=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/errata26.html,v retrieving revision 1.26 retrieving revision 1.27 diff -c -r1.26 -r1.27 *** www/errata26.html 2003/10/24 22:12:40 1.26 --- www/errata26.html 2003/11/21 16:55:16 1.27 *************** *** 8,13 **** --- 8,14 ---- + *************** *** 47,59 **** consult the OpenBSD FAQ.

! !

All architectures

024: SECURITY FIX: May 26, 2000
Kernel contained an undocumented system call used to lock semaphore operations while they were being sampled by the ipcs(1) command. This locking could be used as a local denial of service attack which would block the exiting of --- 48,58 ---- consult the OpenBSD FAQ.
+ +
All architectures
- ! 024: SECURITY FIX: May 26, 2000
  Kernel contained an undocumented system call used to lock semaphore operations while they were being sampled by the ipcs(1) command. This locking could be used as a local denial of service attack which would block the exiting of *************** *** 62,69 **** A jumbo patch exists which remedies this problem.
  ! !
- 023: SECURITY FIX: May 25, 2000
  A misuse of ipf(8) keep-state rules can result in firewall rules being bypassed. --- 61,68 ---- A jumbo patch exists which remedies this problem.
  !
- ! 023: SECURITY FIX: May 25, 2000
  A misuse of ipf(8) keep-state rules can result in firewall rules being bypassed. *************** *** 73,80 **** A jumbo patch exists, which remedies this problem, and updates ipf to version 3.3.16.
  ! !
- 022: SECURITY FIX: May 25, 2000
  xlockmore has a localhost attack against it which allows recovery of the encrypted hash of the root password. The damage to systems using DES passwords from this attack is pretty heavy, but to systems with a well-chosen root password under --- 72,79 ---- A jumbo patch exists, which remedies this problem, and updates ipf to version 3.3.16.
  !
- ! 022: SECURITY FIX: May 25, 2000
  xlockmore has a localhost attack against it which allows recovery of the encrypted hash of the root password. The damage to systems using DES passwords from this attack is pretty heavy, but to systems with a well-chosen root password under *************** *** 87,115 **** A source code patch exists, which remedies this problem. This is the 2nd patch designed to solve this problem.
  ! !
- 021: RZSZ SNOOPING: Jan 31, 2000
  The rzsz port was removed from the ports collection, as it collects and sends user information to a designated email address, effectively spying on you. It is recommended that you remove this package if you installed it.
  ! !
- 020: LIBRARY IMPROVEMENT: Jan 26, 2000
  syslog(3) would not try to reopen the socket, thus, nightly newsyslog(8) would cause syslogd(8) to not see new messages. A source code patch exists, which remedies this problem.
  ! !
- 019: DRIVER IMPROVEMENT: Jan 20, 2000
  Intel fxp cards with National Semiconductor PHYs (nsphy) have trouble negotiating and maintaining 100Mb link integrity.
  A source code patch exists, which remedies this problem.
  ! !
- 018: SECURITY FIX: Jan 20, 2000
  Systems running with procfs enabled and mounted are vulnerable to having the stderr output of setuid processes directed onto a pre-seeked descriptor onto the stack in their own procfs memory.
  --- 86,114 ---- A source code patch exists, which remedies this problem. This is the 2nd patch designed to solve this problem.
  !
- ! 021: RZSZ SNOOPING: Jan 31, 2000
  The rzsz port was removed from the ports collection, as it collects and sends user information to a designated email address, effectively spying on you. It is recommended that you remove this package if you installed it.
  !
- ! 020: LIBRARY IMPROVEMENT: Jan 26, 2000
  syslog(3) would not try to reopen the socket, thus, nightly newsyslog(8) would cause syslogd(8) to not see new messages. A source code patch exists, which remedies this problem.
  !
- ! 019: DRIVER IMPROVEMENT: Jan 20, 2000
  Intel fxp cards with National Semiconductor PHYs (nsphy) have trouble negotiating and maintaining 100Mb link integrity.
  A source code patch exists, which remedies this problem.
  !
- ! 018: SECURITY FIX: Jan 20, 2000
  Systems running with procfs enabled and mounted are vulnerable to having the stderr output of setuid processes directed onto a pre-seeked descriptor onto the stack in their own procfs memory.
  *************** *** 117,163 **** A source code patch exists, which remedies this problem.
  ! !
- 015: Y2K FIX: Jan 9, 2000
  The at(1) command was unable to parse some kinds of dates.
  A source code patch exists, which remedies this problem.
  ! !
- 013: Y2K FIX: Jan 3, 2000
  A minor problem in the logging support for the adduser(8) command.
  A source code patch exists, which remedies this problem.
  ! !
- 012: DRIVER IMPROVEMENT: Jan 3, 2000
  The 3C900B-TPO fails to select the correct media type (it never sees or sends packets).
  A source code patch exists, which remedies this problem.
  ! !
- 011: SECURITY FIX: Dec 4, 1999
  Various bugs in poll(2) may cause a kernel crash.
  A source code patch exists, which remedies this problem.
  ! !
- 010: SECURITY FIX: Dec 4, 1999
  Sendmail had a race in aliases file handling, which this patch fixes.
  A source code patch exists, which remedies this problem.
  ! !
- 009: DRIVER IMPROVEMENTS: Dec 4, 1999
  Various improvements have been made to the IDE/ATAPI subsystem since the 2.6 release shipped.
  Some of these improvements make some recalcitrant devices work much better.
  Revision 1 of this jumbo source code patch exists.
  
