Module Name: src
Committed By: bouyer
Date: Wed Jul 1 07:24:30 UTC 2015
Modified Files:
src/doc [netbsd-6-1]: CHANGES-6.1.6
Log Message:
ticket 1309
To generate a diff of this commit:
cvs rdiff -u -r1.1.2.42 -r1.1.2.43 src/doc/CHANGES-6.1.6
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: src/doc/CHANGES-6.1.6
diff -u src/doc/CHANGES-6.1.6:1.1.2.42 src/doc/CHANGES-6.1.6:1.1.2.43
--- src/doc/CHANGES-6.1.6:1.1.2.42 Wed May 27 05:57:00 2015
+++ src/doc/CHANGES-6.1.6 Wed Jul 1 07:24:30 2015
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-6.1.6,v 1.1.2.42 2015/05/27 05:57:00 msaitoh Exp $
+# $NetBSD: CHANGES-6.1.6,v 1.1.2.43 2015/07/01 07:24:30 bouyer Exp $
A complete list of changes from the NetBSD 6.1.5 release to the NetBSD 6.1.6
release:
@@ -5718,3 +5718,17 @@ sys/arch/xen/xen/xenevt.c 1.42
Fix off by one error, pointed out by Wei Liu in port-xen/49919.
[bouyer, ticket #1299]
+usr.bin/calendar/calendar.c 1.51
+
+ Correct privilege handling problems in calendar -a (which runs as root
+ from /etc/daily); do not exec other programs while the real uid is
+ still 0.
+
+ Also, clear the supplementary groups list up front and call initgroups
+ when becoming another user, to avoid leaking any extra group
+ privileges that we might have.
+
+ And finally, don't silently ignore errors changing uid and gid; those
+ are serious if they happen.
+ [dholland, ticket #1309]
+
