020d4ae3f5
This release includes the fix for CVE-2013-6462, as well as other security
hardening and code cleanups, and makes libXfont compatible with libXtrans 1.3
on Solaris.
Alan Coopersmith (7):
xstrdup -> strdup
Replace malloc(strlen)+strcpy/strcat calls with strdup
Don't leak old allocation if realloc fails to enlarge it
Add AC_USE_SYSTEM_EXTENSIONS to expose non-standard extensions
CVE-2013-6462: unlimited sscanf overflows stack buffer in bdfReadCharacters()
Limit additional sscanf strings to fit buffer sizes
libXfont 1.4.7
Julien Cristau (1):
Make serverGeneration unsigned
|
||
|---|---|---|
| .. | ||
| buildlink3.mk | ||
| builtin.mk | ||
| DESCR | ||
| distinfo | ||
| Makefile | ||
| PLIST | ||