[src/netbsd-6-1]: src/doc 1503

[snj <snj%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/64b958eface8
branches:  netbsd-6-1
changeset: 776269:64b958eface8
user:      snj <snj%NetBSD.org@localhost>
date:      Mon Sep 11 04:46:35 2017 +0000

description:
1503

diffstat:

 doc/CHANGES-6.1.6 |  22 ++++++++++++++++++++--
 1 files changed, 20 insertions(+), 2 deletions(-)

diffs (38 lines):

diff -r 390858bb83cf -r 64b958eface8 doc/CHANGES-6.1.6
--- a/doc/CHANGES-6.1.6 Mon Sep 11 04:43:19 2017 +0000
+++ b/doc/CHANGES-6.1.6 Mon Sep 11 04:46:35 2017 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-6.1.6,v 1.1.2.113 2017/09/09 16:54:15 snj Exp $
+# $NetBSD: CHANGES-6.1.6,v 1.1.2.114 2017/09/11 04:46:35 snj Exp $
 
 A complete list of changes from the NetBSD 6.1.5 release to the NetBSD 6.1.6
 release:
@@ -14807,9 +14807,27 @@
 
 sys/compat/linux32/arch/amd64/linux32_machdep.c        1.39
 
-
        Fix a ring0 escalation vulnerability in compat_linux32 where the
        index of %cs is controlled by userland, making it easy to trigger
        the page fault and get kernel privileges.
        [maxv, ticket #1502]
 
+crypto/external/bsd/heimdal/dist/cf/check-getpwuid_r-posix.m4 1.1
+crypto/external/bsd/heimdal/dist/configure.ac  1.3
+crypto/external/bsd/heimdal/dist/kcm/client.c  1.3
+crypto/external/bsd/heimdal/dist/kcm/config.c  1.3
+crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_pname_to_uid.c 1.3
+crypto/external/bsd/heimdal/dist/lib/hx509/softp11.c 1.3
+crypto/external/bsd/heimdal/dist/lib/krb5/config_file.c 1.3
+crypto/external/bsd/heimdal/dist/lib/krb5/get_default_principal.c 1.3
+crypto/external/bsd/heimdal/dist/lib/krb5/kuserok.c 1.3
+crypto/external/bsd/heimdal/dist/lib/roken/getxxyyy.c 1.3
+crypto/external/bsd/heimdal/dist/lib/roken/roken.h.in 1.5
+crypto/external/bsd/heimdal/include/config.h   1.9
+crypto/external/bsd/heimdal/include/roken.h    1.8
+
+       - Always use rk_getpwnam_r
+       - Use getpwuid_r instead of getpwuid, so that we don't trash
+         getpw*() internal buffers.
+       [mlelstv, ticket #1503]
+