aboutsummaryrefslogtreecommitdiff
path: root/debian/changelog
blob: 951a7ec9cd80725b1431b178745b0e9392c550e2 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
1180
1181
1182
1183
1184
1185
1186
1187
1188
1189
1190
1191
1192
1193
1194
1195
1196
1197
1198
1199
1200
1201
1202
1203
1204
1205
1206
1207
1208
1209
1210
1211
1212
1213
1214
1215
1216
1217
1218
1219
1220
1221
1222
1223
1224
1225
1226
1227
1228
1229
1230
1231
1232
1233
1234
1235
1236
1237
1238
1239
1240
1241
1242
1243
1244
1245
1246
1247
1248
1249
1250
1251
1252
1253
1254
1255
1256
1257
1258
1259
1260
1261
1262
1263
1264
1265
1266
1267
1268
1269
1270
1271
1272
1273
1274
1275
1276
1277
1278
1279
1280
1281
1282
1283
1284
1285
1286
1287
1288
1289
1290
1291
1292
1293
1294
1295
1296
1297
1298
1299
1300
1301
1302
1303
1304
1305
1306
1307
1308
1309
1310
1311
1312
1313
1314
1315
1316
1317
1318
1319
1320
1321
1322
1323
1324
1325
1326
1327
1328
1329
1330
1331
1332
1333
1334
1335
1336
1337
1338
1339
1340
1341
1342
1343
1344
1345
1346
1347
1348
1349
1350
1351
1352
1353
1354
1355
1356
1357
1358
1359
1360
1361
1362
1363
1364
1365
1366
1367
1368
1369
1370
1371
1372
1373
1374
1375
1376
1377
1378
1379
1380
1381
1382
1383
1384
1385
1386
1387
1388
1389
1390
1391
1392
1393
1394
1395
1396
1397
1398
1399
1400
1401
1402
1403
1404
1405
1406
1407
1408
1409
1410
1411
1412
1413
1414
1415
1416
1417
1418
1419
1420
1421
1422
1423
1424
1425
1426
1427
1428
1429
1430
1431
1432
1433
1434
1435
1436
1437
1438
1439
1440
1441
1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
1461
1462
1463
1464
1465
1466
1467
1468
1469
1470
1471
1472
1473
1474
1475
1476
1477
1478
1479
1480
1481
1482
1483
1484
1485
1486
1487
nx-libs (2:3.5.0.34-0x2go1) UNRELEASED; urgency=medium

  * Continue development

 -- X2Go Release Manager <git-admin@x2go.org>  Wed, 08 Nov 2017 11:18:57 +0100

nx-libs (2:3.5.0.33-0x2go1) unstable; urgency=low

  [ Mihai Moldovan ]
  * debian/control:
    - Add xkb-data to nxagent's Recommends.
    - Uploaders: add myself. Also, force a rebuild due to the changed
      versioning.
    - Add Breaks statement on pre-4.1.0.0 x2goserver to x2goagent package.
    - Change Breaks statement to pre-4.0.1.21 x2goserver and add a Replaces:
      x2goserver << 4.0.1.21 section to x2goagent package. We'll do the
      /etc/x2go/x2goagent.options file move for x2goserver 4.0.1.21 and
      nx-libs 3.5.0.33 already.
  * nx-libs.spec:
    - Add xkeyboard-config to nxagent's Requires. Should be a weak dependency,
      but RPM doesn't support that too well yet.
    - Copy new debian/x2goagent.options file into build environment, analogous
      to what debian/roll-tarballs.sh does.
    - Add new x2goagent.options file to installed file list of x2goagent
      package.
    - Let x2goagent package satisfy x2goagent-virtual.
    - Add -mno-vxs to general C(XX)FLAGS on ppc64le.
      Hopefully just a temporary workaround until
      https://bugzilla.redhat.com/show_bug.cgi?id=1489712 /
      https://bugs.centos.org/view.php?id=13779 are resolved.
      Backported from Arctica GH 3.6.x branch.
      v2: backport to nx-libs 3.5.0.x (Mihai Moldovan)
    - Drop ugly sed hack to push optflags to build system.
    - Pass CDEBUGSFLAGS and friends directly to the make command in %build.
    - Let x2goagent conflict with pre-4.0.1.21 x2goserver versions. Needed for
      x2goagent.options file move.
  * debian/:
    - Add x2goagent.options file for compatibility with x2goserver nightly.
  * debian/roll-tarballs.sh:
    - Copy new debian/x2goagent.options file into real tarball environment.
  * debian/Makefile.nx-libs:
    - Install/destroot new x2goagent.options file.
  * debian/rules:
    - Symlink and remove new debian/x2goagent.options file into/from build
      environment.
  * debian/x2goagent.install:
    - Add new x2goagent.options file.
  * Refresh:
    - 0016_nx-X11_install-location.debian.patch
    - 9900-dxpc-license-history.full+lite.patch
  * nx-X11: use the "old", non-NX header location.
    Affects:
    - 1270_nx-X11_CVE-2017-2624-Use-timingsafe_memcmp-to-c.full.patch
  * {debian/control,nx-libs.spec}:
    - Add proper dependencies upon xkbcomp for RPM and DEB packages.
      Fixes: #1160.
      Backported from Arctica GH 3.6.x branch.
      v2: backport to nx-libs 3.5.0.x (Mihai Moldovan)
  * debian/patches:
    - Refresh all patches. Removes some fuzziness and adds the -p diff option
      to show the C function name in hunk headers.
    - Fixup series file to include previous patch.
  * nxcomp: Handle launchd sockets in DISPLAY variable correctly when fetching
    X cookie.
    Backported from Arctica GH 3.6.x branch.
    v2: backport to nx-libs 3.5.0.x (Mihai Moldovan)
    Adds:
      - debian/patches/1600_nxcomp-handle-launchd-socket-in-Auth.full+lite.patch
  * nxcomp: Hardcode X11 and (legacy/xfs) font UNIX paths.
    Fixes: ArcticaProject/nx-libs#536
    Allowing overrides via NX_TEMP and TEMP breaks system using
    pam_tmpdir.so and most server infrastructure expects the location to be
    fixed anyway.
    Backported from Arctica GH 3.6.x branch.
    v2: backport to nx-libs 3.5.0.x (Mihai Moldovan)
    Adds:
      - debian/patches/1610_nxcomp-harcode-some-UNIX-socket-path.full+lite.patch
  * Mid-release fixup:
    - Rename
      debian/patches/1400_nx-X11_Render.c-Improve-situation-fo.full+lite.patch
      to
      debian/patches/1400_nx-X11_Render.c-Improve-situation-fo.full.patch.
    - Split up
      debian/patches/1500_all_propagate-optflags-to-subcompone.full+lite.patch.
      Put server changes into
      debian/patches/1500_all_propagate-optflags-to-subcompone.full.patch
      and keep client changes local to
      debian/patches/1510_all_propagate-optflags-to-subcompone.full+lite.patch.

  [ Mike Gabriel ]
  * debian/libxinerama1.postinst.in:
    + Revert 5a9f829. Make sure libnx-Xinerama1 based Xinerama works
      again with X2Go on Debian based systems.
    + Enforce symlink creation for Xinerama et al. library symlinks.
      (Fixes: #757, #758, #760).
  * Xinerama symlinking: Attach Xinerama symlinking to nxagent bin:package (and
    not libnx-xinerama1).
    Backported from Arctica GH 3.6.x branch.
  * debian/Makefile.nx-libs:
    + Make sure that 'make all' only calls 'make build' and _not_ the global
      '%:' ruleset afterwards.
      Backported from Arctica GH 3.6.x branch.
      v2: backport to nx-libs 3.5.0.x (Mihai Moldovan)
  * buildsystem:
    - OPTFLAGS: Properly propagate build option flags to nxcomp{,ext,shad} and
      the nx-X11 build scripts.
      Backported from Arctica GH 3.6.x branch.
      v2: backport to nx-libs 3.5.0.x (Mihai Moldovan)
      Adds:
      - debian/patches/1500_all_propagate-optflags-to-subcompone.full+lite.patch

  [ Ulrich Sibiller ]
  * nx-X11: Backport CVE-2017-2624 (timingsafe_memcmp)
    Backported from Arctica GH 3.6.x branch.
    v2: backport to nx-libs 3.6.x (Ulrich Sibiller)
    v3: backport to nx-libs 3.5.0.x (Mihai Moldovan)
    Adds:
    - 1270_nx-X11_CVE-2017-2624-Use-timingsafe_memcmp-to-c.full.patch

  [ Oleksandr Shneyder ]
  * nxcomp: Set TokenSize to 1536 for link type ADSL and WAN.
    Improving non-xrender based browser scrolling behaviour when link type is
    set to ADSL or WAN.
    Backported from Arctica GH 3.6.x branch.
    v2: backport to nx-libs 3.5.0.x (Mihai Moldovan)
    Adds:
    - debian/patches/1300_nxcomp_Set-TokenSize-to-1536-for-lin.full+lite.patch
  * nx-X11: Render.c: Improve situation for multiple trapezoid requests.
    Backported from Arctica GH 3.6.x branch.
    v2: backport to nx-libs 3.5.0.x (Mihai Moldovan)
    Adds:
    - debian/patches/1400_nx-X11_Render.c-Improve-situation-fo.full+lite.patch

  [ Simon Matter ]
  * nxcomp: Reduce control->TokenSize slightly again in order to fix
    fragmentation of packages when on VPN (or otherwise encapsulated)
    connections.
    Backported from Arctica GH 3.6.x branch.
    v2: backport to nx-libs 3.5.0.x (Mihai Moldovan)
    Adds:
    - debian/patches/1301_nxcomp_Reduce-TokenSize-slightly-for.full+lite.patch

