version 1.193, 1999/08/13 12:31:10 |
version 1.194, 1999/08/31 11:43:40 |
|
|
<a name=all></a> |
<a name=all></a> |
<li><h3><font color=#e00000>All architectures</font></h3> |
<li><h3><font color=#e00000>All architectures</font></h3> |
<ul> |
<ul> |
|
<a name=cron></a> |
|
<li><font color=#009000><strong>SECURITY FIX</strong></font><br> |
|
In cron(8), make sure argv[] is NULL terminated in the fake popen() and |
|
run sendmail as the user, not as root. |
|
<a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.5/common/cron.patch> |
|
A source code patch exists which remedies this problem.</a> |
|
<p> |
<a name=miscfs></a> |
<a name=miscfs></a> |
<li>The procfs and fdescfs filesystems had an overrun in their handling |
<li><font color=#009000><strong>SECURITY FIX</strong></font><br> |
|
The procfs and fdescfs filesystems had an overrun in their handling |
of uio_offset in their readdir() routines. (These filesystems are not |
of uio_offset in their readdir() routines. (These filesystems are not |
enabled by default). |
enabled by default). |
<a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.5/common/miscfs.patch> |
<a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.5/common/miscfs.patch> |