summaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorbouyer <bouyer@NetBSD.org>2022-05-17 12:11:08 +0000
committerbouyer <bouyer@NetBSD.org>2022-05-17 12:11:08 +0000
commit6b0c5fb33db0cc1910399469cf37748b11f0fee9 (patch)
treeabff4609aeed6aacd672f564e07c028bd255eca6 /doc
parent71e51462698570170a31d3c277788f19dad0ebec (diff)
Ticket 1455
Diffstat (limited to 'doc')
-rw-r--r--doc/CHANGES-9.313
1 files changed, 12 insertions, 1 deletions
diff --git a/doc/CHANGES-9.3 b/doc/CHANGES-9.3
index 41911237819..d4186c8e438 100644
--- a/doc/CHANGES-9.3
+++ b/doc/CHANGES-9.3
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-9.3,v 1.1.2.93 2022/05/17 10:30:22 bouyer Exp $
+# $NetBSD: CHANGES-9.3,v 1.1.2.94 2022/05/17 12:11:08 bouyer Exp $
A complete list of changes from the NetBSD 9.2 release to the NetBSD 9.3
release:
@@ -1653,3 +1653,14 @@ share/man/man4/mfi.4 1.13
- Improve debug printf()s.
- KNF. Remove extra semicolon. Whitespace fixes.
[msaitoh, ticket #1454]
+
+libexec/mail.local/mail.local.c 1.29
+
+ fix local privilege escalation due to a race condition
+
+ NetBSD-SA2016-006 included an incomplete fix for CVE-2016-6253,
+ a local privilege escalation vulnerability in mail.local(8).
+
+ Thanks to Jan Schaumann for bringing this to our attention.
+ [kre, ticket #1455]
+