d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add two most recent Security Advisories to errata.

Browse Source
This commit is contained in:
Ken Smith 2004-03-30 17:43:26 +00:00
parent a03fd3b656
commit 4cea39b5b6
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=127626
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
release/doc/en_US.ISO8859-1/errata/article.sgml
View File

@ -184,6 +184,25 @@
contains more details, as well as information on patching
existing systems.</para>
<para>(17 Mar 2004) By performing a specially crafted SSL/TLS
handshake with an application that uses OpenSSL a null pointer
may be dereferenced. This may in turn cause the application to
crash, resulting in a denial of service attack. For more information
see the Security Advisory <ulink
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:05.openssl.asc">FreeBSD-SA-04:05</ulink>
which contains more details and instructions on how to patch existing
systems.</para>
<para>(29 Mar 2004) A local attacker may take advantage of a
programming error in the handling of certain IPv6 socket options
in the &man.setsockopt.2; system call to read portions of kernel
memory without proper authorization. This may result in disclosure
of sensitive data, or potentially cause a panic. See Security
Advisory <ulink
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:06.ipv6.asc">FreeBSD-SA-04:06</ulink>
for a more detailed description and instructions on how to patch
existing systems.</para>
]]>
</sect1>