version 1.291, 2000/12/10 22:07:31 |
version 1.292, 2000/12/15 01:08:13 |
|
|
<a name=all></a> |
<a name=all></a> |
<li><h3><font color=#e00000>All architectures</font></h3> |
<li><h3><font color=#e00000>All architectures</font></h3> |
<ul> |
<ul> |
|
<a name=hwcrypto></a> |
|
<li><font color=#009000><strong>011: RELIABILITY FIX: Dec 13, 2000</strong></font><br> |
|
The crypto sybsystem could incorrectly fail to run certain software ciphers, |
|
if a hardware card existed in the machine.<br> |
|
<a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.8/common/011_hwcrypto.patch"> |
|
A source code patch exists which remedies the problem.</a> |
|
<a name=fastroute></a> |
|
<li><font color=#009000><strong>010: RELIABILITY FIX: Dec 11, 2000</strong></font><br> |
|
A crash could occur during fast routing, if IPSEC was enabled.<br> |
|
<a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.8/common/010_fastroute.patch"> |
|
A source code patch exists which remedies the problem.</a> |
<a name=kerberos2></a> |
<a name=kerberos2></a> |
<li><font color=#009000><strong>009: SECURITY FIX: Dec 10, 2000</strong></font><br> |
<li><font color=#009000><strong>009: SECURITY FIX: Dec 10, 2000</strong></font><br> |
Another problem exists in the kerberos libraries.<br> |
Another problem exists in the kerberos libraries.<br> |
|
|
<p> |
<p> |
<a name=rijndael> </a> |
<a name=rijndael> </a> |
<li><font color=#009000><strong>004: RELIABILITY FIX: Nov 17, 2000</strong></font><br> |
<li><font color=#009000><strong>004: RELIABILITY FIX: Nov 17, 2000</strong></font><br> |
AES (rijndael) encryption and decryption were broken for IPSec and swap |
First off, AES (rijndael) encryption and decryption were broken for IPSec |
encryption.<br> |
and swap encryption.<br> |
|
Secondly, the AES code did not work properly on big endian machines.<br> |
<a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.8/common/004_rijndael.patch"> |
<a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.8/common/004_rijndael.patch"> |
A source code patch exists which remedies the problem.</a> |
A second revision source code patch exists which remedies the problem.</a> |
<p> |
<p> |
<li><font color=#009000><strong>002: IMPLEMENTATION FIX: Nov 10, 2000</strong></font><br> |
<li><font color=#009000><strong>002: IMPLEMENTATION FIX: Nov 10, 2000</strong></font><br> |
In ssh(1), skey support for SSH1 protocol was broken. Some people might consider |
In ssh(1), skey support for SSH1 protocol was broken. Some people might consider |