Author: Ubuntu Git Importer
Author Date: 2019-01-30 16:13:24 UTC

DSC file for 2:1.20.3-0ubuntu0.18.10.1

Author: Timo Aaltonen
Author Date: 2019-01-11 14:30:55 UTC

Import patches-unapplied version 2:1.20.3-0ubuntu0.18.10.1 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: b132431cbf6793d9c9c39517aa4411ce9a687176

New changelog entries:
  * New upstream bugfix release. (LP: #1811230, LP: #1754693)
    - CVE-2018-14665.patch, dont-init-glamor-on-llvmpipe.diff,
      prime-sync-refactor.diff: Dropped, upstream

Author: Timo Aaltonen
Author Date: 2019-01-11 14:30:55 UTC

Import patches-unapplied version 2:1.20.3-0ubuntu0.18.10.1 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: b132431cbf6793d9c9c39517aa4411ce9a687176

New changelog entries:
  * New upstream bugfix release. (LP: #1811230, LP: #1754693)
    - CVE-2018-14665.patch, dont-init-glamor-on-llvmpipe.diff,
      prime-sync-refactor.diff: Dropped, upstream

Author: Timo Aaltonen
Author Date: 2018-11-22 13:47:34 UTC

Import patches-unapplied version 2:1.20.3-1ubuntu1 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 69b7dcf0d849ee0003691cab28bd3eec145709e9

New changelog entries:
  * Merge from Debian.
    - CVE-2018-14665.patch, dont-init-glamor-on-llvmpipe.diff,
      prime-sync-refactor.diff: Dropped, upstream.

Author: Timo Aaltonen
Author Date: 2018-11-22 13:47:34 UTC

Import patches-unapplied version 2:1.20.3-1ubuntu1 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 69b7dcf0d849ee0003691cab28bd3eec145709e9

New changelog entries:
  * Merge from Debian.
    - CVE-2018-14665.patch, dont-init-glamor-on-llvmpipe.diff,
      prime-sync-refactor.diff: Dropped, upstream.

Author: Timo Aaltonen
Author Date: 2018-11-22 13:47:34 UTC

Import patches-unapplied version 2:1.20.3-1ubuntu1 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 69b7dcf0d849ee0003691cab28bd3eec145709e9

New changelog entries:
  * Merge from Debian.
    - CVE-2018-14665.patch, dont-init-glamor-on-llvmpipe.diff,
      prime-sync-refactor.diff: Dropped, upstream.

Author: Timo Aaltonen
Author Date: 2018-11-22 13:47:34 UTC

Import patches-unapplied version 2:1.20.3-1ubuntu1 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 69b7dcf0d849ee0003691cab28bd3eec145709e9

New changelog entries:
  * Merge from Debian.
    - CVE-2018-14665.patch, dont-init-glamor-on-llvmpipe.diff,
      prime-sync-refactor.diff: Dropped, upstream.

Author: Ubuntu Git Importer
Author Date: 2018-11-10 21:36:40 UTC

DSC file for 2:1.19.2-1+deb9u5

Author: Andreas Boll
Author Date: 2018-10-31 16:58:03 UTC

Import patches-unapplied version 2:1.19.2-1+deb9u5 to debian/stretch

Imported using git-ubuntu import.

Changelog parent: 086ac6c6ca102fe525a493d823f4b6da28b7daaf

New changelog entries:
  * Cherry-pick c2954b16c (glx: do not pick sRGB config for 32-bit RGBA
    visual) from upstream. Fixes various blending issues with kwin and
    Mesa >= 18.0 (i.e. Mesa from stretch-backports) (Closes: #908601).
    Thanks to Nicholas D Steeves and Robert Trebula for testing!
  * Disable -logfile and -modulepath when running with elevated privileges.
    Addresses CVE-2018-14665.

Author: Andreas Boll
Author Date: 2018-10-31 16:58:03 UTC

Import patches-unapplied version 2:1.19.2-1+deb9u5 to debian/stretch

Imported using git-ubuntu import.

Changelog parent: 086ac6c6ca102fe525a493d823f4b6da28b7daaf

New changelog entries:
  * Cherry-pick c2954b16c (glx: do not pick sRGB config for 32-bit RGBA
    visual) from upstream. Fixes various blending issues with kwin and
    Mesa >= 18.0 (i.e. Mesa from stretch-backports) (Closes: #908601).
    Thanks to Nicholas D Steeves and Robert Trebula for testing!
  * Disable -logfile and -modulepath when running with elevated privileges.
    Addresses CVE-2018-14665.

Author: Andreas Boll
Author Date: 2018-10-31 16:58:03 UTC

Import patches-applied version 2:1.19.2-1+deb9u5 to applied/debian/stretch

Imported using git-ubuntu import.

Changelog parent: 31220f1f03821bb2b78b54517496586de5f426f9
Unapplied parent: 26405a809ea560576dbd13460687c0a6fb8c60f4

New changelog entries:
  * Cherry-pick c2954b16c (glx: do not pick sRGB config for 32-bit RGBA
    visual) from upstream. Fixes various blending issues with kwin and
    Mesa >= 18.0 (i.e. Mesa from stretch-backports) (Closes: #908601).
    Thanks to Nicholas D Steeves and Robert Trebula for testing!
  * Disable -logfile and -modulepath when running with elevated privileges.
    Addresses CVE-2018-14665.

Author: Andreas Boll
Author Date: 2018-10-31 16:58:03 UTC

Import patches-unapplied version 2:1.19.2-1+deb9u5 to debian/stretch

Imported using git-ubuntu import.

Changelog parent: 086ac6c6ca102fe525a493d823f4b6da28b7daaf

New changelog entries:
  * Cherry-pick c2954b16c (glx: do not pick sRGB config for 32-bit RGBA
    visual) from upstream. Fixes various blending issues with kwin and
    Mesa >= 18.0 (i.e. Mesa from stretch-backports) (Closes: #908601).
    Thanks to Nicholas D Steeves and Robert Trebula for testing!
  * Disable -logfile and -modulepath when running with elevated privileges.
    Addresses CVE-2018-14665.

Author: Andreas Boll
Author Date: 2018-10-31 16:58:03 UTC

Import patches-applied version 2:1.19.2-1+deb9u5 to applied/debian/stretch

Imported using git-ubuntu import.

Changelog parent: 31220f1f03821bb2b78b54517496586de5f426f9
Unapplied parent: 26405a809ea560576dbd13460687c0a6fb8c60f4

New changelog entries:
  * Cherry-pick c2954b16c (glx: do not pick sRGB config for 32-bit RGBA
    visual) from upstream. Fixes various blending issues with kwin and
    Mesa >= 18.0 (i.e. Mesa from stretch-backports) (Closes: #908601).
    Thanks to Nicholas D Steeves and Robert Trebula for testing!
  * Disable -logfile and -modulepath when running with elevated privileges.
    Addresses CVE-2018-14665.

Author: Andreas Boll
Author Date: 2018-10-31 16:58:03 UTC

Import patches-applied version 2:1.19.2-1+deb9u5 to applied/debian/stretch

Imported using git-ubuntu import.

Changelog parent: 31220f1f03821bb2b78b54517496586de5f426f9
Unapplied parent: 26405a809ea560576dbd13460687c0a6fb8c60f4

New changelog entries:
  * Cherry-pick c2954b16c (glx: do not pick sRGB config for 32-bit RGBA
    visual) from upstream. Fixes various blending issues with kwin and
    Mesa >= 18.0 (i.e. Mesa from stretch-backports) (Closes: #908601).
    Thanks to Nicholas D Steeves and Robert Trebula for testing!
  * Disable -logfile and -modulepath when running with elevated privileges.
    Addresses CVE-2018-14665.

Author: Marc Deslauriers
Author Date: 2018-10-25 15:18:32 UTC

Import patches-unapplied version 2:1.19.6-1ubuntu4.2 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 11bf3bb428ae002d7fe62fddac9df949cdb1ce3d

New changelog entries:
  * SECURITY UPDATE: Privilege escalation and file overwrite
    - debian/patches/CVE-2018-14665.patch: disable -logfile and -modulepath
      when running with elevated privileges in
      hw/xfree86/common/xf86Init.c.
    - CVE-2018-14665

Author: Marc Deslauriers
Author Date: 2018-10-25 15:18:32 UTC

Import patches-unapplied version 2:1.19.6-1ubuntu4.2 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 11bf3bb428ae002d7fe62fddac9df949cdb1ce3d

New changelog entries:
  * SECURITY UPDATE: Privilege escalation and file overwrite
    - debian/patches/CVE-2018-14665.patch: disable -logfile and -modulepath
      when running with elevated privileges in
      hw/xfree86/common/xf86Init.c.
    - CVE-2018-14665

Author: Marc Deslauriers
Author Date: 2018-10-25 14:53:34 UTC

Import patches-unapplied version 2:1.20.1-3ubuntu2.1 to ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 2dbdb79d217bf92c79b1a5d7608b2b5a7258e1fc

New changelog entries:
  * SECURITY UPDATE: Privilege escalation and file overwrite
    - debian/patches/CVE-2018-14665.patch: disable -logfile and -modulepath
      when running with elevated privileges in
      hw/xfree86/common/xf86Init.c.
    - CVE-2018-14665

Author: Marc Deslauriers
Author Date: 2018-10-25 14:53:34 UTC

Import patches-unapplied version 2:1.20.1-3ubuntu2.1 to ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 2dbdb79d217bf92c79b1a5d7608b2b5a7258e1fc

