[BACK]Return to errata31.html CVS log [TXT][DIR] Up to [local] / www

Diff for /www/errata31.html between version 1.28 and 1.29

version 1.28, 2003/10/24 22:12:40 version 1.29, 2003/11/21 16:55:16
Line 8 
Line 8 
 <meta name="keywords" content="openbsd,cd,errata">  <meta name="keywords" content="openbsd,cd,errata">
 <meta name="distribution" content="global">  <meta name="distribution" content="global">
 <meta name="copyright" content="This document copyright 1997-2002 by OpenBSD.">  <meta name="copyright" content="This document copyright 1997-2002 by OpenBSD.">
   <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
 </head>  </head>
   
 <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#23238E">  <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#23238E">
Line 51 
Line 52 
 consult the <a href="./faq/faq10.html#Patches">OpenBSD FAQ</a>.  consult the <a href="./faq/faq10.html#Patches">OpenBSD FAQ</a>.
 <hr>  <hr>
   
 <dl>  <a name="all"></a>
 <a name=all></a>  <h3><font color="#e00000">All architectures</font></h3>
 <li><h3><font color="#e00000">All architectures</font></h3>  
 <ul>  <ul>
 <a name=sendmail2></a>  <li><a name="sendmail2"></a>
 <li><font color="#009000"><strong>027: SECURITY FIX: March 31, 2003</strong></font><br>  <font color="#009000"><strong>027: SECURITY FIX: March 31, 2003</strong></font><br>
 A buffer overflow in the address parsing in  A buffer overflow in the address parsing in
 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&amp;sektion=8">sendmail(8)</a>  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&amp;sektion=8">sendmail(8)</a>
 may allow an attacker to gain root privileges.<br>  may allow an attacker to gain root privileges.<br>
 <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/027_sendmail.patch">A  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/027_sendmail.patch">A
 source code patch exists which remedies the problem</a>.  source code patch exists which remedies the problem</a>.
 <p>  <p>
 <a name=kerberos></a>  <li><a name="kerberos"></a>
 <li><font color="#009000"><strong>026: SECURITY FIX: March 24, 2003</strong></font><br>  <font color="#009000"><strong>026: SECURITY FIX: March 24, 2003</strong></font><br>
 The cryptographic weaknesses in the Kerberos v4 protocol can be exploited  The cryptographic weaknesses in the Kerberos v4 protocol can be exploited
 on Kerberos v5 as well.  on Kerberos v5 as well.
 <br>  <br>
 <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/026_kerberos.patch">A  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/026_kerberos.patch">A
 source code patch exists which remedies the problem</a>.  source code patch exists which remedies the problem</a>.
 <p>  <p>
 <a name=kpr></a>  <li><a name="kpr"></a>
 <li><font color="#009000"><strong>025: SECURITY FIX: March 19, 2003</strong></font><br>  <font color="#009000"><strong>025: SECURITY FIX: March 19, 2003</strong></font><br>
 OpenSSL is vulnerable to an extension of the ``Bleichenbacher'' attack designed  OpenSSL is vulnerable to an extension of the ``Bleichenbacher'' attack designed
 by Czech researchers Klima, Pokorny and Rosa.  by Czech researchers Klima, Pokorny and Rosa.
 <br>  <br>
 <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/025_kpr.patch">A  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/025_kpr.patch">A
 source code patch exists which remedies the problem</a>.  source code patch exists which remedies the problem</a>.
 <p>  <p>
 <a name=blinding></a>  <li><a name="blinding"></a>
 <li><font color="#009000"><strong>024: SECURITY FIX: March 18, 2003</strong></font><br>  <font color="#009000"><strong>024: SECURITY FIX: March 18, 2003</strong></font><br>
 Various SSL and TLS operations in OpenSSL are vulnerable to timing attacks.  Various SSL and TLS operations in OpenSSL are vulnerable to timing attacks.
 <br>  <br>
 <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/024_blinding.patch">An  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/024_blinding.patch">An
 ``RSA blinding'' source code patch exists which remedies the problem</a>.  ``RSA blinding'' source code patch exists which remedies the problem</a>.