 -- X2Go Release Manager <git-admin@x2go.org>  Wed, 08 Nov 2017 08:07:54 +0100

nx-libs (2:3.5.0.32-0x2go1) unstable; urgency=low

  [ Mihai Moldovan ]
  * Only use the first three numbers in the full version for current_version
    on OS X. ld(1) on 10.6 fails otherwise.
    Affected:
    - 0420_nxcomp_use-correct-library-naming-scheme-on-OS-X.full+lite.patch
    - 0620_nxcompext_use-correct-library-naming-scheme-on-OS-X.full.patch
    - 0621_nxcompshad_use-correct-library-naming-scheme-on-OS-X.full.patch
  * nx-X11: handle source pictures (those without a Drawable surface)
    gracefully.
    Adds:
    - 0017_nx-X11_fix-SetPictureFilter.full.patch
  * nx-X11: fix typo in previous patch.
    Affects:
    - 0017_nx-X11_fix-SetPictureFilter.full.patch
  * nx-X11: add more NULL guards to TEST and DEBUG sections of Render.c.
    Affects:
    - 0990_fix-DEBUG-and-TEST-builds.full.patch
  * CVE patches were previously not included in release tarballs.
    Rename:
    - 1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-lib-X.patch =>
      1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-.full.patch
    - 1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.-ups.patch =>
      1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.full.patch
    - 1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageText-C.patch =>
      1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageT.full.patch
    - 1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-buffe.patch =>
      1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-.full.patch
    - 1005-CVE-2014-0209-integer-overflow-of-realloc-size-in-Fo.patch =>
      1005-CVE-2014-0209-integer-overflow-of-realloc-size-.full.patch
    - 1006-CVE-2014-0209-integer-overflow-of-realloc-size-in-le.patch =>
      1006-CVE-2014-0209-integer-overflow-of-realloc-size-.full.patch
    - 1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch =>
      1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_co.full.patch
    - 1008-Don-t-crash-when-we-receive-an-FS_Error-from-the-fon.patch =>
      1008-Don-t-crash-when-we-receive-an-FS_Error-from-th.full.patch
    - 1009-CVE-2014-0210-unvalidated-lengths-when-reading-repli.patch =>
      1009-CVE-2014-0210-unvalidated-lengths-when-reading-.full.patch
    - 1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-_fs_s.patch =>
      1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-.full.patch
    - 1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch =>
      1011-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch
    - 1012-CVE-2014-0211-integer-overflow-in-fs_read_extent_inf.patch =>
      1012-CVE-2014-0211-integer-overflow-in-fs_read_exten.full.patch
    - 1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyphs-fr.patch =>
      1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyp.full.patch
    - 1014-CVE-2014-0210-unvalidated-length-fields-in-fs_read_e.patch =>
      1014-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch
    - 1015-CVE-2014-0210-unvalidated-length-fields-in-fs_read_g.patch =>
      1015-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch
    - 1016-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch =>
      1016-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch
    - 1017-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch =>
      1017-CVE-2014-0210-unvalidated-length-fields-in-fs_r.full.patch
    - 1018-unchecked-malloc-may-allow-unauthed-client-to-crash-.patch =>
      1018-unchecked-malloc-may-allow-unauthed-client-to-c.full.patch
    - 1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8092-1.patch =>
      1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8.full.patch
    - 1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch =>
      1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-.full.patch
    - 1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8092-3.patch =>
      1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8.full.patch
    - 1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-2014-.patch =>
      1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-.full.patch
    - 1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls-CVE-.patch =>
      1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls.full.patch
    - 1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-2014-.patch =>
      1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-.full.patch
    - 1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDList-C.patch =>
      1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDL.full.patch
    - 1026-Xv-unvalidated-lengths-in-XVideo-extension-swapped-p.patch =>
      1026-Xv-unvalidated-lengths-in-XVideo-extension-swap.full.patch
    - 1027-render-check-request-size-before-reading-it-CVE-2014.patch =>
      1027-render-check-request-size-before-reading-it-CVE.full.patch
    - 1028-render-unvalidated-lengths-in-Render-extn.-swapped-p.patch =>
      1028-render-unvalidated-lengths-in-Render-extn.-swap.full.patch
    - 1029-xfixes-unvalidated-length-in-SProcXFixesSelectSelect.patch =>
      1029-xfixes-unvalidated-length-in-SProcXFixesSelectS.full.patch
    - 1030-randr-unvalidated-lengths-in-RandR-extension-swapped.patch =>
      1030-randr-unvalidated-lengths-in-RandR-extension-sw.full.patch
    - 1031-glx-Be-more-paranoid-about-variable-length-requests-.patch =>
      1031-glx-Be-more-paranoid-about-variable-length-requ.full.patch
    - 1032-glx-Be-more-strict-about-rejecting-invalid-image-siz.patch =>
      1032-glx-Be-more-strict-about-rejecting-invalid-imag.full.patch
    - 1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer-__GL.patch =>
      1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer.full.patch
    - 1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-v4.patch =>
      1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-.full.patch
    - 1035-glx-Length-checking-for-GLXRender-requests-v2-CVE-20.patch =>
      1035-glx-Length-checking-for-GLXRender-requests-v2-C.full.patch
    - 1036-glx-Integer-overflow-protection-for-non-generated-re.patch =>
      1036-glx-Integer-overflow-protection-for-non-generat.full.patch
    - 1037-glx-Top-level-length-checking-for-swapped-VendorPriv.patch =>
      1037-glx-Top-level-length-checking-for-swapped-Vendo.full.patch
    - 1038-glx-Length-checking-for-non-generated-single-request.patch =>
      1038-glx-Length-checking-for-non-generated-single-re.full.patch
    - 1039-glx-Length-checking-for-RenderLarge-requests-v2-CVE-.patch =>
      1039-glx-Length-checking-for-RenderLarge-requests-v2.full.patch
    - 1040-glx-Pass-remaining-request-length-into-varsize-v2-CV.patch =>
      1040-glx-Pass-remaining-request-length-into-varsize-.full.patch
    - 1041-nx-X11-lib-font-fc-fserve.c-initialize-remaining-buf.patch =>
      1041-nx-X11-lib-font-fc-fserve.c-initialize-remainin.full.patch
    - 1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch =>
      1042-Do-proper-input-validation-to-fix-for-CVE-2011-.full.patch
    - 1101-Coverity-844-845-846-Fix-memory-leaks.patch =>
      1101-Coverity-844-845-846-Fix-memory-leaks.full.patch
    - 1102-include-introduce-byte-counting-functions.patch =>
      1102-include-introduce-byte-counting-functions.full.patch
    - 1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input-buff.patch =>
      1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input.full.patch
    - 1104-xkb-Check-strings-length-against-request-size.patch =>
      1104-xkb-Check-strings-length-against-request-size.full.patch
  * debian/rolltarball.sh:
    Cherry-picked from Arctica GH 3.6.x branch.

    - Use more quotes. Fixes potential bugs, including one triggered by an
      unquoted hash within the command line. BASH accepts this. Other shells
      do not (i.e., treat everything following the hash character as a
      comment.)
    - Convert tabs to spaces for consistency.
    - Use more curly braces. Prevents random characters as being treated as
      part of a variable name.
    - Don't escape last newline of a multiline command. Worked out fine so
      far, because the next line was empty, but this can easily change...
  * README.keystrokes:
    Backported from Arctica GH 3.6.x branch.
    Affects:
    + 0320_nxagent_configurable-keystrokes.full.patch

    - Copy actions documentation from the wiki.
    - Add documentation for branding behavior.
    - Remove accidentally copied Dokuwiki syntax.
  * debian/keystrokes.cfg: fix whitespace errors.
    Backported from Arctica GH 3.6.x branch.
  * debian/libnx-xinerama1.*: also create libXinerama symlink in
    libnx-xinerama1.postinst.postinst (and remove in
    libnx-xinerama1.postinst.prerm.)
    Backported from Arctica GH 3.6.x branch.
  * debian/libnx-xinerama1.*: move Xinerama dir back to nx-x11-common. Only
    delete known files. Fixes RPM build failures.
    Backported from Arctica GH 3.6.x branch.
  * nx-libs.spec: actually create libXinerama.so.1 symlink during build phase.
    Backported from Arctica GH 3.6.x branch.
  * debian/control: workaround missing dependencies of nxagent on Ubuntu for
    now.
  * debian/libnx-xinerama1.*: fix faulty logic when creating symlinks.
    Backported from Arctica GH 3.6.x branch.
  * Security fixes:
    - X.Org CVE-2014-8100:
      v3: port to NXrender.c rather than render.c (Mike DePaulo)
      v4: backport v3 to nx-libs 3.5.0.x (Mihai Moldovan)
      Changes:
      + 1027-render-check-request-size-before-reading-it-CVE.full.patch
  * Security fixes:
    - X.Org CVE-2014-8100:
      v3: port to NXrender.c rather than render.c (Mike DePaulo)
      v4: backport v3 to nx-libs 3.5.0.x (Mihai Moldovan)
      Changes:
      + 1028-render-unvalidated-lengths-in-Render-extn.-swap.full.patch
  * nxcomp/Misc.cpp: fix build failure introduced in
    a27a8aae3ca7a3f70e05152ac3d347942e11159d.
    Backported from Arctica GH 3.6.x branch.
    Affects:
    - 9900-dxpc-license-history.full+lite.patch
  * Security fixes:
    - X.Org CVE-2013-4396:
      v2: Apply to NXdixfonts.c rather than dixfonts.c (Mike DePaulo)
      v3: backport v2 to nx-libs 3.5.0.x (Mihai Moldovan)
      Changes:
      + 1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageT.full.patch
  * Security fixes:
    - X.Org CVE-2014-8092:
      v3: port to NXdispatch.c rather than dispatch.c (Mike DePaulo)
      v4: backport v3 to nx-libs 3.5.0.x (Mihai Moldovan)
      Changes:
      + 1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8.full.patch
  * Security fixes:
    - X.Org CVE-2015-3418:
      v3: port to NXdispatch.c rather than dispatch.c (Mike DePaulo)
      v4: backport v3 to nx-libs 3.5.0.x (Mihai Moldovan)
      Changes:
      + 1210-CVE-2015-3418-dix-Allow-zero-height-PutImage-re.full.patch
  * Security fixes:
    - X.Org CVE-2014-8099:
      v3: port to NXxvdisp.c rather than xvdisp.c (Mike DePaulo)
      v4: backport v3 to nx-libs 3.5.0.x (Mihai Moldovan)
      Changes:
      + 1026-Xv-unvalidated-lengths-in-XVideo-extension-swap.full.patch

