[src/netbsd-9]: src/doc Ticket #1478

[martin <martin%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/0dc721baae32
branches:  netbsd-9
changeset: 368490:0dc721baae32
user:      martin <martin%NetBSD.org@localhost>
date:      Fri Jul 15 17:18:23 2022 +0000

description:
Ticket #1478

diffstat:

 doc/CHANGES-9.3 |  11 ++++++++++-
 1 files changed, 10 insertions(+), 1 deletions(-)

diffs (22 lines):

diff -r 9f902b42e7cd -r 0dc721baae32 doc/CHANGES-9.3
--- a/doc/CHANGES-9.3   Mon Jul 11 14:13:46 2022 +0000
+++ b/doc/CHANGES-9.3   Fri Jul 15 17:18:23 2022 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-9.3,v 1.1.2.109 2022/07/11 14:13:46 martin Exp $
+# $NetBSD: CHANGES-9.3,v 1.1.2.110 2022/07/15 17:18:23 martin Exp $
 
 A complete list of changes from the NetBSD 9.2 release to the NetBSD 9.3
 release:
@@ -1864,3 +1864,12 @@
          - KNF.
        [msaitoh, ticket #1477]
 
+xsrc-9/external/mit/xorg-server/dist/xkb/xkb.c         apply patch
+
+       Cherry-pick upstream fixes for
+        * CVE-2022-2319/ZDI-CAN-16062: X.Org Server ProcXkbSetGeometry
+          Out-Of-Bounds Access
+        * CVE-2022-2320/ZDI-CAN-16070: X.Org Server ProcXkbSetDeviceInfo
+          Out-Of-Bounds Access
+       [mrg, ticket #1478]
+