| 7 |
|
<title>MidnightBSD</title> |
| 8 |
|
<link rel="shortcut icon" href="favicon.ico"> |
| 9 |
|
<link href="https://plus.google.com/112694070346575096682/" rel="publisher"> |
| 10 |
< |
<link rel="alternate" type="application/rss+xml" title="MidnightBSD Developer Blog" href="http://feedproxy.google.com/mnbsd"> |
| 10 |
> |
<link rel="alternate" type="application/rss+xml" title="MidnightBSD Developer Blog" href="http://feedproxy.google.com/mnbsd"> |
| 11 |
> |
<link href='https://fonts.googleapis.com/css?family=Slabo+27px|Oxygen:400,700' rel='stylesheet' type='text/css'> |
| 12 |
|
<link rel="stylesheet" type="text/css" href="css/essence.css"> |
| 13 |
|
<meta property="og:image" content="http://www.midnightbsd.org/art/logo/MidnightBSDLogo128x128.png"> |
| 14 |
|
<meta property="og:site_name" content="MidnightBSD"> |
| 28 |
|
|
| 29 |
|
<body> |
| 30 |
|
<div class="container"> |
| 30 |
– |
<header> |
| 31 |
|
<div id="globe" class="row"> |
| 32 |
|
<div id="header" class="col-md-12"> |
| 33 |
|
<h1 title="MidnightBSD Home"> |
| 36 |
|
</div> |
| 37 |
|
<!--#include virtual="/menu.html"--> |
| 38 |
|
<div class="clear"></div> |
| 39 |
– |
</header> |
| 39 |
|
<div id="welcomebox" class="row"> |
| 40 |
|
<div class="clear"></div> |
| 41 |
|
<div class="col-md-8"> |
| 83 |
|
|
| 84 |
|
<p class="update">0.7.1 RELEASE <br> |
| 85 |
|
In rpcbind(8), netbuf structures are copied directly, which would result in |
| 86 |
< |
two netbuf structures that reference to one shared address buffer. When one |
| 87 |
< |
of the two netbuf structures is freed, access to the other netbuf structure |
| 88 |
< |
would result in an undefined result that may crash the rpcbind(8) daemon. |
| 86 |
> |
two netbuf structures that reference to one shared address buffer. When one |
| 87 |
> |
of the two netbuf structures is freed, access to the other netbuf structure |
| 88 |
> |
would result in an undefined result that may crash the rpcbind(8) daemon. |
| 89 |
|
</p> |
| 90 |
|
|
| 91 |
|
<p class="more"> |
| 96 |
|
<p class="date">August 25, 2015</p> |
| 97 |
|
|
| 98 |
|
<p class="update"> |
| 99 |
< |
kernel: |
| 100 |
< |
fix a security issue on amd64 where the GS segment CPU register can be changed via |
| 101 |
< |
userland value in kernel mode by using an IRET with #SS or #NP exceptions. |
| 99 |
> |
0.6.7 RELEASE <br> |
| 100 |
> |
kernel: |
| 101 |
> |
fix a security issue on amd64 where the GS segment CPU register can be changed via |
| 102 |
> |
userland value in kernel mode by using an IRET with #SS or #NP exceptions. |
| 103 |
|
<br> |
| 104 |
< |
<br><b>openssh</b>: |
| 105 |
< |
A programming error in the privileged monitor process of the sshd(8) |
| 106 |
< |
service may allow the username of an already-authenticated user to be |
| 107 |
< |
overwritten by the unprivileged child process. |
| 104 |
> |
<br><b>openssh</b>: |
| 105 |
> |
A programming error in the privileged monitor process of the sshd(8) |
| 106 |
> |
service may allow the username of an already-authenticated user to be |
| 107 |
> |
overwritten by the unprivileged child process. |
| 108 |
|
<br> |
| 109 |
|
<br> A use-after-free error in the privileged monitor process of he sshd(8) |
| 110 |
< |
service may be deterministically triggered by the actions of a |
| 111 |
< |
compromised unprivileged child process. |
| 110 |
> |
service may be deterministically triggered by the actions of a |
| 111 |
> |
compromised unprivileged child process. |
| 112 |
|
<br> |
| 113 |
|
<br>A use-after-free error in the session multiplexing code in the sshd(8) |
| 114 |
< |
service may result in unintended termination of the connection. |
| 114 |
> |
service may result in unintended termination of the connection. |
| 115 |
|
</p> |
| 116 |
|
|
| 117 |
|
<p class="more"><a href="security/index.html#a20150825">Read more ...</a></p> |
| 122 |
|
<a class="twitter-timeline" href="https://twitter.com/midnightbsd" data-widget-id="340874433373806593"> |
| 123 |
|
Tweets by @midnightbsd |
| 124 |
|
</a> |
| 125 |
< |
<script>!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0],p=/^http:/.test(d.location)?'http':'https';if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src=p+"://platform.twitter.com/widgets.js";fjs.parentNode.insertBefore(js,fjs);}}(document,"script","twitter-wjs");</script> |
| 126 |
< |
|
| 127 |
< |
<p>View available <a href="mports/">mports</a></p> |
| 125 |
> |
<script>!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0],p=/^http:/.test(d.location)?'http':'https';if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src=p+"://platform.twitter.com/widgets.js";fjs.parentNode.insertBefore(js,fjs);}}(document,"script","twitter-wjs");</script> |
| 126 |
|
</div> |
| 127 |
|
</div> |
| 128 |
+ |
<div> |
| 129 |
+ |
<style> |
| 130 |
+ |
#mportsshare { background: url("http://www.midnightbsd.org/images/ports-tree.png"); width: 512px; max-width: 100%; height: 0; overflow: hidden; margin: auto; } |
| 131 |
+ |
</style> |
| 132 |
+ |
<div id="mportsshare"></div> |
| 133 |
+ |
<p>View available <a href="mports/">mports</a></p> |
| 134 |
+ |
</div> |
| 135 |
|
|
| 136 |
|
<!--#include virtual="/footer.html"--> |
| 137 |
|
</div> |