  [ Bernard Cafarelli ]
  * nx-X11: link to libdl to fix undefined references to 'dlopen' and 'dlsym'.
    Fixes: #853.
    v2: generally link to libdl in all of nx-X11. (Mike Gabriel)
    Adds:
    - 0630_nx-X11_fix-underlinking-dlopen-dlsym.full.patch

  [ Mike Gabriel ]
  * Security fixes:
    - X.Org CVE-2013-7439:
      1200-CVE-2013-7439-MakeBigReq-don-t-move-the-last-wo.full.patch
  * nx-X11: Prevent underlinking by linking to libNX_X{11,damage,fixes).
    Adds:
    - 0640_nx-X11_fix-underlinking-libNX_Xcomposite_damage_fixes.full.patch
  * nxcompshad: Prevent underlinking by linking to libNX_Xext.
    Adds:
    - 0650_nxcompshad_link-to-NX_Xext.full.patch
  * Security fixes:
    - X.Org CVE-2015-3418:
      1210-CVE-2015-3418-dix-Allow-zero-height-PutImage-re.full.patch
  * debian/roll-tarball.sh:
    + Make sure *.keyboard, debian/**, nx-libs.spec, .pc/** don't end up
      in tarball (special focus on the nx-libs-lite tarball).
    + Allow patch files names having a dash next to the four digits (i.e.,
      1234-<patchname>.<suffix>).
    + Support tarring up the HEAD of the current branch.
  * debian/COPYING.full+lite:
    + Replace content with GPL-2 license text, because that is the overall
      (i.e., strictest) license we have to deal with in nx-libs.
  * Add 9900-dxpc-license-history.full+lite.patch. Document license history of
    DXPC (where nxcomp got forked from).
    Backported from Arctica GH 3.6.x branch.
  * nxcomp/README.on-retroactive-DXPC-license: Some layout and
    interpunctuation fixes.
    Backported from Arctica GH 3.6.x branch.
    Affects:
    - 9900-dxpc-license-history.full+lite.patch

  [ Nito Martinez ]
  * nxcomp: fix DEBUG, TEST, DUMP, FLUSH, TOKEN, PING, MIXED et al builds.
    Adds:
    - 0992_fix-DEBUG-TEST-DUMP-FLUSH-TOKEN-PING-et-al-builds.full+lite.patch

  [ Vadim Troshchinskiy ]
  * nxcomp: fix "negotiation in stage 10" error.
    v2: backport to nx-libs 3.5.0.x (Mihai Moldovan)
    Adds:
    - 0660_nxcomp_fix-negotiation-in-stage-10-error.full+lite.patch

  [ Emanuele Giaquinta ]
  * nx-X11: Fix alpha premultiplication in XRenderParseColor.
    Fixes: #893.
    v2: backport to nx-libs 3.6.x (Mike Gabriel)
    v3: backport to nx-libs 3.5.0.x (Mihai Moldovan)
    Adds:
    - 0040_nx-X11_Fix-alpha-premultiplication-in-XRenderPa.full.patch

  [ Michael DePaulo ]
  * {nx-X11,nxproxy}: correct manpages: --help -> -help
    xorg-server does not follow the convention of using 2 dashes.
    Note that --help does produce the help output. However, it
    produces this additional output after it:
    Error: Aborting session with 'Unrecognized option: --help'.
    Session: Aborting session at 'Sun Jun 28 01:35:35 2015'.
    Session: Session aborted at 'Sun Jun 28 01:35:35 2015'.
    It also causes a return code of 1 rather than 0.
    Therefore, we should instruct users to call -help instead.

    v2: backport to nx-libs 3.5.0.x (Mihai Moldovan)
    Affects:
    - 0009_nxagent_add-man-page.full.patch
    - 0009_nxproxy_add-man-page.full+lite.patch
    - 0209_x2goagent_add-man-page.full.patch

  [ Ulrich Sibiller ]
  * nx-X11: Bug 51375: Xorg doesn't set status for RRGetOutputInfo
    Backported from Arctica GH 3.6.x branch.
    v2: backport to nx-libs 3.6.x (Ulrich Sibiller)
    v3: backport to nx-libs 3.5.0.x (Mihai Moldovan)
    Adds:
    - 1250_nx-X11_Bug-51375-Xorg-doesn_t-set-status-for-RR.full.patch
  * nx-X11: Drop a reference to user mode after create
    Backported from Arctica GH 3.6.x branch.
    v2: backport to nx-libs 3.6.x (Ulrich Sibiller)
    v3: backport to nx-libs 3.5.0.x (Mihai Moldovan)
    Adds:
    - 1251_nx-X11_Drop-a-reference-to-user-mode-after-crea.full.patch
  * nx-X11: Free randr crtc and output pointer arrays
    Backported from Arctica GH 3.6.x branch.
    v2: backport to nx-libs 3.6.x (Ulrich Sibiller)
    v3: backport to nx-libs 3.5.0.x (Mihai Moldovan)
    Adds:
    - 1252_nx-X11_Free-randr-crtc-and-output-pointer-array.full.patch
  * nx-X11: randr: check for virtual size limits before set crtc
    Backported from Arctica GH 3.6.x branch.
    v2: backport to nx-libs 3.6.x (Ulrich Sibiller)
    v3: backport to nx-libs 3.5.0.x (Mihai Moldovan)
    Adds:
    - 1253_nx-X11_randr-check-for-virtual-size-limits-befo.full.patch
  * nx-X11: randr: fix server crash in RRGetScreenInfo
    Backported from Arctica GH 3.6.x branch.
    v2: backport to nx-libs 3.6.x (Ulrich Sibiller)
    v3: backport to nx-libs 3.5.0.x (Mihai Moldovan)
    Adds:
    - 1254_nx-X11_randr-fix-server-crash-in-RRGetScreenInf.full.patch
  * nx-X11: RRModeCreate: plug memory leak of newModes if AddResource fails
    Backported from Arctica GH 3.6.x branch.
    v2: backport to nx-libs 3.6.x (Ulrich Sibiller)
    v3: backport to nx-libs 3.5.0.x (Mihai Moldovan)
    Adds:
    - 1255_nx-X11_RRModeCreate-plug-memory-leak-of-newMode.full.patch
  * nx-X11: ProcRRGetScreenInfo: swap configTimestamp as well
    Backported from Arctica GH 3.6.x branch.
    v2: backport to nx-libs 3.6.x (Ulrich Sibiller)
    v3: backport to nx-libs 3.5.0.x (Mihai Moldovan)
    Adds:
    - 1256_nx-X11_ProcRRGetScreenInfo-swap-configTimestamp.full.patch
  * nx-X11: randr: Fix REQUEST vs. REQUEST_SIZE_MATCH mismatch
    Backported from Arctica GH 3.6.x branch.
    v2: backport to nx-libs 3.6.x (Ulrich Sibiller)
    v3: backport to nx-libs 3.5.0.x (Mihai Moldovan)
    Adds:
    - 1257_nx-X11_randr-Fix-REQUEST-vs-REQUEST_SIZE_MATCH-.full.patch
  * nx-X11: randr: Clean up compiler warnings about unused and shadowing
    variables
    Backported from Arctica GH 3.6.x branch.
    v2: backport to nx-libs 3.6.x (Ulrich Sibiller)
    v3: backport to nx-libs 3.5.0.x (Mihai Moldovan)
    Adds:
    - 1258_nx-X11_randr-Clean-up-compiler-warnings-about-u.full.patch
  * nx-X11: Make RANDR 'set' timestamps follow client specified time. Bug 21987.
    Backported from Arctica GH 3.6.x branch.
    v2: backport to nx-libs 3.6.x (Ulrich Sibiller)
    v3: backport to nx-libs 3.5.0.x (Mihai Moldovan)
    Adds:
    - 1259_nx-X11_Make-RANDR-_set_-timestamps-follow-clien.full.patch
  * nx-X11: xserver: Avoid sending uninitialized padding data over the network
    Backported from Arctica GH 3.6.x branch.
    v2: backport to nx-libs 3.6.x (Ulrich Sibiller)
    v3: backport to nx-libs 3.5.0.x (Mihai Moldovan)
    Adds:
    - 1260_nx-X11_xserver-Avoid-sending-uninitialized-padd.full.patch

 -- X2Go Release Manager <git-admin@x2go.org>  Sat, 04 Jul 2015 04:44:00 +0200

nx-libs (2:3.5.0.31-0x2go1) unstable; urgency=low

  [ Clemens Lang ]
  * Use path discovery for finding makedepend. Remove old cruft. Adds:
    - 0070_nxcomp_use-MAKEDEPEND-in-path.full+lite.patch
    - 0071_nxcompext_use-MAKEDEPEND-in-path.full+lite.patch
    - 0072_nxcompshad_use-MAKEDEPEND-in-path.full+lite.patch
    - 0073_nxproxy_use-MAKEDEPEND-in-path.full+lite.patch
  * Fix dynamic library linking on OS X. Use -dynamiclib instead of -bundle.
    Adds:
    - 0074_nxcomp_use-dynamiclib-flag-on-OS-X.full+lite.patch
    - 0075_nxcompshad_use-dynamiclib-flag-on-OS-X.full+lite.patch
  * Use the correct library naming scheme on OS X. It differs from other
    UNIX-based systems.
    Adds:
    - 0410_nxcomp_use-correct-library-naming-scheme-on-OS-X.full+lite.patch
    - 0610_nxcompext_use-correct-library-naming-scheme-on-OS-X.full+lite.patch
    - 0611_nxcompshad_use-correct-library-naming-scheme-on-OS-X.full+lite.patch

