Module Name: src Committed By: bouyer Date: Sun Jan 13 17:18:30 UTC 2013
Modified Files: src/doc [netbsd-5-1]: CHANGES-5.1.3 Log Message: tickets 1826, 1827, 1828, 1830, 1831, 1837, 1839, 1838 To generate a diff of this commit: cvs rdiff -u -r1.1.2.33 -r1.1.2.34 src/doc/CHANGES-5.1.3 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
Modified files: Index: src/doc/CHANGES-5.1.3 diff -u src/doc/CHANGES-5.1.3:1.1.2.33 src/doc/CHANGES-5.1.3:1.1.2.34 --- src/doc/CHANGES-5.1.3:1.1.2.33 Mon Nov 26 20:02:07 2012 +++ src/doc/CHANGES-5.1.3 Sun Jan 13 17:18:30 2013 @@ -1,4 +1,4 @@ -# $NetBSD: CHANGES-5.1.3,v 1.1.2.33 2012/11/26 20:02:07 riz Exp $ +# $NetBSD: CHANGES-5.1.3,v 1.1.2.34 2013/01/13 17:18:30 bouyer Exp $ A complete list of changes from the NetBSD 5.1.2 release to the NetBSD 5.1.3 release: @@ -2295,3 +2295,52 @@ xsrc/external/mit/expat/dist/xmlwf/readf Address CVE-2012-1147, CVE-2012-1148 and CVE-2012-0876. [spz, ticket #1821] +sys/dev/lockstat.c 1.16 + + Fix off by one. + [msaitoh, ticket #1826] + +sys/dev/raidframe/rf_driver.c 1.131 + + Fix off by one read. + [msaitoh, ticket #1827] + +sys/external/isc/atheros_hal/dist/ah_eeprom_v14.c patch + + Fix off by one read. + [msaitoh, ticket #1828] + +sys/dev/usb/ubsa_common.c 1.9 + + Fix off by one read error. + [msaitoh, ticket #1830] + +sys/external/bsd/drm/dist/shared-core/i915_suspend.c 1.6 + + Fix wrong reference to dev_priv->saveSWF1. It was clearly wrong. + [msaitoh, ticket #1831] + +sbin/fsck_ffs/pass1.c 1.50 + + Show pass1 SIGINFO output on stderr like other passes, not on stdout. + [riastradh, ticket #1837] + +etc/namedb/root.cache 1.17 + + D.ROOT-SERVERS.NET changes IPv4 address. + [taca, ticket #1839] + +gnu/dist/grep/lib/getopt.c 1.2 +gnu/dist/grep/lib/regex.c 1.2 +gnu/dist/grep/src/ansi2knr.c 1.2 +gnu/dist/grep/src/dfa.c 1.3 +gnu/dist/grep/src/grep.c 1.14 +gnu/dist/grep/src/search.c 1.4 + + Change several int variables to size_t, ssize_t, or ptrdiff_t. + This should fix the bug described in CVE-2012-5667 when an input + line is so long that its length cannot be stored in an int + variable. + + [apb, ticket #1838] +