-before-reading-it-CVE-2014.patch | 40 ++ ...lidated-lengths-in-Render-extn.-swapped-p.patch | 146 +++++ ...lidated-length-in-SProcXFixesSelectSelect.patch | 32 + ...idated-lengths-in-RandR-extension-swapped.patch | 45 ++ ...-paranoid-about-variable-length-requests-.patch | 76 +++ ...-strict-about-rejecting-invalid-image-siz.patch | 163 +++++ ...nal-paranoia-in-__glXGetAnswerBuffer-__GL.patch | 41 ++ ...safe_-add-mul-pad-v3-CVE-2014-8093-4-6-v4.patch | 96 +++ ...checking-for-GLXRender-requests-v2-CVE-20.patch | 132 +++++ ...-overflow-protection-for-non-generated-re.patch | 215 +++++++ ...el-length-checking-for-swapped-VendorPriv.patch | 53 ++ ...checking-for-non-generated-single-request.patch | 413 +++++++++++++ ...checking-for-RenderLarge-requests-v2-CVE-.patch | 290 +++++++++ ...maining-request-length-into-varsize-v2-CV.patch | 622 ++++++++++++++++++++ debian/patches/series | 192 +++--- debian/rules | 10 +- 119 files changed, 4446 insertions(+), 99 deletions(-) rename debian/patches/{000_add-NX-redistribution-README.full+lite.patch => 0000_add-NX-redistribution-README.full+lite.patch} (100%) rename debian/patches/{002_nxcompshad_build-against-nx-x11-only.full.patch => 0002_nxcompshad_build-against-nx-x11-only.full.patch} (100%) rename debian/patches/{003_nxcompshad_gcc43.full.patch => 0003_nxcompshad_gcc43.full.patch} (100%) rename debian/patches/{004_nx-X11_fix-nxcompshad-build.full.patch => 0004_nx-X11_fix-nxcompshad-build.full.patch} (100%) rename debian/patches/{005_nxcomp_gcc43.full+lite.patch => 0005_nxcomp_gcc43.full+lite.patch} (100%) rename debian/patches/{006_nxcomp_libpng15.full+lite.patch => 0006_nxcomp_libpng15.full+lite.patch} (100%) rename debian/patches/{007_nxcompshad_clean-gch-files.full.patch => 0007_nxcompshad_clean-gch-files.full.patch} (100%) rename debian/patches/{008_nxcomp_sa-restorer.full+lite.patch => 0008_nxcomp_sa-restorer.full+lite.patch} (100%) rename debian/patches/{009_nxagent_add-man-page.full.patch => 0009_nxagent_add-man-page.full.patch} (100%) rename debian/patches/{009_nxproxy_add-man-page.full+lite.patch => 0009_nxproxy_add-man-page.full+lite.patch} (100%) rename debian/patches/{010_nxauth_fix-binary-name-in-man-page.full.patch => 0010_nxauth_fix-binary-name-in-man-page.full.patch} (100%) rename debian/patches/{012_nxcomp_makefile-uninstall+autoconf.full+lite.patch => 0012_nxcomp_makefile-uninstall+autoconf.full+lite.patch} (100%) rename debian/patches/{013_nxcompext_makefile-uninstall+autoconf.full.patch => 0013_nxcompext_makefile-uninstall+autoconf.full.patch} (100%) rename debian/patches/{014_nxcompshad_makefile-uninstall+autoconf.full.patch => 0014_nxcompshad_makefile-uninstall+autoconf.full.patch} (100%) rename debian/patches/{015_nxproxy_makefile-uninstall.full+lite.patch => 0015_nxproxy_makefile-uninstall.full+lite.patch} (100%) rename debian/patches/{016_nx-X11_install-location.debian.patch => 0016_nx-X11_install-location.debian.patch} (100%) rename debian/patches/{016_nx-X11_install-location.full.patch => 0016_nx-X11_install-location.full.patch} (100%) rename debian/patches/{024_fix-make-clean.full+lite.patch => 0024_fix-make-clean.full+lite.patch} (100%) rename debian/patches/{024_fix-make-clean.full.patch => 0024_fix-make-clean.full.patch} (100%) rename debian/patches/{025_nxcomp-fix-ftbfs-against-jpeg9a.full+lite.patch => 0025_nxcomp-fix-ftbfs-against-jpeg9a.full+lite.patch} (100%) rename debian/patches/{026_nxcomp_honour-optflags.full+lite.patch => 0026_nxcomp_honour-optflags.full+lite.patch} (100%) rename debian/patches/{026_nxcompext_honour-optflags.full.patch => 