CVS commit: [pkgsrc-2013Q4] pkgsrc/x11/libXfont

["Matthias Scheler" <tron%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tron
Date:           Tue Jan  7 17:11:53 UTC 2014

Modified Files:
        pkgsrc/x11/libXfont [pkgsrc-2013Q4]: Makefile distinfo
Added Files:
        pkgsrc/x11/libXfont/patches [pkgsrc-2013Q4]: patch-src_bitmap_bdfread.c

Log Message:
Pullup ticket #4287 - requested by wiz
x11/libXfont: security patch

Revisions pulled up:
- x11/libXfont/Makefile                                         1.29
- x11/libXfont/distinfo                                         1.20
- x11/libXfont/patches/patch-src_bitmap_bdfread.c               1.1

---
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Tue Jan  7 07:39:49 UTC 2014

   Modified Files:
        pkgsrc/x11/libXfont: Makefile distinfo
   Added Files:
        pkgsrc/x11/libXfont/patches: patch-src_bitmap_bdfread.c

   Log Message:
   CVE-2013-6462:
   A BDF font file containing a longer than expected string could
   overflow the buffer on the stack.  Testing in X servers built with
   Stack Protector resulted in an immediate crash when reading a
   user-provided specially crafted font.

   Bump PKGREVISION.


To generate a diff of this commit:
cvs rdiff -u -r1.28 -r1.28.4.1 pkgsrc/x11/libXfont/Makefile
cvs rdiff -u -r1.19 -r1.19.4.1 pkgsrc/x11/libXfont/distinfo
cvs rdiff -u -r0 -r1.1.2.2 \
    pkgsrc/x11/libXfont/patches/patch-src_bitmap_bdfread.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.