www/errata.html - diff

Return to errata.html CVS log

Up to [local] / www

version 1.296, 2000/12/19 20:13:51

version 1.297, 2000/12/19 20:17:57

Line 47

<ul>

<li>013: SECURITY FIX: Dec 18, 2000

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_procfs&sektion=8">procfs</a> contained numerous overflows, which could lead an intruder to root permissions. <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.8/common/013_procfs.patch">A source code patch exists which remedies the problem.</a>

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_procfs&sektion=8">procfs</a> contained numerous overflows, which could lead an intruder to root permissions. Procfs is NOT enabled by default in OpenBSD. <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.8/common/013_procfs.patch">A source code patch exists which remedies the problem.</a>

<li>011: RELIABILITY FIX: Dec 13, 2000

The crypto subsystem could incorrectly fail to run certain software ciphers,

Line 87

OpenBSD 2.8's ftpd contains a one-byte overflow in the replydirname() function.

A source code patch exists which remedies the problem.</a>

You can view the <a href="advisories/replydirname.txt">OpenBSD Advisory Here</a>.

<li>004: RELIABILITY FIX: Nov 17, 2000