[src/netbsd-6-1]: src/doc 1280

[snj <snj%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/50fbbf20d127
branches:  netbsd-6-1
changeset: 776060:50fbbf20d127
user:      snj <snj%NetBSD.org@localhost>
date:      Tue Mar 17 18:38:59 2015 +0000

description:
1280

diffstat:

 doc/CHANGES-6.1.6 |  11 ++++++++++-
 1 files changed, 10 insertions(+), 1 deletions(-)

diffs (22 lines):

diff -r 5cb34b8588bd -r 50fbbf20d127 doc/CHANGES-6.1.6
--- a/doc/CHANGES-6.1.6 Thu Mar 05 22:26:20 2015 +0000
+++ b/doc/CHANGES-6.1.6 Tue Mar 17 18:38:59 2015 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-6.1.6,v 1.1.2.32 2015/03/05 22:26:20 riz Exp $
+# $NetBSD: CHANGES-6.1.6,v 1.1.2.33 2015/03/17 18:38:59 snj Exp $
 
 A complete list of changes from the NetBSD 6.1.5 release to the NetBSD 6.1.6
 release:
@@ -4122,3 +4122,12 @@
        man pages on a system that doesn't have the text set.  Fixes PR 49230.
        [snj, ticket #1263]
 
+xsrc/external/mit/libXfont/dist/src/bitmap/bdfread.c patch
+xsrc/xfree/xc/lib/font/bitmap/bdfread.c        patch
+
+       Fix CVE-2015-1802 (bdfReadProperties: property count needs
+       range check), CVE-2015-1803 (bdfReadCharacters: bailout if a
+       char's bitmap cannot be read), and CVE-2015-1804
+       (bdfReadCharacters: ensure metrics fit into xCharInfo struct)
+       [mrg, ticket #1280]
+