www/security.html - diff

Return to security.html CVS log

Up to [local] / www

version 1.111, 1999/09/23 20:21:23

version 1.112, 1999/09/28 21:27:21

Line 301

(patch included).</a>

<li><a href=errata22.html#mountd>Mar 2, 1998: Accidental NFS filesystem

export (patch included).</a>

<li><a href=advisories/mmap>Feb 26, 1998: Read-write mmap() flaw.</a>

<li><a href="advisories/mmap.txt">Feb 26, 1998: Read-write mmap() flaw.</a>

Revision 3 of the patch is available <a href=errata22.html#mmap>here</a>

<li><a href=advisories/sourceroute>Feb 19, 1998: Sourcerouted Packet

<li><a href="advisories/sourceroute.txt">Feb 19, 1998: Sourcerouted Packet

Acceptance.</a>

A patch is available <a href=errata22.html#sourceroute>here</a>.

<li><a href=errata22.html#ruserok>Feb 13, 1998: Setuid coredump & Ruserok()

Line 328

<ul>

<li><a href=advisories/signals>Sep 15, 1997: Deviant Signals (patch included)</a>

<li><a href="advisories/signals.txt">Sep 15, 1997: Deviant Signals (patch included)</a>

<li><a href=advisories/rfork>Aug 2, 1997: Rfork() system call flaw

<li><a href="advisories/rfork.txt">Aug 2, 1997: Rfork() system call flaw

(patch included)</a>

<li><a href=advisories/procfs>Jun 24, 1997: Procfs flaws (patch included)</a>

<li><a href="advisories/procfs.txt">Jun 24, 1997: Procfs flaws (patch included)</a>

</ul>

Line 346

<ul>

<li><a href=advisories/res_random>April 22, 1997: Predictable IDs in the

<li><a href="advisories/res_random.txt">April 22, 1997: Predictable IDs in the

resolver (patch included)</a>

<li>Many others... if people can hunt them down, please let me know

and we'll put them up here.

Line 402

<a href=mailto:deraadt@openbsd.org>deraadt@openbsd.org</a>.

If you wish to PGP encode it (but please only do so if privacy is very

urgent, since it is inconvenient) use this <a href=advisories/pgpkey>pgp key</a>.

urgent, since it is inconvenient) use this <a href="advisories/pgpkey.txt">pgp key</a>.