diff options
| author | bouyer <bouyer@NetBSD.org> | 2022-05-17 12:11:08 +0000 |
|---|---|---|
| committer | bouyer <bouyer@NetBSD.org> | 2022-05-17 12:11:08 +0000 |
| commit | 6b0c5fb33db0cc1910399469cf37748b11f0fee9 (patch) | |
| tree | abff4609aeed6aacd672f564e07c028bd255eca6 /doc | |
| parent | 71e51462698570170a31d3c277788f19dad0ebec (diff) | |
Ticket 1455
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/CHANGES-9.3 | 13 |
1 files changed, 12 insertions, 1 deletions
diff --git a/doc/CHANGES-9.3 b/doc/CHANGES-9.3 index 41911237819..d4186c8e438 100644 --- a/doc/CHANGES-9.3 +++ b/doc/CHANGES-9.3 @@ -1,4 +1,4 @@ -# $NetBSD: CHANGES-9.3,v 1.1.2.93 2022/05/17 10:30:22 bouyer Exp $ +# $NetBSD: CHANGES-9.3,v 1.1.2.94 2022/05/17 12:11:08 bouyer Exp $ A complete list of changes from the NetBSD 9.2 release to the NetBSD 9.3 release: @@ -1653,3 +1653,14 @@ share/man/man4/mfi.4 1.13 - Improve debug printf()s. - KNF. Remove extra semicolon. Whitespace fixes. [msaitoh, ticket #1454] + +libexec/mail.local/mail.local.c 1.29 + + fix local privilege escalation due to a race condition + + NetBSD-SA2016-006 included an incomplete fix for CVE-2016-6253, + a local privilege escalation vulnerability in mail.local(8). + + Thanks to Jan Schaumann for bringing this to our attention. + [kre, ticket #1455] + |