New changelog entries:
  * SECURITY UPDATE: Privilege escalation and file overwrite
    - debian/patches/CVE-2018-14665.patch: disable -logfile and -modulepath
      when running with elevated privileges in
      hw/xfree86/common/xf86Init.c.
    - CVE-2018-14665

Author: Marc Deslauriers
Author Date: 2018-10-25 15:18:32 UTC

Import patches-unapplied version 2:1.19.6-1ubuntu4.2 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 11bf3bb428ae002d7fe62fddac9df949cdb1ce3d

New changelog entries:
  * SECURITY UPDATE: Privilege escalation and file overwrite
    - debian/patches/CVE-2018-14665.patch: disable -logfile and -modulepath
      when running with elevated privileges in
      hw/xfree86/common/xf86Init.c.
    - CVE-2018-14665

Author: Timo Aaltonen
Author Date: 2018-10-02 18:40:03 UTC

Import patches-unapplied version 2:1.20.1-3ubuntu2 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: dac71d208b1c948f707154a92fb70a6ac9ec28cd

New changelog entries:
  * dont-init-glamor-on-llvmpipe.diff: Glamor shouldn't be used on
    llvmpipe, as it might end up crashing the server on a racy bootup.
    (LP: #1792932)

Author: Timo Aaltonen
Author Date: 2018-09-05 11:38:25 UTC

Import patches-unapplied version 2:1.19.6-1ubuntu4.1 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 8e225401c59acd2e213ff6ec2c08bce94587e7f1

New changelog entries:
  * prime-sync-refactor.diff: Fix crash on modesetting+amdgpu hybrid.
    (LP: #1789913)
  * sync-i965-pciids.diff: Update intel pci-id's. (LP: #1789924)

Author: Timo Aaltonen
Author Date: 2018-07-13 22:28:30 UTC

Import patches-unapplied version 2:1.18.4-0ubuntu0.8 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 037efdae044d3be50fb8551016f359cdf59a1819

New changelog entries:
  * glx-do-not-pick-srgb-config-for-32bit-rgba-visual.diff: Fix a
    regression with newer mesa. (LP: #1780664)

Author: Timo Aaltonen
Author Date: 2018-07-13 22:28:30 UTC

Import patches-unapplied version 2:1.18.4-0ubuntu0.8 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 037efdae044d3be50fb8551016f359cdf59a1819

New changelog entries:
  * glx-do-not-pick-srgb-config-for-32bit-rgba-visual.diff: Fix a
    regression with newer mesa. (LP: #1780664)

Author: Timo Aaltonen
Author Date: 2018-07-13 22:28:30 UTC

Import patches-unapplied version 2:1.18.4-0ubuntu0.8 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 037efdae044d3be50fb8551016f359cdf59a1819

New changelog entries:
  * glx-do-not-pick-srgb-config-for-32bit-rgba-visual.diff: Fix a
    regression with newer mesa. (LP: #1780664)

Author: Emilio Pozuelo Monfort
Author Date: 2018-05-19 13:04:00 UTC

Import patches-unapplied version 2:1.20.0-1 to debian/experimental

Imported using git-ubuntu import.

Changelog parent: 29fb0fcd3c2708501d0f13ae430aab7d148036c8

New changelog entries:
  [ Timo Aaltonen ]
  * New upstream release candidate. (Closes: #868843)
  [ Emilio Pozuelo Monfort ]
  * New upstream stable release.
  * Update Vcs-* for salsa.

Author: Emilio Pozuelo Monfort
Author Date: 2018-05-19 13:04:00 UTC

Import patches-applied version 2:1.20.0-1 to applied/debian/experimental

Imported using git-ubuntu import.

Changelog parent: 2c2626df4166e708e556241bb6b3f19f900c04ed
Unapplied parent: d497c674c632c29d16d7f5ea4277a7a38d515c10

New changelog entries:
  [ Timo Aaltonen ]
  * New upstream release candidate. (Closes: #868843)
  [ Emilio Pozuelo Monfort ]
  * New upstream stable release.
  * Update Vcs-* for salsa.

Author: Ubuntu Git Importer
Author Date: 2018-04-19 13:08:55 UTC

pristine-tar data for xorg-server_1.19.6.orig.tar.gz

Author: Ubuntu Git Importer
Author Date: 2018-04-19 09:00:48 UTC

pristine-tar data for xorg-server_1.19.99.901.orig.tar.gz

Author: Marc Deslauriers
Author Date: 2018-04-13 15:31:45 UTC

Import patches-unapplied version 2:1.19.6-1ubuntu4 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: c02bd69175d4cf5b3b3fafe796ed74b43431ef1d

New changelog entries:
  * debian/patches/fix-default-permissions.patch: fix default permissions
    when creating the log directory. (LP: #1735929)

Author: Julien Cristau
Author Date: 2017-10-14 10:35:36 UTC

Import patches-applied version 2:1.16.4-1+deb8u2 to applied/debian/jessie

Imported using git-ubuntu import.

Changelog parent: 85ffe8bf2d94f434a1c1d2cd1e248bc8588c7c41
Unapplied parent: 1dc6d5a0bf7f1c1f5005b971a1a682162f914249

New changelog entries:
  * render: Fix out of boundary heap access
  * Xext/shm: Validate shmseg resource id (CVE-2017-13721)
  * xkb: Escape non-printable characters correctly.
  * xkb: Handle xkb formated string output safely (CVE-2017-13723)
  * os: Make sure big requests have sufficient length.
  * Unvalidated lengths in
    - XFree86-VidModeExtension (CVE-2017-12180)
    - XFree86-DGA (CVE-2017-12181)
    - XFree86-DRI (CVE-2017-12182)
    - XFIXES (CVE-2017-12183)
    - XINERAMA (CVE-2017-12184)
    - MIT-SCREEN-SAVER (CVE-2017-12185)
    - X-Resource (CVE-2017-12186)
    - RENDER (CVE-2017-12187)
  * Xi: Test exact size of XIBarrierReleasePointer
  * Xi: integer overflow and unvalidated length in
    (S)ProcXIBarrierReleasePointer (CVE-2017-12179)
  * Xi: Silence some tautological warnings
  * Xi: fix wrong extra length check in ProcXIChangeHierarchy (CVE-2017-12178)
  * dbe: Unvalidated variable-length request in ProcDbeGetVisualInfo (CVE-2017-12177)
  * Unvalidated extra length in ProcEstablishConnection (CVE-2017-12176)
  * Use timingsafe_memcmp() to compare MIT-MAGIC-COOKIES (CVE-2017-2624)
  * Xwayland: enable access control and default to just the local user (CVE-2015-3164)

Author: Julien Cristau
Author Date: 2017-10-14 10:35:36 UTC

Import patches-unapplied version 2:1.16.4-1+deb8u2 to debian/jessie

Imported using git-ubuntu import.

Changelog parent: 2b574f98b9f0cb11afc3fbad87856559041bebb8

New changelog entries:
  * render: Fix out of boundary heap access
  * Xext/shm: Validate shmseg resource id (CVE-2017-13721)
  * xkb: Escape non-printable characters correctly.
  * xkb: Handle xkb formated string output safely (CVE-2017-13723)
  * os: Make sure big requests have sufficient length.
  * Unvalidated lengths in
    - XFree86-VidModeExtension (CVE-2017-12180)
    - XFree86-DGA (CVE-2017-12181)
    - XFree86-DRI (CVE-2017-12182)
    - XFIXES (CVE-2017-12183)
    - XINERAMA (CVE-2017-12184)
    - MIT-SCREEN-SAVER (CVE-2017-12185)
    - X-Resource (CVE-2017-12186)
    - RENDER (CVE-2017-12187)
  * Xi: Test exact size of XIBarrierReleasePointer
  * Xi: integer overflow and unvalidated length in
    (S)ProcXIBarrierReleasePointer (CVE-2017-12179)
  * Xi: Silence some tautological warnings
  * Xi: fix wrong extra length check in ProcXIChangeHierarchy (CVE-2017-12178)
  * dbe: Unvalidated variable-length request in ProcDbeGetVisualInfo (CVE-2017-12177)
  * Unvalidated extra length in ProcEstablishConnection (CVE-2017-12176)
  * Use timingsafe_memcmp() to compare MIT-MAGIC-COOKIES (CVE-2017-2624)
  * Xwayland: enable access control and default to just the local user (CVE-2015-3164)

Author: Marc Deslauriers
Author Date: 2017-10-13 12:44:17 UTC

Import patches-unapplied version 2:1.15.1-0ubuntu2.11 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 7a00f40040923808fc780d3a7f48084a14c1dc41

