From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: [PATCH 0/8] Xorg security updates for the master branch Date: Wed, 5 Oct 2016 13:55:53 -0400 Message-ID: Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:51870) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1brqQs-0004T8-4Q for guix-devel@gnu.org; Wed, 05 Oct 2016 13:56:43 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1brqQn-0000wD-H6 for guix-devel@gnu.org; Wed, 05 Oct 2016 13:56:41 -0400 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:47583) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1brqQl-0000tO-4n for guix-devel@gnu.org; Wed, 05 Oct 2016 13:56:37 -0400 Received: from localhost.localdomain (c-73-188-17-148.hsd1.pa.comcast.net [73.188.17.148]) by mail.messagingengine.com (Postfix) with ESMTPA id AE909F2C78 for ; Wed, 5 Oct 2016 13:56:24 -0400 (EDT) List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: guix-devel@gnu.org There is an Xorg security advisory: https://lists.freedesktop.org/archives/xorg/2016-October/058344.html This patch series applies the patches recommended by upstream using grafts. Leo Famulari (8): gnu: libx11: Fix CVE-2016-{7942,7943}. gnu: libxfixes: Fix CVE-2016-7944. gnu: libxi: Fix CVE-2016-{7945,7946}. gnu: libxrandr: Fix CVE-2016-{7947,7948}. gnu: libxrender: Fix CVE-2016-{7949,7950}. gnu: libxtst: Fix CVE-2016-{7951,7952}. gnu: libxv: Fix CVE-2016-5407. gnu: libxvmc: Fix CVE-2016-7953. gnu/local.mk | 10 + gnu/packages/patches/libx11-CVE-2016-7942.patch | 76 ++++ gnu/packages/patches/libx11-CVE-2016-7943.patch | 113 ++++++ gnu/packages/patches/libxfixes-CVE-2016-7944.patch | 62 +++ .../libxi-CVE-2016-7945-CVE-2016-7946.patch | 420 +++++++++++++++++++ .../libxrandr-CVE-2016-7947-CVE-2016-7948.patch | 447 +++++++++++++++++++++ .../patches/libxrender-CVE-2016-7949.patch | 66 +++ .../patches/libxrender-CVE-2016-7950.patch | 73 ++++ .../libxtst-CVE-2016-7951-CVE-2016-7952.patch | 152 +++++++ gnu/packages/patches/libxv-CVE-2016-5407.patch | 162 ++++++++ gnu/packages/patches/libxvmc-CVE-2016-7953.patch | 42 ++ gnu/packages/xorg.scm | 66 +++ 12 files changed, 1689 insertions(+) create mode 100644 gnu/packages/patches/libx11-CVE-2016-7942.patch create mode 100644 gnu/packages/patches/libx11-CVE-2016-7943.patch create mode 100644 gnu/packages/patches/libxfixes-CVE-2016-7944.patch create mode 100644 gnu/packages/patches/libxi-CVE-2016-7945-CVE-2016-7946.patch create mode 100644 gnu/packages/patches/libxrandr-CVE-2016-7947-CVE-2016-7948.patch create mode 100644 gnu/packages/patches/libxrender-CVE-2016-7949.patch create mode 100644 gnu/packages/patches/libxrender-CVE-2016-7950.patch create mode 100644 gnu/packages/patches/libxtst-CVE-2016-7951-CVE-2016-7952.patch create mode 100644 gnu/packages/patches/libxv-CVE-2016-5407.patch create mode 100644 gnu/packages/patches/libxvmc-CVE-2016-7953.patch -- 2.10.1