 <p>  <p>
 <a name=lprm></a>  <li><a name="lprm"></a>
 <li><font color="#009000"><strong>023: SECURITY FIX: March 5, 2003</strong></font><br>  <font color="#009000"><strong>023: SECURITY FIX: March 5, 2003</strong></font><br>
 A fix for an  A fix for an
 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lprm&amp;sektion=1">lprm(1)</a>  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lprm&amp;sektion=1">lprm(1)</a>
 bug made in 1996 contains an error that could lead to privilege escalation.  bug made in 1996 contains an error that could lead to privilege escalation.
Line 95 
Line 95 
 <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/023_lprm.patch">A  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/023_lprm.patch">A
 source code patch exists which remedies the problem</a>.  source code patch exists which remedies the problem</a>.
 <p>  <p>
 <a name=sendmail></a>  <li><a name="sendmail"></a>
 <li><font color="#009000"><strong>022: SECURITY FIX: March 3, 2003</strong></font><br>  <font color="#009000"><strong>022: SECURITY FIX: March 3, 2003</strong></font><br>
 A buffer overflow in the envelope comments processing in  A buffer overflow in the envelope comments processing in
 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&amp;sektion=8">sendmail(8)</a>  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&amp;sektion=8">sendmail(8)</a>
 may allow an attacker to gain root privileges.<br>  may allow an attacker to gain root privileges.<br>
 <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/022_sendmail.patch">A  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/022_sendmail.patch">A
 source code patch exists which remedies the problem</a>.  source code patch exists which remedies the problem</a>.
 <p>  <p>
 <a name=ssl2></a>  <li><a name="ssl2"></a>
 <li><font color="#009000"><strong>021: SECURITY FIX: February 23, 2003</strong></font><br>  <font color="#009000"><strong>021: SECURITY FIX: February 23, 2003</strong></font><br>
 In  In
 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&amp;sektion=8">ssl(8)</a> an information leak can occur via timing by performing a MAC computation  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&amp;sektion=8">ssl(8)</a> an information leak can occur via timing by performing a MAC computation
 even if incorrect block cipher padding has been found, this is a  even if incorrect block cipher padding has been found, this is a
Line 112 
Line 112 
 <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/021_ssl.patch">A  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/021_ssl.patch">A
 source code patch exists which fixes these two issues</a>.  source code patch exists which fixes these two issues</a>.
 <p>  <p>
 <a name=cvs></a>  <li><a name="cvs"></a>
 <li><font color="#009000"><strong>020: SECURITY FIX: January 20, 2003</strong></font><br>  <font color="#009000"><strong>020: SECURITY FIX: January 20, 2003</strong></font><br>
 A double free in  A double free in
 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&amp;sektion=1">cvs(1)</a>  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&amp;sektion=1">cvs(1)</a>
 could allow an attacker to execute code with the privileges of the  could allow an attacker to execute code with the privileges of the
Line 124 
Line 124 
 <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/020_cvs.patch">A  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/020_cvs.patch">A
 source code patch exists which remedies the problem</a>.  source code patch exists which remedies the problem</a>.
 <p>  <p>
 <a name=named></a>  <li><a name="named"></a>
 <li><font color="#009000"><strong>019: SECURITY FIX: November 14, 2002</strong></font><br>  <font color="#009000"><strong>019: SECURITY FIX: November 14, 2002</strong></font><br>
 A buffer overflow in  A buffer overflow in
 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&amp;sektion=8">named(8)</a>  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&amp;sektion=8">named(8)</a>
 could allow an attacker to execute code with the privileges of named.  could allow an attacker to execute code with the privileges of named.
Line 134 
Line 134 
 <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/019_named.patch">A  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/019_named.patch">A
 source code patch exists which remedies the problem</a>.  source code patch exists which remedies the problem</a>.