New changelog entries:
  * SECURITY UPDATE: unvalidated extra length in ProcEstablishConnection
    - debian/patches/CVE-2017-12176.patch: add check to dix/dispatch.c.
    - CVE-2017-12176
  * SECURITY UPDATE: Unvalidated variable-length request in
    ProcDbeGetVisualInfo
    - debian/patches/CVE-2017-12177.patch: add check to dbe/dbe.c.
    - CVE-2017-12177
  * SECURITY UPDATE: wrong extra length check in ProcXIChangeHierarchy
    - debian/patches/CVE-2017-12178.patch: fix length check in
      Xi/xichangehierarchy.c.
    - CVE-2017-12178
  * SECURITY UPDATE: integer overflow and unvalidated length in
    ProcXIBarrierReleasePointer
    - debian/patches/CVE-2017-12179-1.patch: test exact size of
      XIBarrierReleasePointer in Xi/xibarriers.c.
    - debian/patches/CVE-2017-12179-2.patch: add checks to Xi/xibarriers.c.
    - CVE-2017-12179
  * SECURITY UPDATE: various unvalidated lengths
    - debian/patches/CVE-2017-12180-12182.patch: add more checks to
      hw/xfree86/common/xf86vmode.c, hw/xfree86/common/xf86DGA.c,
      hw/xfree86/dri/xf86dri.c.
    - CVE-2017-12180
    - CVE-2017-12181
    - CVE-2017-12182
  * SECURITY UPDATE: more unvalidated lengths
    - debian/patches/CVE-2017-12183.patch: add checks to xfixes/cursor.c,
      xfixes/region.c, xfixes/saveset.c, xfixes/xfixes.c.
    - CVE-2017-12183
  * SECURITY UPDATE: even more unvalidated lengths
    - debian/patches/CVE-2017-12184-12187.patch: add more checks to
      Xext/panoramiX.c, Xext/saver.c, Xext/xres.c, Xext/xvdisp.c,
      hw/dmx/dmxpict.c, pseudoramiX/pseudoramiX.c, render/render.c.
    - CVE-2017-12184
    - CVE-2017-12185
    - CVE-2017-12186
    - CVE-2017-12187
  * debian/patches/os_big_requests.patch: make sure big requests have
    sufficient length in os/io.c.
  * debian/patches/xkb_escape_fix.patch: escape non-printable characters
    correctly in xkb/xkbtext.c.

Author: Marc Deslauriers
Author Date: 2017-10-13 12:44:17 UTC

Import patches-unapplied version 2:1.15.1-0ubuntu2.11 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 7a00f40040923808fc780d3a7f48084a14c1dc41

New changelog entries:
  * SECURITY UPDATE: unvalidated extra length in ProcEstablishConnection
    - debian/patches/CVE-2017-12176.patch: add check to dix/dispatch.c.
    - CVE-2017-12176
  * SECURITY UPDATE: Unvalidated variable-length request in
    ProcDbeGetVisualInfo
    - debian/patches/CVE-2017-12177.patch: add check to dbe/dbe.c.
    - CVE-2017-12177
  * SECURITY UPDATE: wrong extra length check in ProcXIChangeHierarchy
    - debian/patches/CVE-2017-12178.patch: fix length check in
      Xi/xichangehierarchy.c.
    - CVE-2017-12178
  * SECURITY UPDATE: integer overflow and unvalidated length in
    ProcXIBarrierReleasePointer
    - debian/patches/CVE-2017-12179-1.patch: test exact size of
      XIBarrierReleasePointer in Xi/xibarriers.c.
    - debian/patches/CVE-2017-12179-2.patch: add checks to Xi/xibarriers.c.
    - CVE-2017-12179
  * SECURITY UPDATE: various unvalidated lengths
    - debian/patches/CVE-2017-12180-12182.patch: add more checks to
      hw/xfree86/common/xf86vmode.c, hw/xfree86/common/xf86DGA.c,
      hw/xfree86/dri/xf86dri.c.
    - CVE-2017-12180
    - CVE-2017-12181
    - CVE-2017-12182
  * SECURITY UPDATE: more unvalidated lengths
    - debian/patches/CVE-2017-12183.patch: add checks to xfixes/cursor.c,
      xfixes/region.c, xfixes/saveset.c, xfixes/xfixes.c.
    - CVE-2017-12183
  * SECURITY UPDATE: even more unvalidated lengths
    - debian/patches/CVE-2017-12184-12187.patch: add more checks to
      Xext/panoramiX.c, Xext/saver.c, Xext/xres.c, Xext/xvdisp.c,
      hw/dmx/dmxpict.c, pseudoramiX/pseudoramiX.c, render/render.c.
    - CVE-2017-12184
    - CVE-2017-12185
    - CVE-2017-12186
    - CVE-2017-12187
  * debian/patches/os_big_requests.patch: make sure big requests have
    sufficient length in os/io.c.
  * debian/patches/xkb_escape_fix.patch: escape non-printable characters
    correctly in xkb/xkbtext.c.

Author: Marc Deslauriers
Author Date: 2017-10-13 12:40:17 UTC

Import patches-unapplied version 2:1.18.4-0ubuntu0.7 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: ec1ea12c0abd4b50a92e52f71878a7123d08fab9

New changelog entries:
  * SECURITY UPDATE: unvalidated extra length in ProcEstablishConnection
    - debian/patches/CVE-2017-12176.patch: add check to dix/dispatch.c.
    - CVE-2017-12176
  * SECURITY UPDATE: Unvalidated variable-length request in
    ProcDbeGetVisualInfo
    - debian/patches/CVE-2017-12177.patch: add check to dbe/dbe.c.
    - CVE-2017-12177
  * SECURITY UPDATE: wrong extra length check in ProcXIChangeHierarchy
    - debian/patches/CVE-2017-12178.patch: fix length check in
      Xi/xichangehierarchy.c.
    - CVE-2017-12178
  * SECURITY UPDATE: integer overflow and unvalidated length in
    ProcXIBarrierReleasePointer
    - debian/patches/CVE-2017-12179-1.patch: test exact size of
      XIBarrierReleasePointer in Xi/xibarriers.c.
    - debian/patches/CVE-2017-12179-2.patch: add checks to Xi/xibarriers.c.
    - CVE-2017-12179
  * SECURITY UPDATE: various unvalidated lengths
    - debian/patches/CVE-2017-12180-12182.patch: add more checks to
      Xext/vidmode.c, hw/xfree86/common/xf86DGA.c,
      hw/xfree86/dri/xf86dri.c.
    - CVE-2017-12180
    - CVE-2017-12181
    - CVE-2017-12182
  * SECURITY UPDATE: more unvalidated lengths
    - debian/patches/CVE-2017-12183.patch: add checks to xfixes/cursor.c,
      xfixes/region.c, xfixes/saveset.c, xfixes/xfixes.c.
    - CVE-2017-12183
  * SECURITY UPDATE: even more unvalidated lengths
    - debian/patches/CVE-2017-12184-12187.patch: add more checks to
      Xext/panoramiX.c, Xext/saver.c, Xext/xres.c, Xext/xvdisp.c,
      hw/dmx/dmxpict.c, pseudoramiX/pseudoramiX.c, render/render.c.
    - CVE-2017-12184
    - CVE-2017-12185
    - CVE-2017-12186
    - CVE-2017-12187
  * debian/patches/os_big_requests.patch: make sure big requests have
    sufficient length in os/io.c.
  * debian/patches/xkb_escape_fix.patch: escape non-printable characters
    correctly in xkb/xkbtext.c.

Author: Marc Deslauriers
Author Date: 2017-10-13 12:23:38 UTC

Import patches-unapplied version 2:1.19.3-1ubuntu1.3 to ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: 94e8cab62e50b67bebce82b74e5d619b378e536c

New changelog entries:
  * SECURITY UPDATE: unvalidated extra length in ProcEstablishConnection
    - debian/patches/CVE-2017-12176.patch: add check to dix/dispatch.c.
    - CVE-2017-12176
  * SECURITY UPDATE: Unvalidated variable-length request in
    ProcDbeGetVisualInfo
    - debian/patches/CVE-2017-12177.patch: add check to dbe/dbe.c.
    - CVE-2017-12177
  * SECURITY UPDATE: wrong extra length check in ProcXIChangeHierarchy
    - debian/patches/CVE-2017-12178.patch: fix length check in
      Xi/xichangehierarchy.c.
    - CVE-2017-12178
  * SECURITY UPDATE: integer overflow and unvalidated length in
    ProcXIBarrierReleasePointer
    - debian/patches/CVE-2017-12179-1.patch: test exact size of
      XIBarrierReleasePointer in Xi/xibarriers.c.
    - debian/patches/CVE-2017-12179-2.patch: add checks to Xi/xibarriers.c.
    - CVE-2017-12179
  * SECURITY UPDATE: various unvalidated lengths
    - debian/patches/CVE-2017-12180-12182.patch: add more checks to
      Xext/vidmode.c, hw/xfree86/common/xf86DGA.c,
      hw/xfree86/dri/xf86dri.c.
    - CVE-2017-12180
    - CVE-2017-12181
    - CVE-2017-12182
  * SECURITY UPDATE: more unvalidated lengths
    - debian/patches/CVE-2017-12183.patch: add checks to xfixes/cursor.c,
      xfixes/region.c, xfixes/saveset.c, xfixes/xfixes.c.
    - CVE-2017-12183
  * SECURITY UPDATE: even more unvalidated lengths
    - debian/patches/CVE-2017-12184-12187.patch: add more checks to
      Xext/panoramiX.c, Xext/saver.c, Xext/xres.c, Xext/xvdisp.c,
      hw/dmx/dmxpict.c, pseudoramiX/pseudoramiX.c, render/render.c.
    - CVE-2017-12184
    - CVE-2017-12185
    - CVE-2017-12186
    - CVE-2017-12187
  * debian/patches/os_big_requests.patch: make sure big requests have
    sufficient length in os/io.c.
  * debian/patches/xkb_escape_fix.patch: escape non-printable characters
    correctly in xkb/xkbtext.c.

