From 6b0c5fb33db0cc1910399469cf37748b11f0fee9 Mon Sep 17 00:00:00 2001 From: bouyer Date: Tue, 17 May 2022 12:11:08 +0000 Subject: Ticket 1455 --- doc/CHANGES-9.3 | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) (limited to 'doc') diff --git a/doc/CHANGES-9.3 b/doc/CHANGES-9.3 index 41911237819..d4186c8e438 100644 --- a/doc/CHANGES-9.3 +++ b/doc/CHANGES-9.3 @@ -1,4 +1,4 @@ -# $NetBSD: CHANGES-9.3,v 1.1.2.93 2022/05/17 10:30:22 bouyer Exp $ +# $NetBSD: CHANGES-9.3,v 1.1.2.94 2022/05/17 12:11:08 bouyer Exp $ A complete list of changes from the NetBSD 9.2 release to the NetBSD 9.3 release: @@ -1653,3 +1653,14 @@ share/man/man4/mfi.4 1.13 - Improve debug printf()s. - KNF. Remove extra semicolon. Whitespace fixes. [msaitoh, ticket #1454] + +libexec/mail.local/mail.local.c 1.29 + + fix local privilege escalation due to a race condition + + NetBSD-SA2016-006 included an incomplete fix for CVE-2016-6253, + a local privilege escalation vulnerability in mail.local(8). + + Thanks to Jan Schaumann for bringing this to our attention. + [kre, ticket #1455] + -- cgit