version 1.115, 1998/05/13 23:20:35 |
version 1.116, 1998/05/17 20:13:44 |
|
|
<a name=all></a> |
<a name=all></a> |
<li><h3><font color=#e00000>All architectures</font></h3> |
<li><h3><font color=#e00000>All architectures</font></h3> |
<ul> |
<ul> |
|
<a name=kill></a> |
|
<li><font color=#009000><strong>SECURITY FIX</strong></font><br> |
|
The kill(2) system call previously would permit a large set of signals to |
|
be delivered to setuid or setgid processes. If such processes were using |
|
those signals in dubious ways, this could have resulted in security |
|
problems of various kinds. |
|
<a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.3/common/kill.patch> |
|
A source code patch exists which remedies this problem.</a> |
|
<p> |
<a name=immutable></a> |
<a name=immutable></a> |
<li><font color=#009000><strong>SECURITY FIX</strong></font><br> |
<li><font color=#009000><strong>SECURITY FIX</strong></font><br> |
A possible new security problem exists if you rely on securelevels and |
A possible new security problem exists if you rely on securelevels and |