  [ Mihai Moldovan ]
  * nx{comp{,ext,shad},proxy}: try really hard to find makedepend. Do not fail
    if it is not available.
  * Rename:
    - 0070_nxcomp_use-MAKEDEPEND-in-path.full+lite.patch =>
      0410_nxcomp_use-MAKEDEPEND-in-path.full+lite.patch
    - 0071_nxcompext_use-MAKEDEPEND-in-path.full+lite.patch =>
      0610_nxcompext_use-MAKEDEPEND-in-path.full+lite.patch
    - 0072_nxcompshad_use-MAKEDEPEND-in-path.full+lite.patch =>
      0611_nxcompshad_use-MAKEDEPEND-in-path.full+lite.patch
    - 0073_nxproxy_use-MAKEDEPEND-in-path.full+lite.patch =>
      0612_nxproxy_use-MAKEDEPEND-in-path.full+lite.patch
    - 0074_nxcomp_use-dynamiclib-flag-on-OS-X.full+lite.patch =>
      0613_nxcomp_use-dynamiclib-flag-on-OS-X.full+lite.patch
    - 0075_nxcompshad_use-dynamiclib-flag-on-OS-X.full+lite.patch =>
      0614_nxcompshad_use-dynamiclib-flag-on-OS-X.full+lite.patch
    - 0610_nxcompext_use-correct-library-naming-scheme-on-OS-X.full+lite.patch
      =>
      0620_nxcompext_use-correct-library-naming-scheme-on-OS-X.full+lite.patch
    - 0611_nxcompshad_use-correct-library-naming-scheme-on-OS-X.full+lite.patch
      =>
      0621_nxcompshad_use-correct-library-naming-scheme-on-OS-X.full+lite.patch
  * nx-libs.spec:
    - Versioned libXcomp* should obsolete unversioned libXcomp*, not
      libNX_Xcomp*.
    - Add overlooked Obsolete: statement to libNX_Xfixes3.
  * Mid-release fixup:
    - Rename *nxcomp{ext,shad}*.full+lite* to *nxcomp{ext,shad}*.full.

 -- X2Go Release Manager <git-admin@x2go.org>  Tue, 17 Mar 2015 18:48:06 +0100

nx-libs (2:3.5.0.30-0x2go1) unstable; urgency=low

  [ Mike Gabriel ]
  * Version bump release of nx-libs to assure a working
    upgrade path on Ubuntu (where the build daemons strip-off
    the "-0x2goX" revision suffix from the package version.

  [ X2Go Release Manager ]
  * debian/roll-tarball.sh:
    + Only clean up nx-X11 source tree if it is there (i.e., skip that
      for the nx-libs-lite tarball generation).

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Sat, 14 Mar 2015 14:37:58 +0100

nx-libs (2:3.5.0.29-0x2go2) unstable; urgency=medium

  [ Mike Gabriel ]
  * Update 0320_nxagent_configurable-keystrokes.full.patch. Fix patch header
    referring to keystrokes.cfg (plural), not keystroke.cfg.
  * Allow sysadmins to manipulate nxagent's / x2goagent's rgb file by placing
    it into /etc/nxagent or /etc/x2go.
  * Provide support for separate .keyboard files for nxagent/x2goagent.
  * Modify 0101_nxagent_set-rgb-path.full.patch. Allow configurable rgb files.
  * Extend 0999_nxagent_unbrand-nxagent-brand-x2goagent.full.patch. Let rgb
    file shipped with x2goagent supersede rgb file shipped with nxagent.
    FIXME: a better approach would be to decide at runtime if to use
    /etc/x2go/rgb or /etc/nxagent/rgb.
  * Extend 0999_nxagent_unbrand-nxagent-brand-x2goagent.full.patch. Allow
    separate .keyboard files for x2goagent and nxagent.
  * Update 0600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch. Don't
    patch files that get removed during code reduction.
  * Add 0991_fix-hr-typos.full+lite.patch and 0991_fix-hr-typos.full.patch.
    Fix several typos in upstream code detected by lintian.
  * Makefile.nx-libs: Don't allow symlinks to point into buildroot.
  * Makefile.nx-libs: Install man pages via main Makefile.
  * Add Description: and Author: fields to various patch headers.
  * Makefile.nx-libs: Run make install for nxproxy first, then create the
    wrapper script.
  * Make install-lite rule in Makefile.nx-libs more predictable and not
    rely on nxproxy/Makefile.in.
  * Makefile.nx-libs: Fix uninstall-lite rule. The nxproxy and nxcomp
    uninstallation has to be in uninstall-lite, not in uninstall-full.
  * Update 1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch.
    Fix broken comment paragraph, whitespace fix.

  * NX code reduction efforts (from 93Mb to 41Mb):
    - Drop more unused code in nx-X11/programs/Xserver/hw/. Do this in
      roll-tarball.sh and in debian/rules alike.
    - Stop shipping unused / very old xterm code.
    - Drop nx-X11/programs/Xserver/hw/xfree86 except of four files symlinked
      to other locations in the source tree at build time.
    - More source tree size reduction by analyzing what exactly of the Mesa
      source code in nx-X11/extras/ is used and what not.
    - Drop more unused folders from tarball release / before .deb package build:
      .  nx-X11/programs/Xserver/miext/shadow/
      .  nx-X11/programs/Xserver/XpConfig/
      .  nx-X11/programs/Xserver/Xprint/
    - Makefile.nx-libs: Don't install Mesa header files into DESTDIR anymore.
    - Unify source tree reduction (debian/rules vs. roll-tarball.sh) via file/
      folder lists in text files named debian/CODE-REDUCTION_*.
    - Update 0991_fix-hr-typos.full.patch. Don't patch files that get removed by
      the NX code reduction effort.
    - Drop 0604_nx-X11_recent-freetype-API.full.patch. Not used in current build
      process.
    - Update 0600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch. Don't
      patch files matter to the NX code reduction efforts.
    - Update 0031_nx-X11_parallel-make.full.patch. Don't patch .original files
      in NX code tree.
    - Drop patches: 0017_nx-X11_update-autotools-helper-files.full.patch,
      0018_nx-X11_update-libtool-ltmain-script.full.patch,
      0019_nx-X11_expat-build-against-system-libxmltok.full.patch. They patch
      files that are not used at build time.

  * Patch system:
    - Prepend a "0" to every patch file name in debian/patches/. The patch
      order is now given by a 4 digit ID. Adapt only this changelog stanza to
      this modification.

  * Debian/Ubuntu packaging:
    + Fully rework the way nx-libs gets packaged for Debian/Ubuntu.
    + Split up libnx-x11 into individual packages.
    + Provide dbg:packages for each bin:package containing binaries.
    + Use Makefile logic to install files into DESTDIR.
    + Provide dev:packages for each lib:package individually.
    + Provide nx-x11proto-*-dev packages for all libnx-* libraries.
    + Install _all_ library files (*.so*) to /usr/lib/<triplet>/, so
      no extra settings of LD_LIBRARY_PATH is necessary.
    + Add Multi-Arch support for Debian based distro versions that
      support Multi-Arch.
    + Support hardened builds for nxcomp* libraries.
    + Support hardened builds for nxagent and libNX_*.so files.
    + Add debian/*.symbols files for shared nx-X11 libraries.
    + Support .symbols for 64bit and 32bit alike.
    + Provide CDBS-generated debian/copyright.in file.

  * debian/rules:
    + Backup nxcomp/VERSION file from NoMachine before replacing it with
      a symlink to debian/VERSION. Recreate the original file when cleaning
      up.
    + Fix removal of unused code (that part of the code that we know of so
      far). (The debian/rules file is a Makefile and Makefiles don't understand
      shell globbing with curly braces).
    + Correctly link config files (etc/rgb, etc/nxagent.keyboard,
      etc/x2goagent.keyboard) before dh_auto_build.
    + Add to B-D: expat.
    + Install upstream ChangeLogs into bin:packages.
    + Remove upstream nx-libs ChangeLog during override_dh_clean.
    + Use proper quoting on build flag vars (they may contain spaces).

  * nx-libs.spec:
    + The gpg-offline bin:package is not available in our SLE repo. We can do
      without.
    + Update .spec file to meet changes in tarball size reduction and
      restructuring.
    + Use SONAME based library package naming scheme.
    + Mention NX technology in every package description.
    + Install man pages into bin:packages.
    + Make libNX_X11-6 and libXinerama1 compliant to Shared Library Policy.
    + Add Obsoletes: fields to all shared libs for marking the non-versioned
      library package (names) as obsolete.
    + Don't depend on nx-libs base package with fixed version.
    + Don't fail if removing *.a files fails due to the files being non-present.
    + Set PREFIX=%{_prefix} USRLIBDIR=%{_libdir} SHLIBDIR=%{_libdir} at build
      time.
    + Assure that BuildRoot: is set.
    + On SLE 11.x: libX* packages are prefixed with "xorg-x11-".
    + Install "%{_libdir}/nx/bin" into nxproxy package.

  * debian/roll-tarball.sh:
    + Install etc/ files into etc/ subfolder (rgb, nxagent.keyboard,
      x2goagent.keyboard).

  [ Horst Schirmeier ]
  * Update 0320_nxagent_configurable-keystrokes.full.patch. Fix a typo that
    prevented the /etc/nxagent/keystrokes.cfg file from being parsed. (Fixes:
    #741).
  * Add 0321_nxagent_x2go-specific-keystroke-config.full.patch. If nxagent is
    launched as x2goagent, use X2Go-specific paths for the keystrokes.cfg file.
    (Fixes: #744).

  [ Michael DePaulo ]
  * Security fixes:
    - Rebase loads of X.Org patches (mainly from RHEL-5) against NX. If not
      all patches from a CVE patch series appear here, then it means that
      the affected file/code is not used in NX at build time.

