Module Name:    src
Committed By:   bouyer
Date:           Sun Jan 13 17:18:30 UTC 2013

Modified Files:
        src/doc [netbsd-5-1]: CHANGES-5.1.3

Log Message:
tickets 1826, 1827, 1828, 1830, 1831, 1837, 1839, 1838


To generate a diff of this commit:
cvs rdiff -u -r1.1.2.33 -r1.1.2.34 src/doc/CHANGES-5.1.3

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: src/doc/CHANGES-5.1.3
diff -u src/doc/CHANGES-5.1.3:1.1.2.33 src/doc/CHANGES-5.1.3:1.1.2.34
--- src/doc/CHANGES-5.1.3:1.1.2.33	Mon Nov 26 20:02:07 2012
+++ src/doc/CHANGES-5.1.3	Sun Jan 13 17:18:30 2013
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-5.1.3,v 1.1.2.33 2012/11/26 20:02:07 riz Exp $
+# $NetBSD: CHANGES-5.1.3,v 1.1.2.34 2013/01/13 17:18:30 bouyer Exp $
 
 A complete list of changes from the NetBSD 5.1.2 release to the NetBSD 5.1.3
 release:
@@ -2295,3 +2295,52 @@ xsrc/external/mit/expat/dist/xmlwf/readf
 	Address CVE-2012-1147, CVE-2012-1148 and CVE-2012-0876.
 	[spz, ticket #1821]
 
+sys/dev/lockstat.c				1.16
+
+	Fix off by one.
+	[msaitoh, ticket #1826]
+
+sys/dev/raidframe/rf_driver.c			1.131
+
+	Fix off by one read.
+	[msaitoh, ticket #1827]
+
+sys/external/isc/atheros_hal/dist/ah_eeprom_v14.c		patch
+
+	Fix off by one read.
+	[msaitoh, ticket #1828]
+
+sys/dev/usb/ubsa_common.c			1.9
+
+	Fix off by one read error.
+	[msaitoh, ticket #1830]
+
+sys/external/bsd/drm/dist/shared-core/i915_suspend.c 1.6
+
+	Fix wrong reference to dev_priv->saveSWF1. It was clearly wrong.
+	[msaitoh, ticket #1831]
+
+sbin/fsck_ffs/pass1.c				1.50
+
+	Show pass1 SIGINFO output on stderr like other passes, not on stdout.
+	[riastradh, ticket #1837]
+
+etc/namedb/root.cache				1.17
+
+	D.ROOT-SERVERS.NET changes IPv4 address.
+	[taca, ticket #1839]
+
+gnu/dist/grep/lib/getopt.c			1.2
+gnu/dist/grep/lib/regex.c			1.2
+gnu/dist/grep/src/ansi2knr.c			1.2
+gnu/dist/grep/src/dfa.c				1.3
+gnu/dist/grep/src/grep.c			1.14
+gnu/dist/grep/src/search.c			1.4
+
+	Change several int variables to size_t, ssize_t, or ptrdiff_t.
+	This should fix the bug described in CVE-2012-5667 when an input
+	line is so long that its length cannot be stored in an int
+	variable.
+
+	[apb, ticket #1838]
+

Reply via email to