d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

New errata: SA-03:14, SA-03:17, SA-03:18.

Browse Source
This commit is contained in:
hrs 2003-10-05 08:15:54 +00:00
parent 871953665f
commit 85a7ee1518
1 changed files with 23 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
release/doc/en_US.ISO8859-1/errata/article.sgml
View File

@ -166,6 +166,29 @@
advisory
<ulink url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:13.sendmail.asc">FreeBSD-SA-03:13</ulink>.</para>
<para>The &os; ARP code contains a bug that could allow the kernel
to cause resource starvation which eventually results in a system panic.
This bug has been fixed on the &release.branch; development branch and the
&release.prev; security fix branch. More information can be
found in security advisory
<ulink url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:14.arp.asc">FreeBSD-SA-03:14</ulink>.</para>
<para>The implementation of the &man.procfs.5; and the &man.linprocfs.5;
contain a bug that could result in disclosing the contents of kernel memory.
This bug has been fixed on the &release.branch; development branch and the
&release.prev; security fix branch. More information can be
found in security advisory
<ulink url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:17.procfs.asc">FreeBSD-SA-03:17</ulink>.</para>
<para><application>OpenSSL</application> contains several bugs
which could allow a remote attacker to crash an
<application>OpenSSL</application>-using application or
to execute arbitrary code with the privileges of the application.
Note that only applications that use <application>OpenSSL</application>'s
ASN.1 or X.509 handling code are affected (<application>OpenSSH</application>
is unaffected, for example).
More information can be found in security advisory
<ulink url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:18.openssl.asc">FreeBSD-SA-03:18</ulink>.</para>
]]>
</sect1>