New release notes: SA-02:01, SA-02:02.

This commit is contained in:
Bruce A. Mah 2002-01-05 06:07:17 +00:00
parent e5b4afac08
commit f2185639f7
2 changed files with 20 additions and 0 deletions

View File

@ -1430,6 +1430,16 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
closed. Note that the default value of this setting is
<literal>UseLogin no</literal>. (See security advisory
FreeBSD-SA-01:63.) &merged;</para>
<para>The use of an insecure temporary directory by
&man.pkg.add.1; could permit a local attacker to modify the
contents of binary packages while they were being installed.
This hole has been closed. (See security advisory
FreeBSD-SA-02:01.) &merged;</para>
<para>A race condition in &man.pw.8;, which could expose the
contents of <filename>/etc/master.passwd</filename>, has been
eliminated. (See security advisory FreeBSD-SA-02:02.) &merged;</para>
</sect2>
<sect2 id="userland">
<title>Userland Changes</title>

View File

@ -1430,6 +1430,16 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
closed. Note that the default value of this setting is
<literal>UseLogin no</literal>. (See security advisory
FreeBSD-SA-01:63.) &merged;</para>
<para>The use of an insecure temporary directory by
&man.pkg.add.1; could permit a local attacker to modify the
contents of binary packages while they were being installed.
This hole has been closed. (See security advisory
FreeBSD-SA-02:01.) &merged;</para>
<para>A race condition in &man.pw.8;, which could expose the
contents of <filename>/etc/master.passwd</filename>, has been
eliminated. (See security advisory FreeBSD-SA-02:02.) &merged;</para>
</sect2>
<sect2 id="userland">
<title>Userland Changes</title>