diff options
| author | bmah <bmah@FreeBSD.org> | 2001-07-11 01:10:45 +0000 |
|---|---|---|
| committer | bmah <bmah@FreeBSD.org> | 2001-07-11 01:10:45 +0000 |
| commit | 66b66b84f0b3f43fac632b23274d6eca2529376b (patch) | |
| tree | 9044792e5015d84c4f309f3a36d0519b7788a43a /release | |
| parent | f397ddead2ee55b3b7beb2b794ba5fd172d1646e (diff) | |
| download | FreeBSD-src-66b66b84f0b3f43fac632b23274d6eca2529376b.zip FreeBSD-src-66b66b84f0b3f43fac632b23274d6eca2529376b.tar.gz | |
New release note: FreeBSD-SA-01:42.
Diffstat (limited to 'release')
| -rw-r--r-- | release/doc/en_US.ISO8859-1/relnotes/article.sgml | 5 | ||||
| -rw-r--r-- | release/doc/en_US.ISO8859-1/relnotes/common/new.sgml | 5 |
2 files changed, 10 insertions, 0 deletions
diff --git a/release/doc/en_US.ISO8859-1/relnotes/article.sgml b/release/doc/en_US.ISO8859-1/relnotes/article.sgml index 7a7c85c..766fb71 100644 --- a/release/doc/en_US.ISO8859-1/relnotes/article.sgml +++ b/release/doc/en_US.ISO8859-1/relnotes/article.sgml @@ -884,6 +884,11 @@ user's UID before attempting to unlink the authentication forwarding file, nullifying the effects of a race.</para> + <para>A flaw allowed some signal handlers to remain in effect in a + child process after being exec-ed from its parent. This allowed + an attacker to execute arbitrary code in the context of a setuid + binary. This flaw has been corrected (see security advisory + FreeBSD-SA-01:42). &merged;</para> </sect2> <sect2> <title>Userland Changes</title> diff --git a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml index 7a7c85c..766fb71 100644 --- a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml +++ b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml @@ -884,6 +884,11 @@ user's UID before attempting to unlink the authentication forwarding file, nullifying the effects of a race.</para> + <para>A flaw allowed some signal handlers to remain in effect in a + child process after being exec-ed from its parent. This allowed + an attacker to execute arbitrary code in the context of a setuid + binary. This flaw has been corrected (see security advisory + FreeBSD-SA-01:42). &merged;</para> </sect2> <sect2> <title>Userland Changes</title> |
