From f4859284c73cb6739cf48504a7eff37fd0993b29 Mon Sep 17 00:00:00 2001
From: "Bruce A. Mah"
$FreeBSD: src/release/doc/en_US.ISO8859-1/errata/article.sgml,v
-1.69.2.23 2005/06/24 08:52:41 hrs Exp $
+1.69.2.24 2005/06/30 19:39:45 bmah Exp $
BIND 9 DNSSEC remote denial of service vulnerability
+ +ipfw packet matching errors with address tables
+bzip2 denial of service and permission race vulnerabilities
+TCP connection stall denial of service
+(6 May 2005) An error in the default permissions on the /dev/iir device node, which allowed unprivileged local users to send commands to the hardware supported by the iir(4) driver. +href="http://www.FreeBSD.org/cgi/man.cgi?query=iir&sektion=4&manpath=FreeBSD+5.3-stable"> +iir(4) driver. Although the error was fixed prior to 5.4-RELEASE, it was applied too late in the release cycle to be mentioned in the release notes. For more information, see security advisory FreeBSD-SA-05:06.iir.
(6 May 2005) A bug in the validation of +href="http://www.FreeBSD.org/cgi/man.cgi?query=i386_get_ldt&sektion=2&manpath=FreeBSD+5.3-stable"> i386_get_ldt(2) system call input arguments, which may allow kernel memory may be disclosed to the user process, has been fixed. This bug was fixed prior to 5.4-RELEASE, although not in time to @@ -189,7 +217,7 @@ FreeBSD/sparc64 GENERIC kernel prior to the upcoming 6.0-RELEASE officially only serial consoles. This is especially true for the FreeBSD/sparc64 5.4-RELEASE GENERIC kernel because the ofw_console(4) driver which also provides limited indirect support for graphical consoles has been replaced with the +href="http://www.FreeBSD.org/cgi/man.cgi?query=uart&sektion=4&manpath=FreeBSD+5.3-stable"> uart(4) driver in favor better serial support.