This mailing list is for announcements about NetBSD

NetBSD Security Officer | 13 Jan 2010 12:38

NetBSD Security Advisory 2010-001: File system module autoloading Denial of Service attack


		 NetBSD Security Advisory 2010-001
		 =================================

Topic:		File system module autoloading Denial of Service attack

Version:	NetBSD-current:		affected prior to 2009-12-19 20:28:27 UTC
		NetBSD 5.0.1:		affected
		NetBSD 5.0:		affected
		NetBSD 4.0.*:		not affected
		NetBSD 4.0:		not affected

Severity:	Local Denial of Service

Fixed:		NetBSD-current:		Dec 19, 2009
		NetBSD-5-0 branch:	Dec 21, 2009
		NetBSD-5 branch:	Dec 21, 2009

Please note that NetBSD releases prior to 4.0 are no longer supported.
It is recommended that all users upgrade to a supported release.

Abstract
========

A coding error in the NetBSD VFS code allows a local attacker to
crash the local system by passing a soon-to-be-unmapped pointer
as a file system name to the mount system call.

Technical Details
=================

(Continue reading)

headers

NetBSD Security Officer | 13 Jan 2010 12:39

NetBSD Security Advisory 2010-002: OpenSSL TLS renegotiation man in the middle vulnerability


		 NetBSD Security Advisory 2010-002
		 =================================

Topic:		OpenSSL TLS renegotiation man in the middle vulnerability

Version:	NetBSD-current:		affected prior to 2009-12-04
		NetBSD 5.0:		affected
		NetBSD 4.0.*:		affected
		NetBSD 4.0:		affected
		pkgsrc:			openssl package prior to x.y.z

Severity:	Information disclosure

Fixed:		NetBSD-current:		Dec 03, 2009
		NetBSD-5-0 branch:	Jan 12, 2010
		NetBSD-5 branch:	Jan 12, 2010
		NetBSD-4-0 branch:	Jan 12, 2010
		NetBSD-4 branch:	Jan 12, 2010
		pkgsrc 2009Q4:		openssl-0.9.8l corrects this issue

Please note that NetBSD releases prior to 4.0 are no longer supported.
It is recommended that all users upgrade to a supported release.

Abstract
========

An error in the OpenSSL TLS session renegotiation allows a remote
attacker to intercept communication and conduct a Man-in-the-Middle
attack on TLS sessions.

(Continue reading)


Mon	Tue	Wed	Thu	Fri	Sat	Sun
				1	2	3
4	5	6	7	8	9	10
11	12	13	14	15	16	17
18	19	20	21	22	23	24
25	26	27	28	29	30	31

Mon

Tue

Wed

Thu

Fri

Sat

Sun

2	May 2013
2	April 2013
4	March 2013
4	February 2013
2	January 2013
3	December 2012
2	November 2012
4	October 2012
1	September 2012
1	August 2012
3	July 2012
4	June 2012
1	May 2012
1	April 2012
4	March 2012
2	February 2012
1	January 2012
4	December 2011
1	November 2011
2	October 2011
1	September 2011
2	July 2011
4	April 2011
4	March 2011
1	February 2011
1	January 2011
4	November 2010
4	October 2010
4	September 2010
3	August 2010
1	July 2010
1	June 2010
1	May 2010
5	April 2010
1	March 2010
4	February 2010
2	January 2010
1	December 2009
4	September 2009
2	August 2009
9	July 2009
8	June 2009
2	May 2009
6	April 2009
2	March 2009
2	February 2009
3	January 2009
1	December 2008
9	October 2008
2	September 2008
2	August 2008
6	July 2008
2	June 2008
5	May 2008
8	April 2008
4	March 2008
5	February 2008
7	January 2008
5	December 2007
6	November 2007
7	October 2007
4	September 2007
1	August 2007
2	July 2007
2	May 2007
2	April 2007
10	March 2007
3	February 2007
3	January 2007
5	December 2006
9	November 2006
4	October 2006
9	September 2006
5	August 2006
4	July 2006
3	June 2006
3	May 2006
7	April 2006
9	March 2006
5	February 2006
1	January 2006
8	December 2005
18	November 2005
5	October 2005
4	September 2005
3	August 2005
3	July 2005
5	June 2005
6	May 2005
2	April 2005
3	March 2005
3	February 2005
6	January 2005
6	December 2004
2	November 2004
2	October 2004
1	August 2004
3	July 2004
3	June 2004
3	May 2004
6	April 2004
9	March 2004
10	February 2004
3	January 2004
3	December 2003
2	November 2003
7	October 2003
8	September 2003
2	August 2003
3	July 2003
1	June 2003
4	May 2003
8	April 2003
11	March 2003
3	February 2003
5	January 2003
2	December 2002
7	November 2002
12	October 2002
18	September 2002
9	August 2002
7	July 2002
4	June 2002
3	May 2002
3	April 2002
2	March 2002