Annotation of www/errata32.html, Revision 1.36
1.1 deraadt 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
2: <html>
3: <head>
4: <title>OpenBSD 3.2 errata</title>
5: <link rev=made href="mailto:www@openbsd.org">
6: <meta name="resource-type" content="document">
7: <meta name="description" content="the OpenBSD CD errata page">
8: <meta name="keywords" content="openbsd,cd,errata">
9: <meta name="distribution" content="global">
10: <meta name="copyright" content="This document copyright 1997-2002 by OpenBSD.">
1.17 henning 11: <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
1.1 deraadt 12: </head>
13:
1.18 david 14: <body bgcolor="#ffffff" text="#000000" link="#23238E">
1.1 deraadt 15:
16: <a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a>
17: <h2><font color="#0000e0">
18: This is the OpenBSD 3.2 release errata & patch list:
19:
20: </font></h2>
21:
22: <hr>
23: <a href=stable.html>For OpenBSD patch branch information, please refer here.</a><br>
1.2 margarid 24: <a href=pkg-stable32.html>For important packages updates, please refer here.</a><br>
1.1 deraadt 25: <br>
26: For errata on a certain release, click below:<br>
27: <a href="errata21.html">2.1</a>,
28: <a href="errata22.html">2.2</a>,
29: <a href="errata23.html">2.3</a>,
30: <a href="errata24.html">2.4</a>,
31: <a href="errata25.html">2.5</a>,
32: <a href="errata26.html">2.6</a>,
33: <a href="errata27.html">2.7</a>,
34: <a href="errata28.html">2.8</a>,
35: <a href="errata29.html">2.9</a>,
36: <a href="errata30.html">3.0</a>,
37: <a href="errata31.html">3.1</a>,
1.16 david 38: <a href="errata33.html">3.3</a>,
1.20 david 39: <a href="errata34.html">3.4</a>,
1.21 miod 40: <a href="errata35.html">3.5</a>,
1.22 deraadt 41: <a href="errata36.html">3.6</a>,
1.30 deraadt 42: <br>
1.23 deraadt 43: <a href="errata37.html">3.7</a>,
1.24 deraadt 44: <a href="errata38.html">3.8</a>,
1.25 deraadt 45: <a href="errata39.html">3.9</a>,
1.26 deraadt 46: <a href="errata40.html">4.0</a>,
1.28 merdely 47: <a href="errata41.html">4.1</a>,
1.29 deraadt 48: <a href="errata42.html">4.2</a>,
1.30 deraadt 49: <a href="errata43.html">4.3</a>,
1.32 deraadt 50: <a href="errata44.html">4.4</a>,
1.33 deraadt 51: <a href="errata45.html">4.5</a>,
1.34 deraadt 52: <a href="errata46.html">4.6</a>,
1.36 ! deraadt 53: <a href="errata47.html">4.7</a>,
! 54: <a href="errata48.html">4.8</a>.
1.1 deraadt 55: <br>
56: <hr>
57:
1.35 sthen 58: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.2.tar.gz">
1.1 deraadt 59: You can also fetch a tar.gz file containing all the following patches</a>.
60: This file is updated once a day.
61:
62: <p> The patches below are available in CVS via the
63: <code>OPENBSD_3_2</code> <a href="stable.html">patch branch</a>.
64:
65: <p>
66: For more detailed information on how to install patches to OpenBSD, please
67: consult the <a href="./faq/faq10.html#Patches">OpenBSD FAQ</a>.
68: <hr>
69:
1.17 henning 70: <a name="all"></a>
71: <h3><font color="#e00000">All architectures</font></h3>
1.1 deraadt 72: <ul>
1.17 henning 73: <li><a name="arp"></a>
74: <font color="#009000"><strong>021: RELIABILITY FIX: October 1, 2003</strong></font><br>
1.15 margarid 75: It is possible for a local user to cause a system panic by flooding it with spoofed ARP
76: requests.<br>
1.35 sthen 77: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/021_arp.patch">A source code patch exists which remedies the problem</a>.<br>
1.15 margarid 78: <p>
1.17 henning 79: <li><a name="asn1"></a>
80: <font color="#009000"><strong>020: SECURITY FIX: October 1, 2003</strong></font><br>
1.11 millert 81: The use of certain ASN.1 encodings or malformed public keys may allow an
82: attacker to mount a denial of service attack against applications linked with
83: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=3">ssl(3)</a>.
1.14 margarid 84: This does not affect OpenSSH.<br>
1.35 sthen 85: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/020_asn1.patch">A source code patch exists which remedies the problem</a>.<br>
1.14 margarid 86: <p>
1.17 henning 87: <li><a name="pfnorm"></a>
88: <font color="#009000"><strong>019: SECURITY FIX: September 24, 2003</strong></font><br>
1.12 mcbride 89: Three cases of potential access to freed memory have been found in
1.14 margarid 90: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>.