Author: Marc Deslauriers
Author Date: 2017-10-13 12:23:38 UTC

Import patches-unapplied version 2:1.19.3-1ubuntu1.3 to ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: 94e8cab62e50b67bebce82b74e5d619b378e536c

New changelog entries:
  * SECURITY UPDATE: unvalidated extra length in ProcEstablishConnection
    - debian/patches/CVE-2017-12176.patch: add check to dix/dispatch.c.
    - CVE-2017-12176
  * SECURITY UPDATE: Unvalidated variable-length request in
    ProcDbeGetVisualInfo
    - debian/patches/CVE-2017-12177.patch: add check to dbe/dbe.c.
    - CVE-2017-12177
  * SECURITY UPDATE: wrong extra length check in ProcXIChangeHierarchy
    - debian/patches/CVE-2017-12178.patch: fix length check in
      Xi/xichangehierarchy.c.
    - CVE-2017-12178
  * SECURITY UPDATE: integer overflow and unvalidated length in
    ProcXIBarrierReleasePointer
    - debian/patches/CVE-2017-12179-1.patch: test exact size of
      XIBarrierReleasePointer in Xi/xibarriers.c.
    - debian/patches/CVE-2017-12179-2.patch: add checks to Xi/xibarriers.c.
    - CVE-2017-12179
  * SECURITY UPDATE: various unvalidated lengths
    - debian/patches/CVE-2017-12180-12182.patch: add more checks to
      Xext/vidmode.c, hw/xfree86/common/xf86DGA.c,
      hw/xfree86/dri/xf86dri.c.
    - CVE-2017-12180
    - CVE-2017-12181
    - CVE-2017-12182
  * SECURITY UPDATE: more unvalidated lengths
    - debian/patches/CVE-2017-12183.patch: add checks to xfixes/cursor.c,
      xfixes/region.c, xfixes/saveset.c, xfixes/xfixes.c.
    - CVE-2017-12183
  * SECURITY UPDATE: even more unvalidated lengths
    - debian/patches/CVE-2017-12184-12187.patch: add more checks to
      Xext/panoramiX.c, Xext/saver.c, Xext/xres.c, Xext/xvdisp.c,
      hw/dmx/dmxpict.c, pseudoramiX/pseudoramiX.c, render/render.c.
    - CVE-2017-12184
    - CVE-2017-12185
    - CVE-2017-12186
    - CVE-2017-12187
  * debian/patches/os_big_requests.patch: make sure big requests have
    sufficient length in os/io.c.
  * debian/patches/xkb_escape_fix.patch: escape non-printable characters
    correctly in xkb/xkbtext.c.

Author: Marc Deslauriers
Author Date: 2017-10-13 12:23:38 UTC

Import patches-unapplied version 2:1.19.3-1ubuntu1.3 to ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: 94e8cab62e50b67bebce82b74e5d619b378e536c

New changelog entries:
  * SECURITY UPDATE: unvalidated extra length in ProcEstablishConnection
    - debian/patches/CVE-2017-12176.patch: add check to dix/dispatch.c.
    - CVE-2017-12176
  * SECURITY UPDATE: Unvalidated variable-length request in
    ProcDbeGetVisualInfo
    - debian/patches/CVE-2017-12177.patch: add check to dbe/dbe.c.
    - CVE-2017-12177
  * SECURITY UPDATE: wrong extra length check in ProcXIChangeHierarchy
    - debian/patches/CVE-2017-12178.patch: fix length check in
      Xi/xichangehierarchy.c.
    - CVE-2017-12178
  * SECURITY UPDATE: integer overflow and unvalidated length in
    ProcXIBarrierReleasePointer
    - debian/patches/CVE-2017-12179-1.patch: test exact size of
      XIBarrierReleasePointer in Xi/xibarriers.c.
    - debian/patches/CVE-2017-12179-2.patch: add checks to Xi/xibarriers.c.
    - CVE-2017-12179
  * SECURITY UPDATE: various unvalidated lengths
    - debian/patches/CVE-2017-12180-12182.patch: add more checks to
      Xext/vidmode.c, hw/xfree86/common/xf86DGA.c,
      hw/xfree86/dri/xf86dri.c.
    - CVE-2017-12180
    - CVE-2017-12181
    - CVE-2017-12182
  * SECURITY UPDATE: more unvalidated lengths
    - debian/patches/CVE-2017-12183.patch: add checks to xfixes/cursor.c,
      xfixes/region.c, xfixes/saveset.c, xfixes/xfixes.c.
    - CVE-2017-12183
  * SECURITY UPDATE: even more unvalidated lengths
    - debian/patches/CVE-2017-12184-12187.patch: add more checks to
      Xext/panoramiX.c, Xext/saver.c, Xext/xres.c, Xext/xvdisp.c,
      hw/dmx/dmxpict.c, pseudoramiX/pseudoramiX.c, render/render.c.
    - CVE-2017-12184
    - CVE-2017-12185
    - CVE-2017-12186
    - CVE-2017-12187
  * debian/patches/os_big_requests.patch: make sure big requests have
    sufficient length in os/io.c.
  * debian/patches/xkb_escape_fix.patch: escape non-printable characters
    correctly in xkb/xkbtext.c.

Author: Marc Deslauriers
Author Date: 2017-10-13 12:44:17 UTC

Import patches-unapplied version 2:1.15.1-0ubuntu2.11 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 7a00f40040923808fc780d3a7f48084a14c1dc41

New changelog entries:
  * SECURITY UPDATE: unvalidated extra length in ProcEstablishConnection
    - debian/patches/CVE-2017-12176.patch: add check to dix/dispatch.c.
    - CVE-2017-12176
  * SECURITY UPDATE: Unvalidated variable-length request in
    ProcDbeGetVisualInfo
    - debian/patches/CVE-2017-12177.patch: add check to dbe/dbe.c.
    - CVE-2017-12177
  * SECURITY UPDATE: wrong extra length check in ProcXIChangeHierarchy
    - debian/patches/CVE-2017-12178.patch: fix length check in
      Xi/xichangehierarchy.c.
    - CVE-2017-12178
  * SECURITY UPDATE: integer overflow and unvalidated length in
    ProcXIBarrierReleasePointer
    - debian/patches/CVE-2017-12179-1.patch: test exact size of
      XIBarrierReleasePointer in Xi/xibarriers.c.
    - debian/patches/CVE-2017-12179-2.patch: add checks to Xi/xibarriers.c.
    - CVE-2017-12179
  * SECURITY UPDATE: various unvalidated lengths
    - debian/patches/CVE-2017-12180-12182.patch: add more checks to
      hw/xfree86/common/xf86vmode.c, hw/xfree86/common/xf86DGA.c,
      hw/xfree86/dri/xf86dri.c.
    - CVE-2017-12180
    - CVE-2017-12181
    - CVE-2017-12182
  * SECURITY UPDATE: more unvalidated lengths
    - debian/patches/CVE-2017-12183.patch: add checks to xfixes/cursor.c,
      xfixes/region.c, xfixes/saveset.c, xfixes/xfixes.c.
    - CVE-2017-12183
  * SECURITY UPDATE: even more unvalidated lengths
    - debian/patches/CVE-2017-12184-12187.patch: add more checks to
      Xext/panoramiX.c, Xext/saver.c, Xext/xres.c, Xext/xvdisp.c,
      hw/dmx/dmxpict.c, pseudoramiX/pseudoramiX.c, render/render.c.
    - CVE-2017-12184
    - CVE-2017-12185
    - CVE-2017-12186
    - CVE-2017-12187
  * debian/patches/os_big_requests.patch: make sure big requests have
    sufficient length in os/io.c.
  * debian/patches/xkb_escape_fix.patch: escape non-printable characters
    correctly in xkb/xkbtext.c.

Author: Dmitry Shachnev
Author Date: 2017-10-15 11:59:53 UTC

Import patches-unapplied version 2:1.19.5-0ubuntu2 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 12c37fdc01d404e52d5f7313b198e9362ba7ab78

New changelog entries:
  * Backport upstream patch to fix cropping in XShmGetImage (LP: #1723732).

Author: Dmitry Shachnev
Author Date: 2017-10-15 11:59:53 UTC

Import patches-unapplied version 2:1.19.5-0ubuntu2 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 12c37fdc01d404e52d5f7313b198e9362ba7ab78

New changelog entries:
  * Backport upstream patch to fix cropping in XShmGetImage (LP: #1723732).

Author: Dmitry Shachnev
Author Date: 2017-10-15 11:59:53 UTC

Import patches-unapplied version 2:1.19.5-0ubuntu2 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 12c37fdc01d404e52d5f7313b198e9362ba7ab78

New changelog entries:
  * Backport upstream patch to fix cropping in XShmGetImage (LP: #1723732).

