Swing URLs to security advisories over to security.FreeBSD.org.
This commit is contained in:
parent
3bdb6fcac1
commit
cd6816b327
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=159125
@ -118,67 +118,67 @@
|
||||
could allow a local attacker to overwrite files in the context
|
||||
of a user running the &man.texindex.1; utility, has been fixed.
|
||||
For more details see security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:01.texindex.asc">FreeBSD-SA-06:01.texindex</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:01.texindex.asc">FreeBSD-SA-06:01.texindex</ulink>. &merged;</para>
|
||||
|
||||
<para>A temporary file vulnerability in the &man.ee.1; text
|
||||
editor, which could allow a local attacker to overwrite files in
|
||||
the context of a user running &man.ee.1;, has been fixed. For
|
||||
more details see security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:02.ee.asc">FreeBSD-SA-06:02.ee</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:02.ee.asc">FreeBSD-SA-06:02.ee</ulink>. &merged;</para>
|
||||
|
||||
<para>Several vulnerabilities in the &man.cpio.1; utility have
|
||||
been corrected. For more
|
||||
details see security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:03.cpio.asc">FreeBSD-SA-06:03.cpio</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:03.cpio.asc">FreeBSD-SA-06:03.cpio</ulink>. &merged;</para>
|
||||
|
||||
<para>An error in &man.ipfw.4; IP fragment handling, which could
|
||||
cause a crash, has been fixed. For more
|
||||
details see security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:04.ipfw.asc">FreeBSD-SA-06:04.ipfw</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:04.ipfw.asc">FreeBSD-SA-06:04.ipfw</ulink>. &merged;</para>
|
||||
|
||||
<para>A potential buffer overflow in the IEEE 802.11 scanning code
|
||||
has been corrected. For more
|
||||
details see security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:05.80211.asc">FreeBSD-SA-06:05.80211</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:05.80211.asc">FreeBSD-SA-06:05.80211</ulink>. &merged;</para>
|
||||
|
||||
<para>Two instances in which portions of kernel memory could be
|
||||
disclosed to users have been fixed. For more details see
|
||||
security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:06.kmem.asc">FreeBSD-SA-06:06.kmem</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:06.kmem.asc">FreeBSD-SA-06:06.kmem</ulink>. &merged;</para>
|
||||
|
||||
<para>A logic bug in the IP fragment handling in &man.pf.4;, which
|
||||
could cause a crash under certain circumstances, has been fixed.
|
||||
For more details see security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:07.pf.asc">FreeBSD-SA-06:07.pf</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:07.pf.asc">FreeBSD-SA-06:07.pf</ulink>. &merged;</para>
|
||||
|
||||
<para>A logic bug in the NFS server code, which could cause a crash when
|
||||
the server received a message with a zero-length payload, has been fixed.
|
||||
For more details see security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:10.nfs.asc">FreeBSD-SA-06:10.nfs</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:10.nfs.asc">FreeBSD-SA-06:10.nfs</ulink>. &merged;</para>
|
||||
|
||||
<para>A programming error in the &man.fast.ipsec.4; implementation
|
||||
results in the sequence number associated with a Security
|
||||
Association not being updated, allowing packets to unconditionally
|
||||
pass sequence number verification checks, has been fixed.
|
||||
For more details see security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:11.ipsec.asc">FreeBSD-SA-06:11.ipsec</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:11.ipsec.asc">FreeBSD-SA-06:11.ipsec</ulink>. &merged;</para>
|
||||
|
||||
<para>A logic bug that could cause &man.opiepasswd.1; to allow an unprivileged
|
||||
user to configure OPIE authentication for the root user under certain
|
||||
circumstances, has been fixed.
|
||||
For more details see security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:12.opie.asc">FreeBSD-SA-06:12.opie</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:12.opie.asc">FreeBSD-SA-06:12.opie</ulink>. &merged;</para>
|
||||
|
||||
<para>An asynchronous signal handling vulnerability in &man.sendmail.8;,
|
||||
which could allow a remote attacker to execute arbitrary code with the
|
||||
privileges of the user running sendmail, typically root, has been fixed.
|
||||
For more details see security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:13.sendmail.asc">FreeBSD-SA-06:13.sendmail</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:13.sendmail.asc">FreeBSD-SA-06:13.sendmail</ulink>. &merged;</para>
|
||||
|
||||
<para arch="i386,amd64">An information disclosure issue found in the
|
||||
&os; kernel running on 7th- and 8th-generation AMD processors
|
||||
has been fixed. For more details see security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:14.fpu.asc">FreeBSD-SA-06:14.fpu</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:14.fpu.asc">FreeBSD-SA-06:14.fpu</ulink>. &merged;</para>
|
||||
|
||||
<para>A bug in &man.ypserv.8;, which effectively disabled the
|
||||
<filename>/var/yp/securenets</filename> access control mechanism,
|
||||
|
@ -118,67 +118,67 @@
|
||||
could allow a local attacker to overwrite files in the context
|
||||
of a user running the &man.texindex.1; utility, has been fixed.
