bugtraq - Re: Integer overflow in OpenBSD kernel

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 10 Sep 2003 12:45:53 -0400
From: "Steve Shockley" <steve.shockley@...ckley.net>
To: "Jason Houx" <coldiso@...x.org>, "blexim" <blexim@...h.com>
Cc: bugtraq@...urityfocus.com
Subject: Re: Integer overflow in OpenBSD kernel


Jason Houx wrote:
> Question - how is upgrade to current a fix for this.   Did you
> research 
> 3.3 --stable et al ?

On Wed, 10 Sep 2003, blexim wrote:
>> Fix:
>> Upgrade to -current or apply the following patch:

Don't trust his included patch?  Compare it:

http://www.openbsd.org/cgi-bin/cvsweb.cgi/src/sys/kern/sysv_sem.c