91: At least one of them could be used to panic pf with active scrub rules remotely.<br>
1.35 sthen 92: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/019_pfnorm.patch">A source code patch exists which remedies the problem</a>.<br>
1.14 margarid 93: <p>
1.17 henning 94: <li><a name="sendmail4"></a>
95: <font color="#009000"><strong>018: SECURITY FIX: September 17, 2003</strong></font><br>
1.9 millert 96: A buffer overflow in the address parsing in
97: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a>
98: may allow an attacker to gain root privileges.<br>
1.35 sthen 99: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/018_sendmail.patch">A source code patch exists which remedies the problem</a>.<br>
1.10 millert 100: NOTE: this is the <em>second</em> revision of the patch that fixes an additional
1.9 millert 101: <p>
1.17 henning 102: <li><a name="sshbuffer"></a>
103: <font color="#009000"><strong>017: SECURITY FIX: September 16, 2003</strong></font><br>
1.7 millert 104: All versions of OpenSSH's sshd prior to 3.7 contain a buffer management error.
1.9 millert 105: It is unclear whether or not this bug is exploitable.<br>
1.35 sthen 106: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/017_sshbuffer.patch">A
1.9 millert 107: source code patch exists which remedies the problem</a>.<br>
1.8 millert 108: NOTE: this is the <em>second</em> revision of the patch that fixes an additional
109: problem.
1.7 millert 110: <p>
1.17 henning 111: <li><a name="sendmail3"></a>
112: <font color="#009000"><strong>016: SECURITY FIX: August 25, 2003</strong></font><br>
1.6 brad 113: Fix for a potential security issue in
114: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a>
115: with respect to DNS maps. This only affects
116: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a>
117: configurations that use the "enhdnsbl"
118: feature. The default OpenBSD
119: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a>
120: config does not use this.<br>
1.35 sthen 121: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/016_sendmail.patch">A
1.6 brad 122: source code patch exists which remedies the problem</a>.
123: <p>
1.17 henning 124: <li><a name="realpath"></a>
125: <font color="#009000"><strong>015: SECURITY FIX: August 4, 2003</strong></font><br>
1.5 millert 126: An off-by-one error exists in the C library function
127: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realpath&sektion=3">realpath(3)</a>.
128: Since this same bug resulted in a root compromise in the wu-ftpd ftp server
129: it is possible that this bug may allow an attacker to gain escalated privileges
130: on OpenBSD.<br>
1.35 sthen 131: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/015_realpath.patch">A
1.5 millert 132: source code patch exists which remedies the problem</a>.
133: <p>
1.17 henning 134: <li><a name="sendmail2"></a>
135: <font color="#009000"><strong>014: SECURITY FIX: March 31, 2003</strong></font><br>
1.3 miod 136: A buffer overflow in the address parsing in
137: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a>
138: may allow an attacker to gain root privileges.<br>
1.35 sthen 139: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/014_sendmail.patch">A
1.3 miod 140: source code patch exists which remedies the problem</a>.
141: <p>
1.17 henning 142: <li><a name="kerberos"></a>
143: <font color="#009000"><strong>013: SECURITY FIX: March 24, 2003</strong></font><br>
1.4 margarid 144: The cryptographic weaknesses in the Kerberos v4 protocol can be exploited
1.1 deraadt 145: on Kerberos v5 as well.
146: <br>
1.35 sthen 147: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/013_kerberos.patch">A
1.1 deraadt 148: source code patch exists which remedies the problem</a>.
149: <p>
1.17 henning 150: <li><a name="kpr"></a>
151: <font color="#009000"><strong>012: SECURITY FIX: March 19, 2003</strong></font><br>
1.1 deraadt 152: OpenSSL is vulnerable to an extension of the ``Bleichenbacher'' attack designed
153: by Czech researchers Klima, Pokorny and Rosa.
154: <br>
1.35 sthen 155: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/012_kpr.patch">A
1.1 deraadt 156: source code patch exists which remedies the problem</a>.
157: <p>
1.17 henning 158: <li><a name="blinding"></a>
159: <font color="#009000"><strong>011: SECURITY FIX: March 18, 2003</strong></font><br>
1.1 deraadt 160: Various SSL and TLS operations in OpenSSL are vulnerable to timing attacks.
161: <br>
1.35 sthen 162: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/011_blinding.patch">An
1.1 deraadt 163: ``RSA blinding'' source code patch exists which remedies the problem</a>.
164: <p>
1.17 henning 165: <li><a name="lprm"></a>
166: <font color="#009000"><strong>010: SECURITY FIX: March 5, 2003</strong></font><br>
1.1 deraadt 167: A fix for an
168: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lprm&sektion=1">lprm(1)</a>
169: bug made in 1996 contains an error that could lead to privilege escalation.
