diff options
| -rw-r--r-- | debian/changelog | 94 | ||||
| -rw-r--r-- | debian/patches/1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-.full.patch (renamed from debian/patches/1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-lib-X.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.full.patch (renamed from debian/patches/1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.-ups.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageT.full.patch (renamed from debian/patches/1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageText-C.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-.full.patch (renamed from debian/patches/1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-buffe.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1005-CVE-2014-0209-integer-overflow-of-realloc-size-.full.patch (renamed from debian/patches/1005-CVE-2014-0209-integer-overflow-of-realloc-size-in-Fo.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1006-CVE-2014-0209-integer-overflow-of-realloc-size-.full.patch (renamed from debian/patches/1006-CVE-2014-0209-integer-overflow-of-realloc-size-in-le.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_co.full.patch (renamed from debian/patches/1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1008-Don-t-crash-when-we-receive-an-FS_Error-from-th.full.patch (renamed from debian/patches/1008-Don-t-crash-when-we-receive-an-FS_Error-from-the-fon.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1009-CVE-2014-0210-unvalidated-lengths-when-reading-.full.patch (renamed from debian/patches/1009-CVE-2014-0210-unvalidated-lengths-when-reading-repli.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-.full.patch (renamed from debian/patches/1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-_fs_s.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1011-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch (renamed from debian/patches/1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1012-CVE-2014-0211-integer-overflow-in-fs_read_exten.full.patch (renamed from debian/patches/1012-CVE-2014-0211-integer-overflow-in-fs_read_extent_inf.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyp.full.patch (renamed from debian/patches/1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyphs-fr.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1014-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch (renamed from debian/patches/1014-CVE-2014-0210-unvalidated-length-fields-in-fs_read_e.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1015-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch (renamed from debian/patches/1015-CVE-2014-0210-unvalidated-length-fields-in-fs_read_g.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1016-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch (renamed from debian/patches/1016-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1017-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch (renamed from debian/patches/1017-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1018-unchecked-malloc-may-allow-unauthed-client-to-c.full.patch (renamed from debian/patches/1018-unchecked-malloc-may-allow-unauthed-client-to-crash-.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8.full.patch (renamed from debian/patches/1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8092-1.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-.full.patch (renamed from debian/patches/1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8.full.patch (renamed from debian/patches/1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8092-3.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-.full.patch (renamed from debian/patches/1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-2014-.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls.full.patch (renamed from debian/patches/1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls-CVE-.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-.full.patch (renamed from debian/patches/1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-2014-.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDL.full.patch (renamed from debian/patches/1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDList-C.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1026-Xv-unvalidated-lengths-in-XVideo-extension-swap.full.patch (renamed from debian/patches/1026-Xv-unvalidated-lengths-in-XVideo-extension-swapped-p.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1027-render-check-request-size-before-reading-it-CVE.full.patch (renamed from debian/patches/1027-render-check-request-size-before-reading-it-CVE-2014.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1028-render-unvalidated-lengths-in-Render-extn.-swap.full.patch (renamed from debian/patches/1028-render-unvalidated-lengths-in-Render-extn.-swapped-p.