Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (53m)  pkgsrc-2024Q1 (10d)  pkgsrc-2023Q4 (56d)  pkgsrc-2023Q2 (89d)  pkgsrc-2023Q3 (168d) 

2024-05-27 13:30:01 UTC Now

2014-05-28 17:32:52 UTC pkgsrc-2014Q1 commitmail json YAML

Pullup ticket #4417 - requested by obache
emulators/suse131_x11: security update

Revisions pulled up:
- emulators/suse131_x11/Makefile                                1.6-1.7
- emulators/suse131_x11/distinfo                                1.6

---
  Module Name: pkgsrc
  Committed By: obache
  Date: Fri May 23 13:18:56 UTC 2014

  Modified Files:
  pkgsrc/emulators/suse131_x11: Makefile distinfo

  Log Message:
  Apply openSUSE Security Update: openSUSE-SU-2014:0711-1
  libXfont: Fixed multiple vulnerabilities

      An update that fixes three vulnerabilities is now available.

  Description:

      libxfont was updated to fix multiple vulnerabilities:
      - Integer overflow of allocations in font metadata file parsing
        (CVE-2014-0209).
      - Unvalidated length fields when parsing xfs protocol replies
        (CVE-2014-0210).
      - Integer overflows calculating memory needs for xfs replies
        (CVE-2014-0211).

      These vulnerabilities could be used by a local, authenticated user to
      raise privileges
      or by a remote attacker with control of the font server to execute code
      with the privileges of the X server.

---
  Module Name: pkgsrc
  Committed By: obache
  Date: Fri May 23 13:20:50 UTC 2014

  Modified Files:
  pkgsrc/emulators/suse131_x11: Makefile

  Log Message:
  Bump PKGREVISION to refrect libXfont rpm update.

(tron)