[src/netbsd-8]: src/doc Ticket #1627

[martin <martin%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/1be1edfcb03b
branches:  netbsd-8
changeset: 946691:1be1edfcb03b
user:      martin <martin%NetBSD.org@localhost>
date:      Sun Dec 06 10:28:28 2020 +0000

description:
Ticket #1627

diffstat:

 doc/CHANGES-8.3 |  10 +++++++++-
 1 files changed, 9 insertions(+), 1 deletions(-)

diffs (21 lines):

diff -r 4141a30ebd48 -r 1be1edfcb03b doc/CHANGES-8.3
--- a/doc/CHANGES-8.3   Sun Nov 29 11:20:09 2020 +0000
+++ b/doc/CHANGES-8.3   Sun Dec 06 10:28:28 2020 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-8.3,v 1.1.2.52 2020/11/29 11:20:09 martin Exp $
+# $NetBSD: CHANGES-8.3,v 1.1.2.53 2020/12/06 10:28:28 martin Exp $
 
 A complete list of changes from the NetBSD 8.2 release to the NetBSD 8.3
 release:
@@ -1337,3 +1337,11 @@
        A or AAAA.
        [is, ticket #1625]
 
+xsrc/external/mit/xorg-server/dist/xkb/xkb.c           apply patch
+    
+       Apply upstream patches for:
+        * CVE-2020-14360 / ZDI CAN 11572 XkbSetMap Out-Of-Bounds Access
+        * CVE-2020-25712 / ZDI-CAN-11839 XkbSetDeviceInfo Heap-based Buffer
+          Overflow
+       [mrg, ticket #1627]
+