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1029-xfixes-unvalidated-length-in-SProcXFixesSelectS.full.patch (renamed from debian/patches/1029-xfixes-unvalidated-length-in-SProcXFixesSelectSelect.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1030-randr-unvalidated-lengths-in-RandR-extension-sw.full.patch (renamed from debian/patches/1030-randr-unvalidated-lengths-in-RandR-extension-swapped.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1031-glx-Be-more-paranoid-about-variable-length-requ.full.patch (renamed from debian/patches/1031-glx-Be-more-paranoid-about-variable-length-requests-.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1032-glx-Be-more-strict-about-rejecting-invalid-imag.full.patch (renamed from debian/patches/1032-glx-Be-more-strict-about-rejecting-invalid-image-siz.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer.full.patch (renamed from debian/patches/1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer-__GL.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-.full.patch (renamed from debian/patches/1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-v4.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1035-glx-Length-checking-for-GLXRender-requests-v2-C.full.patch (renamed from debian/patches/1035-glx-Length-checking-for-GLXRender-requests-v2-CVE-20.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1036-glx-Integer-overflow-protection-for-non-generat.full.patch (renamed from debian/patches/1036-glx-Integer-overflow-protection-for-non-generated-re.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1037-glx-Top-level-length-checking-for-swapped-Vendo.full.patch (renamed from debian/patches/1037-glx-Top-level-length-checking-for-swapped-VendorPriv.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1038-glx-Length-checking-for-non-generated-single-re.full.patch (renamed from debian/patches/1038-glx-Length-checking-for-non-generated-single-request.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1039-glx-Length-checking-for-RenderLarge-requests-v2.full.patch (renamed from debian/patches/1039-glx-Length-checking-for-RenderLarge-requests-v2-CVE-.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1040-glx-Pass-remaining-request-length-into-varsize-.full.patch (renamed from debian/patches/1040-glx-Pass-remaining-request-length-into-varsize-v2-CV.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1041-nx-X11-lib-font-fc-fserve.c-initialize-remainin.full.patch (renamed from debian/patches/1041-nx-X11-lib-font-fc-fserve.c-initialize-remaining-buf.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1042-Do-proper-input-validation-to-fix-for-CVE-2011-.full.patch (renamed from debian/patches/1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1101-Coverity-844-845-846-Fix-memory-leaks.full.patch (renamed from debian/patches/1101-Coverity-844-845-846-Fix-memory-leaks.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1102-include-introduce-byte-counting-functions.full.patch (renamed from debian/patches/1102-include-introduce-byte-counting-functions.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input.full.patch (renamed from debian/patches/1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input-buff.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/1104-xkb-Check-strings-length-against-request-size.full.patch (renamed from debian/patches/1104-xkb-Check-strings-length-against-request-size.patch) | 0 | ||||
| -rw-r--r-- | debian/patches/series | 92 |
48 files changed, 140 insertions, 46 deletions
diff --git a/debian/changelog b/debian/changelog index 079b2decb..09dca43f8 100644 --- a/debian/changelog +++ b/debian/changelog @@ -17,6 +17,100 @@ nx-libs (2:3.5.0.32-0x2go1) UNRELEASED; urgency=low * nx-X11: add more NULL guards to TEST and DEBUG sections of Render.c. Affects: - 0990_fix-DEBUG-and-TEST-builds.full.patch + * CVE patches were previously not included in release tarballs. + Rename: + - 1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-lib-X.patch => + 1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-.full.patch + - 1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.-ups.patch => + 1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.full.patch + - 1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageText-C.patch => + 1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageT.full.patch + - 1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-buffe.patch => + 1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-.full.patch + - 1005-CVE-2014-0209-integer-overflow-of-realloc-size-in-Fo.patch => + 1005-CVE-2014-0209-integer-overflow-of-realloc-size-.full.patch + - 1006-CVE-2014-0209-integer-overflow-of-realloc-size-in-le.patch => + 1006-CVE-2014-0209-integer-overflow-of-realloc-size-.full.patch + - 1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch => + 1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_co.full.patch + - 1008-Don-t-crash-when-we-receive-an-FS_Error-from-the-fon.patch => + 1008-Don-t-crash-when-we-receive-an-FS_Error-from-th.full.patch + - 1009-CVE-2014-0210-unvalidated-lengths-when-reading-repli.patch => + 1009-CVE-2014-0210-unvalidated-lengths-when-reading-.full.patch + - 1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-_fs_s.patch => + 1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-.full.patch + - 1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch => + 1011-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch + - 1012-CVE-2014-0211-integer-overflow-in-fs_read_extent_inf.patch => + 1012-CVE-2014-0211-integer-overflow-in-fs_read_exten.full.patch + - 1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyphs-fr.patch => + 1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyp.full.patch + - 1014-CVE-2014-0210-unvalidated-length-fields-in-fs_read_e.patch => + 1014-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch + - 1015-CVE-2014-0210-unvalidated-length-fields-in-fs_read_g.patch => + 1015-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch + - 1016-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch => + 1016-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch + - 1017-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch => + 1017-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch + - 1018-unchecked-malloc-may-allow-unauthed-client-to-crash-.patch => + 1018-unchecked-malloc-may-allow-unauthed-client-to-c.full.patch + - 1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8092-1.patch => + 1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8.full.patch + - 1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch => + 1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-.full.patch + - 1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8092-3.patch => + 1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8.full.patch + - 1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-2014-.patch => + 1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-.full.patch + - 1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls-CVE-.patch => + 1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls.full.patch + - 1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-2014-.patch => + 1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-.full.patch + - 1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDList-C.patch => + 1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDL.full.patch + - 1026-Xv-unvalidated-lengths-in-XVideo-extension-swapped-p.patch => + 1026-Xv-unvalidated-lengths-in-XVideo-extension-swap.full.patch + - 1027-render-check-request-size-before-reading-it-CVE-2014.patch => + 1027-render-check-request-size-before-reading-it-CVE.full.patch + - 1028-render-unvalidated-lengths-in-Render-extn.-swapped-p.patch => + 1028-render-unvalidated-lengths-in-Render-extn.-swap.full.patch + - 1029-xfixes-unvalidated-length-in-SProcXFixesSelectSelect.patch => + 1029-xfixes-unvalidated-length-in-SProcXFixesSelectS.full.patch + - 1030-randr-unvalidated-lengths-in-RandR-extension-swapped.patch => + 1030-randr-unvalidated-lengths-in-RandR-extension-sw.full.patch + - 1031-glx-Be-more-paranoid-about-variable-length-requests-.patch => + 1031-glx-Be-more-paranoid-about-variable-length-requ.full.patch + - 1032-glx-Be-more-strict-about-rejecting-invalid-image-siz.patch => + 1032-glx-Be-more-strict-about-rejecting-invalid-imag.full.patch + - 1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer-__GL.patch => + 1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer.full.patch + - 1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-v4.patch => + 1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-.full.patch + - 1035-glx-Length-checking-for-GLXRender-requests-v2-CVE-20.patch => + 1035-glx-Length-checking-for-GLXRender-requests-v2-C.full.patch + - 1036-glx-Integer-overflow-protection-for-non-generated-re.patch => + 1036-glx-Integer-overflow-protection-for-non-generat.full.patch + - 1037-glx-Top-level-length-checking-for-swapped-VendorPriv.patch => + 1037-glx-Top-level-length-checking-for-swapped-Vendo.full.patch + - 1038-glx-Length-checking-for-non-generated-single-request.patch => + 1038-glx-Length-checking-for-non-generated-single-re.full.patch + - 1039-glx-Length-checking-for-RenderLarge-requests-v2-CVE-.patch => + 1039-glx-Length-checking-for-RenderLarge-requests-v2.full.patch + - 1040-glx-Pass-remaining-request-length-into-varsize-v2-CV.patch => + 1040-glx-Pass-remaining-request-length-into-varsize-.full.patch + - 1041-nx-X11-lib-font-fc-fserve.c-initialize-remaining-buf.patch => + 1041-nx-X11-lib-font-fc-fserve.c-initialize-remainin.full.patch + - 1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch => + 1042-Do-proper-input-validation-to-fix-for-CVE-2011-.full.patch + - 1101-Coverity-844-845-846-Fix-memory-leaks.patch => + 1101-Coverity-844-845-846-Fix-memory-leaks.full.patch + - 1102-include-introduce-byte-counting-functions.patch => + 1102-include-introduce-byte-counting-functions.full.patch + - 1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input-buff.patch => + 1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input.full.patch + - 1104-xkb-Check-strings-length-against-request-size.patch => + 1104-xkb-Check-strings-length-against-request-size.full.patch [ Bernard Cafarelli ] * nx-X11: link to libdl to fix undefined references to 'dlopen' and 'dlsym'. diff --git a/debian/patches/1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-lib-X.patch b/debian/patches/1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-.full.patch index 162bb218b..162bb218b 100644 --- a/debian/patches/1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-lib-X.patch +++ b/debian/patches/1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-.full.patch diff --git a/debian/patches/1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.-ups.patch b/debian/patches/1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.full.patch index a5437cacd..a5437cacd 100644 --- a/debian/patches/1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.-ups.patch +++ b/debian/patches/1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.full.patch diff --git a/debian/patches/1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageText-C.patch b/debian/patches/1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageT.full.patch index 8cb1d0d7b..8cb1d0d7b 100644 --- a/debian/patches/1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageText-C.patch +++ b/debian/patches/1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageT.full.patch diff --git a/debian/patches/1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-buffe.patch b/debian/patches/1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-.full.patch index 1cc44d0d1..1cc44d0d1 100644 --- a/debian/patches/1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-buffe.patch +++ b/debian/patches/1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-.full.patch diff --git a/debian/patches/1005-CVE-2014-0209-integer-overflow-of-realloc-size-in-Fo.patch b/debian/patches/1005-CVE-2014-0209-integer-overflow-of-realloc-size-.full.patch index 8097e3050..8097e3050 100644 --- a/debian/patches/1005-CVE-2014-0209-integer-overflow-of-realloc-size-in-Fo.patch +++ b/debian/patches/1005-CVE-2014-0209-integer-overflow-of-realloc-size-.full.patch diff --git a/debian/patches/1006-CVE-2014-0209-integer-overflow-of-realloc-size-in-le.patch b/debian/patches/1006-CVE-2014-0209-integer-overflow-of-realloc-size-.full.patch index 522a96731..522a96731 100644 --- a/debian/patches/1006-CVE-2014-0209-integer-overflow-of-realloc-size-in-le.patch +++ b/debian/patches/1006-CVE-2014-0209-integer-overflow-of-realloc-size-.full.patch diff --git a/debian/patches/1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch b/debian/patches/1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_co.full.patch index 2b2fa76c8..2b2fa76c8 100644 --- a/debian/patches/1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch +++ b/debian/patches/1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_co.full.patch diff --git a/debian/patches/1008-Don-t-crash-when-we-receive-an-FS_Error-from-the-fon.patch b/debian/patches/1008-Don-t-crash-when-we-receive-an-FS_Error-from-th.full.patch index 8e303b353..8e303b353 100644 --- a/debian/patches/1008-Don-t-crash-when-we-receive-an-FS_Error-from-the-fon.patch +++ b/debian/patches/1008-Don-t-crash-when-we-receive-an-FS_Error-from-th.full.patch diff --git a/debian/patches/1009-CVE-2014-0210-unvalidated-lengths-when-reading-repli.patch b/debian/patches/1009-CVE-2014-0210-unvalidated-lengths-when-reading-.full.patch index 6b06b8663..6b06b8663 100644 --- a/debian/patches/1009-CVE-2014-0210-unvalidated-lengths-when-reading-repli.patch +++ b/debian/patches/1009-CVE-2014-0210-unvalidated-lengths-when-reading-.full.patch diff --git a/debian/patches/1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-_fs_s.patch b/debian/patches/1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-.full.patch index ba883427f..ba883427f 100644 --- a/debian/patches/1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-_fs_s.patch +++ b/debian/patches/1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-.full.patch diff --git a/debian/patches/1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch b/debian/patches/1011-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch index 9d0f3f875..9d0f3f875 100644 --- a/debian/patches/1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch +++ b/debian/patches/1011-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch diff --git a/debian/patches/1012-CVE-2014-0211-integer-overflow-in-fs_read_extent_inf.patch