diff --git a/en/releases/4.9R/errata.html b/en/releases/4.9R/errata.html index a50ab46853..7168dcbca2 100644 --- a/en/releases/4.9R/errata.html +++ b/en/releases/4.9R/errata.html @@ -19,7 +19,7 @@ alink="#0000FF"> Project
$FreeBSD: src/release/doc/en_US.ISO8859-1/errata/article.sgml,v
-1.1.2.119 2003/12/05 00:01:30 bmah Exp $
+1.1.2.120 2004/02/08 22:26:05 bmah Exp $
BIND contains the potential for a denial-of-service attack. -This vulnerability has been addressed by a vendor patch on the 4.9-RELEASE security fix -branch and by the import of a new version to the 4-STABLE development branch. For more -information, see (5 Dec 2003) BIND contains the potential for a +denial-of-service attack. This vulnerability has been addressed by a vendor patch on the +4.9-RELEASE security fix branch and by the import of a new version to the 4-STABLE +development branch. For more information, see FreeBSD-SA-03:19.
+ +(8 Feb 2004) A bug with the System V Shared Memory interface (specifically the +shmat(2) system +call) can cause a shared memory segment to reference unallocated kernel memory. In turn, +this can permit a local attacker to gain unauthorized access to parts of kernel memory, +possibly resulting in disclosure of sensitive information, bypass of access control +mechanisms, or privilege escalation. More details, including bugfix and workaround +information, can be found in security advisory FreeBSD-SA-04:02.
(28 Oct 2003) Very late in the release cycle, a change was made to the HyperThreading (HTT) support on Intel® processors. HTT support is now