<feed xmlns='http://www.w3.org/2005/Atom'>
<title>nx-libs/nx-X11, branch pr/render-cve-fixes</title>
<subtitle>NXv3 (redistributed) 
</subtitle>
<id>https://cgit.arctica-project.org/nx-libs/atom?h=pr%2Frender-cve-fixes</id>
<link rel='self' href='https://cgit.arctica-project.org/nx-libs/atom?h=pr%2Frender-cve-fixes'/>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/nx-libs/'/>
<updated>2015-05-24T23:03:10+00:00</updated>
<entry>
<title>render: unvalidated lengths in Render extn. swapped procs [CVE-2014-8100 2/2]</title>
<updated>2015-05-24T23:03:10+00:00</updated>
<author>
<name>Alan Coopersmith</name>
<email>alan.coopersmith@oracle.com</email>
</author>
<published>2014-01-27T03:51:29+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/nx-libs/commit/?id=a0c90ad34fa89e5358893701723bd2f96a4bd3b2'/>
<id>urn:sha1:a0c90ad34fa89e5358893701723bd2f96a4bd3b2</id>
<content type='text'>
v2: backport to nx-libs 3.6.x (Mike DePaulo)
v3: port to NXrender.c rather than render.c (Mike DePaulo)

Signed-off-by: Alan Coopersmith &lt;alan.coopersmith@oracle.com&gt;
Reviewed-by: Peter Hutterer &lt;peter.hutterer@who-t.net&gt;

Conflicts:
	render/render.c
</content>
</entry>
<entry>
<title>render: check request size before reading it [CVE-2014-8100 1/2]</title>
<updated>2015-05-24T23:02:56+00:00</updated>
<author>
<name>Julien Cristau</name>
<email>jcristau@debian.org</email>
</author>
<published>2014-10-28T09:30:04+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/nx-libs/commit/?id=e469cff02d3093062ce9243185d55c516efdad0b'/>
<id>urn:sha1:e469cff02d3093062ce9243185d55c516efdad0b</id>
<content type='text'>
Otherwise we may be reading outside of the client request.

v2: backport to nx-libs 3.6.x (Mike DePaulo)
v3: port to NXrender.c rather than render.c (Mike DePaulo)

Signed-off-by: Julien Cristau &lt;jcristau@debian.org&gt;
Reviewed-by: Alan Coopersmith &lt;alan.coopersmith@oracle.com&gt;
Signed-off-by: Alan Coopersmith &lt;alan.coopersmith@oracle.com&gt;

Conflicts:
	render/render.c
</content>
</entry>
<entry>
<title>library clean-up: Don't build libNX_Xdamage anymore. Use system's libXdamage shared library. (Fixes ArcticaProject/nx-libs#6, X2GoBTS#826).</title>
<updated>2015-05-01T13:46:01+00:00</updated>
<author>
<name>Mike Gabriel</name>
<email>mike.gabriel@das-netzwerkteam.de</email>
</author>
<published>2015-04-27T14:08:06+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/nx-libs/commit/?id=06aa41671963dac9fa4bf84a8fc996a5360c94b0'/>
<id>urn:sha1:06aa41671963dac9fa4bf84a8fc996a5360c94b0</id>
<content type='text'>
</content>
</entry>
<entry>
<title>dix: Allow zero-height PutImage requests (fix for X.Org's CVE-2015-3418).</title>
<updated>2015-05-01T11:17:03+00:00</updated>
<author>
<name>Keith Packard</name>
<email>keithp@keithp.com</email>
</author>
<published>2015-05-01T11:09:24+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/nx-libs/commit/?id=dba779d9f99ab2fc6bf05c78515dbdd82840cadd'/>
<id>urn:sha1:dba779d9f99ab2fc6bf05c78515dbdd82840cadd</id>
<content type='text'>
 The length checking code validates PutImage height and byte width by
 making sure that byte-width &gt;= INT32_MAX / height. If height is zero,
 this generates a divide by zero exception. Allow zero height requests
 explicitly, bypassing the INT32_MAX check.