b/debian/patches/1012-CVE-2014-0211-integer-overflow-in-fs_read_exten.full.patch index fc1dea6e3..fc1dea6e3 100644 --- a/debian/patches/1012-CVE-2014-0211-integer-overflow-in-fs_read_extent_inf.patch +++ b/debian/patches/1012-CVE-2014-0211-integer-overflow-in-fs_read_exten.full.patch diff --git a/debian/patches/1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyphs-fr.patch b/debian/patches/1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyp.full.patch index 63ba2b9ff..63ba2b9ff 100644 --- a/debian/patches/1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyphs-fr.patch +++ b/debian/patches/1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyp.full.patch diff --git a/debian/patches/1014-CVE-2014-0210-unvalidated-length-fields-in-fs_read_e.patch b/debian/patches/1014-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch index 9d65f8a45..9d65f8a45 100644 --- a/debian/patches/1014-CVE-2014-0210-unvalidated-length-fields-in-fs_read_e.patch +++ b/debian/patches/1014-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch diff --git a/debian/patches/1015-CVE-2014-0210-unvalidated-length-fields-in-fs_read_g.patch b/debian/patches/1015-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch index 93e7d32da..93e7d32da 100644 --- a/debian/patches/1015-CVE-2014-0210-unvalidated-length-fields-in-fs_read_g.patch +++ b/debian/patches/1015-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch diff --git a/debian/patches/1016-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch b/debian/patches/1016-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch index b5bc8c582..b5bc8c582 100644 --- a/debian/patches/1016-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch +++ b/debian/patches/1016-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch diff --git a/debian/patches/1017-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch b/debian/patches/1017-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch index d92c4eece..d92c4eece 100644 --- a/debian/patches/1017-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch +++ b/debian/patches/1017-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch diff --git a/debian/patches/1018-unchecked-malloc-may-allow-unauthed-client-to-crash-.patch b/debian/patches/1018-unchecked-malloc-may-allow-unauthed-client-to-c.full.patch index 3177ee906..3177ee906 100644 --- a/debian/patches/1018-unchecked-malloc-may-allow-unauthed-client-to-crash-.patch +++ b/debian/patches/1018-unchecked-malloc-may-allow-unauthed-client-to-c.full.patch diff --git a/debian/patches/1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8092-1.patch b/debian/patches/1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8.full.patch index 05d491941..05d491941 100644 --- a/debian/patches/1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8092-1.patch +++ b/debian/patches/1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8.full.patch diff --git a/debian/patches/1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch b/debian/patches/1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-.full.patch index 1d880399f..1d880399f 100644 --- a/debian/patches/1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch +++ b/debian/patches/1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-.full.patch diff --git a/debian/patches/1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8092-3.patch b/debian/patches/1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8.full.patch index a189cd537..a189cd537 100644 --- a/debian/patches/1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8092-3.patch +++ b/debian/patches/1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8.full.patch diff --git a/debian/patches/1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-2014-.patch b/debian/patches/1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-.full.patch index 3dddcb0f4..3dddcb0f4 100644 --- a/debian/patches/1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-2014-.patch +++ b/debian/patches/1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-.full.patch diff --git a/debian/patches/1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls-CVE-.patch b/debian/patches/1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls.full.patch index 5b9beb1c1..5b9beb1c1 100644 --- a/debian/patches/1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls-CVE-.patch +++ b/debian/patches/1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls.full.patch diff --git a/debian/patches/1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-2014-.patch b/debian/patches/1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-.full.patch index 884fa435c..884fa435c 100644 --- a/debian/patches/1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-2014-.patch +++ b/debian/patches/1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-.full.patch diff --git a/debian/patches/1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDList-C.patch