Debian Patches

Status for godot/4.6.3+ds-3

Patch Description Author Forwarded Bugs Origin Last update
Fix-out-of-bounds-reads-with-corrupt-OptimizedTranslation.patch Fix out-of-bounds reads with corrupt OptimizedTranslation data
Validate bucket and string offsets, and bounds-check smaz decompression input.
Rémi Verschelde <rverschelde@gmail.com> no backport, commit:a3019c809c022455028b373707ef1ee0c03561bf 2026-10-20
Allow-setting-explicit-output-path.patch Allow setting explicit output path Travis Wrightsman <travis@wrightsman.org> yes 2025-10-23
Make-generated-doc-data-hash-deterministic.patch Make generated doc data hash deterministic
Python's build-in hash() is intentionally randomized between processes. This
prevents Godot from building reproducibly since identical source input produces
different hashed values each build. SHA-256 is used here as a deterministic
alternative hash function.
Travis Wrightsman <travis@wrightsman.org> yes 2026-07-10
Fix-out-of-bounds-write-when-loading-corrupt-HDR-images.patch Fix out-of-bounds write when loading corrupt HDR images
Validate the image size and the RLE run and dump lengths.
Rémi Verschelde <rverschelde@gmail.com> no backport, commit:dd274579a6f5cdecac873833d62eb90b21fe5466 2026-10-20
Fix-heap-overflow-with-invalid-string-length-in-binary-re.patch Fix heap overflow with invalid string length in binary resources Rémi Verschelde <rverschelde@gmail.com> no backport, commit:c67e2529f63e76a6aaef48ba70168c62cfd00c51 2026-10-20

All known versions for source package 'godot'

Links