Author: Timo Aaltonen
Author Date: 2017-03-27 16:43:08 UTC

Import patches-unapplied version 2:1.19.3-1ubuntu1 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 14154b821e31f60e1a05405406db900e98c5ad56

New changelog entries:
  [ Timo Aaltonen ]
  * Merge from Debian experimental. (LP: #1671799)
    - Patches refreshed
    - randr-adjust-masters-last-set-time.diff,
      modesetting-unifdef-slave-support.diff: Dropped, upstream
    - config-add-no-removal.patch, xf86-inactive-gpuscreen.patch,
      fix-detach-gpu.patch: Dropped, more or less obsolete
  * 190_cache-xkbcomp_output_for_fast_start_up.patch: Cleaned up from
    the package as it wasn't used.
  * 111_armel-drv-fallbacks.patch: Dropped, we don't ship these drivers
    anymore.
  * rules: Drop the workaround that adds lt_cv_prog_compiler_static_works=no
    to confflags.
  * 232-xf86compatoutput-valgrind.patch: This was added upstream
    already, no need to carry a duplicate check.
  * 208_switch_on_release.diff: Dropped, doesn't work with 1.19.
  * 228_autobind_gpu.patch: Update from Fedora, fixes nvidia.
  * disable-rotation-transform-gpuscreens.patch: Dropped, nvidia
    supports rotation now.
  * 122_xext_fix_card32_overflow_in_xauth.patch: Dropped, upstream
    review found issues and it never got applied.
  * xfree86-no-xv-for-gpuscreens.patch: Drop bogus buglink.
  * 227_null_ptr_midispcur.patch: Dropped, upstream didn't accept it.
  * randr-do-not-check-the-screen-size.diff: Dropped, can't reproduce
    #1586260 anymore without the patch.
  [ Robert Ancell ]
  * debian/patches/xmir.patch:
    - Refresh
    - Fix warnings when built against lp:mir/0.25
    - Support both Mir 0.24, 0.25 and 0.26 client APIs
    - Fix crashing on arm64 (LP: #1642297)

Author: Timo Aaltonen
Author Date: 2017-03-27 16:43:08 UTC

Import patches-unapplied version 2:1.19.3-1ubuntu1 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 14154b821e31f60e1a05405406db900e98c5ad56

New changelog entries:
  [ Timo Aaltonen ]
  * Merge from Debian experimental. (LP: #1671799)
    - Patches refreshed
    - randr-adjust-masters-last-set-time.diff,
      modesetting-unifdef-slave-support.diff: Dropped, upstream
    - config-add-no-removal.patch, xf86-inactive-gpuscreen.patch,
      fix-detach-gpu.patch: Dropped, more or less obsolete
  * 190_cache-xkbcomp_output_for_fast_start_up.patch: Cleaned up from
    the package as it wasn't used.
  * 111_armel-drv-fallbacks.patch: Dropped, we don't ship these drivers
    anymore.
  * rules: Drop the workaround that adds lt_cv_prog_compiler_static_works=no
    to confflags.
  * 232-xf86compatoutput-valgrind.patch: This was added upstream
    already, no need to carry a duplicate check.
  * 208_switch_on_release.diff: Dropped, doesn't work with 1.19.
  * 228_autobind_gpu.patch: Update from Fedora, fixes nvidia.
  * disable-rotation-transform-gpuscreens.patch: Dropped, nvidia
    supports rotation now.
  * 122_xext_fix_card32_overflow_in_xauth.patch: Dropped, upstream
    review found issues and it never got applied.
  * xfree86-no-xv-for-gpuscreens.patch: Drop bogus buglink.
  * 227_null_ptr_midispcur.patch: Dropped, upstream didn't accept it.
  * randr-do-not-check-the-screen-size.diff: Dropped, can't reproduce
    #1586260 anymore without the patch.
  [ Robert Ancell ]
  * debian/patches/xmir.patch:
    - Refresh
    - Fix warnings when built against lp:mir/0.25
    - Support both Mir 0.24, 0.25 and 0.26 client APIs
    - Fix crashing on arm64 (LP: #1642297)

Author: Timo Aaltonen
Author Date: 2016-11-01 08:06:42 UTC

Import patches-unapplied version 2:1.18.4-1ubuntu6.1 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: ef9d5d147b91bd197e3b152cb8c4b2325f94dfcd

New changelog entries:
  * modesetting-unifdef-slave-support.diff: Fix modesetting slave output
    names. (LP: #1636397)

Author: Timo Aaltonen
Author Date: 2016-11-01 08:06:42 UTC

Import patches-unapplied version 2:1.18.4-1ubuntu6.1 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: ef9d5d147b91bd197e3b152cb8c4b2325f94dfcd

New changelog entries:
  * modesetting-unifdef-slave-support.diff: Fix modesetting slave output
    names. (LP: #1636397)

Author: Timo Aaltonen
Author Date: 2016-11-01 08:06:42 UTC

Import patches-unapplied version 2:1.18.4-1ubuntu6.1 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: ef9d5d147b91bd197e3b152cb8c4b2325f94dfcd

New changelog entries:
  * modesetting-unifdef-slave-support.diff: Fix modesetting slave output
    names. (LP: #1636397)

Author: Robert Ancell
Author Date: 2016-09-07 03:50:30 UTC

Import patches-unapplied version 2:1.18.4-1ubuntu6 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: 89c77171438a1c7a328321ef040509845e277057

New changelog entries:
  * debian/patches/xmir.patch:
    - Don't call epoxy every frame (LP: #1617932)
    - Ignore 'unknown 11 event' (LP: #1617925)
    - Improve root window resizing code
    - Make randr mode names simpler

Author: Timo Aaltonen
Author Date: 2016-04-07 09:10:12 UTC

Import patches-unapplied version 2:1.18.3-1ubuntu2 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 8544022c8a3871ef8b4e277ad0934cbbd70206d0

New changelog entries:
  * Disable 190_cache-xkbcomp_output_for_fast_start_up.patch for now,
    compiling the keymap fails in current xenial for some reason.
    (LP: #1566878)

Author: Tim Lunn
Author Date: 2015-10-26 01:24:30 UTC

Import patches-unapplied version 2:1.17.2-1ubuntu9.1 to ubuntu/wily-proposed

Imported using git-ubuntu import.

Changelog parent: 07392cc779743d4585925253177eb07d3dcebf14

New changelog entries:
  * debian/patches:
    - linux-Do-not-call-FatalError-from-xf86CloseConsole.patch: Fix crashers
      often occuring on shutdown (LP: #1237904)
    - xmir.patch: Fix typo causing FTBFS (LP: #1509005)

Author: Tim Lunn
Author Date: 2015-10-26 01:24:30 UTC

Import patches-unapplied version 2:1.17.2-1ubuntu9.1 to ubuntu/wily-proposed

Imported using git-ubuntu import.

Changelog parent: 07392cc779743d4585925253177eb07d3dcebf14

New changelog entries:
  * debian/patches:
    - linux-Do-not-call-FatalError-from-xf86CloseConsole.patch: Fix crashers
      often occuring on shutdown (LP: #1237904)
    - xmir.patch: Fix typo causing FTBFS (LP: #1509005)

Author: Tim Lunn
Author Date: 2015-10-26 01:24:30 UTC

Import patches-unapplied version 2:1.17.2-1ubuntu9.1 to ubuntu/wily-proposed

Imported using git-ubuntu import.

Changelog parent: 07392cc779743d4585925253177eb07d3dcebf14

New changelog entries:
  * debian/patches:
    - linux-Do-not-call-FatalError-from-xf86CloseConsole.patch: Fix crashers
      often occuring on shutdown (LP: #1237904)
    - xmir.patch: Fix typo causing FTBFS (LP: #1509005)

Author: Robert Ancell
Author Date: 2015-09-30 03:15:39 UTC

Import patches-unapplied version 2:1.17.2-1ubuntu9 to ubuntu/wily-proposed

Imported using git-ubuntu import.

Changelog parent: d6db83ff4dd3bd5b35e4b183747d1546a218d202

New changelog entries:
  * debian/patches/xmir.patch:
    - Fix FTBFS due to change in Mir headers

Author: Timo Aaltonen
Author Date: 2015-09-02 13:21:04 UTC

Import patches-unapplied version 2:1.17.1-0ubuntu3.1 to ubuntu/vivid-proposed

Imported using git-ubuntu import.

Changelog parent: 0cb9fe94f73100ebec275dac1f84f99cd584e752

New changelog entries:
  * disable-rotation-transform-gpuscreens.patch:
    Revert back to disabling rotations on GPU screens. (LP: #1489696)

Author: Timo Aaltonen
Author Date: 2015-09-02 13:21:04 UTC

Import patches-unapplied version 2:1.17.1-0ubuntu3.1 to ubuntu/vivid-proposed

Imported using git-ubuntu import.

Changelog parent: 0cb9fe94f73100ebec275dac1f84f99cd584e752

New changelog entries:
  * disable-rotation-transform-gpuscreens.patch:
    Revert back to disabling rotations on GPU screens. (LP: #1489696)

Author: Timo Aaltonen
Author Date: 2015-09-02 13:21:04 UTC

Import patches-unapplied version 2:1.17.1-0ubuntu3.1 to ubuntu/vivid-proposed

Imported using git-ubuntu import.

Changelog parent: 0cb9fe94f73100ebec275dac1f84f99cd584e752

New changelog entries:
  * disable-rotation-transform-gpuscreens.patch:
    Revert back to disabling rotations on GPU screens. (LP: #1489696)

Author: Julien Cristau
Author Date: 2015-02-09 09:41:25 UTC

Import patches-unapplied version 2:1.12.4-6+deb7u6 to debian/wheezy

Imported using git-ubuntu import.

Changelog parent: 91c02aa6931c0a0fb84e7f8e0215a0643ad41418

New changelog entries:
  * dix: Allow zero-height PutImage requests (regression in previous update)
  * xkb: Don't swap XkbSetGeometry data in the input buffer (prerequisite for
    next patch)
  * xkb: Check strings length against request size (CVE-2015-0255)

Author: Julien Cristau
Author Date: 2015-02-09 09:41:25 UTC

Import patches-applied version 2:1.12.4-6+deb7u6 to applied/debian/wheezy

Imported using git-ubuntu import.

