On 2015-03-18 04:05, Ted Unangst wrote:
Patches are now available to fix buffer overflows in libXfont. This issue
affects 5.5, 5.6, and the forthcoming 5.7 release.

For more details, refer to the X.org advisory:
http://www.x.org/wiki/Development/Security/Advisory-2015-03-17/

5.5 patch:
http://ftp.openbsd.org/pub/OpenBSD/patches/5.5/common/023_libxfont.patch.sig

5.6 patch:
http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/019_libxfont.patch.sig



I sent this earlier but I think it didn't go through for some reason so I am resending it. If it did go through the first time, sorry for the noise. Original message below...


I'm sure most people could figure this out, but:

--- 019_libxfont.patch.sig      Wed Mar 18 01:25:07 2015
+++ 019_libxfont.patch.sig.fixed        Wed Mar 18 10:14:11 2015
@@ -17,7 +17,7 @@

 Then build and install a new libXfont:

-    cd /usr/xenocara/lib/libXont
+    cd /usr/xenocara/lib/libXfont
     make -f Makefile.bsd-wrapper obj
     make -f Makefile.bsd-wrapper build


Looks like the 5.5 patch has the same typo.

Also wanted to pass along a BIG THANK YOU to all the OpenBSD developers for all the great work you do!

--

John Merriam

Reply via email to