Re: CVS: cvs.openbsd.org: xenocara

[Matthieu Herrb]

On Thu, Nov 10, 2022 at 11:19:23AM -0700, Matthieu Herrb wrote:
> CVSROOT:      /cvs
> Module name:  xenocara
> Changes by:   matth...@cvs.openbsd.org        2022/11/10 11:19:23
> 
> Modified files:
>       app/xterm      : charproc.c menu.c 
> 
> Log message:
> Prevent users from enabling allowFontOps by menu or via resources.
> 
> This further protects from CVE-2022-2602 (although allowFontOps where
> disabled by default in OpenBSD since 2009).
> 
Oops, I mean CVE-2022-45063, sorry for the confusion.
-- 
Matthieu Herrb