[src/netbsd-8]: src/doc Ticket #1752

[martin <martin%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/5ed5bd30cc79
branches:  netbsd-8
changeset: 368491:5ed5bd30cc79
user:      martin <martin%NetBSD.org@localhost>
date:      Fri Jul 15 17:20:56 2022 +0000

description:
Ticket #1752

diffstat:

 doc/CHANGES-8.3 |  11 ++++++++++-
 1 files changed, 10 insertions(+), 1 deletions(-)

diffs (22 lines):

diff -r 3418fc193eb5 -r 5ed5bd30cc79 doc/CHANGES-8.3
--- a/doc/CHANGES-8.3   Mon Jul 11 14:17:49 2022 +0000
+++ b/doc/CHANGES-8.3   Fri Jul 15 17:20:56 2022 +0000
@@ -1,4 +1,4 @@
- $NetBSD: CHANGES-8.3,v 1.1.2.138 2022/07/11 14:17:49 martin Exp $
+ $NetBSD: CHANGES-8.3,v 1.1.2.139 2022/07/15 17:20:56 martin Exp $
 
 A complete list of changes from the NetBSD 8.2 release to the NetBSD 8.3
 release:
@@ -2705,3 +2705,12 @@
          - KNF.
        [msaitoh, ticket #1751]
 
+xsrc-9/external/mit/xorg-server/dist/xkb/xkb.c         apply patch
+
+       Cherry-pick upstream fixes for
+        * CVE-2022-2319/ZDI-CAN-16062: X.Org Server ProcXkbSetGeometry
+          Out-Of-Bounds Access
+        * CVE-2022-2320/ZDI-CAN-16070: X.Org Server ProcXkbSetDeviceInfo
+          Out-Of-Bounds Access
+       [mrg, ticket #1752]
+