0026_nxcompext_honour-optflags.full.patch} (100%) rename debian/patches/{026_nxcompshad_honour-optflags.full.patch => 0026_nxcompshad_honour-optflags.full.patch} (100%) rename debian/patches/{027_nxcomp_abstract-X11-socket.full+lite.patch => 0027_nxcomp_abstract-X11-socket.full+lite.patch} (100%) rename debian/patches/{028_nx-X11_abstract-kernel-sockets.full.patch => 0028_nx-X11_abstract-kernel-sockets.full.patch} (100%) rename debian/patches/{029_nxcomp_ppc64.full+lite.patch => 0029_nxcomp_ppc64.full+lite.patch} (100%) rename debian/patches/{030_nx-X11_configure-args.full.patch => 0030_nx-X11_configure-args.full.patch} (100%) rename debian/patches/{031_nx-X11_parallel-make.full.patch => 0031_nx-X11_parallel-make.full.patch} (100%) rename debian/patches/{051_nxcomp_macos105-fdisset.full+lite.patch => 0051_nxcomp_macos105-fdisset.full+lite.patch} (100%) rename debian/patches/{052_nxcomp_macos10-nxauth-location.full+lite.patch => 0052_nxcomp_macos10-nxauth-location.full+lite.patch} (100%) rename debian/patches/{053_nx-X11_no-xcomp1-install-target.full.patch => 0053_nx-X11_no-xcomp1-install-target.full.patch} (100%) rename debian/patches/{054_nx-X11_ppc64-ftbfs.full.patch => 0054_nx-X11_ppc64-ftbfs.full.patch} (100%) rename debian/patches/{055_nx-X11_imake-Werror-format-security.full.patch => 0055_nx-X11_imake-Werror-format-security.full.patch} (100%) rename debian/patches/{056_nx-X11_Werror-format-security.full.patch => 0056_nx-X11_Werror-format-security.full.patch} (100%) rename debian/patches/{057_nx-X11_sanitize-eventmasks.full.patch => 0057_nx-X11_sanitize-eventmasks.full.patch} (100%) rename debian/patches/{101_nxagent_set-rgb-path.full.patch => 0101_nxagent_set-rgb-path.full.patch} (100%) rename debian/patches/{102_xserver-xext_set-securitypolicy-path.debian.patch => 0102_xserver-xext_set-securitypolicy-path.debian.patch} (100%) rename debian/patches/{102_xserver-xext_set-securitypolicy-path.full.patch => 0102_xserver-xext_set-securitypolicy-path.full.patch} (100%) rename debian/patches/{103_nxagent_set-X0-config-path.full.patch => 0103_nxagent_set-X0-config-path.full.patch} (100%) rename debian/patches/{105_nxagent_export-remote-keyboard-config.full.patch => 0105_nxagent_export-remote-keyboard-config.full.patch} (100%) rename debian/patches/{106_nxagent_utf8-copy-clipboard.full.patch => 0106_nxagent_utf8-copy-clipboard.full.patch} (100%) rename debian/patches/{107_nxagent_clipboard-compound-text+small-bed-sheets.full.patch => 0107_nxagent_clipboard-compound-text+small-bed-sheets.full.patch} (100%) rename debian/patches/{108_nxagent_wine-close-delay.full.patch => 0108_nxagent_wine-close-delay.full.patch} (100%) rename debian/patches/{110_nxagent_createpixmap-bounds-check.full.patch => 0110_nxagent_createpixmap-bounds-check.full.patch} (100%) rename debian/patches/{200_nxagent_check-binary-x2go-flavour.full.patch => 0200_nxagent_check-binary-x2go-flavour.full.patch} (100%) rename debian/patches/{201_nxagent_set-x2go-icon-if-x2goagent-flavour.full.patch => 0201_nxagent_set-x2go-icon-if-x2goagent-flavour.full.patch} (100%) rename debian/patches/{202_nx-X11_enable-xinerama.full.patch => 0202_nx-X11_enable-xinerama.full.patch} (100%) rename debian/patches/{203_nxagent_disable-rootless-exit.full.patch => 0203_nxagent_disable-rootless-exit.full.patch} (100%) rename debian/patches/{204_nxagent_repaint-solidpict.full.patch => 0204_nxagent_repaint-solidpict.full.patch} (100%) rename debian/patches/{205_nxagent_refresh-adsl.full.patch => 0205_nxagent_refresh-adsl.full.patch} (100%) rename debian/patches/{206_nxagent_clipboard-as-nxoption.full.patch => 