Changelog parent: c6afea6b06b6646af407c7faba84569e7f86282f
Unapplied parent: 7ebc7a22e680f517571346edc37fff7093cb43fe

New changelog entries:
  * dix: Allow zero-height PutImage requests (regression in previous update)
  * xkb: Don't swap XkbSetGeometry data in the input buffer (prerequisite for
    next patch)
  * xkb: Check strings length against request size (CVE-2015-0255)

Author: Maarten Lankhorst
Author Date: 2015-03-19 09:13:08 UTC

Import patches-unapplied version 2:1.17.1-0ubuntu3 to ubuntu/vivid-proposed

Imported using git-ubuntu import.

Changelog parent: 72ab7111569c02303c4b741d4a17bd74bd7611d3

New changelog entries:
  * Add a patch to fix vesa int10 failure. (LP: #1433198)

Author: Marc Deslauriers
Author Date: 2015-02-12 13:57:17 UTC

Import patches-unapplied version 2:1.11.4-0ubuntu10.17 to ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 44ec309905ccf30396926af1d5444ea2c49bbb5a

New changelog entries:
  * SECURITY UPDATE: information leak and denial of service in
    XkbSetGeometry
    - debian/patches/CVE-2015-0255.patch: properly check lengths in
      xkb/xkb.c.
    - CVE-2015-0255
  * SECURITY UPDATE: denial of service via invalid trapezoid (LP: #1197921)
    - debian/patches/CVE-2013-6424.patch: don't render invalid trapezoids
      in exa/exa_render.c, fix underflow in render/picture.h.
    - CVE-2013-6424
  * debian/patches/CVE-2014-8xxx/0038-CVE-2014-8092-*: fix regression in
    previous security update by allowing zero-height PutImage requests in
    dix/dispatch.c.

Author: Marc Deslauriers
Author Date: 2015-02-12 13:57:17 UTC

Import patches-unapplied version 2:1.11.4-0ubuntu10.17 to ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 44ec309905ccf30396926af1d5444ea2c49bbb5a

New changelog entries:
  * SECURITY UPDATE: information leak and denial of service in
    XkbSetGeometry
    - debian/patches/CVE-2015-0255.patch: properly check lengths in
      xkb/xkb.c.
    - CVE-2015-0255
  * SECURITY UPDATE: denial of service via invalid trapezoid (LP: #1197921)
    - debian/patches/CVE-2013-6424.patch: don't render invalid trapezoids
      in exa/exa_render.c, fix underflow in render/picture.h.
    - CVE-2013-6424
  * debian/patches/CVE-2014-8xxx/0038-CVE-2014-8092-*: fix regression in
    previous security update by allowing zero-height PutImage requests in
    dix/dispatch.c.

Author: Marc Deslauriers
Author Date: 2015-02-12 13:26:41 UTC

Import patches-unapplied version 2:1.16.0-1ubuntu1.3 to ubuntu/utopic-security

Imported using git-ubuntu import.

Changelog parent: 5c86846090ba690523c48bda32f055c6d0fd8fdb

New changelog entries:
  * SECURITY UPDATE: information leak and denial of service in
    XkbSetGeometry
    - debian/patches/CVE-2015-0255.patch: properly check lengths in
      xkb/xkb.c.
    - CVE-2015-0255
  * debian/patches/CVE-2014-8xxx/0038-CVE-2014-8092-*: fix regression in
    previous security update by allowing zero-height PutImage requests in
    dix/dispatch.c.

Author: Marc Deslauriers
Author Date: 2015-02-12 13:26:41 UTC

Import patches-unapplied version 2:1.16.0-1ubuntu1.3 to ubuntu/utopic-security

Imported using git-ubuntu import.

Changelog parent: 5c86846090ba690523c48bda32f055c6d0fd8fdb

New changelog entries:
  * SECURITY UPDATE: information leak and denial of service in
    XkbSetGeometry
    - debian/patches/CVE-2015-0255.patch: properly check lengths in
      xkb/xkb.c.
    - CVE-2015-0255
  * debian/patches/CVE-2014-8xxx/0038-CVE-2014-8092-*: fix regression in
    previous security update by allowing zero-height PutImage requests in
    dix/dispatch.c.

Author: Marc Deslauriers
Author Date: 2015-02-12 13:57:17 UTC

Import patches-unapplied version 2:1.11.4-0ubuntu10.17 to ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 44ec309905ccf30396926af1d5444ea2c49bbb5a

New changelog entries:
  * SECURITY UPDATE: information leak and denial of service in
    XkbSetGeometry
    - debian/patches/CVE-2015-0255.patch: properly check lengths in
      xkb/xkb.c.
    - CVE-2015-0255
  * SECURITY UPDATE: denial of service via invalid trapezoid (LP: #1197921)
    - debian/patches/CVE-2013-6424.patch: don't render invalid trapezoids
      in exa/exa_render.c, fix underflow in render/picture.h.
    - CVE-2013-6424
  * debian/patches/CVE-2014-8xxx/0038-CVE-2014-8092-*: fix regression in
    previous security update by allowing zero-height PutImage requests in
    dix/dispatch.c.

Author: Marc Deslauriers
Author Date: 2015-02-12 13:26:41 UTC

Import patches-unapplied version 2:1.16.0-1ubuntu1.3 to ubuntu/utopic-security

Imported using git-ubuntu import.

Changelog parent: 5c86846090ba690523c48bda32f055c6d0fd8fdb

New changelog entries:
  * SECURITY UPDATE: information leak and denial of service in
    XkbSetGeometry
    - debian/patches/CVE-2015-0255.patch: properly check lengths in
      xkb/xkb.c.
    - CVE-2015-0255
  * debian/patches/CVE-2014-8xxx/0038-CVE-2014-8092-*: fix regression in
    previous security update by allowing zero-height PutImage requests in
    dix/dispatch.c.

Author: Maarten Lankhorst
Author Date: 2014-11-03 11:36:32 UTC

Import patches-unapplied version 2:1.15.1-0ubuntu2.6 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: e7113a50064144507c4af0e1feccd7113893fdc3

New changelog entries:
  [ Laércio de Sousa ]
  * Backport support for logind-based multiseat back to trusty. (LP: #1209008)
  [ Maarten Lankhorst ]
  * Re-enable support for rotation and transforms on gpu-screens with support.
    - Allows re-enabling intel SNA rotation after fixing it. (LP: #1386620)
  * Fix black screen when using qemu with cirrus vga.
    - fb-24-depth.patch (LP: #1318119)

Author: Maarten Lankhorst
Author Date: 2014-09-10 10:30:55 UTC

Import patches-unapplied version 2:1.16.0-1ubuntu1 to ubuntu/utopic-proposed

Imported using git-ubuntu import.

Changelog parent: b187acc395a0632daec0e32df82d5547b24a451e

New changelog entries:
  [ Maarten Lankhorst ]
  * New upstream release.
    - Refresh patches.
  * Merge from released debian sid.
  [ Christopher James Halse Rogers ]
  * Refresh XMir patch

Author: Maarten Lankhorst
Author Date: 2014-09-10 10:30:55 UTC

Import patches-unapplied version 2:1.16.0-1ubuntu1 to ubuntu/utopic-proposed

Imported using git-ubuntu import.

Changelog parent: b187acc395a0632daec0e32df82d5547b24a451e

New changelog entries:
  [ Maarten Lankhorst ]
  * New upstream release.
    - Refresh patches.
  * Merge from released debian sid.
  [ Christopher James Halse Rogers ]
  * Refresh XMir patch

Author: Maarten Lankhorst
Author Date: 2014-04-22 10:37:21 UTC

Import patches-unapplied version 2:1.14.6-0ubuntu1 to ubuntu/saucy-proposed

Imported using git-ubuntu import.

Changelog parent: 9288850acb3ca79c83bdeccc1632aa7837e359a9

New changelog entries:
  * New upstream release (MRE).
  * Disable support for rotations and transforms
    on gpu screens for now. (LP: #1308515)
  * Only set RR caps that are appropriate to main/gpu screen. (LP: #1277014)
  * Fix crash in RRCrtcDetachScanoutPixmap. (LP: #1280743)

Author: Maarten Lankhorst
Author Date: 2014-04-22 10:37:21 UTC

Import patches-unapplied version 2:1.14.6-0ubuntu1 to ubuntu/saucy-proposed

Imported using git-ubuntu import.

Changelog parent: 9288850acb3ca79c83bdeccc1632aa7837e359a9

New changelog entries:
  * New upstream release (MRE).
  * Disable support for rotations and transforms
    on gpu screens for now. (LP: #1308515)
  * Only set RR caps that are appropriate to main/gpu screen. (LP: #1277014)
  * Fix crash in RRCrtcDetachScanoutPixmap. (LP: #1280743)

Author: Maarten Lankhorst
Author Date: 2014-04-22 10:37:21 UTC

Import patches-unapplied version 2:1.14.6-0ubuntu1 to ubuntu/saucy-proposed

Imported using git-ubuntu import.

Changelog parent: 9288850acb3ca79c83bdeccc1632aa7837e359a9

New changelog entries:
  * New upstream release (MRE).
  * Disable support for rotations and transforms
    on gpu screens for now. (LP: #1308515)
  * Only set RR caps that are appropriate to main/gpu screen. (LP: #1277014)
  * Fix crash in RRCrtcDetachScanoutPixmap. (LP: #1280743)

Author: Maarten Lankhorst
Author Date: 2014-04-16 08:14:39 UTC

Import patches-unapplied version 2:1.15.1-0ubuntu2 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: d2f537930c19ae904c273b5be588c5f86ccb0d64

New changelog entries:
  * Disable support for rotations and transforms
    on gpu screens for now. (LP: #1308515)

Author: Julien Cristau
Author Date: 2013-12-17 19:21:57 UTC

Import patches-unapplied version 2:1.7.7-18 to debian/squeeze

Imported using git-ubuntu import.

