![[OpenBSD]](images/smalltitle.gif){kind=small}
The patches below are available in CVS via the
-OPENBSD_2_9 patch branch.
+OPENBSD_3_0 patch branch.
For more detailed information on install patches to OpenBSD, please @@ -46,159 +47,13 @@
All architectures
-
-
-
- 015: SECURITY FIX: September 11, 2001
-A security hole exists in uuxqt(8) -that may allow an attacker to run arbitrary commands as user uucp and -use this to gain root access. -The UUCP execution daemon, uuxqt(8), has a bug in its command line -parsing routine that may allow arbitrary commands to be run. Because -some UUCP commands are run as root (and daemon) from cron it is possible -to leverage compromise of the UUCP user to gain root. -
-A source code patch exists which remedies the problem -- -
- 014: SECURITY FIX: August 29, 2001
-A security hole exists in lpd(8) -that may allow an attacker with line printer access to gain root -privileges. A machine must be running lpd to be vulnerable (OpenBSD -does not start lpd by default). Only machines with line printer -access (ie: listed in either /etc/hosts.lpd or /etc/hosts.equiv) -may be used to mount an attack. -
-A source code patch exists which remedies the problem -- -
- 013: SECURITY FIX: August 21, 2001
-A security hole exists in sendmail(8) -that may allow an attacker on the local host to gain root privileges by -specifying out-of-bounds debug parameters. -
-A source code patch exists which remedies the problem -- -
- 012: SECURITY FIX: July 30, 2001
-A kernel buffer overflow exists in the NFS mount code. An attacker may -use this overflow to execute arbitrary code in kernel mode. However, -only users with mount(2) -privileges can initiate this attack. In default installs, only super-user has -mount privileges. The kern.usermount sysctl(3) controls whether other users have mount privileges. -
-A source code patch exists which remedies the problem -- 011: RELIABILITY FIX: July 15, 2001 -
-The -packages(7) -subsystem incorrectly accepts some package dependencies as okay (see -packages-specs(7) -for details). -
-A source code patch exists which remedies the problem, -by forcing/usr/sbin/pkgto be more careful in checking -version numbers. -- 008: RELIABILITY FIX: June 15, 2001 -
-twe(4) -mishandles the DMA mapping resulting in a kernel panic on unaligned data -transfers, induced by programs such as -disklabel(8) -and -dump(8). -
-A source code patch exists which remedies the problem. -This is the second version of the patch. -- 007: SECURITY FIX: June 15, 2001
-A race condition exists in the kernel execve(2) implementation that opens a small window of vulnerability for a non-privileged user to ptrace(2) attach to a suid/sgid process. -
-A source code patch exists which remedies the problem. -- 006: SECURITY FIX: June 12, 2001
-sshd(8) -allows users to delete arbitrary files named "cookies" if X11 -forwarding is enabled. X11 forwarding is disabled by default. -
-A source code patch exists which remedies the problem. -- 005: RELIABILITY FIX: June 7, 2001
-pwd_mkdb(8) -corrupts /etc/pwd.db when modifying an existing user. -
-A source code patch exists which remedies the problem. -- 004: RELIABILITY FIX: June 5, 2001
-isakmpd(8) -will fail to use a certificate with an identity string that is -exactly N * 8 bytes long. -
-A source code patch exists which remedies the problem. --
- 003: DOCUMENTATION FIX: June 1, 2001
-The 2.9 CD cover states that XFree86 3.3.6-current is included. This is only half-true. -In fact, the XFree86 included for all architectures is 4.0.3. On the i386, the -3.3.6 Xservers have also been included, because 4.0.3 still has weak support for -some devices which 3.3.6 supported better. -- 002: SECURITY FIX: May 30, 2001
-Programs using the fts(3) -routines (such as rm, find, and most programs that take a -R -flag) can be tricked into changing into the wrong directory if the -parent dir is changed out from underneath it. This is similar to -the old fts bug but happens when popping out of directories, as -opposed to descending into them. -
-A source code patch exists which remedies the problem. -This is the second version of the patch. -- 001: SECURITY FIX: May 29, 2001
-The signal handlers in sendmail(8) contain code that is unsafe in the -context of a signal handler. This leads to potentially serious -race conditions. At the moment this is a theoretical attack only -and can only be exploited on the local host (if at all).
-A source code patch exists which remedies the problem by updating sendmail to version 8.11.4. +- No problems identified yet.
- 014: SECURITY FIX: August 29, 2001
i386
-
-
-
- 010: RELIABILITY FIX: Jul 9, -2001 -The nVidia driver for XFree86 4.0.3 is incorrectly restoring the text -mode palette upon exit of the X server. -A source code patch exists which remedies the problem. -To avoid rebuilding the whole XFree86 tree, an updated binary driver -is also available -here -. Just grab it, copy it to /usr/X11R6/lib/modules/drivers/ and -restart your X server. -
- 009: RELIABILITY FIX: Jun 23,
-2001
-The XF86Setup(1) configuration tool for XFree86 3.3.6 is producing -corrupted /etc/XF86Config files. - -A source code patch exists which remedies the problem by linking -XF86Setup against the XFree86 3.3.6 version of libXxf86vm.a. --
- When using a PS/2 keyboard with an MSI K7T Pro2A motherboard, it may be -necessary to disable the "USB Keyboard Support" and -"USB Mouse Support" options in the BIOS. Otherwise, the i8042 -keyboard controller doesn't acknowledge commands, confusing OpenBSD. +
- No problems identified yet.
amiga
+ +sparc64
- No problems identified yet.
pmax
+ +amiga
- No problems identified yet.
powerpc
+ +macppc
- No problems identified yet.
- No problems identified yet.
sun3
--
-
- No problems identified yet. -
@@ -274,11 +123,12 @@ For 2.6 errata, please refer here.
For 2.7 errata, please refer here.
For 2.8 errata, please refer here.
+For 2.9 errata, please refer here.
www@openbsd.org
-$OpenBSD: errata.html,v 1.354 2001/09/12 13:52:39 millert Exp $ +
$OpenBSD: errata.html,v 1.355 2001/10/22 22:09:53 deraadt Exp $