[src/netbsd-7-0]: src/doc Ticket #1138

[martin <martin%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/f19e9e9afac7
branches:  netbsd-7-0
changeset: 801160:f19e9e9afac7
user:      martin <martin%NetBSD.org@localhost>
date:      Fri Mar 11 12:27:04 2016 +0000

description:
Ticket #1138

diffstat:

 doc/CHANGES-7.0.1 |  13 ++++++++++++-
 1 files changed, 12 insertions(+), 1 deletions(-)

diffs (24 lines):

diff -r a3dc130e8370 -r f19e9e9afac7 doc/CHANGES-7.0.1
--- a/doc/CHANGES-7.0.1 Fri Mar 11 12:23:58 2016 +0000
+++ b/doc/CHANGES-7.0.1 Fri Mar 11 12:27:04 2016 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-7.0.1,v 1.1.2.42 2016/03/08 21:41:06 snj Exp $
+# $NetBSD: CHANGES-7.0.1,v 1.1.2.43 2016/03/11 12:27:04 martin Exp $
 
 A complete list of changes from the NetBSD 7.0 release to the NetBSD 7.0.1
 release:
@@ -1643,3 +1643,14 @@
        preserved, but no SSLv2 code is available.
        [spz, ticket #1127]
 
+crypto/external/bsd/openssh/dist/channels.c            (patch)
+crypto/external/bsd/openssh/dist/channels.h            (patch)
+crypto/external/bsd/openssh/dist/clientloop.c          (patch)
+crypto/external/bsd/openssh/dist/sshpty.c              (patch)
+
+       OpenSSH:
+       - Refuse ForwardX11Trusted=no connections attempted after
+         ForwardX11Timeout expires.  (CVE-2015-5352)
+       - Fix TTY permissions to not be world-writable.  (CVE-2015-6565)
+       [snj, ticket #1138]
+