[BACK]Return to errata.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/errata.html, Revision 1.103

1.1       deraadt     1: <!DOCTYPE HTML PUBLIC  "-//IETF//DTD HTML Strict//EN">
                      2: <html>
                      3: <head>
1.64      deraadt     4: <title>OpenBSD release errata</title>
1.1       deraadt     5: <link rev=made href=mailto:www@openbsd.org>
                      6: <meta name="resource-type" content="document">
                      7: <meta name="description" content="the OpenBSD CD errata page">
                      8: <meta name="keywords" content="openbsd,cd,errata">
                      9: <meta name="distribution" content="global">
                     10: <meta name="copyright" content="This document copyright 1997 by OpenBSD.">
                     11: </head>
                     12:
                     13: <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#23238E">
                     14:
1.37      deraadt    15: <img alt="[OpenBSD]" SRC="images/smalltitle.gif">
1.68      deraadt    16: <h2><font color=#0000e0>
1.93      deraadt    17: This is the OpenBSD 2.3 release errata & patch list:
1.94      deraadt    18:
1.96      deraadt    19: </font></h2>
                     20:
1.94      deraadt    21: <hr>
                     22: <a href=errata21.html>For 2.1 errata, please refer here</a>.<br>
                     23: <a href=errata22.html>For 2.2 errata, please refer here</a>.<br>
                     24: <hr>
                     25:
1.25      deraadt    26: <ul>
1.43      deraadt    27: <a name=all></a>
1.67      deraadt    28: <li><h3><font color=#e00000>All architectures</font></h3>
1.25      deraadt    29: <ul>
1.102     deraadt    30: <a name=ipsec></a>
                     31: <li><font color=#009000><strong>SECURITY FIX</strong></font><br>
                     32: If IPSEC communication is attempted by starting photurisd(8) (which is
1.103   ! deraadt    33: disabled by default), a system crash may be evoked from remote if
        !            34: an attacker uses some classes of invalid packets.
1.102     deraadt    35: <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.3/common/ipsec.patch>
                     36: A source code patch exists which remedies this problem.</a>
1.99      matthieu   37: <a name=xterm-xaw></a>
                     38: <li><font color=#009000><strong>SECURITY FIX</strong></font><br>
                     39: As stated in CERT advisory VB-98.04, there are buffer
1.103   ! deraadt    40: overrun problems in <strong>xterm</strong> related to the input-Method,
        !            41: preeditType, and *Keymap resources. Additional buffer overruns exist in
        !            42: the <strong>Xaw</strong> library related to the inputMethod and
        !            43: preeditType resources.   The xterm(1) problem represents a security
        !            44: vulnerability for any platform where xterm is installed setuid-root
        !            45: (as is the case for all OpenBSD platforms).  The Xaw problem represents
        !            46: a security vulnerability for any setuid-root program that uses the Xaw
        !            47: library (including xterm).  Patch1 from XFree86 3.3.2 corrects
        !            48: these problems.
1.99      matthieu   49: <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.3/common/xterm-xaw.patch>
1.101     deraadt    50: We provide a version of this patch file specifically for the OpenBSD 2.3 tree</a>.
1.86      millert    51: <p>
1.25      deraadt    52: </ul>
1.42      deraadt    53: <a name=i386></a>
1.67      deraadt    54: <li><h3><font color=#e00000>i386</font></h3>
1.25      deraadt    55: <ul>
1.93      deraadt    56: <li>No problems identified yet.
1.39      deraadt    57: <p>
                     58: </ul>
1.47      deraadt    59: <a name=mac68k></a>
1.67      deraadt    60: <li><h3><font color=#e00000>mac68k</font></h3>
1.39      deraadt    61: <ul>
1.93      deraadt    62: <li>No problems identified yet.
1.70      gene       63: <p>
1.25      deraadt    64: </ul>
1.65      deraadt    65: <a name=sparc></a>
1.67      deraadt    66: <li><h3><font color=#e00000>sparc</font></h3>
1.25      deraadt    67: <ul>
1.100     deraadt    68: <li><font color=#009000><strong>RELIABILITY FIX</strong></font><br>
                     69: The 2.3 release does not run reliably on the sun4m LX/LC machines
1.98      deraadt    70: (ie. Sparc Classic).
