[src/netbsd-3-0]: src/doc ticket 1754

[bouyer <bouyer%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/870ee72d7854
branches:  netbsd-3-0
changeset: 579405:870ee72d7854
user:      bouyer <bouyer%NetBSD.org@localhost>
date:      Thu Apr 05 21:18:26 2007 +0000

description:
ticket 1754

diffstat:

 doc/CHANGES-3.0.3 |  13 ++++++++++++-
 1 files changed, 12 insertions(+), 1 deletions(-)

diffs (24 lines):

diff -r 38f4e97846ec -r 870ee72d7854 doc/CHANGES-3.0.3
--- a/doc/CHANGES-3.0.3 Thu Apr 05 00:35:28 2007 +0000
+++ b/doc/CHANGES-3.0.3 Thu Apr 05 21:18:26 2007 +0000
@@ -1,4 +1,4 @@
-#      $NetBSD: CHANGES-3.0.3,v 1.1.2.33 2007/04/05 00:34:42 ghen Exp $
+#      $NetBSD: CHANGES-3.0.3,v 1.1.2.34 2007/04/05 21:18:26 bouyer Exp $
 
 A complete list of changes from the NetBSD 3.0.2 release to the NetBSD 3.0.3
 release:
@@ -1629,3 +1629,14 @@
        XInitImage() (CVE 2007-1667).
        [drochner, ticket #1752]
 
+xfree/xc/extras/freetype2/src/bdf/bdflib.c     1.3
+
+       pull in a patch from freetype CVS (fix CVE-2007-1351):
+       * src/bdf/bdflib.c (setsbit, sbitset): Handle values >= 128
+         gracefully.
+         (_bdf_set_default_spacing): Increase `name' buffer size to 256 and
+         issue an error for longer names.
+         (_bdf_parse_glyphs): Limit allowed number of glyphs in font to the
+         number of code points in Unicode.
+       [drochner, ticket #1754]
+