  ! !
- 016: SECURITY FIX: Dec 2, 1999
  A buffer overflow in the RSAREF code included in the USA version of the libssl package (called sslUSA, is possibly exploitable in isakmpd if SSL/RSA features --- 116,162 ---- A source code patch exists, which remedies this problem.
  !
- ! 015: Y2K FIX: Jan 9, 2000
  The at(1) command was unable to parse some kinds of dates.
  A source code patch exists, which remedies this problem.
  !
- ! 013: Y2K FIX: Jan 3, 2000
  A minor problem in the logging support for the adduser(8) command.
  A source code patch exists, which remedies this problem.
  !
- ! 012: DRIVER IMPROVEMENT: Jan 3, 2000
  The 3C900B-TPO fails to select the correct media type (it never sees or sends packets).
  A source code patch exists, which remedies this problem.
  !
- ! 011: SECURITY FIX: Dec 4, 1999
  Various bugs in poll(2) may cause a kernel crash.
  A source code patch exists, which remedies this problem.
  !
- ! 010: SECURITY FIX: Dec 4, 1999
  Sendmail had a race in aliases file handling, which this patch fixes.
  A source code patch exists, which remedies this problem.
  !
- ! 009: DRIVER IMPROVEMENTS: Dec 4, 1999
  Various improvements have been made to the IDE/ATAPI subsystem since the 2.6 release shipped.
  Some of these improvements make some recalcitrant devices work much better.
  Revision 1 of this jumbo source code patch exists.
  