    - X.Org CVE-2011-2895:
        1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-lib-X.patch
    - X.Org CVE-2011-4028:
        1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.-ups.patch
    - X.Org CVE-2013-4396:
        1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageText-C.patch
    - X.Org CVE-2013-6462:
        1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-buffe.patch
    - X.Org CVE-2014-0209:
        1005-CVE-2014-0209-integer-overflow-of-realloc-size-in-Fo.patch
        1006-CVE-2014-0209-integer-overflow-of-realloc-size-in-le.patch
    - X.Org CVE-2014-0210:
        1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch
        1009-CVE-2014-0210-unvalidated-lengths-when-reading-repli.patch
        1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch
        1014-CVE-2014-0210-unvalidated-length-fields-in-fs_read_e.patch
        1015-CVE-2014-0210-unvalidated-length-fields-in-fs_read_g.patch
        1016-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch
        1017-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch
    - X.Org CVE-2014-0211:
        1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-_fs_s.patch
        1012-CVE-2014-0211-integer-overflow-in-fs_read_extent_inf.patch
        1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyphs-fr.patch
        1018-unchecked-malloc-may-allow-unauthed-client-to-crash-.patch
    - X.Org CVE-2014-8092:
        1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8092-1.patch
        1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch
        1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8092-3.patch
        1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-2014-.patch
    - X.Org CVE-2014-8097:
        1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls-CVE-.patch
    - X.Org CVE-2014-8095:
        1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-2014-.patch
    - X.Org CVE-2014-8096:
        1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDList-C.patch
    - X.Org CVE-2014-8099:
        1026-Xv-unvalidated-lengths-in-XVideo-extension-swapped-p.patch
    - X.Org CVE-2014-8100:
        1027-render-check-request-size-before-reading-it-CVE-2014.patch
        1028-render-unvalidated-lengths-in-Render-extn.-swapped-p.patch
    - X.Org CVE-2014-8102:
        1029-xfixes-unvalidated-length-in-SProcXFixesSelectSelect.patch
    - X.Org CVE-2014-8101:
        1030-randr-unvalidated-lengths-in-RandR-extension-swapped.patch
    - X.Org CVE-2014-8093:
        1031-glx-Be-more-paranoid-about-variable-length-requests-.patch
        1032-glx-Be-more-strict-about-rejecting-invalid-image-siz.patch
        1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer-__GL.patch
        1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-v4.patch
        1036-glx-Integer-overflow-protection-for-non-generated-re.patch
    - X.Org CVE-2014-8098:
        1035-glx-Length-checking-for-GLXRender-requests-v2-CVE-20.patch
        1037-glx-Top-level-length-checking-for-swapped-VendorPriv.patch
        1038-glx-Length-checking-for-non-generated-single-request.patch
        1039-glx-Length-checking-for-RenderLarge-requests-v2-CVE-.patch
        1040-glx-Pass-remaining-request-length-into-varsize-v2-CV.patch
    - X.org CVE-2015-0255
        1104-xkb-Check-strings-length-against-request-size.patch

    - Security fixes with no assigned CVE:
        1008-Don-t-crash-when-we-receive-an-FS_Error-from-the-fon.patch

    - Rebase the following patches that are prerequisites for the
      CVE-2015-0255 patch:
        1101-Coverity-844-845-846-Fix-memory-leaks.patch
        1102-include-introduce-byte-counting-functions.patch
        1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input-buff.patch

    - Fix FTBFS due to the nxproxy executable already existing under
      /usr/lib/nx/bin/nx/

  [ Mihai Moldovan ]
  * Change string "X2go" to "X2Go" where appropriate.
  * CVE security review:
    - Update 1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch.
      Use xfree() instead of free() in nx-libs.
    - Update 1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch.
      Apply correctly on nx-libs 3.6.x.
    - Update 1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch.
      Human-readable version of "1 MB".
    - Add 1041-nx-X11-lib-font-fc-fserve.c-initialize-remaining-buf.patch.
      Initialize remaining bufleft variables (nx-X11/lib/font/fc/fserve.c).
    - Add 1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch.
      Do proper input validation to fix for CVE-2011-2895.

 -- X2Go Release Manager <git-admin@x2go.org>  Fri, 13 Mar 2015 15:50:00 +0100

nx-libs (2:3.5.0.28-0x2go1) unstable; urgency=medium

  [ Mike Gabriel ]
  * Provide COPYING file in tarball. Update debian/copyright.
  * Add 025_nxcomp-fix-ftbfs-against-jpeg9a.full+lite.patch. Fix FTBFS when
    built against libjpeg9a. Thanks to Gabriel Marcano for sending this in.
    (Fixes: #578).
  * Update 027_nxcomp_abstract-X11-socket.full+lite: Add patch header
    (Description: and Author: field).
  * Add 607_nxcomp_macosx-X11-launcher-in-private-tmp.full+lite.patch. Fix check
    for launchd socket path in $DISPLAY on recent Mac OS X systems.
  * Rename 605_nxcomp_Types.h-dont-use-STL-internals-on-libc++.full.patch to
    605_nxcomp_Types.h-dont-use-STL-internals-on-libc++.full+lite.patch. It is
    an nxcomp patch that needs to be applied in the nx-libs-lite _and_ the
    nx-libs-full tarball release.
  * debian/libnx-x11.postinst:
    + Don't use dpkg-architecture (bin:package dpkg-dev) in postinst script.
      Instead prep a libnx-x11.postinst script at build time. (Fixes:
      #621).
  * debian/rules:
    + No such option for dh_auto_build: --with quilt."
  * nx-libs.spec:
    + Adapt installation of debian/VERSION as VERSION.x2goagent and
      nxcomp/VERSION to latest changes introduced by
      400_nxcomp-version.full+lite.patch.
    + Additionally adapt to building on openSUSE/SLES.
    + SUSE hack for linking to files in libX11-6 and libXext6.
    + Make sure all package directories are owned by one of the
      built bin:packages.
    + Fix Xinerama symlink installation into RPM bin:package
      libNX_Xinerama. (Fixes: #269).
    + Header files need not be removed anymore. They don't get installed via
      Makefile.nx-libs anymore.

  [ Nito Martinez ]
  * Add 400_nxcomp-version.full+lite.patch. Allow 4-digit version comparison
    during NX session handshake. (Fixes: #610).

  [ Ulrich Sibiller ]
  * Add 207_nxagent_fix-xfixes-selection.full.patch. Fix selection handling
    when XFIXES is enabled. (Fixes: #585).

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Thu, 13 Nov 2014 21:39:24 +0100

nx-libs (2:3.5.0.27-0x2go1) unstable; urgency=medium

  * Split up patch 210 (for correct creation nx-libs, nx-libs-lite tarballs):
    + 210_nxagent_save_session_state.full.patch
    + 210_nxcomp_save_session_state.full+lite.patch

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Mon, 30 Jun 2014 14:53:27 +0200

nx-libs (2:3.5.0.26-0x2go1) unstable; urgency=medium

  * Fix patch names:
    + 212_nxcomp_build-on-Android.patch ->
        212_nxcomp_build-on-Android.full+lite.patch
    + 302_nx-X11_xkbbasedir-detection.patch ->
        302_nx-X11_xkbbasedir-detection.full.patch

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Mon, 30 Jun 2014 14:42:51 +0200

nx-libs (2:3.5.0.25-0x2go1) unstable; urgency=low

  [ Mihai Moldovan ]
  * Add 029_nxcomp_ppc64.full+lite.patch. Fix sockaddr handling on
    Big Endian systems (like PPC64). (Fixes: #515).
  * Add 057_nx-X11_sanitize-eventmasks.full.patch. Fix
    failures in session windows coming up on Big Endian systems
    like PPC64. (Fixes: #516).
  * Improve 105_nxagent_export-remote-keyboard-config.full.patch.
    Don't print out nonsensical information, if there really was
    no error when creating the keyboard file or the other way around.
    Also add the reason when failing to create the keyboard file.
    Only print an error message if SessionPath *really* is not defined.
  * Improve 028_nx-X11_abstract-kernel-sockets.full.patch. Make it more
    Big Endian robust by assigning correct types for socklen_t objects.
  * Add 990_fix-DEBUG-and-TEST-builds.full.patch. Fix debug builds (e.g.
    when globally setting -DDEBUG and -DTEST at build time).

  [ Nito Martínez ]
  * Add 212_nxcomp_build-on-Android.patch. Fix FTBFS of nxproxy/nxcomp when
    build against the Android system. (Fixes: #339).

  [ Oleksandr Shneyder ]
  * Add 210_nxagent_nxcomp_save_session_state.full+lite.patch. Save session
    state in path specified by "state" option in agent options file. If
    option is omitted, session state will not be saved. Session states are:
    STARTING, RUNNING, SUSPENDING, SUSPENDED, RESUMING, TERMINATING,
    TERMINATED.
  * Add 211_nxcomp_set_default_options.full+lite.patch. Set default arguments
    for options 'link' and 'pack' to avoid session damage by resuming with
    incorrect options file.

  [ Mike Gabriel ]
  * Add 606_nx-X11_build-on-aarch64.full.patch. Build on aarch64
    architectures. (Fixes: #490).
  * Add 027_nxcomp_abstract-X11-socket.full+lite.patch. In proxy mode "server"
    let NX proxy attempt connecting to the abstract X11 socket first, and only
    fallback to the file system socket, if the abstract socket is not
    available. (Fixes: #505).
  * Add 028_nx-X11_abstract-kernel-sockets.full.patch. Provide abstract local
    socket support for Linux based systems. This patch pulls in abstract
    socket relevant code from xtrans 1.2.7. (Fixes: #504).
  * Add 302_nx-X11_xkbbasedir-detection.patch. For detecting XkbBaseDir
    test for xkb/rules/base instead of testing for deprecated file
    xkb/keymap.dir. (Fixes: #40).
  * Add 206_nxagent_clipboard-as-nxoption.full.patch. Make the clipboard
    option configurable in nxagent via NX options as addition to the
    command line parameter -clipboard. Note that the command line
    parameter overrides the clipboard NX option. Possible values are
    both or 1, client, server, none or 0.

