007: SECURITY FIX: October 1, 2003
-The use of certain ASN.1 encodings or malformed public keys may allow an
-attacker to mount a denial of service attack against applications linked with
-ssl(3).
-This does not affect OpenSSH.
-A source code patch exists which remedies the problem.
-
-
-
006: SECURITY FIX: September 24, 2003
-Three cases of potential access to freed memory have been found in
-pf(4).
-At least one of them could be used to panic pf with active scrub rules remotely.
-A source code patch exists which remedies the problem.
-
-
-
005: SECURITY FIX: September 17, 2003
-A buffer overflow in the address parsing in
-sendmail(8)
-may allow an attacker to gain root privileges.
-A source code patch exists which remedies the problem.
-NOTE: this is the second revision of the patch that fixes an additional
-problem.
-
-
-
004: SECURITY FIX: September 16, 2003
-All versions of OpenSSH's sshd prior to 3.7 contain a buffer management error.
-It is unclear whether or not this bug is exploitable.
-A
-source code patch exists which remedies the problem.
-NOTE: this is the second revision of the patch that fixes an additional
-problem.
-
-
-
003: SECURITY FIX: September 10, 2003
-Root may be able to reduce the security level by taking advantage of
-an integer overflow when the semaphore limits are made very large.
-A
-source code patch exists which remedies the problem.
-
001: SECURITY FIX: August 4, 2003
-An off-by-one error exists in the C library function
-realpath(3).
-Since this same bug resulted in a root compromise in the wu-ftpd ftp server
-it is possible that this bug may allow an attacker to gain escalated privileges
-on OpenBSD.
-A
-source code patch exists which remedies the problem.
-
![[OpenBSD]](images/smalltitle.gif){kind=small}
www@openbsd.org
-