Debian Patches

Status for deskflow/1.26.0+dfsg-5

Patch Description Author Forwarded Bugs Origin Last update
disable-update-check.patch Always disable update check on startup Kentaro HAYASHI <kenhys@xdump.org> not-needed 2025-08-09
CVE-2026-41476.patch fix: clipboard buffer overrun using propose solution from kitknox sithlord48 <sithlord48@gmail.com> yes debian upstream https://github.com/deskflow/deskflow/commit/e3f42ed398cad909e9b21cc49cbcc41ff16b81ce 2026-04-16
CVE-2026-44296.patch fix(tls): prevent DoS by removing blocking sleep Nick Bolton <nick@symless.com> no https://github.com/deskflow/deskflow/commit/329783490bd16774ba903b84212467d20d76bfba 2026-04-28
CVE-2026-63409.patch [PATCH] fix: Check options array is always an even size Kentaro Hayashi <kenhys@xdump.org> no debian https://github.com/deskflow/deskflow/commit/8266fbbe6af93fa370018886c7f1f35d2cee8b3f 2026-08-26
CVE-2026-65832.patch [PATCH] fix: clamp mapped modifiers The clamps the upstream commit puts on the return value of translateKey and
translateModifierMask were dropped again upstream, they clamp key ids to the
range of the modifier ids. Only the clamp on the table the server fills is
kept here.
Origin:
https://github.com/deskflow/deskflow/commit/205a3c803e5298d56683660736ec1a41b671b56e.patch		 Kentaro Hayashi <kenhys@xdump.org> no debian 2026-08-26
CVE-2026-65976-1.patch [PATCH] fix: enforce clipboard receive size limits The test uses LogLevel::Debug, the LogLevel of 1.26.0 is a plain enum class.
Origin:
https://github.com/deskflow/deskflow/commit/8a535fd5dd48315eaaf6b93d5c7534d0592addef		 Kentaro Hayashi <kenhys@xdump.org> no debian 2026-08-26
add-clipboard-size-setting.patch feat(Settings): add the server clipboard size setting Add the "server/clipboardSize" key used by the fix for CVE-2026-65976, it is
not part of 1.26.0. The gui is not wired up to the key. The default is 64 MiB
rather than the 3 MiB used upstream, since data above the limit disconnects
the client instead of skipping the transfer.
.
Give the clipboard size of the server the same default. It kept INT_MAX until
an option sets it, which leaves the receive limit of the server unbounded for
a config file without a clipboardSharingSize option.
Origin:
https://github.com/deskflow/deskflow/commit/e58c41ac5e43edc16df785bfbe3ab81ce5bb3e65		 Kentaro Hayashi <kenhys@xdump.org> no debian 2026-08-26
CVE-2026-65976-2.patch [PATCH] fix: use local clipboard limit for client receiveOrigin:
https://github.com/deskflow/deskflow/commit/bcd3a658fc3b2ad735146fdc9efefa9462d195b7		 Kentaro Hayashi <kenhys@xdump.org> no debian 2026-08-26

All known versions for source package 'deskflow'

Links