[BACK]Return to security.html CVS log [TXT][DIR] Up to [local] / www

Diff for /www/security.html between version 1.407 and 1.408

version 1.407, 2014/03/30 01:39:10 version 1.408, 2014/04/08 16:39:01
Line 231 
Line 231 
 <li><a href="errata55.html#001_icmp">March 15, 2014:  <li><a href="errata55.html#001_icmp">March 15, 2014:
         Memory corruption happens during          Memory corruption happens during
         ICMP reflection handling.  ICMP reflection is disabled by default.</a>          ICMP reflection handling.  ICMP reflection is disabled by default.</a>
   <li><a href="errata55.html#002_openssl">April 7, 2014:
           Missing bounds checking in OpenSSL's implementation of the TLS/DTLS
           heartbeat extension (RFC6520) which can result in a leak of memory contents.</a>
 </ul>  </ul>
   
 <li><a name="54"></a>  <li><a name="54"></a>
Line 251 
Line 254 
 <li><a href="errata54.html#006_libXfont">January 10, 2014:  <li><a href="errata54.html#006_libXfont">January 10, 2014:
         Buffer overflow in parsing of BDF font files</a>          Buffer overflow in parsing of BDF font files</a>
         (<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6462">CVE-2013-6462</a>).          (<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6462">CVE-2013-6462</a>).
   <li><a href="errata54.html#007_openssl">April 7, 2014:
           Missing bounds checking in OpenSSL's implementation of the TLS/DTLS
           heartbeat extension (RFC6520) which can result in a leak of memory contents.</a>
 </ul>  </ul>
   
 <li><a name="53"></a>  <li><a name="53"></a>
Line 271 
Line 277 
 <li><a href="errata53.html#013_libXfont">January 10, 2014:  <li><a href="errata53.html#013_libXfont">January 10, 2014:
         Buffer overflow in parsing of BDF font files</a>          Buffer overflow in parsing of BDF font files</a>
         (<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6462">CVE-2013-6462</a>).          (<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6462">CVE-2013-6462</a>).
   <li><a href="errata53.html#014_openssl">April 7, 2014:
           Missing bounds checking in OpenSSL's implementation of the TLS/DTLS
           heartbeat extension (RFC6520) which can result in a leak of memory contents.</a>
 </ul>  </ul>
   
 <br><p><b>  <br><p><b>
Legend:
Removed from v.1.407  
changed lines
  Added in v.1.408