 <p>  <p>
 <a name=kernresource></a>  <li><a name="kernresource"></a>
 <li><font color="#009000"><strong>018: SECURITY FIX: November 6, 2002</strong></font><br>  <font color="#009000"><strong>018: SECURITY FIX: November 6, 2002</strong></font><br>
 Incorrect argument checking in the  Incorrect argument checking in the
 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getrlimit&amp;sektion=2">getrlimit(2)</a>  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getrlimit&amp;sektion=2">getrlimit(2)</a>
 system call may allow an attacker to crash the kernel.<br>  system call may allow an attacker to crash the kernel.<br>
 <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/018_kernresource.patch">A  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/018_kernresource.patch">A
 source code patch exists which remedies the problem</a>.  source code patch exists which remedies the problem</a>.
 <p>  <p>
 <a name=smrsh></a>  <li><a name="smrsh"></a>
 <li><font color="#009000"><strong>017: SECURITY FIX: November 6, 2002</strong></font><br>  <font color="#009000"><strong>017: SECURITY FIX: November 6, 2002</strong></font><br>
 An attacker can bypass the restrictions imposed by sendmail's restricted shell,  An attacker can bypass the restrictions imposed by sendmail's restricted shell,
 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smrsh&amp;sektion=8">smrsh(8)</a>,  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smrsh&amp;sektion=8">smrsh(8)</a>,
 and execute arbitrary commands with the privileges of his own account.<br>  and execute arbitrary commands with the privileges of his own account.<br>
 <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/017_smrsh.patch">A  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/017_smrsh.patch">A
 source code patch exists which remedies the problem</a>.  source code patch exists which remedies the problem</a>.
 <p>  <p>
 <a name=kadmin></a>  <li><a name="kadmin"></a>
 <li><font color="#009000"><strong>016: SECURITY FIX: October 21, 2002</strong></font><br>  <font color="#009000"><strong>016: SECURITY FIX: October 21, 2002</strong></font><br>
 A buffer overflow can occur in the  A buffer overflow can occur in the
 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kadmind&amp;sektion=8">kadmind(8)</a>  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kadmind&amp;sektion=8">kadmind(8)</a>
 daemon, leading to possible remote crash or exploit.<br>  daemon, leading to possible remote crash or exploit.<br>
 <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/016_kadmin.patch">A source code patch exists which remedies the problem</a>.  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/016_kadmin.patch">A source code patch exists which remedies the problem</a>.
 <p>  <p>
 <a name=kerntime></a>  <li><a name="kerntime"></a>
 <li><font color="#009000"><strong>015: SECURITY FIX: October 2, 2002</strong></font><br>  <font color="#009000"><strong>015: SECURITY FIX: October 2, 2002</strong></font><br>
 Incorrect argument checking in the  Incorrect argument checking in the
 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setitimer&amp;sektion=2">setitimer(2)</a> system call may allow an attacker to write to kernel memory.<br>  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setitimer&amp;sektion=2">setitimer(2)</a> system call may allow an attacker to write to kernel memory.<br>
 <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/015_kerntime.patch">A source code patch exists which remedies the problem</a>.  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/015_kerntime.patch">A source code patch exists which remedies the problem</a>.
 <p>  <p>
 <a name=scarg></a>  <li><a name="scarg"></a>
 <li><font color="#009000"><strong>014: SECURITY FIX: August 11, 2002</strong></font><br>  <font color="#009000"><strong>014: SECURITY FIX: August 11, 2002</strong></font><br>
 An insufficient boundary check in the  An insufficient boundary check in the
 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&amp;sektion=2">select(2)</a>  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&amp;sektion=2">select(2)</a>
 system call allows an attacker to overwrite kernel memory and execute arbitrary  system call allows an attacker to overwrite kernel memory and execute arbitrary
Line 172 
Line 172 
 <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/014_scarg.patch">A  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/014_scarg.patch">A
 source code patch exists which remedies the problem</a>.  source code patch exists which remedies the problem</a>.
 <p>  <p>
 <a name=ssl></a>  <li><a name="ssl"></a>
 <li><font color="#009000"><strong>013: SECURITY FIX: July 30, 2002</strong></font><br>  <font color="#009000"><strong>013: SECURITY FIX: July 30, 2002</strong></font><br>
 Several remote buffer overflows can occur in the SSL2 server and SSL3 client of the  Several remote buffer overflows can occur in the SSL2 server and SSL3 client of the
 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&amp;sektion=8">ssl(8)</a>  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&amp;sektion=8">ssl(8)</a>
 library, as in the ASN.1 parser code in the  library, as in the ASN.1 parser code in the
Line 183 
Line 183 
 <br>  <br>
 This is the second version of the patch.  This is the second version of the patch.