0206_nxagent_clipboard-as-nxoption.full.patch} (100%) rename debian/patches/{207_nxagent_fix-xfixes-selection.full.patch => 0207_nxagent_fix-xfixes-selection.full.patch} (100%) rename debian/patches/{209_x2goagent_add-man-page.full.patch => 0209_x2goagent_add-man-page.full.patch} (100%) rename debian/patches/{210_nxagent_save_session_state.full.patch => 0210_nxagent_save_session_state.full.patch} (100%) rename debian/patches/{210_nxcomp_save_session_state.full+lite.patch => 0210_nxcomp_save_session_state.full+lite.patch} (100%) rename debian/patches/{211_nxcomp_set_default_options.full+lite.patch => 0211_nxcomp_set_default_options.full+lite.patch} (100%) rename debian/patches/{212_nxcomp_build-on-Android.full+lite.patch => 0212_nxcomp_build-on-Android.full+lite.patch} (100%) rename debian/patches/{220_nxproxy_bind-loopback-only.full+lite.patch => 0220_nxproxy_bind-loopback-only.full+lite.patch} (100%) rename debian/patches/{300_nxagent_set-wm-class.full.patch => 0300_nxagent_set-wm-class.full.patch} (100%) rename debian/patches/{301_nx-X11_use-shared-libs.full.patch => 0301_nx-X11_use-shared-libs.full.patch} (100%) rename debian/patches/{302_nx-X11_xkbbasedir-detection.full.patch => 0302_nx-X11_xkbbasedir-detection.full.patch} (100%) rename debian/patches/{320_nxagent_configurable-keystrokes.full.patch => 0320_nxagent_configurable-keystrokes.full.patch} (100%) rename debian/patches/{321_nxagent_x2go-specific-keystroke-config.full.patch => 0321_nxagent_x2go-specific-keystroke-config.full.patch} (100%) rename debian/patches/{400_nxcomp-version.full+lite.patch => 0400_nxcomp-version.full+lite.patch} (100%) rename debian/patches/{401_nxcomp_bigrequests-and-genericevent-extensions.full+lite.patch => 0401_nxcomp_bigrequests-and-genericevent-extensions.full+lite.patch} (100%) rename debian/patches/{600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch => 0600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch} (100%) rename debian/patches/{601_nx-X11_build-option-changes-to-not-use-bundled-libraries.full.patch => 0601_nx-X11_build-option-changes-to-not-use-bundled-libraries.full.patch} (100%) rename debian/patches/{602_nx-X11_initgroups.full.patch => 0602_nx-X11_initgroups.full.patch} (100%) rename debian/patches/{603_nx-X11_compilation_warnings.full.patch => 0603_nx-X11_compilation_warnings.full.patch} (100%) rename debian/patches/{605_nxcomp_Types.h-dont-use-STL-internals-on-libc++.full+lite.patch => 0605_nxcomp_Types.h-dont-use-STL-internals-on-libc++.full+lite.patch} (100%) rename debian/patches/{606_nx-X11_build-on-aarch64.full.patch => 0606_nx-X11_build-on-aarch64.full.patch} (100%) rename debian/patches/{607_nxcomp_macosx-X11-launcher-in-private-tmp.full+lite.patch => 0607_nxcomp_macosx-X11-launcher-in-private-tmp.full+lite.patch} (100%) rename debian/patches/{990_fix-DEBUG-and-TEST-builds.full.patch => 0990_fix-DEBUG-and-TEST-builds.full.patch} (100%) rename debian/patches/{991_fix-hr-typos.full+lite.patch => 0991_fix-hr-typos.full+lite.patch} (100%) rename debian/patches/{991_fix-hr-typos.full.patch => 0991_fix-hr-typos.full.patch} (100%) rename debian/patches/{999_nxagent_unbrand-nxagent-brand-x2goagent.full.patch => 0999_nxagent_unbrand-nxagent-brand-x2goagent.full.patch} (100%) create mode 100644 debian/patches/1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-lib-X.patch create mode 100644 debian/patches/1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.