version 1.557, 2006/05/12 06:39:36 |
version 1.558, 2006/06/16 00:15:30 |
|
|
<a name="vax"></a> |
<a name="vax"></a> |
<ul> |
<ul> |
|
|
|
<li><a name="sendmail2"></a> |
|
<font color="#009000"><strong>003: SECURITY FIX: June 15, 2006</strong></font> <i>All architectures</i><br> |
|
A potential denial of service problem has been found in sendmail. A malformed MIME |
|
message could trigger excessive recursion which will lead to stack exhaustion. |
|
This denial of service attack only affects delivery of mail from the queue and |
|
delivery of a malformed message. Other incoming mail is still accepted and |
|
delivered. However, mail messages in the queue may not be reattempted if a |
|
malformed MIME message exists. |
|
<br> |
|
<a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.9/common/003_sendmail2.patch"> |
|
A source code patch exists which remedies this problem</a>.<br> |
|
<p> |
|
|
<li><a name="xorg"></a> |
<li><a name="xorg"></a> |
<font color="#009000"><strong>002: SECURITY FIX: May 2, 2006</strong></font> <i>All architectures</i><br> |
<font color="#009000"><strong>002: SECURITY FIX: May 2, 2006</strong></font> <i>All architectures</i><br> |
A security vulnerability has been found in the X.Org server -- |
A security vulnerability has been found in the X.Org server -- |