[src/netbsd-8]: src/doc Ticket 1743

[bouyer <bouyer%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/3a6bbc8cacbf
branches:  netbsd-8
changeset: 366193:3a6bbc8cacbf
user:      bouyer <bouyer%NetBSD.org@localhost>
date:      Tue May 17 12:12:38 2022 +0000

description:
Ticket 1743

diffstat:

 doc/CHANGES-8.3 |  12 +++++++++++-
 1 files changed, 11 insertions(+), 1 deletions(-)

diffs (23 lines):

diff -r 5ae8f1c19bb8 -r 3a6bbc8cacbf doc/CHANGES-8.3
--- a/doc/CHANGES-8.3   Tue May 17 12:12:14 2022 +0000
+++ b/doc/CHANGES-8.3   Tue May 17 12:12:38 2022 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-8.3,v 1.1.2.129 2022/05/17 10:35:22 bouyer Exp $
+# $NetBSD: CHANGES-8.3,v 1.1.2.130 2022/05/17 12:12:38 bouyer Exp $
 
 A complete list of changes from the NetBSD 8.2 release to the NetBSD 8.3
 release:
@@ -2600,3 +2600,13 @@
        - KNF. Remove extra semicolon. Whitespace fixes.
        [msaitoh, ticket #1742]
 
+libexec/mail.local/mail.local.c                        1.29
+
+       fix local privilege escalation due to a race condition
+
+       NetBSD-SA2016-006 included an incomplete fix for CVE-2016-6253,
+       a local privilege escalation vulnerability in mail.local(8).
+
+       Thanks to Jan Schaumann for bringing this to our attention.
+       [kre, ticket #1743]
+