d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

New errata: SA-03:02, SA-03:03.

Browse Source
This commit is contained in:
Bruce A. Mah 2003-02-24 17:50:27 +00:00
parent 3fa24ec9f1
commit e3b5cb1fc7
1 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
release/doc/en_US.ISO8859-1/errata/article.sgml
View File

@ -115,6 +115,24 @@
found in security advisory <ulink
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:01.cvs.asc">FreeBSD-SA-03:01</ulink>.</para>
<para>A timing-based attack on <application>OpenSSL</application>,
could allow a very powerful attacker access to plaintext
under certain circumstances. This problem has been corrected in
&os; &release.current; with an upgrade
to <application>OpenSSL</application> 0.9.7. On supported
security fix branches, this problem has been corrected with the
import of <application>OpenSSL</application> 0.9.6i. See security
advisory <ulink
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:02.openssl.asc">FreeBSD-SA-03:02</ulink>
for more details.</para>
<para>It may be possible to recover the shared secret key used by
the implementation of the <quote>syncookies</quote> feature.
This reduces its effectiveness in dealing with TCP SYN flood
denial-of-service attacks. Workaround information and fixes are
given in security advisory <ulink
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:03.syncookies.asc">FreeBSD-SA-03:03</ulink>.</para>
</sect1>
<sect1 id="late-news">