170: For OpenBSD 3.2 the impact is limited since
171: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lprm&sektion=1">lprm(1)</a>
172: is setuid daemon, not setuid root.
173: <br>
1.35 sthen 174: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/010_lprm.patch">A
1.1 deraadt 175: source code patch exists which remedies the problem</a>.
176: <p>
1.17 henning 177: <li><a name="sendmail"></a>
178: <font color="#009000"><strong>009: SECURITY FIX: March 3, 2003</strong></font><br>
1.1 deraadt 179: A buffer overflow in the envelope comments processing in
180: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a>
181: may allow an attacker to gain root privileges.<br>
1.35 sthen 182: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/009_sendmail.patch">A
1.1 deraadt 183: source code patch exists which remedies the problem</a>.
184: <p>
1.17 henning 185: <li><a name="httpd"></a>
186: <font color="#009000"><strong>008: SECURITY FIX: February 25, 2003</strong></font><br>
1.1 deraadt 187: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> leaks file inode numbers via ETag header as well as child PIDs in multipart MIME boundary generation. This could lead, for example, to NFS exploitation because it uses inode numbers as part of the file handle.<br>
1.35 sthen 188: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/008_httpd.patch">A source code patch exists which fixes these two issues</a>.
1.1 deraadt 189: <p>
1.17 henning 190: <li><a name="ssl"></a>
191: <font color="#009000"><strong>007: SECURITY FIX: February 22, 2003</strong></font><br>
1.1 deraadt 192: In
193: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=8">ssl(8)</a> an information leak can occur via timing by performing a MAC computation
194: even if incorrect block cipher padding has been found, this is a
195: countermeasure. Also, check for negative sizes in memory allocation routines.<br>
1.35 sthen 196: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/007_ssl.patch">A
1.1 deraadt 197: source code patch exists which fixes these two issues</a>.
198: <p>
1.17 henning 199: <li><a name="cvs"></a>
200: <font color="#009000"><strong>006: SECURITY FIX: January 20, 2003</strong></font><br>
1.1 deraadt 201: A double free in
202: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a>
203: could allow an attacker to execute code with the privileges of the
204: user running cvs. This is only an issue when the cvs command is
205: being run on a user's behalf as a different user. This means that,
206: in most cases, the issue only exists for cvs configurations that use
207: the <em>pserver</em> client/server connection method.<br>
1.35 sthen 208: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/006_cvs.patch">A
1.1 deraadt 209: source code patch exists which remedies the problem</a>.
210: <p>
1.17 henning 211: <li><a name="named"></a>
212: <font color="#009000"><strong>005: SECURITY FIX: November 14, 2002</strong></font><br>
1.1 deraadt 213: A buffer overflow in
214: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a>
215: could allow an attacker to execute code with the privileges of named.
216: On OpenBSD, named runs as a non-root user in a chrooted environment
217: which mitigates the effects of this bug.<br>
1.35 sthen 218: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/005_named.patch">A
1.1 deraadt 219: source code patch exists which remedies the problem</a>.
220: <p>
1.17 henning 221: <li><a name="pool"></a>
222: <font color="#009000"><strong>004: RELIABILITY FIX: November 6, 2002</strong></font><br>
1.1 deraadt 223: A logic error in the
224: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pool&sektion=9">pool</a>
225: kernel memory allocator could cause memory corruption in low-memory situations,
226: causing the system to crash.<br>
1.35 sthen 227: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/004_pool.patch">A
1.1 deraadt 228: source code patch exists which remedies the problem</a>.
229: <p>
1.17 henning 230: <li><a name="smrsh"></a>
231: <font color="#009000"><strong>003: SECURITY FIX: November 6, 2002</strong></font><br>
1.1 deraadt 232: An attacker can bypass the restrictions imposed by sendmail's restricted shell,
233: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smrsh&sektion=8">smrsh(8)</a>,
234: and execute arbitrary commands with the privileges of his own account.<br>
1.35 sthen 235: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/003_smrsh.patch">A
1.1 deraadt 236: source code patch exists which remedies the problem</a>.
237: <p>
1.17 henning 238: <li><a name="pfbridge"></a>
239: <font color="#009000"><strong>002: RELIABILITY FIX: November 6, 2002</strong></font><br>
1.1 deraadt 240: Network
241: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridges</a>
242: running
243: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf</a>
244: with scrubbing enabled could cause mbuf corruption,
245: causing the system to crash.<br>
1.35 sthen 246: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/002_pfbridge.patch">A
1.1 deraadt 247: source code patch exists which remedies the problem</a>.
248: <p>
1.17 henning 249: <li><a name="kadmin"></a>
250: <font color="#009000"><strong>001: SECURITY FIX: October 21, 2002</strong></font><br>
1.1 deraadt 251: A buffer overflow can occur in the
252: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kadmind&sektion=8">kadmind(8)</a>
253: daemon, leading to possible remote crash or exploit.<br>
1.35 sthen 254: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/001_kadmin.patch">A source code patch exists which remedies the problem</a>.