b/debian/patches/1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDL.full.patch index 342728ef6..342728ef6 100644 --- a/debian/patches/1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDList-C.patch +++ b/debian/patches/1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDL.full.patch diff --git a/debian/patches/1026-Xv-unvalidated-lengths-in-XVideo-extension-swapped-p.patch b/debian/patches/1026-Xv-unvalidated-lengths-in-XVideo-extension-swap.full.patch index 1d458a7fe..1d458a7fe 100644 --- a/debian/patches/1026-Xv-unvalidated-lengths-in-XVideo-extension-swapped-p.patch +++ b/debian/patches/1026-Xv-unvalidated-lengths-in-XVideo-extension-swap.full.patch diff --git a/debian/patches/1027-render-check-request-size-before-reading-it-CVE-2014.patch b/debian/patches/1027-render-check-request-size-before-reading-it-CVE.full.patch index 9540ddeda..9540ddeda 100644 --- a/debian/patches/1027-render-check-request-size-before-reading-it-CVE-2014.patch +++ b/debian/patches/1027-render-check-request-size-before-reading-it-CVE.full.patch diff --git a/debian/patches/1028-render-unvalidated-lengths-in-Render-extn.-swapped-p.patch b/debian/patches/1028-render-unvalidated-lengths-in-Render-extn.-swap.full.patch index b90b03c87..b90b03c87 100644 --- a/debian/patches/1028-render-unvalidated-lengths-in-Render-extn.-swapped-p.patch +++ b/debian/patches/1028-render-unvalidated-lengths-in-Render-extn.-swap.full.patch diff --git a/debian/patches/1029-xfixes-unvalidated-length-in-SProcXFixesSelectSelect.patch b/debian/patches/1029-xfixes-unvalidated-length-in-SProcXFixesSelectS.full.patch index 90bc32431..90bc32431 100644 --- a/debian/patches/1029-xfixes-unvalidated-length-in-SProcXFixesSelectSelect.patch +++ b/debian/patches/1029-xfixes-unvalidated-length-in-SProcXFixesSelectS.full.patch diff --git a/debian/patches/1030-randr-unvalidated-lengths-in-RandR-extension-swapped.patch b/debian/patches/1030-randr-unvalidated-lengths-in-RandR-extension-sw.full.patch index 6a1757d3c..6a1757d3c 100644 --- a/debian/patches/1030-randr-unvalidated-lengths-in-RandR-extension-swapped.patch +++ b/debian/patches/1030-randr-unvalidated-lengths-in-RandR-extension-sw.full.patch diff --git a/debian/patches/1031-glx-Be-more-paranoid-about-variable-length-requests-.patch b/debian/patches/1031-glx-Be-more-paranoid-about-variable-length-requ.full.patch index 6d16d2ec4..6d16d2ec4 100644 --- a/debian/patches/1031-glx-Be-more-paranoid-about-variable-length-requests-.patch +++ b/debian/patches/1031-glx-Be-more-paranoid-about-variable-length-requ.full.patch diff --git a/debian/patches/1032-glx-Be-more-strict-about-rejecting-invalid-image-siz.patch b/debian/patches/1032-glx-Be-more-strict-about-rejecting-invalid-imag.full.patch index af577aaa9..af577aaa9 100644 --- a/debian/patches/1032-glx-Be-more-strict-about-rejecting-invalid-image-siz.patch +++ b/debian/patches/1032-glx-Be-more-strict-about-rejecting-invalid-imag.full.patch diff --git a/debian/patches/1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer-__GL.patch b/debian/patches/1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer.full.patch index a043d2104..a043d2104 100644 --- a/debian/patches/1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer-__GL.patch +++ b/debian/patches/1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer.full.patch diff --git a/debian/patches/1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-v4.patch b/debian/patches/1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-.full.patch index 3fe45a9bb..3fe45a9bb 100644 --- a/debian/patches/1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-v4.patch +++ b/debian/patches/1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-.full.patch diff --git a/debian/patches/1035-glx-Length-checking-for-GLXRender-requests-v2-CVE-20.patch b/debian/patches/1035-glx-Length-checking-for-GLXRender-requests-v2-C.full.patch index 17afae92f..17afae92f 100644 --- a/debian/patches/1035-glx-Length-checking-for-GLXRender-requests-v2-CVE-20.patch +++ b/debian/patches/1035-glx-Length-checking-for-GLXRender-requests-v2-C.full.patch diff --git a/debian/patches/1036-glx-Integer-overflow-protection-for-non-generated-re.patch b/debian/patches/1036-glx-Integer-overflow-protection-for-non-generat.full.patch index 742a8bdb4..742a8bdb4 100644 --- a/debian/patches/1036-glx-Integer-overflow-protection-for-non-generated-re.patch +++ b/debian/patches/1036-glx-Integer-overflow-protection-for-non-generat.full.patch diff --git a/debian/patches/1037-glx-Top-level-length-checking-for-swapped-VendorPriv.patch b/debian/patches/1037-glx-Top-level-length-checking-for-swapped-Vendo.full.patch index 7934b4713..7934b4713 100644 --- a/debian/patches/1037-glx-Top-level-length-checking-for-swapped-VendorPriv.patch +++ b/debian/patches/1037-glx-Top-level-length-checking-for-swapped-Vendo.full.patch