  * Update patches, to make them apply cleanly after above changes:
    + 220_nxproxy-bind-loopback-only.full+lite.patch
    + 016_nx-X11_install-location.debian.patch
    + 056_nx-X11-Werror-format-security.full.patch
    + 108_nxagent_wine-close-delay.full.patch
    + 300_nxagent_set-wm-class.full.patch
    + 320_nxagent_configurable-keystrokes.full.patch

  * Rename patches to match our naming scheme:
    + 008_nxcomp_sa-restorer.full+lite.patch
    + 009_nxagent_add-man-page.full.patch
    + 009_nxproxy_add-man-page.full+lite.patch
    + 056_nx-X11_Werror-format-security.full.patch
    + 209_x2goagent_add-man-page.full.patch
    + 220_nxproxy_bind-loopback-only.full+lite.patch

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Mon, 30 Jun 2014 14:05:46 +0200

nx-libs (2:3.5.0.24-0x2go1) unstable; urgency=low

  * Clean up debian/patches/series: Remove commented out patches.
  * Make sure, patch 056_nx-X11-Werror-format-security.full.patch gets
    included into rolled tarball (by renaming *.patch to *.full.patch).
  * Update 320_nxagent_configurable-keystrokes.full.patch: The keystrokes config
    file's default name now is keystrokes.cfg (plural).
  * Configurable keystrokes: Don't ignore first XML element in keystrokes.cfg
    anymore. (Fixes: #488).
  * debian/control:
    + Fix: nx-libs source: not-binnmuable-all-depends-any x2goagent -> nxagent.

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Wed, 07 May 2014 09:55:48 +0200

nx-libs (2:3.5.0.23-0x2go1) unstable; urgency=low

  [ Orion Poplawski ]
  * Add patch: 054_nx-X11_ppc64-ftbfs.full.patch. Fix FTBFS on ppc64
    architecture. (Fixes: #411).
  * Add patch: 055_nx-X11_imake-Werror-format-security.full.patch. Fix FTBFS
    of imake on current Fedora rawhide (21) which uses the compiler option
    -Werror=format-security for all builds. (Fixes: #412).
  * Add patch: 056_nx-X11-Werror-format-security.patch. Fix more
    -Werror=format-security errors that only show up on ARM builds. (Fixes:
    #423).
  * nx-libs.spec:
    - Sync nx-libs.spec in Fedora with upstream's nx-libs.spec file. (Fixes:
      #393).

  [ Mike Gabriel ]
  * debian/control:
    + Build our imake against x11proto-core-dev headers.
  * nx-libs.spec:
    + Build our imake against xorg-x11-proto-devel.

  [ Oleksandr Shneyder ]
  * Add patch: 205_nxagent_refresh-adsl.full.patch. Fix refresh error on RDP
    connections to Windows 2012 if speed=ADSL.

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Tue, 06 May 2014 18:05:47 +0200

nx-libs (2:3.5.0.22-0x2go2) unstable; urgency=low

  * Update version in VERSION.x2goagent.

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Sat, 04 Jan 2014 22:01:40 +0100

nx-libs (2:3.5.0.22-0x2go1) unstable; urgency=low

  [ Mirraz Mirraz ]
  * Add patch: 603_nx-X11_compilation_warnings.full.patch. Fix 3 evident bugs:
    one implicit function declaration issue and two array index out of bounds
    issues. (Fixes: #314).

  [ Mike Gabriel ]
  * Add patch 604_nx-X11_recent-freetype-API.full.patch. Fix FTBFS against
    recent (>= 2.5.0) libfreetype6 API.
  * Refresh patch: 600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch.
  * Improve patch:
    601_nx-X11_build-option-changes-to-not-use-bundled-libraries.full.patch.
    Improvements taken from the current Fedora package. Thanks to Orion
    Paplowski!!! Also adapt roll-tarball.sh do dropping more bundled
    libraries.
  * Rename patch: 302_nxagent_configurable-keystrokes.full.patch to
    320_nxagent_configurable-keystrokes.full.patch.
  * debian/source/format:
    + Switch to format 1.0.
  * debian/control:
    + Add libfreetype6-dev to Build-Depends: field.
    + Drop symlinking libNX_xrandr for setting a custom LD_LIBRARY_PATH. Not in
      use anymore and not recommended at all to have that.
    + Make sure all nx-libs components depend on the very same version.
  * debian/rules:
    + Remove bundled libraries from source tree before building the package.
  * nx-libs.spec:
    + Ship nx-libs.spec (RPM package definitions) in upstream project. (Thanks
      to the Fedora package maintainers). File differs from the Fedora file
      already.
    + Clear (Fedora package) changelog.
    + Use local tarball, don't expect  ,,-full'' in tarball name.
    + The RPM macro for the linker flags does not exist on EPEL. Thus, hardcode
      __global_ldflags macro for EPEL builds.
    + Enable Xinerama support for RPM packages. (Fixes: #370).

  [ Clemens Lang ]
  * Add patch 605_nxcomp_Types.h-dont-use-STL-internals-on-libc++.full.patch. Fix
    FTBFS of nx-libs-lite on Mac OS X Mavericks. (Fixes: #337).

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Sat, 04 Jan 2014 21:39:17 +0100

nx-libs (2:3.5.0.21-0) unstable; urgency=low

  [ Mike Gabriel ]
  * Provide a default keystrokes.cfg in /etc/nx (for nxagent) and /etc/x2go
    (for x2goagent). (Fixes: #199).
  * Use a keystrokes.cfg that reflects the normally hard-coded defaults of
    a vanilla nxagent. (Fixes: #223).
  * Set NXAGENT_KEYSTROKEFILE to /etc/x2go/keystrokes.cfg for wrapper x2goagent.
  * For vanilla nxagent move keystrokes.cfg from /etc/nx to /etc/nxagent.
  * Tarball roller script:
    + Only install keystrokes.cfg when in full mode.
    + Only install nxproxy wrapper when in lite mode.
  * /debian/control:
    + Add B-Ds: libfontconfig1-dev, libfontenc-dev.
  * /debian/nx-libs-dev.install:
    + Remove unrelated files from -dev package.
  * Fix keystrokes.cfg, use Ctrl+Alt+<key> instead of just Ctrl+<key>. (Adds to
    fixing #223).

  [ Orion Poplawski ]
  * Change build options so that bundled libraries are not used anymore at
    build time. Remove bundled libraries from rolled tarballs, as well. (Fixes:
    #238).
  * Add patch: 602_nx-X11_initgroups.full.patch. Fix calling setuid and setgid
    without setgroups or initgroups. There is a high probability this means it
    didn't relinquish all groups, and this would be a potential security issue
    to be fixed. Seek POS36-C on the web for details about the problem. (Fixes:
    #293).

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Fri, 30 Aug 2013 16:18:04 +0200

nx-libs (2:3.5.0.20-0) unstable; urgency=low

  * Fix faulty symlink path. Make sure that x2goagent symlink
    does not point to absolute path somewhere within the build
    environment. (Fixes: #156).

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Thu, 28 Mar 2013 20:43:31 +0100

nx-libs (2:3.5.0.19-0) unstable; urgency=low

  * Add Jan's reasoning for using string_rep() instead of bash based
    string substitutions as comment to /debian/Makefile.replaces.sh.
  * Fix FTBFS for .deb packages after including fix for #145.

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Thu, 28 Mar 2013 08:59:01 +0100

nx-libs (2:3.5.0.18-0) unstable; urgency=low

  [ Mike Gabriel ]
  * Remove duplicate install of nxproxy from main Makefile. Spotted by Jan
    Engelhard.
  * Work-in patch from Jan Engehardt for working around different
    improper bash implementations of string-in-string replacing. (Fixes:
    #145).
  * Main Makefile: Use absolute symlink when linking from $(X2GOLIBDIR)
    into $(NXLIBDIR) (i.e. linking x2goagent -> nxagent). (Fixes: #143).

  [ Orion Poplawski ]
  * Fix wrong symlink direction of libNX_* files. (Fixes: #107).
  * Avoid building of libxcomp1 (which actually is identical to libxcomp3,
    just with a wrong name). (Fixes: #104).

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Fri, 22 Mar 2013 23:39:39 +0100

nx-libs (2:3.5.0.17-0) unstable; urgency=low

  [ Jan Engelhardt ]
  * Fix /bin/Makefile. Add $(DESTDIR) to every install path.

  [ Alexander Wuerstlein ]
  * Add patch: 302_nxagent_configurable-keystrokes.full.patch, replaces the
    hardcoded nxagent keybindings by a configurable table of keybindings.
    (Fixes: #74).
  * Follow-up commit for 302_nxagent_configurable-keystrokes.full.patch, fixes
    FTBFS problem with the first version of that patch.

  [ Mike Gabriel ]
  * Add README.keystrokes to doc section of bin:package nxagent.
  * Add libxml2-dev to build dependencies.
  * Add pkg-config to build dependencies.
  * Continue Reinhard's work on top-level install/uninstall. Esp.
    integrate debian/post-nx-build.sh into main Makefile. Make
    value of CONFIGURE variable traversable through the Makefile tree.

  [ Orion Poplawski ]
  * Add patches: 026_nxcomp*_honour-optflags.full*.patch. (Fixes: #84).

  [ Reinhard Tartler ]
  * Install debug symbols for all packages in a new binary package
    'nx-x11-dbg'.
  * Drop patch: 025_nxproxy_no-configure-file.full+lite.patch, instead remove
    file nxproxy/configure from the source tree.
  * Add roll-tarball.sh: replaces nx-tarballrelease script that could be
    found in nx-buildscripts branch of nx-libs.git. Use this script to
    create tarballs of nx-libs and nx-libs-lite.
  * Fix installation of libxcompext, thanks to Orion Paplowski for spotting
    this.
  * /debian/rules:
    + Integrate code from /debian/pre-build-nx.sh and drop the named file.
    + Disable parallel build of .deb packages.
  * /debian/control:
    + Rely on shlibs instead of hardcoded dependencies.
    + Drop xbitmaps from Build-Depends.
    + Move xfonts-base over to Recommends.
  * Update 031_nx-X11_parallel-make.full.patch. Add an explicit dependency
    from the NX libX11.so to the nxcomp libraries. Unbreaks parallel builds.
    (Fixes: #87).
  * Fix and greatly enhance the top-level install and uninstall target for
    plain makefile installs.

