version 1.208, 2002/05/08 23:02:53 |
version 1.209, 2002/05/22 22:32:29 |
|
|
|
|
<p> |
<p> |
<ul> |
<ul> |
|
<li><a href=errata.html#sshbsdauth>May 22, 2002: |
|
Under certain conditions, on systems using YP with netgroups |
|
in the password database, it is possible that sshd(8) does |
|
ACL checks for the requested user name but uses the password |
|
database entry of a different user for authentication. This |
|
means that denied users might authenticate successfully |
|
while permitted users could be locked out.</a> |
<li><a href=errata.html#fdalloc2>May 8, 2002: |
<li><a href=errata.html#fdalloc2>May 8, 2002: |
A race condition exists that could defeat the kernel's |
A race condition exists that could defeat the kernel's |
protection of fd slots 0-2 for setuid processes.</a> |
protection of fd slots 0-2 for setuid processes.</a> |