version 1.731, 2001/03/02 02:35:51 |
version 1.732, 2001/03/02 20:55:47 |
|
|
<h3><font color=#0000e0>We are working on OpenBSD-current.</font></h3><p> |
<h3><font color=#0000e0>We are working on OpenBSD-current.</font></h3><p> |
<ul> |
<ul> |
<li><font color=#e00000><strong>SECURITY FIX: for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a>, handle AH packets with IP options more strictly.</strong></font><br> |
<li><font color=#e00000><strong>SECURITY FIX: for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a>, handle AH packets with IP options more strictly.</strong></font><br> |
|
<a href="errata.html#ipsec_ah">A patch is available</a></strong>.<br> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li><font color=#e00000><strong>SECURITY FIX: on i386, check arguments to USER_LDT (not enabled by default) mappings.</strong></font><br> |
<li><font color=#e00000><strong>SECURITY FIX: on i386, check arguments to USER_LDT (not enabled by default) mappings.</strong></font><br> |
|
<a href="errata.html#userldt">A patch is available</a></strong>.<br> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<a href="stable.html"><font color=#00b000>[Applied to stable]</font></a> |
<li><font color=#e00000><strong>SECURITY FIX: update to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo</a>-1.6.3p6 which fixes a buffer overflow on very long argv components.</strong></font><br> |
<li><font color=#e00000><strong>SECURITY FIX: update to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo</a>-1.6.3p6 which fixes a buffer overflow on very long argv components.</strong></font><br> |
<a href="errata.html#sudo">A patch is available</a></strong>.<br> |
<a href="errata.html#sudo">A patch is available</a></strong>.<br> |