Wed Mar 8 14:52:07 2017 UTC ()
Ticket #1443


(martin)
diff -r1.1.2.85 -r1.1.2.86 src/doc/CHANGES-6.1.6

cvs diff -r1.1.2.85 -r1.1.2.86 src/doc/Attic/CHANGES-6.1.6 (expand / switch to context diff)
--- src/doc/Attic/CHANGES-6.1.6 2017/03/08 00:39:23 1.1.2.85
+++ src/doc/Attic/CHANGES-6.1.6 2017/03/08 14:52:07 1.1.2.86
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-6.1.6,v 1.1.2.85 2017/03/08 00:39:23 snj Exp $
+# $NetBSD: CHANGES-6.1.6,v 1.1.2.86 2017/03/08 14:52:07 martin Exp $
 
 A complete list of changes from the NetBSD 6.1.5 release to the NetBSD 6.1.6
 release:
@@ -10058,4 +10058,40 @@
 	Use arc4random when available to produce the auth cookie.
 	(80f62c54fbd50a3bbdf9c37258525098c9117830 upstream)
 	[mrg, ticket #1442]
+
+xsrc/external/mit/xorg-server.old/dist/configure.ac	1.2 (patch)
+xsrc/external/mit/xorg-server.old/dist/include/dix-config.h.in 1.2 (patch)
+xsrc/external/mit/xorg-server.old/dist/include/dix-config.h.in 1.3 (patch)
+xsrc/external/mit/xorg-server.old/dist/include/os.h	1.2 (patch)
+xsrc/external/mit/xorg-server.old/dist/os/auth.c	1.2 (patch)
+xsrc/external/mit/xorg-server.old/dist/os/auth.c	1.3 (patch)
+xsrc/external/mit/xorg-server.old/dist/os/mitauth.c	1.2 (patch)
+xsrc/external/mit/xorg-server.old/dist/os/mitauth.c	1.3 (patch)
+xsrc/external/mit/xorg-server.old/dist/os/osdep.h	1.2 (patch)
+xsrc/external/mit/xorg-server.old/dist/os/rpcauth.c	1.2 (patch)
+xsrc/external/mit/xorg-server.old/dist/os/timingsafe_memcmp.c 1.1 (patch)
+xsrc/external/mit/xorg-server.old/dist/os/xdmauth.c	1.2 (patch)
+xsrc/external/mit/xorg-server.old/include/dix-config.h 1.3 (patch)
+xsrc/external/mit/xorg-server.old/include/dix-config.h 1.4 (patch)
+xsrc/external/mit/xorg-server/dist/configure.ac	1.4 (patch)
+xsrc/external/mit/xorg-server/dist/configure.ac	1.5 (patch)
+xsrc/external/mit/xorg-server/dist/include/dix-config.h.in 1.2 (patch)
+xsrc/external/mit/xorg-server/dist/include/dix-config.h.in 1.3 (patch)
+xsrc/external/mit/xorg-server/dist/include/os.h	1.8 (patch)
+xsrc/external/mit/xorg-server/dist/os/auth.c		1.2 (patch)
+xsrc/external/mit/xorg-server/dist/os/auth.c		1.3 (patch)
+xsrc/external/mit/xorg-server/dist/os/mitauth.c	1.2 (patch)
+xsrc/external/mit/xorg-server/dist/os/mitauth.c	1.3 (patch)
+xsrc/external/mit/xorg-server/dist/os/osdep.h	1.2 (patch)
+xsrc/external/mit/xorg-server/dist/os/rpcauth.c	1.4 (patch)
+xsrc/external/mit/xorg-server/dist/os/timingsafe_memcmp.c 1.1 (patch)
+xsrc/external/mit/xorg-server/dist/os/xdmauth.c	1.2 (patch)
+xsrc/external/mit/xorg-server/include/dix-config.h	1.26 (patch)
+xsrc/external/mit/xorg-server/include/dix-config.h	1.27 (patch)
+external/mit/xorg/server/xorg-server.old/os/Makefile 1.2 (patch)
+external/mit/xorg/server/xorg-server/os/Makefile 1.15 (patch)
+
+	Apply upstream fixes for generation and comparision of
+	MIT-MAGIC-COOKIES, fixing CVE-2017-2624
+	[mrg, ticket #1443]