www/errata30.html - diff - 1.27

Return to errata30.html CVS log

Up to [local] / www

Diff for /www/errata30.html between version 1.26 and 1.27

version 1.26, 2002/07/30 17:27:49

version 1.27, 2002/08/11 17:22:38

Line 49

Line 49

<a name=all></a>

<a name=all></a>

<li><h3><font color=#e00000>All architectures</font></h3>

<li><h3><font color=#e00000>All architectures</font></h3>

<ul>

<ul>

<a name=scarg></a>

<li><font color=#009000><strong>031: SECURITY FIX: August 11, 2002</strong></font><br>

An insufficient boundary check in the

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select(2)</a>

and

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a>

system calls allows an attacker to overwrite kernel memory and execute arbitrary

code in kernel context.<br>

<a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/031_scarg.patch">A

source code patch exists which remedies the problem</a>.

<p>

<a name=ssl></a>

<a name=ssl></a>

<li><font color=#009000><strong>030: SECURITY FIX: July 30, 2002</strong></font><br>

<li><font color=#009000><strong>030: SECURITY FIX: July 30, 2002</strong></font><br>

Several remote buffer overflows can occur in the SSL2 server and SSL3 client of the

Several remote buffer overflows can occur in the SSL2 server and SSL3 client of the