-ups.patch create mode 100644 debian/patches/1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageText-C.patch create mode 100644 debian/patches/1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-buffe.patch create mode 100644 debian/patches/1005-CVE-2014-0209-integer-overflow-of-realloc-size-in-Fo.patch create mode 100644 debian/patches/1006-CVE-2014-0209-integer-overflow-of-realloc-size-in-le.patch create mode 100644 debian/patches/1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch create mode 100644 debian/patches/1008-Don-t-crash-when-we-receive-an-FS_Error-from-the-fon.patch create mode 100644 debian/patches/1009-CVE-2014-0210-unvalidated-lengths-when-reading-repli.patch create mode 100644 debian/patches/1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-_fs_s.patch create mode 100644 debian/patches/1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch create mode 100644 debian/patches/1012-CVE-2014-0211-integer-overflow-in-fs_read_extent_inf.patch create mode 100644 debian/patches/1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyphs-fr.patch create mode 100644 debian/patches/1014-CVE-2014-0210-unvalidated-length-fields-in-fs_read_e.patch create mode 100644 debian/patches/1015-CVE-2014-0210-unvalidated-length-fields-in-fs_read_g.patch create mode 100644 debian/patches/1016-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch create mode 100644 debian/patches/1017-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch create mode 100644 debian/patches/1018-unchecked-malloc-may-allow-unauthed-client-to-crash-.patch create mode 100644 debian/patches/1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8092-1.patch create mode 100644 debian/patches/1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch create mode 100644 debian/patches/1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8092-3.patch create mode 100644 debian/patches/1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-2014-.patch create mode 100644 debian/patches/1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls-CVE-.patch create mode 100644 debian/patches/1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-2014-.patch create mode 100644 debian/patches/1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDList-C.patch create mode 100644 debian/patches/1026-Xv-unvalidated-lengths-in-XVideo-extension-swapped-p.patch create mode 100644 debian/patches/1027-render-check-request-size-before-reading-it-CVE-2014.patch create mode 100644 debian/patches/1028-render-unvalidated-lengths-in-Render-extn.-swapped-p.patch create mode 100644 debian/patches/1029-xfixes-unvalidated-length-in-SProcXFixesSelectSelect.patch create mode 100644 debian/patches/1030-randr-unvalidated-lengths-in-RandR-extension-swapped.patch create mode 100644 debian/patches/1031-glx-Be-more-paranoid-about-variable-length-requests-.patch create mode 100644 debian/patches/1032-glx-Be-more-strict-about-rejecting-invalid-image-siz.patch create mode 100644 debian/patches/1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer-__GL.patch create mode 100644 debian/patches/1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-v4.patch create mode 100644 debian/patches/1035-glx-Length-checking-for-GLXRender-requests-v2-CVE-20.patch create mode 100644 debian/patches/1036-glx-Integer-overflow-protection-for-non-generated-re.patch create mode 100644 debian/patches/1037-glx-Top-level-length-checking-for-swapped-VendorPriv.patch create mode 100644 debian/patches/1038-glx-Length-checking-for-non-generated-single-request.patch create mode 100644 debian/patches/1039-glx-Length-checking-for-RenderLarge-requests-v2-CVE-.patch create mode 100644 debian/patches/1040-glx-Pass-remaining-request-length-into-varsize-v2-CV.patch -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/nx-libs.git