[BACK]Return to errata46.html CVS log [TXT][DIR] Up to [local] / www

Diff for /www/errata46.html between version 1.31 and 1.32

version 1.31, 2014/10/02 14:34:45 version 1.32, 2015/02/14 04:36:51
Line 81 
Line 81 
 <hr>  <hr>
   
 <ul>  <ul>
 <li><a name="012_trunklacp"></a>  <li id="012_trunklacp">
 <font color="#009000"><strong>012: RELIABILITY FIX: May 14, 2010</strong></font>  <font color="#009000"><strong>012: RELIABILITY FIX: May 14, 2010</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Insufficient protection of the trunk interface queues may cause  Insufficient protection of the trunk interface queues may cause
Line 91 
Line 91 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="011_pfsync"></a>  <li id="011_pfsync">
 <font color="#009000"><strong>011: RELIABILITY FIX: May 14, 2010</strong></font>  <font color="#009000"><strong>011: RELIABILITY FIX: May 14, 2010</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Incorrectly initialized state updates can cause pfsync update storms.  Incorrectly initialized state updates can cause pfsync update storms.
Line 100 
Line 100 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="010_openssl"></a>  <li id="010_openssl">
 <font color="#009000"><strong>010: SECURITY FIX: April 14, 2010</strong></font>  <font color="#009000"><strong>010: SECURITY FIX: April 14, 2010</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 In TLS connections, certain incorrectly formatted records can cause  In TLS connections, certain incorrectly formatted records can cause
Line 110 
Line 110 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="009_mpi"></a>  <li id="009_mpi">
 <font color="#009000"><strong>009: RELIABILITY FIX: April 4, 2010</strong></font>  <font color="#009000"><strong>009: RELIABILITY FIX: April 4, 2010</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 When updating sensors showing the state of RAID volumes  When updating sensors showing the state of RAID volumes
Line 125 
Line 125 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="008_kerberos"></a>  <li id="008_kerberos">
 <font color="#009000"><strong>008: RELIABILITY FIX: March 31, 2010</strong></font>  <font color="#009000"><strong>008: RELIABILITY FIX: March 31, 2010</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 When decrypting packets, the internal decryption functions were not  When decrypting packets, the internal decryption functions were not
Line 136 
Line 136 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="007_ftpd"></a>  <li id="007_ftpd">
 <font color="#009000"><strong>007: RELIABILITY FIX: March 12, 2010</strong></font>  <font color="#009000"><strong>007: RELIABILITY FIX: March 12, 2010</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Due to a null pointer dereference, it would be possible to crash ftpd when  Due to a null pointer dereference, it would be possible to crash ftpd when
Line 146 
Line 146 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="006_openssl"></a>  <li id="006_openssl">
 <font color="#009000"><strong>006: SECURITY FIX: March 12, 2010</strong></font>  <font color="#009000"><strong>006: SECURITY FIX: March 12, 2010</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 OpenSSL is susceptible to a buffer overflow due to a failure  OpenSSL is susceptible to a buffer overflow due to a failure
Line 156 
Line 156 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="005_ptrace"></a>  <li id="005_ptrace">
 <font color="#009000"><strong>005: RELIABILITY FIX: January 29, 2010</strong></font>  <font color="#009000"><strong>005: RELIABILITY FIX: January 29, 2010</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 By using ptrace(2) on an ancestor process, a loop in the process tree  By using ptrace(2) on an ancestor process, a loop in the process tree
Line 167 
Line 167 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="004_openssl"></a>  <li id="004_openssl">
 <font color="#009000"><strong>004: SECURITY FIX: November 26, 2009</strong></font>  <font color="#009000"><strong>004: SECURITY FIX: November 26, 2009</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 The SSL/TLS protocol is subject to man-in-the-middle attacks related to  The SSL/TLS protocol is subject to man-in-the-middle attacks related to
Line 179 
Line 179 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="003_getsockopt"></a>  <li id="003_getsockopt">
 <font color="#009000"><strong>003: RELIABILITY FIX: October 28, 2009</strong></font>  <font color="#009000"><strong>003: RELIABILITY FIX: October 28, 2009</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 getsockopt(2) with any of IP_AUTH_LEVEL, IP_ESP_TRANS_LEVEL, IP_ESP_NETWORK_LEVEL,  getsockopt(2) with any of IP_AUTH_LEVEL, IP_ESP_TRANS_LEVEL, IP_ESP_NETWORK_LEVEL,
Line 189 
Line 189 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="002_xmm"></a>  <li id="002_xmm">
 <font color="#009000"><strong>002: RELIABILITY FIX: October 05, 2009</strong></font>  <font color="#009000"><strong>002: RELIABILITY FIX: October 05, 2009</strong></font>
 &nbsp; <i>i386 only</i><br>  &nbsp; <i>i386 only</i><br>
 XMM exceptions are not correctly handled resulting in a kernel panic.  XMM exceptions are not correctly handled resulting in a kernel panic.
Line 198 
Line 198 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="001_bind"></a>  <li id="001_bind">
 <font color="#009000"><strong>001: RELIABILITY FIX: July 29, 2009</strong></font>  <font color="#009000"><strong>001: RELIABILITY FIX: July 29, 2009</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A vulnerability has been found in BIND's named server  A vulnerability has been found in BIND's named server
Legend:
Removed from v.1.31  
changed lines
  Added in v.1.32