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Fri, 04 Jan 2013 13:23:57 +0100

nx-libs (2:3.5.0.16-0) unstable; urgency=low

  * Fix installation of header files in Debian package.
  * Fix patch file names concerning component nx-X11.
  * Modify patch: 032_no-x11r6.full.patch. Install nx-X11 to /usr/local/lib/nx.
  * Add patch: 032_no-x11r6.debian.patch. Use /usr/lib/nx for nx-X11 on Debian.
  * Drop patch 032, fix other patches so that installation via make install
    installs NX components to /usr/local/lib/nx and /usr/local/include/nx.
  * Add patches: 024_fix-make-clean.full.patch,
    024_fix-make-clean.full+lite.patch. Fix clean-up of build tree after
    make build has run.
  * Add patch: 025_nxproxy_no-configure-file.full+lite.patch. Remove
    unneeded build file from NoMachine's nxproxy sources.
  * Modify patch: 001_add-main-makefile.full+lite.patch. Install nx* and
    x2goagent wrapper scripts during make install.
  * Fix wrapper scripts: make sure all NX executables can be launched
    if NX gets installed via the tarball installation method.
  * Modify patch: 001_add-main-makefile.full+lite.patch. Add uninstall
    routine.
  * Dropping empty override rules for quilt patch from /debian/rules.
  * Bump Debian Standards to 3.9.3 (no changes needed). Update Home page and
    Vcs information.

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Wed, 07 Nov 2012 21:07:49 +0100

nx-libs (2:3.5.0.15-0) unstable; urgency=low

  [ Mike Gabriel ]
  * Improve 020_add-nxagent-wrapper.full.patch: Properly set NX_TEMP, make
    sure nxagent launches even with pam_tmpdir.so being in use.
  * Improve 023_add-x2goagent-wrapper.full.patch: Properly set NX_TEMP, make
    sure x2goagent launches even with pam_tmpdir.so being in use.
  * Add VERSION.x2goagent to package x2goagent package so x2goversion command
    lists up x2goagent in the list of X2Go server-side packages.
  * Refresh patch: 200_nxagent_check-binary-x2go-flavour.full.patch.
  * Make sure the NX_TEMP envvar gets set in all wrapper script for all nx*
    execubles.
  * Link libNX_Xrandr to a separate location where we can provide it as libXrandr.
  * /debian/control:
    + Maintainer change in package: X2Go Developers <x2go-dev@lists.berlios.de>.
    + Priority: optional.
  * Add patch: 220_nxproxy-bind-loopback-only.full+lite.patch, adds loopback
    option to nxproxy options and forces nxproxy to bind to loopback devices
    only.

  [ Oleksandr Shneyder ]
  * Add patch: 204-nxagent_repaint-solidpict.full.patch. Fixes repainting of
    SolidFill pictures by nxagent/x2goagent on reconnects. (Fixes: #16).

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Fri, 21 Sep 2012 10:02:16 +0200

nx-libs (2:3.5.0.14-0) unstable; urgency=low

  [ Mike Gabriel ]
  * New upstream release of nxagent (3.5.0-9).
  * Adapt patch series (all hunks succeeded automatically).
  * Drop patch: 120_nxagent_libcairo-null-source-drawables.full.patch, the issue
    has been fixed by NoMachine (TR05J02703).
  * Drop patch: 109_nxagent_locale-utf8-compound-text.patch, the patch causes
    Qt applications to be rendered without window decorations when running in
    rootless window mode.

  [ Mihai Moldovan ]
  * Add patch: 052_nxcomp_macos10-nxauth-location.full+lite.patch, change
    nxauth search location on Mac OS X to $NX_SYSTEM/nxauth to facilitate
    application bundle building.

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Thu, 28 Jun 2012 14:52:24 +0200

nx-libs (2:3.5.0.13-0) unstable; urgency=low

  [ Mike Gabriel ]
  * Let nxagent Debian package depend on xfonts-base.

  [ Jim Burnes ]
  * Add patch: 120_nxagent_libcairo-null-source-drawables.full.patch, solves
    crashes of GTK applications based on libcairo 1.12.1+.

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Fri, 11 May 2012 23:51:35 +0200

nx-libs (2:3.5.0.12-0) unstable; urgency=low

  [ Mike Gabriel ]
  * Update patch: 001_add-main-makefile.full+lite.patch, adapt patch from
    packaging. Test for Makefiles in subfolders before calling them.
    Fixes build failure during ,,make distclean'' calls.
  * Provide temporary workaround for installation on Debian 64bit with
    multiarch support (via libnx-x11.postinst and .prerm).
  * Re-introduce proper Xinerama support on non-multiarch systems.

  [ Mihai Moldovan ]
  * Add patch: 051_nxcomp_macos105-fdisset.full+lite.patch, work around
    issue in Mac OS X 10.5 SDK. Pass address of fd_set structs on the stack
    to the FD_ISSET macro/function, instead of the struct itself.
  * Update patch: 005_nxcomp_gcc43.full+lite.patch, fix faulty path to
    nxcomp/Split.cpp.

  [ Oleksandr Shneyder ]
  * Add patch: 203_nxagent_disable-rootless-exit.full.patch, add command line
    argument "-norootlessexit". Usually, nxagent exits after 30 seconds if
    running in rootless mode and no X-Clients are present. Starting nxagent
    with option "-norootlessexit" will change this behaviour.

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Wed, 07 Mar 2012 20:50:14 +0100

nx-libs (2:3.5.0.11-0) unstable; urgency=low

  [ Mike Gabriel ]
  * Use ,,$(MAKE) -C'' in main Makefile for calling Makefiles in subdirectories,
    make build stanza work for nx-libs-full and nx-libs-lite.
  * Do not install libXinerama directly into /usr/lib/nx. Recommended method is
    installing to /usr/lib/nx/Xinerama, so that you can enable/disable usage of
    the Xinerama extension.
  * Update patch: 001_add-main-makefile.full+lite.patch, use curly braces for
    macros.
  * Enable parallel build for Debian package.
  * Merge honor-ac-dirs.patch from Jan Engelhardt (OpenSUSE) with already
    existing Makefile patches (012_nxcomp..., 013_nxcompext_...,
    014_nxcompshad_...).
  * Rename patches 030_nx-X11_... and 031_nx-X11_..., the tarball roll script
    currently requires ,,full'' or ,,full+lite'' in the file name.
  * Make patch headers DEP5 compliant (030_nx-X11_... and 031_nx-X11_...).
  * Update patch: 001_add-main-makefile.full+lite.patch, fix missing
    $(CONFIGURE) variable.
  * Update patches: 012_nxcomp..., 013_nxcompext_..., 014_nxcompshad_....
    Also make use of $(LIBFULL) in Makefile.in's install and uninstall stanzas.
    Inspired by Jan Engelhardt's so-version.diff patch. However, the version
    name change requested in that patch has been rejected for
    NX (redistributed).
  * Apply patches for the Debian package as the last patches in the series.
  * Fix faulty patch name suffix (has to be .patch, not .diff).
  * Fix Xinerama support in Debian package libnx-x11 when NX gets built with
    patch 600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch. Still on
    the todo list: fix the nx-X11 installation via Makefile.
  * Fine-tune symlinking of libXinerama.

  [ Jan Engelhardt ]
  * Update patch: 001_add-main-makefile.full+lite.patch, allow passing of
    configure args.
  * Add patch: 030_nx-X11_configure-args.diff. Allow passing of configure args.
  * Add patch: 031_nx-X11_parallel-make.diff, enable parallel make.
  * Add patch: 301_nx-X11_use-shared-libs.full.diff, use shared libraries from
    distribution rather then libs included in source tree.
  * Add patch: 032_nx-X11_no-x11r6-project-root. We must not overlap with any
    existing files, therefore, both /usr/X11R6 and /usr are excluded
    possibilities for ProjectRoot. Use %_libexecdir/somename, since that is
    still allowed by FHS.
  * Add patch 600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch, use
    unique library names for nx-X11 based X11 libraries.

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Wed, 22 Feb 2012 14:41:07 +0100

nx-libs (2:3.5.0.10-0) unstable; urgency=low

  * Add patch: 006_nxcomp_libpng15.full+lite.patch, fix build against
    libpng 1.5.x.
  * Reintroduce patch: 008_nxcomp_sa_restorer.full+lite.patch, now in a
    version found on etersoft.ru, fixes build on ia64 architecture.

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Tue, 07 Feb 2012 13:43:50 +0100

nx-libs (2:3.5.0.9-0) unstable; urgency=low

  [ Mike Gabriel ]
  * Providing pending patches in source tree.

  [ Oleksandr Shneyder ]
  * Update patch: 202_nx-x11_enable-xinerama.full.patch, disable Xinerama
    extension if NX_XINERAMA_CONF not exists.

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Wed, 01 Feb 2012 14:39:57 +0100

nx-libs (2:3.5.0.8-0) unstable; urgency=low

  * Reorganize patch names, to reflect patch inclusion into lite+full or
    full-only ,,NX (redistributed)'' tarball.
  * Update patch: 001_add-main-makefile.full+lite.patch, only build, install,
    clean etc. NX subprojects if the folder exists.
  * Package x2goagent is an ,,all'' package, not ,,any''.
  * Add folder /debian/patches-pending-evaluation with two newly discovered
    patches from git.etersoft.ru (AltLinux packaging repository for NX).
  * Fix patch: 109_nxagent_locale-utf8-compound-text.patch, fix crashes
    reported from Stefan Baur. Thanks for reporting and testing!!!

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Sun, 22 Jan 2012 23:36:19 +0100

nx-libs (2:3.5.0.7-0) unstable; urgency=low

  * Drop patch: 011_nxcomp_sa-restorer.patch.