                     71: <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.3/sparc/iommureg.patch>
                     72: A source code patch exists which remedies this problem.</a>
1.63      marc       73: <p>
1.39      deraadt    74: </ul>
1.93      deraadt    75: <a name=amiga></a>
1.67      deraadt    76: <li><h3><font color=#e00000>amiga</font></h3>
1.93      deraadt    77: <ul>
                     78: <li>No problems identified yet.
1.39      deraadt    79: <p>
1.25      deraadt    80: </ul>
1.65      deraadt    81: <a name=pmax></a>
1.67      deraadt    82: <li><h3><font color=#e00000>pmax</font></h3>
1.25      deraadt    83: <ul>
1.100     deraadt    84: <li><font color=#009000><strong>RELEASE WARNING</strong></font><br>
                     85: The XFree86 binary set shipped on the CD and FTP site are not the
1.97      deraadt    86: exact final set that we shipped for the other releases.  A few minor
                     87: changes, mostly in <strong>xdm(1)</strong> configuration, were made
                     88: after those binaries were made.  Patches for this might come out later.
1.39      deraadt    89: <p>
1.25      deraadt    90: </ul>
1.65      deraadt    91: <a name=arc></a>
1.67      deraadt    92: <li><h3><font color=#e00000>arc</font></h3>
1.59      deraadt    93: <ul>
1.100     deraadt    94: <li><font color=#009000><strong>RELEASE WARNING</strong></font><br>
                     95: The XFree86 binary set shipped on the CD and FTP site are not the
1.97      deraadt    96: exact final set that we shipped for the other releases.  A few minor
                     97: changes, mostly in <strong>xdm(1)</strong> configuration, were made
                     98: after those binaries were made.  Patches for this might come out later.
1.69      deraadt    99: <p>
1.59      deraadt   100: </ul>
1.93      deraadt   101: <a name=alpha></a>
1.67      deraadt   102: <li><h3><font color=#e00000>alpha</font></h3>
1.56      deraadt   103: <ul>
1.93      deraadt   104: <li>No problems identified yet.
1.56      deraadt   105: <p>
                    106: </ul>
1.93      deraadt   107: <a name=hp300></a>
1.67      deraadt   108: <li><h3><font color=#e00000>hp300</font></h3>
1.56      deraadt   109: <p>
                    110: <ul>
                    111: <li>No problems identified yet.
                    112: <p>
                    113: </ul>
1.93      deraadt   114: <a name=mvme68k></a>
1.67      deraadt   115: <li><h3><font color=#e00000>mvme68k</font></h3>
1.25      deraadt   116: <ul>
1.39      deraadt   117: <li>No problems identified yet.
                    118: <p>
1.25      deraadt   119: </ul>
1.95      deraadt   120: <a name=powerpc></a>
                    121: <li><h3><font color=#e00000>powerpc</font></h3>
                    122: <ul>
                    123: <li><font color=#009000><strong>SECURITY FIX</strong></font><br>
                    124: The powerpc release shipped on the OpenBSD 2.3 CD does not contain
                    125: two late fixes applied late in the release cycle.  The
                    126: <a href=errata22.html#rmjob>rmjob</a> and
                    127: <a href=errata22.html#uucpd>uucpd</a> patches should be applied to
                    128: the system if those subsystems are used.
                    129: <p>
                    130: </ul>
1.25      deraadt   131: </ul>
                    132: <br>
1.75      deraadt   133:
1.25      deraadt   134: <hr>
1.93      deraadt   135: <a href=errata21.html>For 2.1 errata, please refer here</a>.<br>
                    136: <a href=errata22.html>For 2.2 errata, please refer here</a>.<br>
1.2       deraadt   137: <hr>
                    138: <a href=orders.html><img src=back.gif border=0 alt=OpenBSD></a>
                    139: <a href=mailto:www@openbsd.org>www@openbsd.org</a>
1.103   ! deraadt   140: <br><small>$OpenBSD: errata.html,v 1.102 1998/05/05 18:44:36 deraadt Exp $</small>
1.2       deraadt   141:
                    142: </body>
                    143: </html>