Alistair Crooks | 16 Aug 20:12 2010
Picon

The New NetBSD Core Team


We take great pleasure in announcing that the NetBSD core team,
responsible for technical management within the NetBSD project, has
increased its numbers to seven.  This is to help in the running of a
project with an ever-growing source base and developer community, and
mirrors a similar change made to the board of directors, which has
worked extremely well.

To help with the running of the project, we have asked Antti Kantee
(pooka <at> NetBSD.org) and Chuck Silvers (chs <at> NetBSD.org), and they have
very kindly agreed to join the core team.  Antti is well known to many
both inside and outside the project, and has contributed many new and
exciting ideas, the most memorable and useful of these being the rump
kernel architecture.  Chuck is also well-known in NetBSD circles - his
work on UBC, and his recent update of the Linux emulation code are
just two examples of his contributions.

We therefore thank them both for their outstanding work to date, and
to their joining the core team to lead and guide progress in the future.

For the current core team:

	Alistair Crooks -- agc <at> NetBSD.org
	Matt Green -- mrg <at> NetBSD.org
	Antti Kantee -- pooka <at> NetBSD.org
	Chuck Silvers -- chs <at> NetBSD.org
	Yamamoto Takashi -- yamt <at> NetBSD.org
	Matt Thomas -- matt <at> NetBSD.org
	Christos Zoulas -- christos <at> NetBSD.org

(Continue reading)

NetBSD Security Officer | 25 Aug 23:58 2010
Picon

Buffer length checking errors in CODA


		 NetBSD Security Advisory 2010-006
		 =================================

Topic:		Buffer length checking errors in CODA

Version:	NetBSD-current:		affected prior to July 20, 2010
		NetBSD 5.0.2:		affected
		NetBSD 5.0.1:		affected
		NetBSD 5.0:		affected
		NetBSD 4.0.1:		affected
		NetBSD 4.0:		affected

Severity:	Local Kernel Memory Information Disclosure

Fixed:		NetBSD-current:		Jul 20, 2010
		NetBSD-5 branch		Aug 26, 2010
		NetBSD-5-0 branch	Aug 26, 2010
		NetBSD-4 branch		Aug 4, 2010
		NetBSD-4-0 branch	Aug 4, 2010

Please note that NetBSD releases prior to 4.0 are no longer supported.
It is recommended that all users upgrade to a supported release.

Abstract
========

The CODA filesystem kernel module was incorrectly checking buffer
limits enabling a regular user read access to kernel memory.

(Continue reading)

NetBSD Security Officer | 26 Aug 11:23 2010
Picon

NetBSD Security Advisory 2010-006 (resent): Buffer length checking errors in CODA


		 NetBSD Security Advisory 2010-006
		 =================================

Topic:		Buffer length checking errors in CODA

Version:	NetBSD-current:		affected prior to July 20, 2010
		NetBSD 5.0.2:		affected
		NetBSD 5.0.1:		affected
		NetBSD 5.0:		affected
		NetBSD 4.0.1:		affected
		NetBSD 4.0:		affected

Severity:	Local Kernel Memory Information Disclosure

Fixed:		NetBSD-current:		Jul 20, 2010
		NetBSD-5 branch		Aug 26, 2010
		NetBSD-5-0 branch	Aug 26, 2010
		NetBSD-4 branch		Aug 4, 2010
		NetBSD-4-0 branch	Aug 4, 2010

Please note that NetBSD releases prior to 4.0 are no longer supported.
It is recommended that all users upgrade to a supported release.

Abstract
========

The CODA filesystem kernel module was incorrectly checking buffer
limits enabling a regular user read access to kernel memory.

(Continue reading)


Gmane