[Lunar-commits] r21648 - moonbase/trunk/zbeta/xorg-7.0/x11-libs/libXfont

Chad Kittel v3rt1g0 at lunar-linux.org
Sat Sep 30 22:48:25 UTC 2006


Author: v3rt1g0
Date: 2006-09-30 22:48:25 +0000 (Sat, 30 Sep 2006)
New Revision: 21648

Modified:
   moonbase/trunk/zbeta/xorg-7.0/x11-libs/libXfont/BUILD
   moonbase/trunk/zbeta/xorg-7.0/x11-libs/libXfont/DETAILS
Log:
  Security Patch Applied: libXfont (X11R7.0-1.0.0)

   * This patch to libXfont is from X.Org and is to prevent a
     DOS and/or execution of arbitrary code.  See CVE 2006-3739
     and CVE 2006-3740.


Modified: moonbase/trunk/zbeta/xorg-7.0/x11-libs/libXfont/BUILD
===================================================================
--- moonbase/trunk/zbeta/xorg-7.0/x11-libs/libXfont/BUILD	2006-09-30 21:08:14 UTC (rev 21647)
+++ moonbase/trunk/zbeta/xorg-7.0/x11-libs/libXfont/BUILD	2006-09-30 22:48:25 UTC (rev 21648)
@@ -1,6 +1,8 @@
 (
   . /etc/profile.d/x11r7.rc &&
 
+  patch_it  "$SOURCE2"  1  &&
+
   default_build
 
 ) > $C_FIFO 2>&1

Modified: moonbase/trunk/zbeta/xorg-7.0/x11-libs/libXfont/DETAILS
===================================================================
--- moonbase/trunk/zbeta/xorg-7.0/x11-libs/libXfont/DETAILS	2006-09-30 21:08:14 UTC (rev 21647)
+++ moonbase/trunk/zbeta/xorg-7.0/x11-libs/libXfont/DETAILS	2006-09-30 22:48:25 UTC (rev 21648)
@@ -1,11 +1,16 @@
           MODULE=libXfont
          VERSION=X11R7.0-1.0.0
           SOURCE=$MODULE-$VERSION.tar.bz2
+	 # Security Patch for CVE 2006-3739 and 2006-3740
+         SOURCE2=$MODULE-1.0.0-cidfonts.diff
       SOURCE_URL=ftp://ftp.x.org/pub/X11R7.0/src/everything/
+     SOURCE2_URL=http://xorg.freedesktop.org/releases/X11R7.0/patches/
+      SOURCE_VFY=sha1:2d1581c4b65a101f6cd368e4de966e958d867002
+     SOURCE2_VFY=sha1:b0778179be6a52c5f10ddbb7cd349c06c3c8bd2d
    MODULE_PREFIX=${X11R7_PREFIX:-/usr}
         WEB_SITE=http://www.x.org/
          ENTERED=20060120
-         UPDATED=20060120
+         UPDATED=20060930
            SHORT="the X.Org font rasterisation library"
 
 cat << EOF



More information about the Lunar-commits mailing list