[src/netbsd-6]: src/doc 1503

[snj <snj%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/984465f5dbd6
branches:  netbsd-6
changeset: 777255:984465f5dbd6
user:      snj <snj%NetBSD.org@localhost>
date:      Mon Sep 11 04:46:21 2017 +0000

description:
1503

diffstat:

 doc/CHANGES-6.2 |  22 ++++++++++++++++++++--
 1 files changed, 20 insertions(+), 2 deletions(-)

diffs (38 lines):

diff -r 4d4ba4857014 -r 984465f5dbd6 doc/CHANGES-6.2
--- a/doc/CHANGES-6.2   Mon Sep 11 04:43:22 2017 +0000
+++ b/doc/CHANGES-6.2   Mon Sep 11 04:46:21 2017 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-6.2,v 1.1.2.309 2017/09/09 16:54:40 snj Exp $
+# $NetBSD: CHANGES-6.2,v 1.1.2.310 2017/09/11 04:46:21 snj Exp $
 
 A complete list of changes from the 6.1 release until the 6.2 release:
 
@@ -20902,9 +20902,27 @@
 
 sys/compat/linux32/arch/amd64/linux32_machdep.c        1.39
 
-
        Fix a ring0 escalation vulnerability in compat_linux32 where the
        index of %cs is controlled by userland, making it easy to trigger
        the page fault and get kernel privileges.
        [maxv, ticket #1502]
 
+crypto/external/bsd/heimdal/dist/cf/check-getpwuid_r-posix.m4 1.1
+crypto/external/bsd/heimdal/dist/configure.ac  1.3
+crypto/external/bsd/heimdal/dist/kcm/client.c  1.3
+crypto/external/bsd/heimdal/dist/kcm/config.c  1.3
+crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_pname_to_uid.c 1.3
+crypto/external/bsd/heimdal/dist/lib/hx509/softp11.c 1.3
+crypto/external/bsd/heimdal/dist/lib/krb5/config_file.c 1.3
+crypto/external/bsd/heimdal/dist/lib/krb5/get_default_principal.c 1.3
+crypto/external/bsd/heimdal/dist/lib/krb5/kuserok.c 1.3
+crypto/external/bsd/heimdal/dist/lib/roken/getxxyyy.c 1.3
+crypto/external/bsd/heimdal/dist/lib/roken/roken.h.in 1.5
+crypto/external/bsd/heimdal/include/config.h   1.9
+crypto/external/bsd/heimdal/include/roken.h    1.8
+
+       - Always use rk_getpwnam_r
+       - Use getpwuid_r instead of getpwuid, so that we don't trash
+         getpw*() internal buffers.
+       [mlelstv, ticket #1503]
+