Module Name: src Committed By: snj Date: Tue Mar 17 18:43:10 UTC 2015
Modified Files: src/doc [netbsd-5]: CHANGES-5.3 Log Message: 1953 To generate a diff of this commit: cvs rdiff -u -r1.1.2.103 -r1.1.2.104 src/doc/CHANGES-5.3 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
Modified files: Index: src/doc/CHANGES-5.3 diff -u src/doc/CHANGES-5.3:1.1.2.103 src/doc/CHANGES-5.3:1.1.2.104 --- src/doc/CHANGES-5.3:1.1.2.103 Mon Mar 16 21:22:43 2015 +++ src/doc/CHANGES-5.3 Tue Mar 17 18:43:09 2015 @@ -1,4 +1,4 @@ -# $NetBSD: CHANGES-5.3,v 1.1.2.103 2015/03/16 21:22:43 bouyer Exp $ +# $NetBSD: CHANGES-5.3,v 1.1.2.104 2015/03/17 18:43:09 snj Exp $ A complete list of changes from the NetBSD 5.2 release to the NetBSD 5.3 release: @@ -3759,3 +3759,12 @@ distrib/utils/x_gzip/Makefile patch Sync gzip core with HEAD. [mrg, ticket #1951] +xsrc/external/mit/libXfont/dist/src/bitmap/bdfread.c patch +xsrc/xfree/xc/lib/font/bitmap/bdfread.c patch + + Fix CVE-2015-1802 (bdfReadProperties: property count needs + range check), CVE-2015-1803 (bdfReadCharacters: bailout if a + char's bitmap cannot be read), and CVE-2015-1804 + (bdfReadCharacters: ensure metrics fit into xCharInfo struct) + [mrg, ticket #1953] +