GitLab

disable xhci-guard-xhci_kick_epctx-against-recursive-calls-CVE-2017-9375.patch for now (reopens: #864219)

nbd-fully-initialize-client-in-case-of-failed-negotiation-CVE-2017-9524.patch
nbd-fix-regression-on-resiliency-to-port-scan-CVE-2017-9524.patch
actually apply them, not only include in debian/patches/

nbd-fully-initialize-client-in-case-of-failed-negotiation-CVE-2017-9524.patch
nbd-fix-regression-on-resiliency-to-port-scan-CVE-2017-9524.patch

ide-core-add-cleanup-function.patch is a preparation patch

slirp-make-RA-build-more-flexible.patch slirp-send-RDNSS-in-RA-only-if-host-has-an-IPv6-DNS.patch (#844566)

Patches dropped because they're included in 2.8.1 release:
 9pfs-symlink-attack-fixes-CVE-2016-9602.patch
 char-fix-ctrl-a-b-not-working.patch
 cirrus-add-blit_is_unsafe-to-cirrus_bitblt_cputovideo-CVE-2017-2620.patch
 cirrus-fix-oob-access-issue-CVE-2017-2615.patch
 cirrus-ignore-source-pitch-as-needed-in-blit_is_unsafe.patch
 cirrus-vnc-zap-bitblit-support-from-console-code-CVE-2016-9603.patch
 linux-user-fix-s390x-safe-syscall-for-z900.patch
 nbd_client-fix-drop_sync-CVE-2017-2630.patch
 s390x-use-qemu-cpu-model-in-user-mode.patch
 sd-sdhci-check-data-length-during-dma_memory_read-CVE-2017-5667.patch
 virtio-crypto-fix-possible-integer-and-heap-overflow-CVE-2017-5931.patch
 vmxnet3-fix-memory-corruption-on-vlan-header-stripping-CVE-2017-6058.patch
 vnc-do-not-disconnect-on-EAGAIN.patch