[BACK]Return to security.html CVS log [TXT][DIR] Up to [local] / www

Diff for /www/security.html between version 1.200 and 1.201

version 1.200, 2002/03/14 05:38:54 version 1.201, 2002/03/19 22:06:26
Line 193 
Line 193 
   
 <p>  <p>
 <ul>  <ul>
   <li><a href=errata.html#approval>March 19, 2002:
           Under certain conditions, on systems using YP with netgroups in
           the password database, it is possible for the rexecd(8) and rshd(8)
           daemons to execute a shell from a password database entry for a
           different user. Similarly, atrun(8) may change to the wrong
           home directory when running jobs.</a>
 <li><a href=errata.html#zlib>March 13, 2002:  <li><a href=errata.html#zlib>March 13, 2002:
         A potential double free() exists in the zlib library;          A potential double free() exists in the zlib library;
         this is not exploitable on OpenBSD.          this is not exploitable on OpenBSD.
Legend:
Removed from v.1.200  
changed lines
  Added in v.1.201