version 1.279, 2000/10/18 20:39:24 |
version 1.280, 2000/10/26 14:12:08 |
|
|
<a name=all></a> |
<a name=all></a> |
<li><h3><font color=#e00000>All architectures</font></h3> |
<li><h3><font color=#e00000>All architectures</font></h3> |
<ul> |
<ul> |
|
<a name=xtrans> </a> |
|
<li><font color=#009000><strong>032: SECURITY FIX: Oct 26, 2000</strong></font><br> |
|
There are two possibly exploitable potential buffer overflows in the X11 |
|
libraries using the xtrans code. One of these vulnerabilities was |
|
reported to the |
|
<a href="http://www.securityfocus.com/archive/1/139436">BUGTRAQ</a> |
|
mailing list. |
|
<br> |
|
<a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/032_xtrans.patch> |
|
A source code patch exists which remedies this problem.</a> |
|
<p> |
<a name=httpd></a> |
<a name=httpd></a> |
<li><font color=#009000><strong>031: SECURITY FIX: Oct 18, 2000</strong></font><br> |
<li><font color=#009000><strong>031: SECURITY FIX: Oct 18, 2000</strong></font><br> |
Apache has several bugs in <tt>mod_rewrite</tt> and <tt>mod_vhost_alias</tt> |
Apache has several bugs in <tt>mod_rewrite</tt> and <tt>mod_vhost_alias</tt> |