[src/netbsd-6-0]: src/doc 1280

[snj <snj%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/7771bbe0a5fe
branches:  netbsd-6-0
changeset: 775058:7771bbe0a5fe
user:      snj <snj%NetBSD.org@localhost>
date:      Tue Mar 17 18:38:37 2015 +0000

description:
1280

diffstat:

 doc/CHANGES-6.0.7 |  11 ++++++++++-
 1 files changed, 10 insertions(+), 1 deletions(-)

diffs (22 lines):

diff -r 974f0ffdf9ef -r 7771bbe0a5fe doc/CHANGES-6.0.7
--- a/doc/CHANGES-6.0.7 Thu Mar 05 22:26:53 2015 +0000
+++ b/doc/CHANGES-6.0.7 Tue Mar 17 18:38:37 2015 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-6.0.7,v 1.1.2.32 2015/03/05 22:26:53 riz Exp $
+# $NetBSD: CHANGES-6.0.7,v 1.1.2.33 2015/03/17 18:38:37 snj Exp $
 
 A complete list of changes from the NetBSD 6.0.6 release to the NetBSD 6.0.7
 release:
@@ -4388,3 +4388,12 @@
        man pages on a system that doesn't have the text set.  Fixes PR 49230.
        [snj, ticket #1263]
 
+xsrc/external/mit/libXfont/dist/src/bitmap/bdfread.c patch
+xsrc/xfree/xc/lib/font/bitmap/bdfread.c        patch
+
+       Fix CVE-2015-1802 (bdfReadProperties: property count needs
+       range check), CVE-2015-1803 (bdfReadCharacters: bailout if a
+       char's bitmap cannot be read), and CVE-2015-1804
+       (bdfReadCharacters: ensure metrics fit into xCharInfo struct)
+       [mrg, ticket #1280]
+