 <p>  <p>
 <a name=xdr></a>  <li><a name="xdr"></a>
 <li><font color="#009000"><strong>012: SECURITY FIX: July 29, 2002</strong></font><br>  <font color="#009000"><strong>012: SECURITY FIX: July 29, 2002</strong></font><br>
 A buffer overflow can occur in the  A buffer overflow can occur in the
 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdr_array&amp;sektion=3">xdr_array(3)</a>  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdr_array&amp;sektion=3">xdr_array(3)</a>
 RPC code, leading to possible remote crash.<br>  RPC code, leading to possible remote crash.<br>
Line 192 
Line 192 
 <br>  <br>
 This is the second version of the patch.  This is the second version of the patch.
 <p>  <p>
 <a name=pppd></a>  <li><a name="pppd"></a>
 <li><font color="#009000"><strong>011: SECURITY FIX: July 29, 2002</strong></font><br>  <font color="#009000"><strong>011: SECURITY FIX: July 29, 2002</strong></font><br>
 A race condition exists in the  A race condition exists in the
 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppd&amp;sektion=8">pppd(8)</a>  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppd&amp;sektion=8">pppd(8)</a>
 daemon which may cause it to alter the file permissions of an arbitrary file.<br>  daemon which may cause it to alter the file permissions of an arbitrary file.<br>
 <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/011_pppd.patch">A source code patch exists which remedies the problem</a>.  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/011_pppd.patch">A source code patch exists which remedies the problem</a>.
 <p>  <p>
 <a name=isakmpd></a>  <li><a name="isakmpd"></a>
 <li><font color="#009000"><strong>010: RELIABILITY FIX: July 5, 2002</strong></font><br>  <font color="#009000"><strong>010: RELIABILITY FIX: July 5, 2002</strong></font><br>
 Receiving IKE payloads out of sequence can cause  Receiving IKE payloads out of sequence can cause
 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a> to crash.<br>  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a> to crash.<br>
 <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/010_isakmpd.patch">A source code patch exists which remedies the problem</a>.  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/010_isakmpd.patch">A source code patch exists which remedies the problem</a>.
 <br>  <br>
 This is the second version of the patch.  This is the second version of the patch.
 <p>  <p>
 <a name=ktrace></a>  <li><a name="ktrace"></a>
 <li><font color="#009000"><strong>009: SECURITY FIX: June 27, 2002</strong></font><br>  <font color="#009000"><strong>009: SECURITY FIX: June 27, 2002</strong></font><br>
 The kernel would let any user <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ktrace&amp;sektion=2">ktrace(2)</a> set[ug]id processes.<br>  The kernel would let any user <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ktrace&amp;sektion=2">ktrace(2)</a> set[ug]id processes.<br>
 <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/009_ktrace.patch">A source code patch exists which remedies the problem</a>.  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/009_ktrace.patch">A source code patch exists which remedies the problem</a>.
 <p>  <p>
 <a name=modssl></a>  <li><a name="modssl"></a>
 <li><font color="#009000"><strong>008: SECURITY FIX: June 26, 2002</strong></font><br>  <font color="#009000"><strong>008: SECURITY FIX: June 26, 2002</strong></font><br>
 A buffer overflow can occur in the .htaccess parsing code in mod_ssl httpd  A buffer overflow can occur in the .htaccess parsing code in mod_ssl httpd
 module, leading to possible remote crash or exploit.<br>  module, leading to possible remote crash or exploit.<br>
 <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/008_mod_ssl.patch">A source code patch exists which remedies the problem</a>.  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/008_mod_ssl.patch">A source code patch exists which remedies the problem</a>.
 <p>  <p>
 <a name=resolver></a>  <li><a name="resolver"></a>
 <li><font color="#009000"><strong>007: SECURITY FIX: June 25, 2002</strong></font><br>  <font color="#009000"><strong>007: SECURITY FIX: June 25, 2002</strong></font><br>
 A potential buffer overflow in the DNS resolver has been found.<br>  A potential buffer overflow in the DNS resolver has been found.<br>
 <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/007_resolver.patch">A source code patch exists which remedies the problem</a>.  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/007_resolver.patch">A source code patch exists which remedies the problem</a>.
