Return to errata29.html CVS log | Up to [local] / www |
version 1.29, 2002/10/17 21:38:38 | version 1.30, 2003/02/16 11:35:43 | ||
---|---|---|---|
|
|
||
allocated memory twice. This is not a security issue on OpenBSD since the BSD | allocated memory twice. This is not a security issue on OpenBSD since the BSD | ||
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=free&sektion=3">free(3)</a> | <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=free&sektion=3">free(3)</a> | ||
function detects this. | function detects this. | ||
There is also a kernel zlib component that may be used by pppd and IPSec. | There is also a kernel zlib component that may be used by pppd and IPsec. | ||
The feasibility of attacking the kernel this way is currently unknown.<br> | The feasibility of attacking the kernel this way is currently unknown.<br> | ||
<a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.9/common/022_zlib.patch">A source code patch exists which remedies the problem</a>. | <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.9/common/022_zlib.patch">A source code patch exists which remedies the problem</a>. | ||
<p> | <p> |