OpenBSD 3.7 errata

=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/errata.html,v retrieving revision 1.541 retrieving revision 1.542 diff -c -r1.541 -r1.542 *** www/errata.html 2005/07/23 00:47:03 1.541 --- www/errata.html 2005/10/29 17:18:27 1.542 *************** *** 1,7 **** ! OpenBSD 3.7 errata --- 1,7 ---- ! OpenBSD 3.8 errata *************** *** 15,21 ****

! This is the OpenBSD 3.7 release errata & patch list:

--- 15,21 ----

! This is the OpenBSD 3.8 release errata & patch list:

*************** *** 39,54 **** 3.3, 3.4, 3.5, ! 3.6.

! You can also fetch a tar.gz file containing all the following patches. This file is updated once a day.

The patches below are available in CVS via the ! OPENBSD_3_7 patch branch.

For more detailed information on how to install patches to OpenBSD, please --- 39,55 ---- 3.3, 3.4, 3.5, ! 3.6, ! 3.7.

! You can also fetch a tar.gz file containing all the following patches. This file is updated once a day.

The patches below are available in CVS via the ! OPENBSD_3_8 patch branch.

For more detailed information on how to install patches to OpenBSD, please *************** *** 73,135 ****

! 005: SECURITY FIX: July 21, 2005 All architectures
! A buffer overflow has been found in ! compress(3) ! which may be exploitable.
! Please note that this fixes a different buffer overflow than the previous zlib patch. !
! ! A source code patch exists which remedies this problem.
!
-
- 004: SECURITY FIX: July 6, 2005 All architectures
- A buffer overflow has been found in - compress(3) - which may be exploitable. -
- - A source code patch exists which remedies this problem.
-
- -
- 003: SECURITY FIX: June 20, 2005 All architectures
- Due to a race condition in its command pathname handling, a user with - sudo(8) - privileges may be able to run arbitrary commands if the user's entry - is followed by an entry that grants sudo ALL privileges to - another user. -
- - A source code patch exists which remedies this problem.
-
- -
- 002: RELIABILITY FIX: June 15, 2005 All architectures
- As discovered by Stefan Miltchev calling - getsockopt(2) - to get - ipsec(4) - credentials for a socket can result in a kernel panic. -
- - A source code patch exists which remedies this problem.
-
- -
- 001: SECURITY FIX: June 7, 2005 All architectures
- - Fix a buffer overflow, memory leaks, and NULL pointer dereference in - cvs(1) - . None of these issues are known to be exploitable. - CAN-2005-0753 - . -
- - A source code patch exists which remedies this problem.
-

--- 74,81 ----

None yet.

*************** *** 154,166 **** 3.3, 3.4, 3.5, ! 3.6.

www@openbsd.org !
$OpenBSD: errata.html,v 1.541 2005/07/23 00:47:03 millert Exp $ --- 100,113 ---- 3.3, 3.4, 3.5, ! 3.6, ! 3.7.

www@openbsd.org !
$OpenBSD: errata.html,v 1.542 2005/10/29 17:18:27 deraadt Exp $