Branches for Intrepid

Author: Dustin Kirkland 
Revision Date: 2008-09-24 17:25:20 UTC

* debian/patches/evdev_keycode_map.patch, debian/patches/series: ported the
  gtk-vnc patch that fixes evdev keycode mapping (LP: #258389)
* debian/control: explicitly depend on libx11-dev

Author: Dustin Kirkland 
Revision Date: 2009-11-04 13:25:03 UTC

debian/patches/Fix-cluster-freeing-in-qcow2.patch: cherry-pick
from upstream, fixes regression caused by
qcow2-corruption-Fix-alloc_cluster_link_l2-Kevin-W.patch
LP: #404394

Author: Dustin Kirkland 
Revision Date: 2009-05-07 16:41:38 UTC

* debian/patches/SECURITY_CVE-2008-1945:
  - SECURITY UPDATE: guest OS users may read arbitrary files on host OS
    + qemu/hw/usb-msd.c: Add image format option for USB mass-storage
      $devices; Author: Aurelien Jarno <aurelien@aurel32.net>
    + CVE-2008-1945: commit 334c0241c006533d1f4ed7e07239ec00b46c6efd
* debian/patches/CVE-2008-2382:
  - SECURITY UPDATE: remote denial of service via crafted message to vnc
    + qemu/vnc.c: Properly handle the case of SetPixelEncodings with a
      length of zero.; Author: Anthony Liguori <aliguori@us.ibm.com>
    + CVE-2008-2382: commit 69dd5c9ffd5c0c6a01ad14b9c6a8d7135ccc2b9a
* debian/patches/CVE-2008-4539:
  - SECURITY UPDATE: local users might gain privileges via heap overflow
    + qemu/hw/cirrus_vga.c: fix a heap overflow in Cirrus emulation;
      Author: Aurelien Jarno <aurelien@aurel32.net>
    + CVE-2008-4539: commit 65d35a09979e63541afc5bfc595b9f1b1b4ae069
* debian/patches/CVE-2008-5714:
  - SECURITY UPDATE: vnc password limited to 7, rather than 8 characters
    + qemu/monitor.c: monitor_readline expects buf_size to include the
      terminating \0, but do_change_vnc in monitor.c calls it as though
      it doesn't; Authors: Chris Webb <chris@arachsys.com> and
      Anthony Liguori <aliguori@us.ibm.com>
    + CVE-2008-5714: commit 2a7e8dda090af586f3d0b3d157054a9e18776a52
* debian/patches/series: updated accordingly

Author: Dustin Kirkland 
Revision Date: 2009-05-07 16:41:38 UTC

* debian/patches/SECURITY_CVE-2008-1945:
  - SECURITY UPDATE: guest OS users may read arbitrary files on host OS
    + qemu/hw/usb-msd.c: Add image format option for USB mass-storage
      $devices; Author: Aurelien Jarno <aurelien@aurel32.net>
    + CVE-2008-1945: commit 334c0241c006533d1f4ed7e07239ec00b46c6efd
* debian/patches/CVE-2008-2382:
  - SECURITY UPDATE: remote denial of service via crafted message to vnc
    + qemu/vnc.c: Properly handle the case of SetPixelEncodings with a
      length of zero.; Author: Anthony Liguori <aliguori@us.ibm.com>
    + CVE-2008-2382: commit 69dd5c9ffd5c0c6a01ad14b9c6a8d7135ccc2b9a
* debian/patches/CVE-2008-4539:
  - SECURITY UPDATE: local users might gain privileges via heap overflow
    + qemu/hw/cirrus_vga.c: fix a heap overflow in Cirrus emulation;
      Author: Aurelien Jarno <aurelien@aurel32.net>
    + CVE-2008-4539: commit 65d35a09979e63541afc5bfc595b9f1b1b4ae069
* debian/patches/CVE-2008-5714:
  - SECURITY UPDATE: vnc password limited to 7, rather than 8 characters
    + qemu/monitor.c: monitor_readline expects buf_size to include the
      terminating \0, but do_change_vnc in monitor.c calls it as though
      it doesn't; Authors: Chris Webb <chris@arachsys.com> and
      Anthony Liguori <aliguori@us.ibm.com>
    + CVE-2008-5714: commit 2a7e8dda090af586f3d0b3d157054a9e18776a52
* debian/patches/series: updated accordingly