[src/netbsd-6-0]: src/doc 1503

[snj <snj%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/7b0e6050e5cc
branches:  netbsd-6-0
changeset: 775271:7b0e6050e5cc
user:      snj <snj%NetBSD.org@localhost>
date:      Mon Sep 11 04:46:47 2017 +0000

description:
1503

diffstat:

 doc/CHANGES-6.0.7 |  22 ++++++++++++++++++++--
 1 files changed, 20 insertions(+), 2 deletions(-)

diffs (38 lines):

diff -r 897eba64d15f -r 7b0e6050e5cc doc/CHANGES-6.0.7
--- a/doc/CHANGES-6.0.7 Mon Sep 11 04:43:16 2017 +0000
+++ b/doc/CHANGES-6.0.7 Mon Sep 11 04:46:47 2017 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-6.0.7,v 1.1.2.116 2017/09/09 16:53:55 snj Exp $
+# $NetBSD: CHANGES-6.0.7,v 1.1.2.117 2017/09/11 04:46:47 snj Exp $
 
 A complete list of changes from the NetBSD 6.0.6 release to the NetBSD 6.0.7
 release:
@@ -15134,9 +15134,27 @@
 
 sys/compat/linux32/arch/amd64/linux32_machdep.c        1.39
 
-
        Fix a ring0 escalation vulnerability in compat_linux32 where the
        index of %cs is controlled by userland, making it easy to trigger
        the page fault and get kernel privileges.
        [maxv, ticket #1502]
 
+crypto/external/bsd/heimdal/dist/cf/check-getpwuid_r-posix.m4 1.1
+crypto/external/bsd/heimdal/dist/configure.ac  1.3
+crypto/external/bsd/heimdal/dist/kcm/client.c  1.3
+crypto/external/bsd/heimdal/dist/kcm/config.c  1.3
+crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_pname_to_uid.c 1.3
+crypto/external/bsd/heimdal/dist/lib/hx509/softp11.c 1.3
+crypto/external/bsd/heimdal/dist/lib/krb5/config_file.c 1.3
+crypto/external/bsd/heimdal/dist/lib/krb5/get_default_principal.c 1.3
+crypto/external/bsd/heimdal/dist/lib/krb5/kuserok.c 1.3
+crypto/external/bsd/heimdal/dist/lib/roken/getxxyyy.c 1.3
+crypto/external/bsd/heimdal/dist/lib/roken/roken.h.in 1.5
+crypto/external/bsd/heimdal/include/config.h   1.9
+crypto/external/bsd/heimdal/include/roken.h    1.8
+
+       - Always use rk_getpwnam_r
+       - Use getpwuid_r instead of getpwuid, so that we don't trash
+         getpw*() internal buffers.
+       [mlelstv, ticket #1503]
+