[BACK]Return to security.html CVS log [TXT][DIR] Up to [local] / www

Diff for /www/security.html between version 1.258 and 1.259

version 1.258, 2003/10/04 16:57:21 version 1.259, 2003/10/04 17:58:02
Line 201 
Line 201 
         The use of certain ASN.1 encodings or malformed public keys may          The use of certain ASN.1 encodings or malformed public keys may
         allow an attacker to mount a denial of service attack against          allow an attacker to mount a denial of service attack against
         applications linked with ssl(3).</a>          applications linked with ssl(3).</a>
 <li><a href=errata.html#pfnorm>October 1, 2003:  <li><a href=errata.html#pfnorm>September 24, 2003:
         Access of freed memory in pf(4) could be used to          Access of freed memory in pf(4) could be used to
         remotely panic a machine using scrub rules.</a          remotely panic a machine using scrub rules.</a
 <li><a href=errata.html#sendmail>September 17, 2003:  <li><a href=errata.html#sendmail>September 17, 2003:
Line 236 
Line 236 
         The use of certain ASN.1 encodings or malformed public keys may          The use of certain ASN.1 encodings or malformed public keys may
         allow an attacker to mount a denial of service attack against          allow an attacker to mount a denial of service attack against
         applications linked with ssl(3).  This does not affect OpenSSH.</a>          applications linked with ssl(3).  This does not affect OpenSSH.</a>
 <li><a href=errata32.html#pfnorm>October 1, 2003:  <li><a href=errata32.html#pfnorm>September 24, 2003:
         Access of freed memory in pf(4) could be used to          Access of freed memory in pf(4) could be used to
         remotely panic a machine using scrub rules.</a          remotely panic a machine using scrub rules.</a
 <li><a href=errata32.html#sendmail4>September 17, 2003:  <li><a href=errata32.html#sendmail4>September 17, 2003:
Legend:
Removed from v.1.258  
changed lines
  Added in v.1.259