 Fix for regression introduced by fix for CVE-2014-8092.

 v2: backports to nx-libs 3.6.x (Mike Gabriel)
 Signed-off-by: Keith Packard &lt;keithp@keithp.com&gt;
</content>
</entry>
<entry>
<title>imake cleanup: Drop references to X11 build-logic that is not present in nx-X11.</title>
<updated>2015-04-28T03:09:09+00:00</updated>
<author>
<name>Mike Gabriel</name>
<email>mike.gabriel@das-netzwerkteam.de</email>
</author>
<published>2015-04-21T22:37:47+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/nx-libs/commit/?id=662a89545f3e953a47f176cf64e574350643d446'/>
<id>urn:sha1:662a89545f3e953a47f176cf64e574350643d446</id>
<content type='text'>
</content>
</entry>
<entry>
<title>imake cleanup: Break up multiple vars into invidual lines to ease further work on patches / pull requests.</title>
<updated>2015-04-28T02:49:19+00:00</updated>
<author>
<name>Mike Gabriel</name>
<email>mike.gabriel@das-netzwerkteam.de</email>
</author>
<published>2015-04-21T08:57:56+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/nx-libs/commit/?id=c189f6efce2fe1b84c7792875b2805fa331ee84f'/>
<id>urn:sha1:c189f6efce2fe1b84c7792875b2805fa331ee84f</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Fix underlinking issues for libNX_X{composite,damage,fixes}.</title>
<updated>2015-04-26T14:11:57+00:00</updated>
<author>
<name>Mike Gabriel</name>
<email>mike.gabriel@das-netzwerkteam.de</email>
</author>
<published>2015-04-26T14:11:57+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/nx-libs/commit/?id=4a3a4737f939c605378eae86ba583f25acec6ee0'/>
<id>urn:sha1:4a3a4737f939c605378eae86ba583f25acec6ee0</id>
<content type='text'>
</content>
</entry>
<entry>
<title>libX11 underlinking problem: Fix undefined reference to 'XdmcpWrap' (by linking against X.Org'x libXdmcp).</title>
<updated>2015-04-26T13:41:46+00:00</updated>
<author>
<name>Mike Gabriel</name>
<email>mike.gabriel@das-netzwerkteam.de</email>
</author>
<published>2015-04-26T13:41:46+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/nx-libs/commit/?id=305ac78893f84f49137b765bfd9a57eb03fc32d0'/>
<id>urn:sha1:305ac78893f84f49137b765bfd9a57eb03fc32d0</id>
<content type='text'>
</content>
</entry>
<entry>
<title>libX11 underlinking problem: Fix undefined reference to 'dlopen' and 'dlsym'. (Fixes: X2GoBTS#853).</title>
<updated>2015-04-26T13:22:25+00:00</updated>
<author>
<name>Mike Gabriel</name>
<email>mike.gabriel@das-netzwerkteam.de</email>
</author>
<published>2015-04-26T13:12:39+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/nx-libs/commit/?id=f46b43261c5b2e979d6ec2d9da7b00c6ee1c69e2'/>
<id>urn:sha1:f46b43261c5b2e979d6ec2d9da7b00c6ee1c69e2</id>
<content type='text'>
</content>
</entry>
<entry>
<title>xbitmaps cleanup: The &lt;X11/bitmaps/*&gt; headers are not required at build time for NX.</title>
<updated>2015-04-23T04:34:13+00:00</updated>
<author>
<name>Mike Gabriel</name>
<email>mike.gabriel@das-netzwerkteam.de</email>
</author>
<published>2015-04-21T08:42:47+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/nx-libs/commit/?id=e69b7d1ecf9672effd4715a4bc8d5bd729b5bd37'/>
<id>urn:sha1:e69b7d1ecf9672effd4715a4bc8d5bd729b5bd37</id>
<content type='text'>
</content>
</entry>
</feed>