Changelog parent: d52565eef2402f1b837eaffc3474e924e6d4aec5

New changelog entries:
  * exa: only draw valid trapezoids
    Addresses CVE-2013-6424
  * CVE-2013-4396

Author: Julien Cristau
Author Date: 2013-12-17 19:21:57 UTC

Import patches-applied version 2:1.7.7-18 to applied/debian/squeeze

Imported using git-ubuntu import.

Changelog parent: 3bb7fdfe556c99ac46c7a71dc14640f43aa2840a
Unapplied parent: 23516e3925abcf41991f73626426eab598b1dbe9

New changelog entries:
  * exa: only draw valid trapezoids
    Addresses CVE-2013-6424
  * CVE-2013-4396

Author: Maarten Lankhorst
Author Date: 2013-02-12 14:18:32 UTC

Import patches-unapplied version 2:1.13.0-0ubuntu6.5 to ubuntu/quantal-proposed

Imported using git-ubuntu import.

Changelog parent: 7ec828fd03237a6bd6110385489ceed00129fbb5

New changelog entries:
  [ Maarten Lankhorst ]
  * add patch to fix starting xorg-server with no outputs connected (LP: #1122072)
    - fixup-headless.patch
  [ Shih-Yuan Lee ]
  * Add 238-fix-erratic-cursor-movement.patch to fix erratic cursor movement
    when using cursor movement when using "Coordinate Transformation Matrix".
    (LP: #1212123)
  [ Timo Aaltonen ]
  * Fix patch 500 to apply.
  * dix-fix-zaphod-screen-crossing.diff: Fix pointer screen crossing. (LP: #1068920)

Author: Maarten Lankhorst
Author Date: 2013-02-12 14:18:32 UTC

Import patches-unapplied version 2:1.13.0-0ubuntu6.5 to ubuntu/quantal-proposed

Imported using git-ubuntu import.

Changelog parent: 7ec828fd03237a6bd6110385489ceed00129fbb5

New changelog entries:
  [ Maarten Lankhorst ]
  * add patch to fix starting xorg-server with no outputs connected (LP: #1122072)
    - fixup-headless.patch
  [ Shih-Yuan Lee ]
  * Add 238-fix-erratic-cursor-movement.patch to fix erratic cursor movement
    when using cursor movement when using "Coordinate Transformation Matrix".
    (LP: #1212123)
  [ Timo Aaltonen ]
  * Fix patch 500 to apply.
  * dix-fix-zaphod-screen-crossing.diff: Fix pointer screen crossing. (LP: #1068920)

Author: Maarten Lankhorst
Author Date: 2013-02-12 14:18:32 UTC

Import patches-unapplied version 2:1.13.0-0ubuntu6.5 to ubuntu/quantal-proposed

Imported using git-ubuntu import.

Changelog parent: 7ec828fd03237a6bd6110385489ceed00129fbb5

New changelog entries:
  [ Maarten Lankhorst ]
  * add patch to fix starting xorg-server with no outputs connected (LP: #1122072)
    - fixup-headless.patch
  [ Shih-Yuan Lee ]
  * Add 238-fix-erratic-cursor-movement.patch to fix erratic cursor movement
    when using cursor movement when using "Coordinate Transformation Matrix".
    (LP: #1212123)
  [ Timo Aaltonen ]
  * Fix patch 500 to apply.
  * dix-fix-zaphod-screen-crossing.diff: Fix pointer screen crossing. (LP: #1068920)

Author: Marc Deslauriers
Author Date: 2013-10-16 10:38:07 UTC

Import patches-unapplied version 2:1.13.3-0ubuntu6.2 to ubuntu/raring-security

Imported using git-ubuntu import.

Changelog parent: dde7a436aff0bf6a60963e7a7c292d92345b8077

New changelog entries:
  * SECURITY UPDATE: denial of service and possible code execution via
    use after free in ImageText request handling.
    - debian/patches/CVE-2013-4396.patch: avoid use after free in
      dix/dixfonts.c.
    - CVE-2013-4396
  * SECURITY UPDATE: unsafe use of xkb cache files
    - debian/patches/190_cache-xkbcomp_output_for_fast_start_up.patch:
      updated to not use xkb cache files in /tmp when running a non-root
      server.
    - CVE-2013-1056
  * This package does _not_ contain the changes from 2:1.13.3-0ubuntu6.2
    in raring-proposed.

Author: Marc Deslauriers
Author Date: 2013-10-16 10:38:07 UTC

Import patches-unapplied version 2:1.13.3-0ubuntu6.2 to ubuntu/raring-security

Imported using git-ubuntu import.

Changelog parent: dde7a436aff0bf6a60963e7a7c292d92345b8077

New changelog entries:
  * SECURITY UPDATE: denial of service and possible code execution via
    use after free in ImageText request handling.
    - debian/patches/CVE-2013-4396.patch: avoid use after free in
      dix/dixfonts.c.
    - CVE-2013-4396
  * SECURITY UPDATE: unsafe use of xkb cache files
    - debian/patches/190_cache-xkbcomp_output_for_fast_start_up.patch:
      updated to not use xkb cache files in /tmp when running a non-root
      server.
    - CVE-2013-1056
  * This package does _not_ contain the changes from 2:1.13.3-0ubuntu6.2
    in raring-proposed.

Author: Marc Deslauriers
Author Date: 2013-10-16 10:38:07 UTC

Import patches-unapplied version 2:1.13.3-0ubuntu6.2 to ubuntu/raring-security

Imported using git-ubuntu import.

Changelog parent: dde7a436aff0bf6a60963e7a7c292d92345b8077

New changelog entries:
  * SECURITY UPDATE: denial of service and possible code execution via
    use after free in ImageText request handling.
    - debian/patches/CVE-2013-4396.patch: avoid use after free in
      dix/dixfonts.c.
    - CVE-2013-4396
  * SECURITY UPDATE: unsafe use of xkb cache files
    - debian/patches/190_cache-xkbcomp_output_for_fast_start_up.patch:
      updated to not use xkb cache files in /tmp when running a non-root
      server.
    - CVE-2013-1056
  * This package does _not_ contain the changes from 2:1.13.3-0ubuntu6.2
    in raring-proposed.

Author: Marc Deslauriers
Author Date: 2013-10-16 10:44:50 UTC

Import patches-unapplied version 2:1.13.0-0ubuntu6.4 to ubuntu/quantal-security

Imported using git-ubuntu import.

Changelog parent: cf27cc680a28118120a82e8de586d2de62599fa3

New changelog entries:
  * SECURITY UPDATE: denial of service and possible code execution via
    use after free in ImageText request handling.
    - debian/patches/CVE-2013-4396.patch: avoid use after free in
      dix/dixfonts.c.
    - CVE-2013-4396
  * SECURITY UPDATE: unsafe use of xkb cache files
    - debian/patches/190_cache-xkbcomp_output_for_fast_start_up.patch:
      updated to not use xkb cache files in /tmp when running a non-root
      server.
    - CVE-2013-1056
  * This package does _not_ contain the changes from 2:1.13.0-0ubuntu6.3
    in quantal-proposed.

Author: Timo Aaltonen
Author Date: 2013-10-15 09:05:48 UTC

Import patches-unapplied version 2:1.14.3-3ubuntu2 to ubuntu/saucy-proposed

Imported using git-ubuntu import.

Changelog parent: e9d439366cfa23d2932804d403bcc1392851519f

New changelog entries:
  * avoid-use-after-free.diff: Fix CVE-2013-4396.

Author: Maarten Lankhorst
Author Date: 2013-07-09 09:39:38 UTC

Import patches-unapplied version 2:1.13.3-0ubuntu6.1 to ubuntu/raring-proposed

Imported using git-ubuntu import.

Changelog parent: dde7a436aff0bf6a60963e7a7c292d92345b8077

New changelog entries:
  * Add patch to fixup optimus again. (LP: #1185014)
    - xf86-dont-enable-gpuscreens.patch
  * Add patch to fix DPMS. (LP: #1184999)
    - include-GPU-screens-in-DPMS-code.patch
  * Add patch to fix crash on hybrid systems during shutdown. (LP: #1185035)
    - xf86-detach-scanout.patch
  * Add patch to fix device enumeration with nvidia drivers. (LP: #1190546)
    - xf86-fixup-detection.patch
    - xf86-inactive-gpuscreen.patch

Author: Jamie Strandboge
Author Date: 2013-04-17 14:41:17 UTC

Import patches-unapplied version 2:1.13.3-0ubuntu6 to ubuntu/raring-proposed

Imported using git-ubuntu import.

Changelog parent: 38d7673f36081c9aa04491ab5477c513ef98ca63

New changelog entries:
  * SECURITY UPDATE: input event leak via inactive VT
    - debian/patches/CVE-2013-1940.patch: fix flush input to work with
      Linux evdev devices in hw/xfree86/os-support/shared/posix_tty.c.
    - CVE-2013-1940

Author: Marc Deslauriers
Author Date: 2013-04-11 12:49:53 UTC

Import patches-unapplied version 2:1.7.6-2ubuntu7.12 to ubuntu/lucid-security

Imported using git-ubuntu import.

