Module Name: src Committed By: riz Date: Fri Aug 19 20:57:23 UTC 2011
Modified Files: src/doc [netbsd-5-0]: CHANGES-5.0.3 Log Message: Ticket 1661. To generate a diff of this commit: cvs rdiff -u -r1.1.2.45 -r1.1.2.46 src/doc/CHANGES-5.0.3 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
Modified files: Index: src/doc/CHANGES-5.0.3 diff -u src/doc/CHANGES-5.0.3:1.1.2.45 src/doc/CHANGES-5.0.3:1.1.2.46 --- src/doc/CHANGES-5.0.3:1.1.2.45 Mon Aug 8 19:36:22 2011 +++ src/doc/CHANGES-5.0.3 Fri Aug 19 20:57:23 2011 @@ -1,4 +1,4 @@ -# $NetBSD: CHANGES-5.0.3,v 1.1.2.45 2011/08/08 19:36:22 riz Exp $ +# $NetBSD: CHANGES-5.0.3,v 1.1.2.46 2011/08/19 20:57:23 riz Exp $ A complete list of changes from the NetBSD 5.0.2 release to the NetBSD 5.0.3 release: @@ -2804,3 +2804,13 @@ Prevent crash when using 'ifconfig destroy'. [sborrill, ticket #1643] +xsrc/external/mit/freetype/dist/src/lzw/ftzopen.c 1.4 +xsrc/external/mit/libXfont/dist/src/fontfile/decompress.c 1.2-1.3 +src/usr.bin/compress/zopen.c 1.14-1.15 +src/usr.bin/gzip/zuncompress.c 1.9-1.11 +xsrc/xfree/xc/extras/freetype2/src/lzw/zopen.c 1.2 +xsrc/xfree/xc/lib/font/fontfile/decompress.c 1.2 + + Address CVE-2011-2895, buffer overflow in decompression. + [joerg, ticket #1661] +