[src/netbsd-7-0]: src/doc Ticket #1635

[martin <martin%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/ed65334b773a
branches:  netbsd-7-0
changeset: 801504:ed65334b773a
user:      martin <martin%NetBSD.org@localhost>
date:      Wed Aug 29 07:58:14 2018 +0000

description:
Ticket #1635

diffstat:

 doc/CHANGES-7.0.3 |  15 ++++++++++++++-
 1 files changed, 14 insertions(+), 1 deletions(-)

diffs (26 lines):

diff -r 13b85c63e3f5 -r ed65334b773a doc/CHANGES-7.0.3
--- a/doc/CHANGES-7.0.3 Tue Aug 14 14:37:05 2018 +0000
+++ b/doc/CHANGES-7.0.3 Wed Aug 29 07:58:14 2018 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-7.0.3,v 1.1.2.110 2018/08/14 14:37:05 martin Exp $
+# $NetBSD: CHANGES-7.0.3,v 1.1.2.111 2018/08/29 07:58:14 martin Exp $
 
 A complete list of changes from the NetBSD 7.0.2 release to the NetBSD 7.0.3
 release:
@@ -5484,3 +5484,16 @@
        Ignore zero-sized fragments.
        [maxv, ticket #1630]
 
+xsrc/external/mit/libX11/dist/src/FontNames.   (patch)
+xsrc/external/mit/libX11/dist/src/GetFPath.c   (patch)
+xsrc/external/mit/libX11/dist/src/LiHosts.c    (patch)
+xsrc/external/mit/libX11/dist/src/ListExt.c    (patch)
+
+       Apply fixes from libX11 1.6.5 for the following vulnerabilities:
+       Fixed off-by-one writes (CVE-2018-14599)
+       Validation of server response in XListHosts
+       Fixed out of boundary write (CVE-2018-14600)
+       Fixed crash on invalid reply (CVE-2018-14598)
+       [mrg, ticket #1635]
+
+