 <p>  <p>
 <a name=sshd></a>  <li><a name="sshd"></a>
 <li><font color="#009000"><strong>006: SECURITY FIX: June 24, 2002</strong></font><br>  <font color="#009000"><strong>006: SECURITY FIX: June 24, 2002</strong></font><br>
 All versions of OpenSSH's sshd between 2.3.1 and 3.3 contain an input validation  All versions of OpenSSH's sshd between 2.3.1 and 3.3 contain an input validation
 error that can result in an integer overflow and privilege escalation.  error that can result in an integer overflow and privilege escalation.
 This problem is fixed in <a href="http://www.openssh.com/openbsd.html">OpenSSH  This problem is fixed in <a href="http://www.openssh.com/openbsd.html">OpenSSH
 3.4</a>, and a patch for the vulnerable releases is available as part of the  3.4</a>, and a patch for the vulnerable releases is available as part of the
 <a href="http://www.openssh.com/txt/preauth.adv">security advisory</a>.  <a href="http://www.openssh.com/txt/preauth.adv">security advisory</a>.
 <p>  <p>
 <a name=httpd></a>  <li><a name="httpd"></a>
 <li><font color="#009000"><strong>005: SECURITY FIX: June 19, 2002</strong></font><br>  <font color="#009000"><strong>005: SECURITY FIX: June 19, 2002</strong></font><br>
 A buffer overflow can occur during the interpretation of chunked  A buffer overflow can occur during the interpretation of chunked
 encoding in the http daemon, leading to possible remote crash or exploit.<br>  encoding in the http daemon, leading to possible remote crash or exploit.<br>
 <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/005_httpd.patch">A source code patch exists which remedies the problem</a>.  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/005_httpd.patch">A source code patch exists which remedies the problem</a>.
 <p>  <p>
 <a name=sshbsdauth></a>  <li><a name="sshbsdauth"></a>
 <li><font color="#009000"><strong>004: SECURITY FIX: May 22, 2002</strong></font><br>  <font color="#009000"><strong>004: SECURITY FIX: May 22, 2002</strong></font><br>
 Under certain conditions, on systems using YP with netgroups in the  Under certain conditions, on systems using YP with netgroups in the
 password database, it is possible that  password database, it is possible that
 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>
Line 248 
Line 248 
 users could be locked out.<br>  users could be locked out.<br>
 <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/004_sshbsdauth.patch">A source code patch exists which remedies the problem</a>.  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/004_sshbsdauth.patch">A source code patch exists which remedies the problem</a>.
 <p>  <p>
 <a name=fdalloc2></a>  <li><a name="fdalloc2"></a>
 <li><font color="#009000"><strong>003: SECURITY FIX: May 8, 2002</strong></font><br>  <font color="#009000"><strong>003: SECURITY FIX: May 8, 2002</strong></font><br>
 A race condition exists where an attacker could fill the file descriptor  A race condition exists where an attacker could fill the file descriptor
 table and defeat the kernel's protection of fd slots 0, 1, and 2 for a  table and defeat the kernel's protection of fd slots 0, 1, and 2 for a
 setuid or setgid process.<br>  setuid or setgid process.<br>
 <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/003_fdalloc2.patch">A source code patch exists which remedies the problem</a>.  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/003_fdalloc2.patch">A source code patch exists which remedies the problem</a>.
 <p>  <p>
 <a name=sudo></a>  <li><a name="sudo"></a>
 <li><font color="#009000"><strong>002: SECURITY FIX: April 25, 2002</strong></font><br>  <font color="#009000"><strong>002: SECURITY FIX: April 25, 2002</strong></font><br>
 A bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&amp;sektion=8">sudo(8)</a> may allow an attacker to corrupt the heap by specifying a custom prompt.<br>  A bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&amp;sektion=8">sudo(8)</a> may allow an attacker to corrupt the heap by specifying a custom prompt.<br>
 <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/002_sudo.patch">A source code patch exists which remedies the problem</a>.  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/002_sudo.patch">A source code patch exists which remedies the problem</a>.
