This mailing list is for announcements about NetBSD

S.P.Zeidler | 1 Jun 2009 14:18

Picon

planned network maintenance June 4th, 0100-0400 UTC

Dear all,

ISC has announced a maintenance window for the connectivity of:

	mail.NetBSD.org
	www.NetBSD.org (aka gnats.NetBSD.org, aka releng.NetBSD.org)
	ftp.NetBSD.org
	anoncvs.NetBSD.org

June 4th, 0100-0400 UTC. This maintenance window also affects other
services hosted at ISC in San Francisco and Redwood City.

We totally disinterestedly (  ) wish ISC the best of luck and success
with their planned work.

regards,
	spz

NetBSD Security Officer | 23 Jun 2009 22:50

Picon

NetBSD Security Advisory 2009-001: PF firewall remote Denial Of Service attack


		 NetBSD Security Advisory 2009-001
		 =================================

Topic:		PF firewall remote Denial Of Service attack

Version:	NetBSD-current:		affected
		NetBSD 5.0:		not affected
		NetBSD 4.0.*:		not affected
		NetBSD 4.0:		not affected
		NetBSD 3.1.*:		not affected
		NetBSD 3.1:		not affected
		NetBSD 3.0.*:		not affected
		NetBSD 3.0:		not affected

Severity:	Denial of service

Fixed:		NetBSD-current:		April 14, 2009
		NetBSD-5 branch:	April 14, 2009
			(5.0 includes the fix)

Please note that NetBSD releases prior to 4.0 are no longer supported.
It is recommended that all users upgrade to a supported release.

Abstract
========

PF firewalls suffer from a remote denial of service attack (system
panic) due to mishandling of some ICMP and ICMPV6 packets.

(Continue reading)

NetBSD Security Officer | 23 Jun 2009 22:59

Picon

NetBSD Security Advisory 2009-002: tcpdump multiple denial of service and arbitrary code execution issues


		 NetBSD Security Advisory 2009-002
		 =================================

Topic:		tcpdump multiple denial of service and arbitrary code
		execution issues

Version:	NetBSD-current:		affected before July 20, 2007
		NetBSD 5.0:		not affected
		NetBSD 4.0.*:		not affected
		NetBSD 4.0:		affected

Severity:	Denial of Service, Arbitrary Code Execution

Fixed:		NetBSD-current:		July 20, 2007
		NetBSD-4-0 branch:	July 21, 2008
			(4.0.2 will include the fix)
		NetBSD-4 branch:	July 21, 2008
			(4.1 will include the fix)
		pkgsrc:			tcpdump-3.9.7 corrects the issue

Please note that NetBSD releases prior to 4.0 are no longer supported.
It is recommended that all users upgrade to a supported release.

Abstract
========

A number of issuses exist in the version of tcpdump(1) shipped with
NetBSD 4.0 allowing a remote attacker to hang or crash the
application and to execute arbitrary code via specially crafted

(Continue reading)

NetBSD Security Officer | 23 Jun 2009 23:00

Picon

NetBSD Security Advisory 2009-003: proplib crashes on reading bad XML data


		 NetBSD Security Advisory 2009-003
		 =================================

Topic:		proplib crashes on reading bad XML data

Version:	NetBSD-current:		affected prior to March 30, 2009
		NetBSD 5.0:		not affected
		NetBSD 4.0.1:		affected
		NetBSD 4.0:		affected

Severity:	Denial of service

Fixed:		NetBSD-current:		March 30, 2009
		NetBSD-5 branch:	March 30, 2009
			(5.0 includes the fix)
		NetBSD-4-0 branch:	March 31, 2009
			(4.0.2 will include the fix)
		NetBSD-4 branch:	March 31, 2009
			(4.1 will include the fix)

Please note that NetBSD releases prior to 4.0 are no longer supported.
It is recommended that all users upgrade to a supported release.

