红联Linux门户
Linux帮助

NetBSD 6.1.5发布,安全补丁版本

发布时间:2014-10-08 08:59:05来源:红联作者:empast
NetBSD 6.1.5 发布,这是 NetBSD 6.1 分支的安全和补丁更新。

下载地址:http://www.netbsd.org/mirrors/

改进列表:http://www.netbsd.org/releases/formal-6/NetBSD-6.1.5.html

改进记录:

Security Advisory Fixes

NetBSD-SA2014-005 libXfont multiple vulnerabilities

NetBSD-SA2014-006 Multiple OpenSSL vulnerabilities

NetBSD-SA2014-007 bozohttpd basic http authentication bypass

NetBSD-SA2014-008 Multiple OpenSSL vulnerabilities

NetBSD-SA2014-009 Multiple vulnerabilities in the execve system call

NetBSD-SA2014-010 Multiple vulnerabilities in the compatibility layers

NetBSD-SA2014-011 User-controlled memory allocation in the modctl system call

NetBSD-SA2014-012 Memory leak in the setsockopt system call

Note: Advisories prior to NetBSD-SA2014-005 do not affect NetBSD 6.1.5.

Other Security Fixes

Fix various issues in the mount syscall, which could be used by a local user to panic the system.

OpenPAM: Fix incorrect error handling in PAM policy parser. CVE-2014-3879.

Kernel

wm(4): Bump max TX DMA size to avoid pathological condition with TSO.

tap(4): Fix a race. PR kern/47506 and kern/46199.

urndis(4): Fix a panic.

vioif(4): Fix a panic. PR kern/49007.

Fix a mbuf leak in IPFilter.

Fix two overflows and a memory corruption bug in ptyfs and umapfs.

Reject unaligned PCI config register ioctl requests before we kassert.

Miscellaneous

heimdal: Fix file descriptor leak. Fixes PR lib/48718

Update to tzdata2014g.

Update bozohttpd to 20140708.

Update openssl to 1.0.1i.

Fix Xserver crash on exit (causing screen palette settings to not be restored) when using wsfb.

postinstall(8): Don't apply "ptyfsoldnodes" if /dev/pts does not exist.

named: Update root.cache to 2014060201.

alpha

Make sysinst deal correctly with Tru64 disklabels. PR port-alpha/48697.

sparc64

Fix longjmp bug which causes a segmentation fault on sparc64 kernels with 32-bit userland.

next68k

Move physmem calculations before nptpage initialization. PR port-m68k/45915.

同时发布的还有 NetBSD 6.0.6

来自:开源中国社区
文章评论

共有 0 条评论