New release notes: SA-02:01, SA-02:02.
This commit is contained in:
parent
e5b4afac08
commit
f2185639f7
@ -1430,6 +1430,16 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
|
||||
closed. Note that the default value of this setting is
|
||||
<literal>UseLogin no</literal>. (See security advisory
|
||||
FreeBSD-SA-01:63.) &merged;</para>
|
||||
|
||||
<para>The use of an insecure temporary directory by
|
||||
&man.pkg.add.1; could permit a local attacker to modify the
|
||||
contents of binary packages while they were being installed.
|
||||
This hole has been closed. (See security advisory
|
||||
FreeBSD-SA-02:01.) &merged;</para>
|
||||
|
||||
<para>A race condition in &man.pw.8;, which could expose the
|
||||
contents of <filename>/etc/master.passwd</filename>, has been
|
||||
eliminated. (See security advisory FreeBSD-SA-02:02.) &merged;</para>
|
||||
</sect2>
|
||||
<sect2 id="userland">
|
||||
<title>Userland Changes</title>
|
||||
|
@ -1430,6 +1430,16 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
|
||||
closed. Note that the default value of this setting is
|
||||
<literal>UseLogin no</literal>. (See security advisory
|
||||
FreeBSD-SA-01:63.) &merged;</para>
|
||||
|
||||
<para>The use of an insecure temporary directory by
|
||||
&man.pkg.add.1; could permit a local attacker to modify the
|
||||
contents of binary packages while they were being installed.
|
||||
This hole has been closed. (See security advisory
|
||||
FreeBSD-SA-02:01.) &merged;</para>
|
||||
|
||||
<para>A race condition in &man.pw.8;, which could expose the
|
||||
contents of <filename>/etc/master.passwd</filename>, has been
|
||||
eliminated. (See security advisory FreeBSD-SA-02:02.) &merged;</para>
|
||||
</sect2>
|
||||
<sect2 id="userland">
|
||||
<title>Userland Changes</title>
|
||||
|
Loading…
Reference in New Issue
Block a user