 <p>  <p>
 <a name=sshafs></a>  <li><a name="sshafs"></a>
 <li><font color="#009000"><strong>001: SECURITY FIX: April 22, 2002</strong></font><br>  <font color="#009000"><strong>001: SECURITY FIX: April 22, 2002</strong></font><br>
 A local user can gain super-user privileges due to a buffer overflow  A local user can gain super-user privileges due to a buffer overflow
 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>  in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>
 if AFS has been configured on the system or if  if AFS has been configured on the system or if
Line 272 
Line 272 
 <p>  <p>
 </ul>  </ul>
 <p>  <p>
 <a name=i386></a>  <a name="i386"></a>
 <li><h3><font color="#e00000">i386</font></h3>  <h3><font color="#e00000">i386</font></h3>
 <ul>  <ul>
 <li>No problems identified yet.  <li>No problems identified yet.
 </ul>  </ul>
 <p>  <p>
 <a name=alpha></a>  <a name="alpha"></a>
 <li><h3><font color="#e00000">alpha</font></h3>  <h3><font color="#e00000">alpha</font></h3>
 <ul>  <ul>
 <li>No problems identified yet.  <li>No problems identified yet.
 </ul>  </ul>
 <p>  <p>
 <a name=mac68k></a>  <a name="mac68k"></a>
 <li><h3><font color="#e00000">mac68k</font></h3>  <h3><font color="#e00000">mac68k</font></h3>
 <ul>  <ul>
 <li>No problems identified yet.  <li>No problems identified yet.
 </ul>  </ul>
 <p>  <p>
 <a name=sparc></a>  <a name="sparc"></a>
 <li><h3><font color="#e00000">sparc</font></h3>  <h3><font color="#e00000">sparc</font></h3>
 <ul>  <ul>
 <li>No problems identified yet.  <li>No problems identified yet.
 </ul>  </ul>
 <p>  <p>
 <a name=sparc64></a>  <a name="sparc64"></a>
 <li><h3><font color="#e00000">sparc64</font></h3>  <h3><font color="#e00000">sparc64</font></h3>
 <ul>  <ul>
 <li>No problems identified yet.  <li>No problems identified yet.
 </ul>  </ul>
 <p>  <p>
 <a name=amiga></a>  <a name="amiga"></a>
 <li><h3><font color="#e00000">amiga</font></h3>  <h3><font color="#e00000">amiga</font></h3>
 <ul>  <ul>
 <li>No problems identified yet.  <li>No problems identified yet.
 </ul>  </ul>
 <p>  <p>
 <a name=hp300></a>  <a name="hp300"></a>
 <li><h3><font color="#e00000">hp300</font></h3>  <h3><font color="#e00000">hp300</font></h3>
 <ul>  <ul>
 <li>No problems identified yet.  <li>No problems identified yet.
 </ul>  </ul>
 <p>  <p>
 <a name=mvme68k></a>  <a name="mvme68k"></a>
 <li><h3><font color="#e00000">mvme68k</font></h3>  <h3><font color="#e00000">mvme68k</font></h3>
 <ul>  <ul>
 <li>No problems identified yet.  <li>No problems identified yet.
 </ul>  </ul>
 <p>  <p>
 <a name=macppc></a>  <a name="macppc"></a>
 <li><h3><font color="#e00000">macppc</font></h3>  <h3><font color="#e00000">macppc</font></h3>
 <ul>  <ul>
 <li>No problems identified yet.  <li>No problems identified yet.
 </ul>  </ul>
 <p>  <p>
 <a name=vax></a>  <a name="vax"></a>
 <li><h3><font color="#e00000">vax</font></h3>  <h3><font color="#e00000">vax</font></h3>
 <ul>  <ul>
 <li>No problems identified yet.  <li>No problems identified yet.
 </ul>  </ul>
   
 </dl>  
 <br>  <br>
   
 <hr>  <hr>
Legend:
Removed from v.1.28  
changed lines
  Added in v.1.29