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Mon, 16 Jan 2012 11:28:14 +0100

nx-libs (2:3.5.0.6-0) unstable; urgency=low

  * Add patch: 202_nx-x11_enable-xinerama.patch.
  * Fix lintian issue: missing-separator-between-items for x2goagent package.
    Drop dependency on libnx-x11 as we already depend on nxagent and fix
    description synopsis of x2goagent package.
  * Add patch header/copyright to: 202_nx-x11_enable-xinerama.patch.
  * Silence lintian on debian-revision-should-not-be-zero. As this is no Debian
    packaging repository, but ,,NX (redistributed)'', we will always release
    with rev no. set to ,,0''.
  * Install libXinerama into libnx-x11 package. Header files into
    libnx-x11-dev.

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Fri, 13 Jan 2012 13:21:41 +0100

nx-libs (2:3.5.0.5-0) unstable; urgency=low

  * Fix wrapper script patches for nxagent, x2goagent, nxauth, nxproxy.

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Fri, 13 Jan 2012 00:37:21 +0100

nx-libs (2:3.5.0.4-0) unstable; urgency=low

  * Update/fix patch: 999_nxagent_unbrand-nxagent-brand-x2goagent.patch.

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Thu, 12 Jan 2012 23:04:37 +0100

nx-libs (2:3.5.0.3-0) unstable; urgency=low

  * Rename nxagent-unbrand patch, so that is the last patch to be applied
    (999_<patchname>).
  * Drop NX agent unbrand patch from FreeNX.
  * Add X2Go agent / NX agent flavouring via patch system:
    - 200_nxagent_check-binary-x2go-flavour.patch
    - 201_nxagent_set-x2go-icon-if-x2goagent-flavour.patch
    - 300_nxagent_set-wm-class.patch
    - 999_nxagent_unbrand-nxagent-brand-x2goagent.patch
  * Add patch: 023_add-x2goagent-wrapper.patch.
  * Add patch: 209_x2goagent-add-man-page.patch.
  * Add binary package: x2goagent, includes man page
    patch: 209_x2goagent-add-man-page.patch
  * Modify patch: 101_nxagent_set-rgb-path.patch, add path to RGB file
    if NX (redistributed) is installed via tarball under /usr/local.
  * Provide patches that are tarball / distro aware. Either NX (redistributed)
    has been installed to /usr/local/lib/nx via tarball or it has been
    packaged for a distribution and is installed to /usr/lib/nx. Other
    installation paths are currently not supported.
  * Fix RGB color pallette (gray X2GO logo to be more accurate) for agent
    splash screen.

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Thu, 12 Jan 2012 13:04:03 +0100

nx-libs (2:3.5.0.2-0) unstable; urgency=low

  * Re-add binary wrapper scripts to the patch system as we
    want to provide them in the tarball.
  * Update folder name where applied patches end up in the tarball
    release.

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Tue, 10 Jan 2012 14:38:52 +0100

nx-libs (2:3.5.0.1-0) unstable; urgency=low

  * Increment version to stay in sync with client-only branch.

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Tue, 10 Jan 2012 12:05:46 +0100

nx-libs (2:3.5.0.0-0) unstable; urgency=low

  * New upstream release of nxagent (3.5.0-7).
  * Add lintian-overrides for every package. Override lintian warning:
    possible-new-upstream-release-without-new-version as there will
    be new upstream releases of NX subprojects that will not require
    a version increment of the Debian package.
  * Add individual watch files for NX components in this source package.
  * Change naming scheme of patch files.
  * Add man page for nxagent. Fix lintian warning: binary-without-manpage.
  * Add FreeNX patches for nxagent (some with other names compared to FreeNX):
    - 101_nxagent_set-rgb-path.patch
    - 102_xserver-xext_set-securitypolicy-path.patch
    - 103_nxagent_set-X0-config-path.patch
    - 104_nxagent_enable_debug.patch
    - 105_nxagent_export-remote-keyboard-config.patch
    - 106_nxagent_utf8-copy-clipboard.patch
    - 107_nxagent_clipboard-compound-text+small-bed-sheets.patch
    - 108_nxagent_wine-close-delay.patch
    - 109_nxagent_locale-utf8-compound-text.patch
    - 200_nxagent_unbrand-agent.patch
  * Adapt path names in FreeNX patches to meet requirements for source tree of
    this package.
  * Rework FreeNX patches to be applicable to latest NX sources.
  * Install nxagent.xpm icon to /usr/share/pixmaps.
  * Rename patch: 008_nxproxy_add-nx-proxy-wrapper.patch to
    008_nxproxy_add-nxproxy-wrapper.patch.
  * Add patch from FreeNX patchset:
    110_nxagent_createpixmap-bounds-check.patch.
  * Disable patch: 104_nxagent_enable_debug.patch for now as it let's the build
    fail.
  * Add patch: 017_nx-x11_update-autotools-helper-files.patch.
  * Add README.source file, fixes lintian warning:
    patch-system-but-no-source-readme.
  * Add lintian-override: outdated-autotools-helper-file to
    source.lintian-overrides as we patch-update the outdated helper files before
    building binaries.
  * Add patch: 018_nx-x11_update-libtool-ltmain-script.patch. Silence lintian
    warning ancient-libtool via lintian override as we patch in a new version
    of ltmain.sh by this patch.
  * Update patch: 017_nx-x11_update-autotools-helper-files.patch. Add lintian
    override to source.lintian-overrides: ancient-autotools-helper-file as we
    handle autotools helper file updates via patch system.
  * Add upstream CHANGELOG files to all .deb packages of this source package.
  * Override lintian warnings
    - libnx-x11: postinst-has-useless-call-to-ldconfig
    - libnx-x11: postrm-has-useless-call-to-ldconfig
    as they relate to a bug in debhelper (call of ldconfig although we did not
    touch any directory controlled by /etc/ld.so.conf, amongst others
    see BTS issue #205142).
  * Make sure upstream changelog file names are in lower case.
  * Disable patch: 006_remove-configure-files.patch, remove configure
    files from within /debian/rules.
  * Add patch: 019_nx-x11_expat-build-against-system-libxmltok.patch, fixes
    lintian error: embedded-library: expat. Build-depend on libxmltok1-dev.
  * Fix LD_LIBRARY_PATH export in wrapper scripts/patches.
  * X2Go Packaging Team becomes maintainer, Mike Gabriel + Reinhard Tartler
    become uploaders.
  * Make `breaks-without-version' lintian overrides needless.
  * Break/replace nxlibs and nxlibs-dev (packages provided by
    freenx-team on Launchpad).
  * Set homepage of NoMachine upstream site (using http://www.nomachine.com/sources.php).
  * Packaging Vcs has been relocated to Alioth.
  * Add more upstream source information to README.source.
  * Remove *-dbg packages from /debian/control file.
  * Make package descriptions in /debian/control more explanatory.
  * Remove patch 006_remove-configure-files.patch. Implemented via
    /debian/rules.
  * Remove patches and put as executable scripts into /debian/bin/
    - 005_add-nxagent-wrapper.patch.
    - 008_add-nxproxy-wrapper.patch.
    - 011_add-nxauth-wrapper.patch.
  * Remove patch: 104_nxagent_enable_debug.patch, as it breaks package build.
  * Add patch headers to all patch files, report most patches upstream. Waiting for
    feedback and quotable URLs from NoMachine.
  * Transfer patch: 009_nxproxy_add-man-page.patch into man page file
    in /debian/man.
  * Add patch: 011_nxcomp_sa-restorer.patch.
  * Add/insert patch: 005_nxcomp_gcc43.patch.
  * Fix line hunks: 011_nxcomp_sa-restorer.patch.
  * Call dh_clean again. This got lost somewhere on the way.
  * Remove branding from descriptions in control file.
  * Add patch: 000_add-NX-redistribution-README.patch.
  * Add patches: 009_add-nxagent-man-page.patch, 009_add-nxproxy-man-page.patch.
    Reintroduce man page creation via patch system, so that all man pages
    find their way into the NX-redistribution tarball created from this source
    project.

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Tue, 10 Jan 2012 11:39:17 +0100

nx-libs (2:3.5.0-1) unstable; urgency=low

  * Initial release.
    - nxcomp (3.5.0-2)
    - nxcompext (3.5.0-1)
    - nxcompshad (3.5.0-2)
    - nx-X11 (3.5.0-2)
    - nxagent (3.5.0-5)
    - nxauth (3.5.0-1)
    - nxproxy (3.5.0-1)
  * Use NX adapted LD_LIBRARY_PATH in debian/rules.
  * Add quilt as build dependency.
  * Add main Makefile via patch: 001_add-main-makefile.patch.
  * Add patch: 002_nxcompshad-build-against-nx-x11-only.patch.
  * Add patch: 003_nxcompshad-gcc43.patch.
  * Add patch: 004_nx-x11-fix-nxcompshad-build.patch.
  * Add patch: 005_add-nxagent-wrapper.patch.
  * Fix for lintian issue: missing-build-dependency quilt (>= 0.46-7~).
  * Fix for lintian issue: extended-description-line-too-long (nxagent).
  * Disabling build of *-dbg packages for now...
  * Add patch: 006_remove-configure-files.patch.
  * Add patch: 007_nxcompshad-clean-gch-files.patch.
  * Remove unknown option --with from dh_auto_clean.
  * Add autoconf as build dependency.
  * Add patch: 008_add-nxproxy-wrapper.patch. Build nxproxy package.
  * Add patch: 009_nxproxy-add-man-page.patch.
  * Add nxproxy man page to nxproxy package.
  * Fix of nxproxy build in main Makefile (modifies
    001_add-main-makefile.patch).
  * Add patch: 010_nxauth-fix-binary-name-in-man-page.patch.
  * Add patch: 011_add-nxauth-wrapper.patch.
  * Build nxauth package.
  * Add lintian overrides for libxcomp*: breaks-without-version.
  * Add patches: 012, 013, 014 - Makefile uninstall stanza patches for
    nxcomp, nxcompext, nxcompshad.
  * Add patch: 015_nxproxy-makefile-uninstall.patch.
  * Add install/uninstall stanza to main Makefile (via patch
    001_add-main-makefile.patch).
  * Add patch 016_nx-x11-install.patch, to allow installation of nx-X11 from
    Makefile (via make install).

 -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de>  Wed, 28 Dec 2011 19:05:48 +0100