===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata66.html,v
retrieving revision 1.6
retrieving revision 1.7
diff -u -r1.6 -r1.7
--- www/errata66.html 2019/11/21 21:01:42 1.6
+++ www/errata66.html 2019/12/04 11:11:35 1.7
@@ -179,6 +179,37 @@
A source code patch exists which remedies this problem.
+
+009: SECURITY FIX: December 4, 2019
+ All architectures
+
+Environment-provided paths are used for dlopen() in mesa, resulting in
+escalation to the auth group in xlock(1).
+
+
+A source code patch exists which remedies this problem.
+
+
+
+010: SECURITY FIX: December 4, 2019
+ All architectures
+
+libc's authentication layer performed insufficient username validation.
+
+
+A source code patch exists which remedies this problem.
+
+
+
+011: SECURITY FIX: December 4, 2019
+ All architectures
+
+xenodm uses the libc authentication layer incorrectly.
+
+
+A source code patch exists which remedies this problem.
+
+
-
+