version 1.222, 2000/01/20 20:24:34 |
version 1.223, 2000/01/21 10:15:09 |
|
|
<li><h3><font color=#e00000>All architectures</font></h3> |
<li><h3><font color=#e00000>All architectures</font></h3> |
<ul> |
<ul> |
<a name=nsphy></a> |
<a name=nsphy></a> |
<li><font color=#009000><strong>012: DRIVER IMPROVEMENT: Jan 3, 2000</strong></font><br> |
<li><font color=#009000><strong>019: DRIVER IMPROVEMENT: Jan 3, 2000</strong></font><br> |
Intel fxp cards with National Semiconductor PHYs (nsphy) have trouble |
Intel fxp cards with National Semiconductor PHYs (nsphy) have trouble |
negotiating and maintaining 100Mb link integrity.<br> |
negotiating and maintaining 100Mb link integrity.<br> |
<a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.6/common/018_nsphy.patch> |
<a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.6/common/019_nsphy.patch> |
A source code patch exists, which remedies this problem.</a> |
A source code patch exists, which remedies this problem.</a> |
<p> |
<p> |
<a name=procfs></a> |
<a name=procfs></a> |
<li><font color=#009000><strong>016: SECURITY FIX: Jan 20, 2000</strong></font><br> |
<li><font color=#009000><strong>018: SECURITY FIX: Jan 20, 2000</strong></font><br> |
Systems running with procfs enabled and mounted are vulnerable |
Systems running with procfs enabled and mounted are vulnerable |
to having the stderr output of setuid processes directed onto |
to having the stderr output of setuid processes directed onto |
a pre-seeked descriptor onto the stack in their own procfs memory.<br> |
a pre-seeked descriptor onto the stack in their own procfs memory.<br> |
Note that procfs is not mounted by default in OpenBSD.<br> |
Note that procfs is not mounted by default in OpenBSD.<br> |
<a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.6/common/016_procfs.patch> |
<a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.6/common/018_procfs.patch> |
A source code patch exists, which remedies this problem.</a> |
A source code patch exists, which remedies this problem.</a> |
<p> |
<p> |
<a name=aty2k></a> |
<a name=aty2k></a> |