Abstract
========

The proplib library can crash if a badly formatted externalized plist
is presented for import. The crash will happen during the
transformation of the text XML form into a binary list. This bug can

(Continue reading)

NetBSD Security Officer | 23 Jun 2009 23:01

Picon

NetBSD Security Advisory 2009-004: NetBSD OpenPAM passwd(1) changing weakness


		 NetBSD Security Advisory 2009-004
		 =================================

Topic:		NetBSD OpenPAM passwd(1) changing weakness

Version:	NetBSD-current:		affected before June 14, 2009
		NetBSD 5.0:		affected
		NetBSD 4.0.1:		affected
		NetBSD 4.0:		affected

Severity:	Change root password as normal user

Fixed:		NetBSD-current:		June 14, 2009
		NetBSD-5-0 branch:	June 18, 2009
			(5.0.1 will include the fix)
		NetBSD-5 branch:	June 18, 2009
			(5.1 will include the fix)
		NetBSD-4-0 branch:	June 18, 2009
			(4.0.2 will include the fix)
		NetBSD-4 branch:	June 18, 2009
			(4.1 will include the fix)

Please note that NetBSD releases prior to 4.0 are no longer supported.
It is recommended that all users upgrade to a supported release.

Abstract
========

A verification weakness in the pam_unix module allows an authenticated

(Continue reading)

NetBSD Security Officer | 24 Jun 2009 00:41

Picon

Changing the NetBSD Security Officer PGP key

Dear NetBSD users, dear followers of the NetBSD security community,

Please note that from now on, the NetBSD Security Officer will
use a new PGP key to sign announcements and other types of
communication. The old PGP key will be unenrolled over the next
time:

pub   1024R/F8376205 1997-07-01
uid                  security-officer <at> netbsd.org

It will be superseeded by the following key which is larger
and offers a better security margin:

pub   4096R/4C4A706E 2009-06-23 [expires: 2019-06-21]
uid                  NetBSD Security Officer <security-officer <at> NetBSD.org>
sub   4096R/DF2CE620 2009-06-23 [expires: 2019-06-21]

The key will be rotated on a regular basis in the future, for
better security of our users. Please update your processes to
make use of this new key in the future.

To testify this migration, this mail contains the new security-officer
PGP key below and, appended, a signature of the text part generated
with the old and the new key, correspondingly.

Thank you for your continued trust in NetBSD,

			The NetBSD Security Officers

-----BEGIN PGP PUBLIC KEY BLOCK-----

(Continue reading)

NetBSD Security Officer | 30 Jun 2009 23:51

Picon

NetBSD Security Advisory 2009-006: Buffer overflows in ntp


		 NetBSD Security Advisory 2009-006
		 =================================

Topic:		Buffer overflows in ntp

Version:	NetBSD-current:	source prior to May 21, 2009
		NetBSD 5.0:		source prior to May 27, 2009
		NetBSD 4.0.1:		source prior to May 27, 2009
		NetBSD 4.0:		source prior to May 27, 2009

Severity:	Potential remote arbitrary code execution

Fixed:		NetBSD-current:		May 20, 2009
		NetBSD-5 branch:	May 27, 2008 (5.0.1 will include the fix)
		NetBSD-4 branch:	May 27, 2008 (4.1 will include the fix)
		NetBSD-4-0 branch:	May 27, 2008 (4.0.2 will include the fix)

Please note that NetBSD releases prior to 4.0 are no longer supported.
It is recommended that all users upgrade to a supported release.

Abstract
========

Two remote buffer overflow vulnerabilities have been found in the ntp
(Network Time Protocol) code.

The first, in ntpq, potentially allows arbitrary code execution (as
the user running ntpq) if a hostile ntp daemon is contacted.

(Continue reading)

NetBSD Security Officer | 30 Jun 2009 23:52

Picon

NetBSD Security Advisory 2009-007: Buffer overflows in hack(6)


		 NetBSD Security Advisory 2009-007
		 =================================

Topic:		Buffer overflows in hack(6)

Version:	NetBSD-current:	source prior to June 30, 2009
		NetBSD 5.0:		affected
		NetBSD 4.0.1:		affected
		NetBSD 4.0:		affected

Severity:	Unprivileged local users can gain access to "games" group

Fixed:		NetBSD-current:		June 29, 2009
		NetBSD-5 branch:	June 29, 2009
			(5.1 will include the fix)
		NetBSD-5-0 branch:	June 29, 2009
			(5.0.1 will include the fix)
		NetBSD-4 branch:	June 29, 2009
			(4.1 will include the fix)
		NetBSD-4-0 branch:	June 29, 2009
			(4.0.2 will include the fix)

Please note that NetBSD releases prior to 4.0 are no longer supported.
It is recommended that all users upgrade to a supported release.

Abstract
========

Hack, a "rogue-like" game, is installed setgid to the "games" group

(Continue reading)

Group

gmane.os.netbsd.announce.