1.1 deraadt 255: <p>
256: </ul>
257: <p>
1.17 henning 258: <a name="i386"></a>
259: <h3><font color="#e00000">i386</font></h3>
1.1 deraadt 260: <ul>
261: <li>No problems identified yet.
262: </ul>
263: <p>
1.17 henning 264: <a name="alpha"></a>
265: <h3><font color="#e00000">alpha</font></h3>
1.1 deraadt 266: <ul>
267: <li>No problems identified yet.
268: </ul>
269: <p>
1.17 henning 270: <a name="mac68k"></a>
271: <h3><font color="#e00000">mac68k</font></h3>
1.1 deraadt 272: <ul>
273: <li>No problems identified yet.
274: </ul>
275: <p>
1.17 henning 276: <a name="sparc"></a>
277: <h3><font color="#e00000">sparc</font></h3>
1.1 deraadt 278: <ul>
279: <li>No problems identified yet.
280: </ul>
281: <p>
1.17 henning 282: <a name="sparc64"></a>
283: <h3><font color="#e00000">sparc64</font></h3>
1.1 deraadt 284: <ul>
285: <li>No problems identified yet.
286: </ul>
287: <p>
1.17 henning 288: <a name="amiga"></a>
289: <h3><font color="#e00000">amiga</font></h3>
1.1 deraadt 290: <ul>
291: <li>No problems identified yet.
292: </ul>
293: <p>
1.17 henning 294: <a name="hp300"></a>
295: <h3><font color="#e00000">hp300</font></h3>
1.1 deraadt 296: <ul>
297: <li>No problems identified yet.
298: </ul>
299: <p>
1.17 henning 300: <a name="mvme68k"></a>
301: <h3><font color="#e00000">mvme68k</font></h3>
1.1 deraadt 302: <ul>
303: <li>No problems identified yet.
304: </ul>
305: <p>
1.17 henning 306: <a name="macppc"></a>
307: <h3><font color="#e00000">macppc</font></h3>
1.1 deraadt 308: <ul>
309: <li>No problems identified yet.
310: </ul>
311: <p>
1.17 henning 312: <a name="vax"></a>
313: <h3><font color="#e00000">vax</font></h3>
1.1 deraadt 314: <ul>
315: <li>No problems identified yet.
316: </ul>
317:
318: <br>
319:
320: <hr>
321: <a href=stable.html>For OpenBSD patch branch information, please refer here.</a><br>
1.2 margarid 322: <a href=pkg-stable32.html>For important packages updates, please refer here.</a><br>
1.1 deraadt 323: <br>
324: For errata on a certain release, click below:<br>
325: <a href="errata21.html">2.1</a>,
326: <a href="errata22.html">2.2</a>,
327: <a href="errata23.html">2.3</a>,
328: <a href="errata24.html">2.4</a>,
329: <a href="errata25.html">2.5</a>,
330: <a href="errata26.html">2.6</a>,
331: <a href="errata27.html">2.7</a>,
332: <a href="errata28.html">2.8</a>,
333: <a href="errata29.html">2.9</a>,
334: <a href="errata30.html">3.0</a>,
335: <a href="errata31.html">3.1</a>,
1.16 david 336: <a href="errata33.html">3.3</a>,
1.20 david 337: <a href="errata34.html">3.4</a>,
1.21 miod 338: <a href="errata35.html">3.5</a>,
1.22 deraadt 339: <a href="errata36.html">3.6</a>,
1.30 deraadt 340: <br>
1.23 deraadt 341: <a href="errata37.html">3.7</a>,
1.24 deraadt 342: <a href="errata38.html">3.8</a>,
1.25 deraadt 343: <a href="errata39.html">3.9</a>,
1.26 deraadt 344: <a href="errata40.html">4.0</a>,
1.28 merdely 345: <a href="errata41.html">4.1</a>,
1.29 deraadt 346: <a href="errata42.html">4.2</a>,
1.30 deraadt 347: <a href="errata43.html">4.3</a>,
1.32 deraadt 348: <a href="errata44.html">4.4</a>,
1.33 deraadt 349: <a href="errata45.html">4.5</a>,
1.34 deraadt 350: <a href="errata46.html">4.6</a>,
1.36 ! deraadt 351: <a href="errata47.html">4.7</a>,
! 352: <a href="errata48.html">4.8</a>.
1.1 deraadt 353: <br>
354:
355: <hr>
356: <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
357: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
1.36 ! deraadt 358: <br><small>$OpenBSD: errata32.html,v 1.35 2010/07/08 19:00:07 sthen Exp $</small>
1.1 deraadt 359:
360: </body>
361: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to errata32.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www