[src/netbsd-6-1]: src/doc Ticket 1076.

[msaitoh <msaitoh%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/f07b8a1d9241
branches:  netbsd-6-1
changeset: 775954:f07b8a1d9241
user:      msaitoh <msaitoh%NetBSD.org@localhost>
date:      Wed Jun 18 02:15:51 2014 +0000

description:
Ticket 1076.

diffstat:

 doc/CHANGES-6.1.5 |  11 ++++++++++-
 1 files changed, 10 insertions(+), 1 deletions(-)

diffs (22 lines):

diff -r 481420bf1d9e -r f07b8a1d9241 doc/CHANGES-6.1.5
--- a/doc/CHANGES-6.1.5 Wed Jun 18 02:15:27 2014 +0000
+++ b/doc/CHANGES-6.1.5 Wed Jun 18 02:15:51 2014 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-6.1.5,v 1.1.2.9 2014/06/06 05:33:38 msaitoh Exp $
+# $NetBSD: CHANGES-6.1.5,v 1.1.2.10 2014/06/18 02:15:51 msaitoh Exp $
 
 A complete list of changes from the NetBSD 6.1.4 release to the NetBSD 6.1.5
 release:
@@ -590,3 +590,12 @@
        CVE-2014-0195, CVE-2014-3470 and fix some double free.
        Avoid NULL dereference. (FreeBSD SA14:10).
        [christos, ticket #1078]
+
+src/external/bsd/openpam/dist/lib/openpam_configure.c 1.8 via patch
+
+       CVE-2014-3879: Incorrect error handling in PAM policy parser:
+       Missing module files were treated as soft failures leading to
+       unexpected behavior if policy files were copied between hosts with
+       differently installed modules or in the short period during upgrades
+       when module files were being replaced.
+       [christos, ticket #1076]