diff --git a/debian/patches/1038-glx-Length-checking-for-non-generated-single-request.patch b/debian/patches/1038-glx-Length-checking-for-non-generated-single-re.full.patch index 5db4682df..5db4682df 100644 --- a/debian/patches/1038-glx-Length-checking-for-non-generated-single-request.patch +++ b/debian/patches/1038-glx-Length-checking-for-non-generated-single-re.full.patch diff --git a/debian/patches/1039-glx-Length-checking-for-RenderLarge-requests-v2-CVE-.patch b/debian/patches/1039-glx-Length-checking-for-RenderLarge-requests-v2.full.patch index 91433b6e8..91433b6e8 100644 --- a/debian/patches/1039-glx-Length-checking-for-RenderLarge-requests-v2-CVE-.patch +++ b/debian/patches/1039-glx-Length-checking-for-RenderLarge-requests-v2.full.patch diff --git a/debian/patches/1040-glx-Pass-remaining-request-length-into-varsize-v2-CV.patch b/debian/patches/1040-glx-Pass-remaining-request-length-into-varsize-.full.patch index 85181f071..85181f071 100644 --- a/debian/patches/1040-glx-Pass-remaining-request-length-into-varsize-v2-CV.patch +++ b/debian/patches/1040-glx-Pass-remaining-request-length-into-varsize-.full.patch diff --git a/debian/patches/1041-nx-X11-lib-font-fc-fserve.c-initialize-remaining-buf.patch b/debian/patches/1041-nx-X11-lib-font-fc-fserve.c-initialize-remainin.full.patch index b74b2d405..b74b2d405 100644 --- a/debian/patches/1041-nx-X11-lib-font-fc-fserve.c-initialize-remaining-buf.patch +++ b/debian/patches/1041-nx-X11-lib-font-fc-fserve.c-initialize-remainin.full.patch diff --git a/debian/patches/1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch b/debian/patches/1042-Do-proper-input-validation-to-fix-for-CVE-2011-.full.patch index 9ea330101..9ea330101 100644 --- a/debian/patches/1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch +++ b/debian/patches/1042-Do-proper-input-validation-to-fix-for-CVE-2011-.full.patch diff --git a/debian/patches/1101-Coverity-844-845-846-Fix-memory-leaks.patch b/debian/patches/1101-Coverity-844-845-846-Fix-memory-leaks.full.patch index e373bae26..e373bae26 100644 --- a/debian/patches/1101-Coverity-844-845-846-Fix-memory-leaks.patch +++ b/debian/patches/1101-Coverity-844-845-846-Fix-memory-leaks.full.patch diff --git a/debian/patches/1102-include-introduce-byte-counting-functions.patch b/debian/patches/1102-include-introduce-byte-counting-functions.full.patch index eb6366a1b..eb6366a1b 100644 --- a/debian/patches/1102-include-introduce-byte-counting-functions.patch +++ b/debian/patches/1102-include-introduce-byte-counting-functions.full.patch diff --git a/debian/patches/1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input-buff.patch b/debian/patches/1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input.full.patch index 328853a2c..328853a2c 100644 --- a/debian/patches/1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input-buff.patch +++ b/debian/patches/1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input.full.patch diff --git a/debian/patches/1104-xkb-Check-strings-length-against-request-size.patch b/debian/patches/1104-xkb-Check-strings-length-against-request-size.full.patch index 533ddcc3b..533ddcc3b 100644 --- a/debian/patches/1104-xkb-Check-strings-length-against-request-size.patch +++ b/debian/patches/1104-xkb-Check-strings-length-against-request-size.full.patch diff --git a/debian/patches/series b/debian/patches/series index 2856cbe9b..80a0e5e07 100644 --- a/debian/patches/series +++ b/debian/patches/series @@ -83,52 +83,52 @@ 0991_fix-hr-typos.full+lite.patch 0991_fix-hr-typos.full.patch 0999_nxagent_unbrand-nxagent-brand-x2goagent.full.patch -1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-lib-X.patch -1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.-ups.patch -1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageText-C.patch -1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-buffe.patch -1005-CVE-2014-0209-integer-overflow-of-realloc-size-in-Fo.patch -1006-CVE-2014-0209-integer-overflow-of-realloc-size-in-le.patch -1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch -1008-Don-t-crash-when-we-receive-an-FS_Error-from-the-fon.patch -1009-CVE-2014-0210-unvalidated-lengths-when-reading-repli.patch -1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-_fs_s.patch -1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch -1012-CVE-2014-0211-integer-overflow-in-fs_read_extent_inf.patch -1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyphs-fr.patch -1014-CVE-2014-0210-unvalidated-length-fields-in-fs_read_e.patch -1015-CVE-2014-0210-unvalidated-length-fields-in-fs_read_g.patch -1016-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch -1017-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch -1018-unchecked-malloc-may-allow-unauthed-client-to-crash-.patch -1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8092-1.patch -1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch -1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8092-3.patch -1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-2014-.patch -1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls-CVE-.patch -1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-2014-.patch -1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDList-C.patch -1026-Xv-unvalidated-lengths-in-XVideo-extension-swapped-p.patch -1027-render-check-request-size-before-reading-it-CVE-2014.patch -1028-render-unvalidated-lengths-in-Render-extn.