1
0
mirror of https://git.FreeBSD.org/src.git synced 2025-01-18 15:30:21 +00:00

Update for security advisories: 01:11, 01:12, 01:13, BIND fix/update.

This commit is contained in:
Bruce A. Mah 2001-01-29 23:54:48 +00:00
parent a0ab7f4419
commit 034fcee1e3
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=71813
2 changed files with 28 additions and 4 deletions

View File

@ -326,6 +326,20 @@ A bug in crontab(8) that could allow users to read any file on the
system in valid crontab(5) syntax has been fixed (see security
advisory FreeBSD-SA-01:09). [MERGED]
A vulnerability in inetd(8) that could allow read-access to the
initial 16 bytes of wheel-accessible files has been fixed (see
security advisory FreeBSD-SA-01:11). [MERGED]
A bug in periodic(8) that used insecure temporary files has been
corrected (see security advisory FreeBSD-SA-01:12). [MERGED]
A bug in sort(1) in which an attacker might be able to cause it to
abort processing has been fixed (see security advisory
FreeBSD-SA-01:13). [MERGED]
To fix a remotely-exploitable buffer overflow, BIND has been updated
to 8.2.3. [MERGED]
1.3. USERLAND CHANGES
---------------------
@ -524,8 +538,6 @@ initialization code. This change brings about better compatability
with code generated from the various egcs and gcc ports, as well as
the stock public FSF source. [MERGED]
BIND has been updated to v8.2.3-T6B.
The threads library has gained some signal handling changes, bug
fixes, and performance enhancements (including zero system call thread
switching). gdb(1) thread support has been updated to match these

View File

@ -408,6 +408,20 @@ A bug in crontab(8) that could allow users to read any file on the
system in valid crontab(5) syntax has been fixed (see security
advisory FreeBSD-SA-01:09). [MERGED]
A vulnerability in inetd(8) that could allow read-access to the
initial 16 bytes of wheel-accessible files has been fixed (see
security advisory FreeBSD-SA-01:11). [MERGED]
A bug in periodic(8) that used insecure temporary files has been
corrected (see security advisory FreeBSD-SA-01:12). [MERGED]
A bug in sort(1) in which an attacker might be able to cause it to
abort processing has been fixed (see security advisory
FreeBSD-SA-01:13). [MERGED]
To fix a remotely-exploitable buffer overflow, BIND has been updated
to 8.2.3. [MERGED]
1.3. USERLAND CHANGES
---------------------
@ -625,8 +639,6 @@ initialization code. This change brings about better compatability
with code generated from the various egcs and gcc ports, as well as
the stock public FSF source. [MERGED]
BIND has been updated to v8.2.3-T6B.
The threads library has gained some signal handling changes, bug
fixes, and performance enhancements (including zero system call thread
switching). gdb(1) thread support has been updated to match these