diff --git a/release/doc/en_US.ISO8859-1/relnotes/article.sgml b/release/doc/en_US.ISO8859-1/relnotes/article.sgml index 6aeb2d534a37..ee0823a58279 100644 --- a/release/doc/en_US.ISO8859-1/relnotes/article.sgml +++ b/release/doc/en_US.ISO8859-1/relnotes/article.sgml @@ -1335,9 +1335,11 @@ &man.semop.2; system call has been closed. &merged; A security hole in OpenSSH, - involving the UseLogin yes setting, has been - closed (note that the default for this setting is - UseLogin no). &merged; + which could allow users to execute code with arbitrary privileges + if UseLogin yes was set, has been + closed. Note that the default value of this setting is + UseLogin no. (See security advisory + FreeBSD-SA-01:63.) &merged; Userland Changes diff --git a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml index 6aeb2d534a37..ee0823a58279 100644 --- a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml +++ b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml @@ -1335,9 +1335,11 @@ &man.semop.2; system call has been closed. &merged; A security hole in OpenSSH, - involving the UseLogin yes setting, has been - closed (note that the default for this setting is - UseLogin no). &merged; + which could allow users to execute code with arbitrary privileges + if UseLogin yes was set, has been + closed. Note that the default value of this setting is + UseLogin no. (See security advisory + FreeBSD-SA-01:63.) &merged; Userland Changes