On 2015-03-18 04:06, Ted Unangst wrote:
Patches are now available to fix buffer overflows in libXfont. This
issue
affects 5.5, 5.6, and the forthcoming 5.7 release.
For more details, refer to the X.org advisory:
http://www.x.org/wiki/Development/Security/Advisory-2015-03-17/
5.5 patch:
http://ftp.openbsd.org/pub/OpenBSD/patches/5.5/common/023_libxfont.patch.sig
5.6 patch:
http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/019_libxfont.patch.sig
I'm sure most people could figure this out, but:
--- 019_libxfont.patch.sig Wed Mar 18 01:25:07 2015
+++ 019_libxfont.patch.sig.fixed Wed Mar 18 10:14:11 2015
@@ -17,7 +17,7 @@
Then build and install a new libXfont:
- cd /usr/xenocara/lib/libXont
+ cd /usr/xenocara/lib/libXfont
make -f Makefile.bsd-wrapper obj
make -f Makefile.bsd-wrapper build
Looks like the 5.5 patch has the same typo.
Also wanted to pass along a BIG THANK YOU to all the OpenBSD developers
for all the great work you do!
--
John Merriam