vcxsrv, branch 1.15.2.5 VcXsrv Windows X Server (X2Go/Arctica Builds) https://cgit.arctica-project.org/vcxsrv/atom?h=1.15.2.5 2015-03-29T13:16:35+00:00 Rename to releasenote_1.15.2.5.x2go+arctica.txt 2015-03-29T13:16:35+00:00 Mike DePaulo mikedep333@gmail.com 2015-03-29T13:16:35+00:00 urn:sha1:6583dd4c2a79752a88b26700570e2d20bff77707 uninstaller: Remove the entire VcXsrv directory 2015-03-29T13:14:08+00:00 Mike DePaulo mikedep333@gmail.com 2015-03-29T13:14:08+00:00 urn:sha1:087e0ed0b4cc4589cf2bd32ea95eea60773bb715 (GitHub Issue #1) add releasenote_1.15.2.5 2015-03-29T12:45:23+00:00 Mike DePaulo mikedep333@gmail.com 2015-03-29T12:45:23+00:00 urn:sha1:926baf45390c2642c80823a4177dcf9d5928deef Update version string: 1.15.2.5 2015-03-29T12:26:37+00:00 Mike DePaulo mikedep333@gmail.com 2015-03-29T12:26:37+00:00 urn:sha1:92a13396b3a92f5cceb3f64a3548fe7b14e39462 Change name to: VcXsrv (X2Go/Arctica Builds) 2015-03-29T12:21:00+00:00 Mike DePaulo mikedep333@gmail.com 2015-03-29T12:21:00+00:00 urn:sha1:ef8a0c7b9f14585586f5a3a6c202b3844a245cc4 Update changelog about openssl update to 1.0.1m 2015-03-28T17:13:43+00:00 Mike DePaulo mikedep333@gmail.com 2015-03-28T14:57:45+00:00 urn:sha1:64eb8ee293191add53a701e27b78460067c03c6c Update openssl to version openssl-1.0.1m 2015-03-28T17:13:13+00:00 Mike DePaulo mikedep333@gmail.com 2015-03-28T13:50:31+00:00 urn:sha1:91e3957fb0e38a5d5649f82e5d9f89dd0e85666f Conflicts: openssl/Makefile openssl/Makefile.bak openssl/crypto/cryptlib.c Update packages.txt about libXfont 1.4.9 2015-03-28T17:06:49+00:00 Mike DePaulo mikedep333@gmail.com 2015-03-28T13:17:20+00:00 urn:sha1:9073d97eff3f6d3b33450ef3532a826674c7e1e8 libXfont 1.4.9 2015-03-28T17:06:38+00:00 Alan Coopersmith alan.coopersmith@oracle.com 2015-03-17T15:46:46+00:00 urn:sha1:5e1e79c64e477c0408c33d0f248720df8d28c44f Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com> bdfReadCharacters: ensure metrics fit into xCharInfo struct [CVE-2015-1804] 2015-03-28T17:06:17+00:00 Alan Coopersmith alan.coopersmith@oracle.com 2015-03-07T06:54:58+00:00 urn:sha1:9f1b041e535c4da6ffbe95a706d46b3bfb5c0321 We use 32-bit ints to read from the bdf file, but then try to stick into a 16-bit int in the xCharInfo struct, so make sure they won't overflow that range. Found by afl-1.24b. v2: Verify that additions won't overflow 32-bit int range either. v3: As Julien correctly observes, the previous check for bh & bw not being < 0 reduces the number of cases we need to check for overflow. Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com> Reviewed-by: Julien Cristau <jcristau@debian.org> (cherry picked from commit 2351c83a77a478b49cba6beb2ad386835e264744)