Changelog parent: 3aaa09a53bf2fe781f9abb4826dae1c68b434ebf

New changelog entries:
  * SECURITY UPDATE: input event leak via inactive VT
    - debian/patches/CVE-2013-1940.patch: fix flush input to work with
      Linux evdev devices in hw/xfree86/os-support/shared/posix_tty.c.
    - CVE-2013-1940

Author: Marc Deslauriers
Author Date: 2013-04-11 12:49:53 UTC

Import patches-unapplied version 2:1.7.6-2ubuntu7.12 to ubuntu/lucid-security

Imported using git-ubuntu import.

Changelog parent: 3aaa09a53bf2fe781f9abb4826dae1c68b434ebf

New changelog entries:
  * SECURITY UPDATE: input event leak via inactive VT
    - debian/patches/CVE-2013-1940.patch: fix flush input to work with
      Linux evdev devices in hw/xfree86/os-support/shared/posix_tty.c.
    - CVE-2013-1940

Author: Marc Deslauriers
Author Date: 2013-04-11 12:43:44 UTC

Import patches-unapplied version 2:1.10.4-1ubuntu4.5 to ubuntu/oneiric-security

Imported using git-ubuntu import.

Changelog parent: 98fc88da6a3790d9af394f37f0a024c2fbaa4e6f

New changelog entries:
  * SECURITY UPDATE: input event leak via inactive VT
    - debian/patches/CVE-2013-1940.patch: fix flush input to work with
      Linux evdev devices in hw/xfree86/os-support/shared/posix_tty.c.
    - CVE-2013-1940

Author: Marc Deslauriers
Author Date: 2013-04-11 12:43:44 UTC

Import patches-unapplied version 2:1.10.4-1ubuntu4.5 to ubuntu/oneiric-security

Imported using git-ubuntu import.

Changelog parent: 98fc88da6a3790d9af394f37f0a024c2fbaa4e6f

New changelog entries:
  * SECURITY UPDATE: input event leak via inactive VT
    - debian/patches/CVE-2013-1940.patch: fix flush input to work with
      Linux evdev devices in hw/xfree86/os-support/shared/posix_tty.c.
    - CVE-2013-1940

Author: Marc Deslauriers
Author Date: 2013-04-11 12:43:44 UTC

Import patches-unapplied version 2:1.10.4-1ubuntu4.5 to ubuntu/oneiric-security

Imported using git-ubuntu import.

Changelog parent: 98fc88da6a3790d9af394f37f0a024c2fbaa4e6f

New changelog entries:
  * SECURITY UPDATE: input event leak via inactive VT
    - debian/patches/CVE-2013-1940.patch: fix flush input to work with
      Linux evdev devices in hw/xfree86/os-support/shared/posix_tty.c.
    - CVE-2013-1940

Author: Marc Deslauriers
Author Date: 2013-04-11 12:49:53 UTC

Import patches-unapplied version 2:1.7.6-2ubuntu7.12 to ubuntu/lucid-security

Imported using git-ubuntu import.

Changelog parent: 3aaa09a53bf2fe781f9abb4826dae1c68b434ebf

New changelog entries:
  * SECURITY UPDATE: input event leak via inactive VT
    - debian/patches/CVE-2013-1940.patch: fix flush input to work with
      Linux evdev devices in hw/xfree86/os-support/shared/posix_tty.c.
    - CVE-2013-1940

Author: Marc Deslauriers
Author Date: 2013-02-12 21:45:02 UTC

Import patches-unapplied version 2:1.11.4-0ubuntu10.12 to ubuntu/precise-proposed

Imported using git-ubuntu import.

Changelog parent: 8f091a219d5414f60a5ad9c7f3b6b46ce872e787

New changelog entries:
  * debian/patches/238-xrandr-fix-panning.patch: disable CRTC cursor
    confinement when panning is enabled. (LP: #883319)

Author: Timo Aaltonen
Author Date: 2012-10-08 14:58:54 UTC

Import patches-unapplied version 2:1.13.0-0ubuntu6 to ubuntu/quantal

Imported using git-ubuntu import.

Changelog parent: 991124a1f9ce94dfc4694ba93524a80484e07cd7

New changelog entries:
  [ Timo Aaltonen ]
  * patches/series: Reorganize our patches in categories in order to
    make reviewing and rebasing easier.
  [ Maarten Lankhorst ]
  * add 232-xf86compatoutput-valgrind.patch to silence a valgrind error

Author: Bryce Harrington
Author Date: 2012-05-18 02:20:08 UTC

Import patches-unapplied version 2:1.10.4-1ubuntu4.3 to ubuntu/oneiric-proposed

Imported using git-ubuntu import.

Changelog parent: 7cf564e7d58bbb6c588708203422bb19975d3480

New changelog entries:
  * debian/patches/227_null_ptr_midispcur.patch:
    - Check for NULL pointer before dereferencing pointer from
      miGetDCDevice. Fixes crash after connecting a bluetooth keyboard.
      (LP: #930936)

Author: Chase Douglas
Author Date: 2012-04-04 23:53:33 UTC

Import patches-unapplied version 2:1.11.4-0ubuntu10 to ubuntu/precise

Imported using git-ubuntu import.

Changelog parent: 92b9583b31589f1002849fc8347329fd81741efc

New changelog entries:
  * Fix touchscreen pointer emulation (LP: #949791)
    - Add temporary patch 506_touchscreen_pointer_emulation_checks.patch

Author: Jose Plans
Author Date: 2012-02-22 23:15:47 UTC

Import patches-unapplied version 2:1.7.6-2ubuntu7.11 to ubuntu/lucid-proposed

Imported using git-ubuntu import.

Changelog parent: 46c558663a905783fac8572bc97b48a3d2612c3e

New changelog entries:
  * Add 209_fixes-crash-XIQueryDevice.patch fixing a crash in XIQueryDevice
    which calls strlen on a NULL pointer.
    (LP #933745)

Author: Marc Deslauriers
Author Date: 2011-10-20 14:42:45 UTC

Import patches-unapplied version 2:1.9.0-0ubuntu7.6 to ubuntu/maverick-security

Imported using git-ubuntu import.

Changelog parent: 512206579b4918f12519230cfe9079664d22a6d9

New changelog entries:
  * SECURITY UPDATE: denial of service and possible code execution via
    incorrect input sanitization
    - debian/patches/212_CVE-2010-4818.patch: updated with missing
      commit to fix regression.
    - CVE-2010-4818

Author: Marc Deslauriers
Author Date: 2011-10-20 14:42:45 UTC

Import patches-unapplied version 2:1.9.0-0ubuntu7.6 to ubuntu/maverick-security

Imported using git-ubuntu import.

Changelog parent: 512206579b4918f12519230cfe9079664d22a6d9

New changelog entries:
  * SECURITY UPDATE: denial of service and possible code execution via
    incorrect input sanitization
    - debian/patches/212_CVE-2010-4818.patch: updated with missing
      commit to fix regression.
    - CVE-2010-4818

Author: Marc Deslauriers
Author Date: 2011-10-20 14:42:45 UTC

Import patches-unapplied version 2:1.9.0-0ubuntu7.6 to ubuntu/maverick-security

Imported using git-ubuntu import.

Changelog parent: 512206579b4918f12519230cfe9079664d22a6d9

New changelog entries:
  * SECURITY UPDATE: denial of service and possible code execution via
    incorrect input sanitization
    - debian/patches/212_CVE-2010-4818.patch: updated with missing
      commit to fix regression.
    - CVE-2010-4818

Author: Marc Deslauriers
Author Date: 2011-10-13 15:03:44 UTC

Import patches-unapplied version 2:1.10.1-1ubuntu1.3 to ubuntu/natty-security

Imported using git-ubuntu import.

Changelog parent: 4cbec852da16df3e7551b77ecad501fcbab1058c

New changelog entries:
  * SECURITY UPDATE: file existence disclosure
    - debian/patches/505_CVE-2011-4028.patch: open lockfile with O_NOFOLLOW
      in os/utils.c.
    - CVE-2011-4028
  * SECURITY UPDATE: privilege escalation via file permission change
    - debian/patches/506_CVE-2011-4029.patch: use fchmod to prevent race
      in os/utils.c.
    - CVE-2011-4029

Author: Marc Deslauriers
Author Date: 2011-10-13 15:03:44 UTC

Import patches-unapplied version 2:1.10.1-1ubuntu1.3 to ubuntu/natty-security

Imported using git-ubuntu import.

Changelog parent: 4cbec852da16df3e7551b77ecad501fcbab1058c

New changelog entries:
  * SECURITY UPDATE: file existence disclosure
    - debian/patches/505_CVE-2011-4028.patch: open lockfile with O_NOFOLLOW
      in os/utils.c.
    - CVE-2011-4028
  * SECURITY UPDATE: privilege escalation via file permission change
    - debian/patches/506_CVE-2011-4029.patch: use fchmod to prevent race
      in os/utils.c.
    - CVE-2011-4029

Author: Marc Deslauriers
Author Date: 2011-10-13 15:03:44 UTC

Import patches-unapplied version 2:1.10.1-1ubuntu1.3 to ubuntu/natty-security

Imported using git-ubuntu import.

Changelog parent: 4cbec852da16df3e7551b77ecad501fcbab1058c

New changelog entries:
  * SECURITY UPDATE: file existence disclosure
    - debian/patches/505_CVE-2011-4028.patch: open lockfile with O_NOFOLLOW
      in os/utils.c.
    - CVE-2011-4028
  * SECURITY UPDATE: privilege escalation via file permission change
    - debian/patches/506_CVE-2011-4029.patch: use fchmod to prevent race
      in os/utils.c.
    - CVE-2011-4029