NetBSD 6.1.5发布,安全补丁版本

NetBSD 6.1.5 发布，这是 NetBSD 6.1 分支的安全和补丁更新。

下载地址：http://www.netbsd.org/mirrors/

改进列表：http://www.netbsd.org/releases/formal-6/NetBSD-6.1.5.html

改进记录：

Security Advisory Fixes

• NetBSD-SA2014-005 libXfont multiple vulnerabilities

• NetBSD-SA2014-006 Multiple OpenSSL vulnerabilities

• NetBSD-SA2014-007 bozohttpd basic http authentication bypass

• NetBSD-SA2014-008 Multiple OpenSSL vulnerabilities

• NetBSD-SA2014-009 Multiple vulnerabilities in the execve system call

• NetBSD-SA2014-010 Multiple vulnerabilities in the compatibility layers

• NetBSD-SA2014-011 User-controlled memory allocation in the modctl system call

• NetBSD-SA2014-012 Memory leak in the setsockopt system call

Note:  Advisories prior to NetBSD-SA2014-005 do not affect NetBSD 6.1.5.

Other Security Fixes

• Fix various issues in the mount syscall, which could be used by a      local user to panic the system.

• OpenPAM: Fix incorrect error handling in PAM policy parser.      CVE-2014-3879.

Kernel

• wm(4): Bump max TX DMA size to avoid pathological condition with TSO.

• tap(4): Fix a race. PR kern/47506 and kern/46199.

• urndis(4): Fix a panic.

• vioif(4): Fix a panic.  PR kern/49007.

• Fix a mbuf leak in IPFilter.

• Fix two overflows and a memory corruption bug in ptyfs and umapfs.

• Reject unaligned PCI config register ioctl requests before we kassert.

Miscellaneous

• heimdal: Fix file descriptor leak. Fixes PR lib/48718

• Update to tzdata2014g.

• Update bozohttpd to 20140708.

• Update openssl to 1.0.1i.

• Fix Xserver crash on exit (causing screen palette settings to not be    restored) when using wsfb.

• postinstall(8): Don't apply "ptyfsoldnodes" if /dev/pts    does not exist.

• named: Update root.cache to 2014060201.

alpha

• Make sysinst deal correctly with Tru64 disklabels. PR port-alpha/48697.

sparc64

• Fix longjmp bug which causes a segmentation fault on sparc64    kernels with 32-bit userland.

next68k

• Move physmem calculations before nptpage initialization.    PR port-m68k/45915.