Search Archive

Page

1

Articles in period: 8

June 2009

Language

Change language

Options

Current view: Threads only / Showing only 20 lines / Not hiding cited text.
Change to All messages, whole messages, or hide cited text.

Post a message
NNTP Newsgroup
Classic Gmane web interface
XML

XML

RSS Feed
List Information

About Gmane

Recent entries

www/gnats/mail-index.NetBSD.org broken / being replaced (21 May 2013)
NetBSD 6.1 (and 6.0.2!) Released (18 May 2013)
cvsweb.NetBSD.org is now updated hourly (27 Apr 2013)
EuroBSDCon 2013 Call for Papers (28 Mar 2013)
pkgsrc-2013Q1 released (1 Apr 2013)
NetBSD Security Advisory 2013-003: RNG Bug May Result in Weak Cryptogr (30 Mar 2013)
NetBSD 6.1 Release Candidate 2 (18 Mar 2013)
Updated NetBSD Security Advisory 2013-003: RNG Bug May Result in Weak (7 Mar 2013)
NetBSD Security Advisory 2013-004: Vulnerabilities in grep (27 Feb 2013)
NetBSD Security Advisory 2013-002: kqueue related kernel panic trigger (27 Feb 2013)
NetBSD Security Advisory 2013-003: Pseudo-Random bits weaker than expe (27 Feb 2013)
NetBSD 6.1_RC1 available for testing (22 Feb 2013)
NetBSD Security Advisory 2013-001: kernel panic triggered from userlan (29 Jan 2013)
Announcing pkgsrc-2012Q4 (11 Jan 2013)
NetBSD 6.0.1 released (26 Dec 2012)
Service outage: nyftp.netbsd.org 2012-12-26 17:00 UTC (25 Dec 2012)
www.netbsd.org is dead, a mirror is stepping in (6 Dec 2012)
NetBSD 5.2_RC1 (14 Nov 2012)
new 64bit NetBSD port for TILE-GX (8 Nov 2012)
End of life for NetBSD 4.x on November 17th. (27 Oct 2012)
Introducing NPF in NetBSD 6.0 (17 Oct 2012)

Archives

2	May 2013
2	April 2013
4	March 2013
4	February 2013
2	January 2013
3	December 2012
2	November 2012
4	October 2012
1	September 2012
1	August 2012
3	July 2012
4	June 2012
1	May 2012
1	April 2012
4	March 2012
2	February 2012
1	January 2012
4	December 2011
1	November 2011
2	October 2011
1	September 2011
2	July 2011
4	April 2011
4	March 2011
1	February 2011
1	January 2011
4	November 2010
4	October 2010
4	September 2010
3	August 2010
1	July 2010
1	June 2010
1	May 2010
5	April 2010
1	March 2010
4	February 2010
2	January 2010
1	December 2009
4	September 2009
2	August 2009
9	July 2009
8	June 2009
2	May 2009
6	April 2009
2	March 2009
2	February 2009
3	January 2009
1	December 2008
9	October 2008
2	September 2008
2	August 2008
6	July 2008
2	June 2008
5	May 2008
8	April 2008
4	March 2008
5	February 2008
7	January 2008
5	December 2007
6	November 2007
7	October 2007
4	September 2007
1	August 2007
2	July 2007
2	May 2007
2	April 2007
10	March 2007
3	February 2007
3	January 2007
5	December 2006
9	November 2006
4	October 2006
9	September 2006
5	August 2006
4	July 2006
3	June 2006
3	May 2006
7	April 2006
9	March 2006
5	February 2006
1	January 2006
8	December 2005
18	November 2005
5	October 2005
4	September 2005
3	August 2005
3	July 2005
5	June 2005
6	May 2005
2	April 2005
3	March 2005
3	February 2005
6	January 2005
6	December 2004
2	November 2004
2	October 2004
1	August 2004
3	July 2004
3	June 2004
3	May 2004
6	April 2004
9	March 2004
10	February 2004
3	January 2004
3	December 2003
2	November 2003
7	October 2003
8	September 2003
2	August 2003
3	July 2003
1	June 2003
4	May 2003
8	April 2003
11	March 2003
3	February 2003
5	January 2003
2	December 2002
7	November 2002
12	October 2002
18	September 2002
9	August 2002
7	July 2002
4	June 2002
3	May 2002
3	April 2002
2	March 2002

Design

Zawodny | Right Menu | Left Menu

Your Own Design

Paste the URL of your CSS below. Download CSS template