|
||||
For more details see security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:01.texindex.asc">FreeBSD-SA-06:01.texindex</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:01.texindex.asc">FreeBSD-SA-06:01.texindex</ulink>. &merged;</para>
|
||||
|
||||
<para>A temporary file vulnerability in the &man.ee.1; text
|
||||
editor, which could allow a local attacker to overwrite files in
|
||||
the context of a user running &man.ee.1;, has been fixed. For
|
||||
more details see security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:02.ee.asc">FreeBSD-SA-06:02.ee</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:02.ee.asc">FreeBSD-SA-06:02.ee</ulink>. &merged;</para>
|
||||
|
||||
<para>Several vulnerabilities in the &man.cpio.1; utility have
|
||||
been corrected. For more
|
||||
details see security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:03.cpio.asc">FreeBSD-SA-06:03.cpio</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:03.cpio.asc">FreeBSD-SA-06:03.cpio</ulink>. &merged;</para>
|
||||
|
||||
<para>An error in &man.ipfw.4; IP fragment handling, which could
|
||||
cause a crash, has been fixed. For more
|
||||
details see security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:04.ipfw.asc">FreeBSD-SA-06:04.ipfw</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:04.ipfw.asc">FreeBSD-SA-06:04.ipfw</ulink>. &merged;</para>
|
||||
|
||||
<para>A potential buffer overflow in the IEEE 802.11 scanning code
|
||||
has been corrected. For more
|
||||
details see security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:05.80211.asc">FreeBSD-SA-06:05.80211</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:05.80211.asc">FreeBSD-SA-06:05.80211</ulink>. &merged;</para>
|
||||
|
||||
<para>Two instances in which portions of kernel memory could be
|
||||
disclosed to users have been fixed. For more details see
|
||||
security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:06.kmem.asc">FreeBSD-SA-06:06.kmem</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:06.kmem.asc">FreeBSD-SA-06:06.kmem</ulink>. &merged;</para>
|
||||
|
||||
<para>A logic bug in the IP fragment handling in &man.pf.4;, which
|
||||
could cause a crash under certain circumstances, has been fixed.
|
||||
For more details see security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:07.pf.asc">FreeBSD-SA-06:07.pf</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:07.pf.asc">FreeBSD-SA-06:07.pf</ulink>. &merged;</para>
|
||||
|
||||
<para>A logic bug in the NFS server code, which could cause a crash when
|
||||
the server received a message with a zero-length payload, has been fixed.
|
||||
For more details see security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:10.nfs.asc">FreeBSD-SA-06:10.nfs</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:10.nfs.asc">FreeBSD-SA-06:10.nfs</ulink>. &merged;</para>
|
||||
|
||||
<para>A programming error in the &man.fast.ipsec.4; implementation
|
||||
results in the sequence number associated with a Security
|
||||
Association not being updated, allowing packets to unconditionally
|
||||
pass sequence number verification checks, has been fixed.
|
||||
For more details see security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:11.ipsec.asc">FreeBSD-SA-06:11.ipsec</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:11.ipsec.asc">FreeBSD-SA-06:11.ipsec</ulink>. &merged;</para>
|
||||
|
||||
<para>A logic bug that could cause &man.opiepasswd.1; to allow an unprivileged
|
||||
user to configure OPIE authentication for the root user under certain
|
||||
circumstances, has been fixed.
|
||||
For more details see security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:12.opie.asc">FreeBSD-SA-06:12.opie</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:12.opie.asc">FreeBSD-SA-06:12.opie</ulink>. &merged;</para>
|
||||
|
||||
<para>An asynchronous signal handling vulnerability in &man.sendmail.8;,
|
||||
which could allow a remote attacker to execute arbitrary code with the
|
||||
privileges of the user running sendmail, typically root, has been fixed.
|
||||
For more details see security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:13.sendmail.asc">FreeBSD-SA-06:13.sendmail</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:13.sendmail.asc">FreeBSD-SA-06:13.sendmail</ulink>. &merged;</para>
|
||||
|
||||
<para arch="i386,amd64">An information disclosure issue found in the
|
||||
&os; kernel running on 7th- and 8th-generation AMD processors
|
||||
has been fixed. For more details see security advisory <ulink
|
||||
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:14.fpu.asc">FreeBSD-SA-06:14.fpu</ulink>. &merged;</para>
|
||||
url="http://security.FreeBSD.org/advisories/FreeBSD-SA-06:14.fpu.asc">FreeBSD-SA-06:14.fpu</ulink>. &merged;</para>
|
||||
|
||||
<para>A bug in &man.ypserv.8;, which effectively disabled the
|
||||
<filename>/var/yp/securenets</filename> access control mechanism,
|
||||
|
Loading…
Reference in New Issue
Block a user