www/errata23.html - diff

Return to errata23.html CVS log

Up to [local] / www

Diff for /www/errata23.html between version 1.30 and 1.31

version 1.30, 2003/10/24 22:12:40

version 1.31, 2003/11/21 16:55:15

Line 8

</head>

Line 48

Line 49

<hr>

<dl>

<h3>All architectures</h3>

<li><h3>All architectures</h3>

<ul>

<li>SECURITY FIX

SECURITY FIX

A remotely exploitable problem exists in bootpd(8). bootpd is disabled

by default, but some people may actually be using it.

A source code patch exists which remedies this problem</a>, this is the

second version of the patch.

<li>SECURITY FIX

SECURITY FIX

A remote machine lockup problem exists in the TCP decoding code.

A source code patch exists which remedies this problem.</a>

<li>HARDWARE SUPPORT

HARDWARE SUPPORT

Some ATAPI cdroms which do not support the full mandatory command set,

(e.g. ATAPI_READ_CD_CAPACITY) do not work with the acd(4) driver.

A patch is

available here.</a>

<li>SECURITY FIX

SECURITY FIX

Chpass(1) has a file descriptor leak which allows an

attacker to modify /etc/master.passwd.

A source code patch exists which remedies this problem.</a>

<li>RELIABILITY FIX

RELIABILITY FIX

Calling readv(2) with iov_len < 0 or > INT_MAX would result in a

kernel panic. This is the third revision of this patch.

A source code patch exists which remedies this problem.</a>

<li>SECURITY FIX

SECURITY FIX

Inetd had a file descriptor leak. A patch is

available here.</a>

<li>BUG FIX

BUG FIX

As shipped, unionfs had some serious problems.

A patch is available to solve this</a>.

<li>SECURITY FIX

SECURITY FIX

Some non-allocated file descriptors have implied uses according to

system libraries, and hence setuid and setgid processes should not

be executed with these descriptors unallocated. A patch which forces

Line 110

available here.</a>

<li>SECURITY FIX

SECURITY FIX

A benign looking buffer overflow in the resolver routines was re-introduced

accidentally. The previously fixed behaviour is more correct. A patch

to fix this is

available here.</a>

<li>SECURITY FIX

SECURITY FIX

Vulnerabilities have been found in the X11, Xt, Xaw and Xmu

libraries. These affect xterm and all other setuid-root programs that

use these libraries. The problems are associated with buffer overflows

Line 133

The 2nd source patch</a> for these problems, specifically adapted to the

OpenBSD 2.3 X11 tree, is available now.

<li>SECURITY FIX

SECURITY FIX

The kill(2) system call previously would permit a large set of signals to

be delivered to setuid or setgid processes. If such processes were using

those signals in dubious ways, this could have resulted in security

Line 143

The fourth revision of a source code patch which solves the problem is

available.</a>

<li>SECURITY FIX

SECURITY FIX

A possible new security problem exists if you rely on securelevels and

immutable or append-only files or character devices. The fix does not

permit mmap'ing of immutable or append-only files which are otherwise

Line 153

A source code patch exists which remedies this problem.</a>

<li>SECURITY FIX

SECURITY FIX

If IPSEC communication is attempted by starting photurisd(8) (which is

disabled by default), a system crash may be evoked from remote if

an attacker uses some classes of invalid packets.

A source code patch exists which remedies this problem.</a>

<li>SECURITY FIX

As stated in CERT advisory VB-98.04, there are buffer

overrun problems in xterm related to the input-Method,

Line 192

<a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.3/arc/Xawfix.tgz">arc</a>.

</ul>

<ul>

<li>RELIABILITY FIX

RELIABILITY FIX

The pctr(4) driver has bugs that permit any user to crash the machine,

if the CPU is not an Intel CPU. This problem has been properly fixed

since, but fixes are hard to apply to the 2.2 or 2.3 releases. To avoid

Line 215

<li>SHA1 (ghostscript-5.10.tgz) = bd9374fa547ac0078d5207463d3b0a19d80d213c

</ul>

<li>RELIABILITY FIX

The pcvt(4) console driver has a bug that can cause some keyboard

controllers to lock up when a key is pressed that toggles the status

Line 226

A source code patch exists which remedies this problem.</a>

</ul>

<ul>

<li>No problems identified yet.

</ul>

<li><h3>sparc</h3>

<h3>sparc</h3>

<ul>

<li>RELIABILITY FIX

The 2.3 release does not run reliably on the sun4m LX/LC machines

Line 247

<a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.3/sparc">also available</a>.

</ul>

<li><h3>amiga</h3>

<h3>amiga</h3>

<ul>

<li>MINOR INCOMPATIBILITY

The AmigaOS patch

Line 263

PoolMem-aware.

</ul>

<ul>

<li>RELEASE WARNING

The XFree86 binary set shipped on the CD and FTP site are not the

Line 276

The XFree86 binary set was linked with an older version of the C

library. To work around the problem, do the following as root.

<ul>

<pre>

cd /usr/lib/

ln -s libc.so.18.0 libc.so.17

</pre>

</ul>

<li>X11 RELEASE ERROR

The X11R5 server used in this port does not understand the default

Line 288

Line 287

clients being able to connect to the server. To fix this

problem add the line below to /usr/X11R6/lib/X11/xdm/xdm-config.

<ul>

<pre>

DisplayManager._0.authName: MIT-MAGIC-COOKIE-1

</ul>

</pre>

<li>INSTALLATION PROCESS FLAW

The pmax install does not correctly install the boot block.

To work around the problem, after the install program has finished, do

the following (assuming scsi id 0):

<ul>

<pre>

disklabel rz0 > /tmp/label

disklabel -R -B rz0 /tmp/label

</pre>

</ul>

</ul>

<ul>

<li>RELEASE WARNING

The XFree86 binary set shipped on the CD and FTP site are not the

Line 317

Line 315

The XFree86 binary set was linked with an older version of the C

library. To work around the problem, do the following as root.

<ul>

<pre>

cd /usr/lib/

ln -s libc.so.18.0 libc.so.17

</pre>

</ul>

</ul>

<li><h3>alpha</h3>

<h3>alpha</h3>

<ul>

<li>RELEASE WARNING

When you start the install an upgrade option is advertised but

there really is no such option.

</ul>

<ul>

<li>RELEASE WARNING

When you start the install an upgrade option is advertised but

Line 344

Line 341

A fix will be made available when 2.3 is out.

</ul>

<ul>

<li>No problems identified yet.

</ul>

<li><h3>powerpc</h3>

<h3>powerpc</h3>

<ul>

<li>SECURITY FIX

The powerpc release shipped on the OpenBSD 2.3 CD does not contain

Line 362

Line 359

</ul>

</dl>

<hr>