-swapped-p.patch -1029-xfixes-unvalidated-length-in-SProcXFixesSelectSelect.patch -1030-randr-unvalidated-lengths-in-RandR-extension-swapped.patch -1031-glx-Be-more-paranoid-about-variable-length-requests-.patch -1032-glx-Be-more-strict-about-rejecting-invalid-image-siz.patch -1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer-__GL.patch -1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-v4.patch -1035-glx-Length-checking-for-GLXRender-requests-v2-CVE-20.patch -1036-glx-Integer-overflow-protection-for-non-generated-re.patch -1037-glx-Top-level-length-checking-for-swapped-VendorPriv.patch -1038-glx-Length-checking-for-non-generated-single-request.patch -1039-glx-Length-checking-for-RenderLarge-requests-v2-CVE-.patch -1040-glx-Pass-remaining-request-length-into-varsize-v2-CV.patch -1041-nx-X11-lib-font-fc-fserve.c-initialize-remaining-buf.patch -1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch -1101-Coverity-844-845-846-Fix-memory-leaks.patch -1102-include-introduce-byte-counting-functions.patch -1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input-buff.patch -1104-xkb-Check-strings-length-against-request-size.patch +1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-.full.patch +1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.full.patch +1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageT.full.patch +1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-.full.patch +1005-CVE-2014-0209-integer-overflow-of-realloc-size-.full.patch +1006-CVE-2014-0209-integer-overflow-of-realloc-size-.full.patch +1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_co.full.patch +1008-Don-t-crash-when-we-receive-an-FS_Error-from-th.full.patch +1009-CVE-2014-0210-unvalidated-lengths-when-reading-.full.patch +1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-.full.patch +1011-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch +1012-CVE-2014-0211-integer-overflow-in-fs_read_exten.full.patch +1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyp.full.patch +1014-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch +1015-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch +1016-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch +1017-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch +1018-unchecked-malloc-may-allow-unauthed-client-to-c.full.patch +1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8.full.patch +1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-.full.patch +1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8.full.patch +1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-.full.patch +1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls.full.patch +1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-.full.patch +1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDL.full.patch +1026-Xv-unvalidated-lengths-in-XVideo-extension-swap.full.patch +1027-render-check-request-size-before-reading-it-CVE.full.patch +1028-render-unvalidated-lengths-in-Render-extn.-swap.full.patch +1029-xfixes-unvalidated-length-in-SProcXFixesSelectS.full.patch +1030-randr-unvalidated-lengths-in-RandR-extension-sw.full.patch +1031-glx-Be-more-paranoid-about-variable-length-requ.full.patch +1032-glx-Be-more-strict-about-rejecting-invalid-imag.full.patch +1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer.full.patch +1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-.full.patch +1035-glx-Length-checking-for-GLXRender-requests-v2-C.full.patch +1036-glx-Integer-overflow-protection-for-non-generat.full.patch +1037-glx-Top-level-length-checking-for-swapped-Vendo.full.patch +1038-glx-Length-checking-for-non-generated-single-re.full.patch +1039-glx-Length-checking-for-RenderLarge-requests-v2.full.patch +1040-glx-Pass-remaining-request-length-into-varsize-.full.patch +1041-nx-X11-lib-font-fc-fserve.c-initialize-remainin.full.patch +1042-Do-proper-input-validation-to-fix-for-CVE-2011-.full.patch +1101-Coverity-844-845-846-Fix-memory-leaks.full.patch +1102-include-introduce-byte-counting-functions.full.patch +1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input.full.patch +1104-xkb-Check-strings-length-against-request-size.full.patch 1200-CVE-2013-7439-MakeBigReq-don-t-move-the-last-wo.full.patch 0016_nx-X11_install-location.debian.patch 0102_xserver-xext_set-securitypolicy-path.debian.patch |