[src/netbsd-7]: src/doc Ticket #1138

[martin <martin%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/ade4e06e489c
branches:  netbsd-7
changeset: 799858:ade4e06e489c
user:      martin <martin%NetBSD.org@localhost>
date:      Fri Mar 11 12:26:30 2016 +0000

description:
Ticket #1138

diffstat:

 doc/CHANGES-7.1 |  13 ++++++++++++-
 1 files changed, 12 insertions(+), 1 deletions(-)

diffs (24 lines):

diff -r 8a7c2ced70c2 -r ade4e06e489c doc/CHANGES-7.1
--- a/doc/CHANGES-7.1   Fri Mar 11 12:22:42 2016 +0000
+++ b/doc/CHANGES-7.1   Fri Mar 11 12:26:30 2016 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-7.1,v 1.1.2.69 2016/03/08 21:32:49 snj Exp $
+# $NetBSD: CHANGES-7.1,v 1.1.2.70 2016/03/11 12:26:30 martin Exp $
 
 A complete list of changes from the NetBSD 7.0 release to the NetBSD 7.1
 release:
@@ -3004,3 +3004,14 @@
        preserved, but no SSLv2 code is available.
        [spz, ticket #1127]
 
+crypto/external/bsd/openssh/dist/channels.c            (patch)
+crypto/external/bsd/openssh/dist/channels.h            (patch)
+crypto/external/bsd/openssh/dist/clientloop.c          (patch)
+crypto/external/bsd/openssh/dist/sshpty.c              (patch)
+
+       OpenSSH:
+       - Refuse ForwardX11Trusted=no connections attempted after
+         ForwardX11Timeout expires.  (CVE-2015-5352)
+       - Fix TTY permissions to not be world-writable.  (CVE-2015-6565)
+       [snj, ticket #1138]
+