1
0
mirror of https://git.FreeBSD.org/src.git synced 2024-12-16 10:20:30 +00:00

New errata: SA-03:14, SA-03:17, SA-03:18.

This commit is contained in:
Hiroki Sato 2003-10-05 08:15:54 +00:00
parent 201e0377ca
commit a7d73c0e2d
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=120795

View File

@ -166,6 +166,29 @@
advisory
<ulink url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:13.sendmail.asc">FreeBSD-SA-03:13</ulink>.</para>
<para>The &os; ARP code contains a bug that could allow the kernel
to cause resource starvation which eventually results in a system panic.
This bug has been fixed on the &release.branch; development branch and the
&release.prev; security fix branch. More information can be
found in security advisory
<ulink url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:14.arp.asc">FreeBSD-SA-03:14</ulink>.</para>
<para>The implementation of the &man.procfs.5; and the &man.linprocfs.5;
contain a bug that could result in disclosing the contents of kernel memory.
This bug has been fixed on the &release.branch; development branch and the
&release.prev; security fix branch. More information can be
found in security advisory
<ulink url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:17.procfs.asc">FreeBSD-SA-03:17</ulink>.</para>
<para><application>OpenSSL</application> contains several bugs
which could allow a remote attacker to crash an
<application>OpenSSL</application>-using application or
to execute arbitrary code with the privileges of the application.
Note that only applications that use <application>OpenSSL</application>'s
ASN.1 or X.509 handling code are affected (<application>OpenSSH</application>
is unaffected, for example).
More information can be found in security advisory
<ulink url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:18.openssl.asc">FreeBSD-SA-03:18</ulink>.</para>
]]>
</sect1>