  !
- ! 016: SECURITY FIX: Dec 2, 1999
  A buffer overflow in the RSAREF code included in the USA version of the libssl package (called sslUSA, is possibly exploitable in isakmpd if SSL/RSA features *************** *** 184,191 **** For more information, see the advisory.
  NOTE: this problem turned out to not be unexploitable in OpenSSH.
  ! !
- 017: FUNCTIONALITY ADDITION: Nov 14, 1999
  Fortran doesn't work right. The file /usr/include/g2c.h is missing in the release.
  --- 183,190 ---- For more information, see the advisory.
  NOTE: this problem turned out to not be unexploitable in OpenSSH.
  !
- ! 017: FUNCTIONALITY ADDITION: Nov 14, 1999
  Fortran doesn't work right. The file /usr/include/g2c.h is missing in the release.
  *************** *** 194,201 **** the include file to your system.
  ! !
- 005: FUNCTIONALITY ADDITION: Nov 11, 1999
  Various OpenSSH improvements have been made since the 2.6 release shipped.
  To resolve the various (non-security related) features which users may want, we are making a jumbo patch available. This is now at VERSION FOUR.
  --- 193,200 ---- the include file to your system.
  !
- ! 005: FUNCTIONALITY ADDITION: Nov 11, 1999
  Various OpenSSH improvements have been made since the 2.6 release shipped.
  To resolve the various (non-security related) features which users may want, we are making a jumbo patch available. This is now at VERSION FOUR.
  *************** *** 203,326 **** Revision 4 of this jumbo source code patch exists.
  NOTE: /etc/sshd_config and /etc/ssh_config may need changes.
  ! !
- 003: FUNCTIONALITY FIX: Nov 10, 1999
  m4 is quite broken in the 2.6 release.
  The 3rd version of the source code patch exists, which remedies this problem.
  ! !
- 002: SECURITY FIX: Nov 9, 1999
  Any user can change interface media configurations.
  A source code patch exists which remedies this problem.
  ! !
- 001: RELIABILITY FIX: Nov 8, 1999
  A race condition in newsyslog(8) can cause errors in log file rotation.
  A source code patch exists which remedies this problem.
! !
i386
- No problems identified yet.
! !
mac68k
- 007: RELIABILITY FIX: Nov 12, 1999
  All m68k kernels can possibly be crashed by a user.
  A source code patch exists which remedies this problem.
! !
sparc
- 014: Y2K FIX: Jan 3, 2000
  A minor problem; the sparc eeprom(8) command is not Y2K compliant.
  Revision 2 of the source code patch exists, which remedies this problem.
  ! !
- 004: RELIABILITY FIX: Nov 12, 1999
  The sparc kernel can be crashed by a user.
  A source code patch exists which remedies this problem.
! !
amiga
- 007: RELIABILITY FIX: Nov 12, 1999
  All m68k kernels can possibly be crashed by a user.
  A source code patch exists which remedies this problem.
! !
pmax
- No problems identified yet.
! !
arc
- No problems identified yet.
! !
alpha
- 006: RELIABILITY FIX: Nov 13, 1999
  The alpha kernel can possibly be crashed by a user.
  A source code patch exists which remedies this problem.
! !
hp300
- 007: RELIABILITY FIX: Nov 12, 1999
  All m68k kernels can possibly be crashed by a user.
  A source code patch exists which remedies this problem.
! !
mvme68k
- 007: RELIABILITY FIX: Nov 12, 1999
  All m68k kernels can possibly be crashed by a user.
  A source code patch exists which remedies this problem.
! !
powerpc
- No problems identified yet.
-

--- 202,323 ---- Revision 4 of this jumbo source code patch exists.
NOTE: /etc/sshd_config and /etc/ssh_config may need changes.

! 003: FUNCTIONALITY FIX: Nov 10, 1999
m4 is quite broken in the 2.6 release.
The 3rd version of the source code patch exists, which remedies this problem.

! 002: SECURITY FIX: Nov 9, 1999
Any user can change interface media configurations.
A source code patch exists which remedies this problem.

! 001: RELIABILITY FIX: Nov 8, 1999
A race condition in newsyslog(8) can cause errors in log file rotation.
A source code patch exists which remedies this problem.

! !

i386

No problems identified yet.

! !

mac68k

! ! 007: RELIABILITY FIX: Nov 12, 1999
All m68k kernels can possibly be crashed by a user.
A source code patch exists which remedies this problem.

! !

sparc

! 014: Y2K FIX: Jan 3, 2000
A minor problem; the sparc eeprom(8) command is not Y2K compliant.
Revision 2 of the source code patch exists, which remedies this problem.
!
! 004: RELIABILITY FIX: Nov 12, 1999
The sparc kernel can be crashed by a user.
A source code patch exists which remedies this problem.

! !

amiga

! 007: RELIABILITY FIX: Nov 12, 1999
All m68k kernels can possibly be crashed by a user.
A source code patch exists which remedies this problem.

! !

pmax

No problems identified yet.

! !

arc

No problems identified yet.

! !

alpha

! 006: RELIABILITY FIX: Nov 13, 1999
The alpha kernel can possibly be crashed by a user.
A source code patch exists which remedies this problem.

! !

hp300

! 007: RELIABILITY FIX: Nov 12, 1999
All m68k kernels can possibly be crashed by a user.
A source code patch exists which remedies this problem.

! !

mvme68k

! 007: RELIABILITY FIX: Nov 12, 1999
All m68k kernels can possibly be crashed by a user.
A source code patch exists which remedies this problem.

! !

powerpc

No problems identified yet.

*************** *** 345,351 ****

www@openbsd.org !
$OpenBSD: errata26.html,v 1.26 2003/10/24 22:12:40 david Exp $ --- 342,348 ----

www@openbsd.org !
$OpenBSD: errata26.html,v 1.27 2003/11/21 16:55:16 henning Exp $