Received: by mail.netbsd.org (Postfix, from userid 605) id 2178819CFAD; Wed, 6 Apr 2011 02:06:22 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 26BCA19CF9C for ; Wed, 6 Apr 2011 02:06:21 +0000 (UTC) X-Virus-Scanned: amavisd-new at NetBSD.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.NetBSD.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id Dtnssc0QQwXT for ; Wed, 6 Apr 2011 02:06:20 +0000 (UTC) Received: from cvs.netbsd.org (cvs.NetBSD.org [IPv6:2001:4f8:3:7:2e0:81ff:fe30:95bd]) by mail.netbsd.org (Postfix) with ESMTP id 293AA19CF98 for ; Wed, 6 Apr 2011 02:06:20 +0000 (UTC) Received: by cvs.netbsd.org (Postfix, from userid 500) id 055D2175DD; Wed, 6 Apr 2011 02:06:20 +0000 (UTC) MIME-Version: 1.0 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Date: Wed, 6 Apr 2011 02:06:19 +0000 From: "matthew green" Subject: CVS commit: xsrc/external/mit/xrdb/dist To: source-changes@NetBSD.org X-Mailer: log_accum Message-Id: <20110406020620.055D2175DD@cvs.netbsd.org> Sender: source-changes-owner@NetBSD.org List-Id: source-changes.NetBSD.org Precedence: bulk Reply-To: source-changes-d@NetBSD.org Mail-Reply-To: "matthew green" Mail-Followup-To: source-changes-d@NetBSD.org Module Name: xsrc Committed By: mrg Date: Wed Apr 6 02:06:19 UTC 2011 Update of /cvsroot/xsrc/external/mit/xrdb/dist In directory ivanova.netbsd.org:/tmp/cvs-serv12644 Log Message: initial import of xrdb-1.0.9. fixes CVE-2011-0465: By crafting hostnames with shell escape characters, arbitrary commands can be executed in a root environment when a display manager reads in the resource database via xrdb. These specially crafted hostnames can occur in two environments: * Hosts that set their hostname via DHCP * Hosts that allow remote logins via xdmcp i will send pullups for netbsd-5, and see what netbsd-5 xfree and netbsd-4 need as well. Status: Vendor Tag: xorg Release Tags: xrdb-1-0-9 U xsrc/external/mit/xrdb/dist/AUTHORS U xsrc/external/mit/xrdb/dist/Makefile.am U xsrc/external/mit/xrdb/dist/depcomp U xsrc/external/mit/xrdb/dist/missing U xsrc/external/mit/xrdb/dist/config.sub U xsrc/external/mit/xrdb/dist/COPYING U xsrc/external/mit/xrdb/dist/README C xsrc/external/mit/xrdb/dist/xrdb.c U xsrc/external/mit/xrdb/dist/configure.ac U xsrc/external/mit/xrdb/dist/INSTALL U xsrc/external/mit/xrdb/dist/config.h.in U xsrc/external/mit/xrdb/dist/configure U xsrc/external/mit/xrdb/dist/ChangeLog U xsrc/external/mit/xrdb/dist/install-sh U xsrc/external/mit/xrdb/dist/aclocal.m4 U xsrc/external/mit/xrdb/dist/Makefile.in U xsrc/external/mit/xrdb/dist/config.guess U xsrc/external/mit/xrdb/dist/man/Makefile.am U xsrc/external/mit/xrdb/dist/man/xrdb.man U xsrc/external/mit/xrdb/dist/man/Makefile.in 1 conflicts created by this import. Use the following command to help the merge: cvs checkout -jxorg:yesterday -jxorg xsrc/external/mit/xrdb/dist