! 015: SECURITY FIX: October 2, 2008All architectures
The Neighbor Discovery Protocol (ndp) did not correctly verify neighbor
solicitation requests maybe allowing a nearby attacker to intercept traffic.
--- 86,92 ----
! 015: SECURITY FIX: October 2, 2008All architectures
The Neighbor Discovery Protocol (ndp) did not correctly verify neighbor
solicitation requests maybe allowing a nearby attacker to intercept traffic.
***************
*** 101,107 ****
! 014: RELIABILITY FIX: July 29, 2008All architectures
Some kinds of IPv6 usage would leak kernel memory (in particular, this path
was exercised by the named(8) patch for port randomization). Since INET6 is
--- 99,105 ----
! 014: RELIABILITY FIX: July 29, 2008All architectures
Some kinds of IPv6 usage would leak kernel memory (in particular, this path
was exercised by the named(8) patch for port randomization). Since INET6 is
***************
*** 112,120 ****
! 013: SECURITY FIX: July 23, 2008All architectures
! 2nd revision, July 23, 2008
A vulnerability has been found with BIND. An attacker could use this vulnerability
to poison the cache of a recursive resolving name server.
CVE-2008-1447.
--- 110,118 ----
! 013: SECURITY FIX: July 23, 2008All architectures
! 2nd revision, July 23, 2008
A vulnerability has been found with BIND. An attacker could use this vulnerability
to poison the cache of a recursive resolving name server.
CVE-2008-1447.
***************
*** 124,130 ****
! 012: SECURITY FIX: July 15, 2008All architectures
Multiple vulnerabilities have been discovered in X.Org.
RENDER Extension heap buffer overflow,
--- 122,128 ----
! 012: SECURITY FIX: July 15, 2008All architectures
Multiple vulnerabilities have been discovered in X.Org.
RENDER Extension heap buffer overflow,
***************
*** 143,149 ****
! 011: SECURITY FIX: April 3, 2008All architectures
Avoid possible hijacking of X11-forwarded connections with sshd(8)
by refusing to listen on a port unless all address families bind
--- 141,147 ----
! 011: SECURITY FIX: April 3, 2008All architectures
Avoid possible hijacking of X11-forwarded connections with sshd(8)
by refusing to listen on a port unless all address families bind
***************
*** 153,159 ****
! 010: SECURITY FIX: March 30, 2008All architectures
sshd(8) would execute ~/.ssh/rc even when a sshd_config(5) ForceCommand
directive was in effect, allowing users with write access to this file to
--- 151,157 ----
! 010: SECURITY FIX: March 30, 2008All architectures
sshd(8) would execute ~/.ssh/rc even when a sshd_config(5) ForceCommand
directive was in effect, allowing users with write access to this file to
***************
*** 164,170 ****
! 009: SECURITY FIX: March 7, 2008All architectures
Buffer overflow in ppp command prompt parsing.
--- 162,168 ----