[BACK]Return to errata35.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/errata35.html, Revision 1.17

1.1       miod        1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
                      2: <html>
                      3: <head>
                      4: <title>OpenBSD 3.5 errata</title>
                      5: <link rev=made href="mailto:www@openbsd.org">
                      6: <meta name="resource-type" content="document">
                      7: <meta name="description" content="the OpenBSD CD errata page">
                      8: <meta name="keywords" content="openbsd,cd,errata">
                      9: <meta name="distribution" content="global">
                     10: <meta name="copyright" content="This document copyright 1997-2004 by OpenBSD.">
                     11: <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
                     12: </head>
                     13:
                     14: <body bgcolor="#ffffff" text="#000000" link="#23238E">
                     15:
                     16: <a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a>
                     17: <h2><font color="#0000e0">
                     18: This is the OpenBSD 3.5 release errata &amp; patch list:
                     19:
                     20: </font></h2>
                     21:
                     22: <hr>
                     23: <a href=stable.html>For OpenBSD patch branch information, please refer here.</a><br>
                     24: <a href=pkg-stable35.html>For important packages updates, please refer here.</a><br>
                     25: <br>
                     26: For errata on a certain release, click below:<br>
                     27: <a href="errata21.html">2.1</a>,
                     28: <a href="errata22.html">2.2</a>,
                     29: <a href="errata23.html">2.3</a>,
                     30: <a href="errata24.html">2.4</a>,
                     31: <a href="errata25.html">2.5</a>,
                     32: <a href="errata26.html">2.6</a>,
                     33: <a href="errata27.html">2.7</a>,
                     34: <a href="errata28.html">2.8</a>,
                     35: <a href="errata29.html">2.9</a>,
                     36: <a href="errata30.html">3.0</a>,
                     37: <a href="errata31.html">3.1</a>,
                     38: <a href="errata32.html">3.2</a>,
                     39: <a href="errata33.html">3.3</a>,
                     40: <a href="errata34.html">3.4</a>,
                     41: <a href="errata.html">3.6</a>.
                     42: <br>
                     43: <hr>
                     44:
                     45: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5.tar.gz">
                     46: You can also fetch a tar.gz file containing all the following patches</a>.
                     47: This file is updated once a day.
                     48:
                     49: <p> The patches below are available in CVS via the
                     50: <code>OPENBSD_3_5</code> <a href="stable.html">patch branch</a>.
                     51:
                     52: <p>
                     53: For more detailed information on how to install patches to OpenBSD, please
                     54: consult the <a href="./faq/faq10.html#Patches">OpenBSD FAQ</a>.
                     55: <hr>
                     56:
                     57: <a name="all"></a>
                     58: <h3><font color="#e00000">All architectures</font></h3>
                     59: <ul>
1.12      mcbride    60: <li><a name="rtt"></a>
1.14      brad       61: <font color="#009000"><strong>027: RELIABILITY FIX: January 11, 2005</strong></font><br>
1.12      mcbride    62: A bug in the
                     63: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcp&amp;apropos=0&amp;sektion=4&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">tcp(4)</a>
1.13      mcbride    64: stack allows an invalid argument to be used in calculating the TCP
1.12      mcbride    65: retransmit timeout. By sending packets with specific values in the TCP
                     66: timestamp option, an attacker can cause a system panic.
                     67: <br>
                     68: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/027_rtt.patch">
                     69: A source code patch exists which remedies this problem</a>.<br>
                     70: <p>
                     71:
1.14      brad       72: <li><a name="httpd3"></a>
                     73: <font color="#009000"><strong>026: SECURITY FIX: January 12, 2005</strong></font><br>
                     74: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&apropos=0&sektion=8&manpath=OpenBSD+Current&arch=i386&format=html">httpd(8)</a>
                     75: 's mod_include module fails to properly validate the length of
                     76: user supplied tag strings prior to copying them to a local buffer,
                     77: causing a buffer overflow.
                     78: <br>
                     79: This would require enabling the XBitHack directive or server-side
                     80: includes and making use of a malicious document.
                     81: <br>
                     82: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/026_httpd3.patch">
                     83: A source code patch exists which remedies this problem</a>.<br>
                     84: <p>
                     85:
1.9       otto       86: <li><a name="getcwd"></a>
1.11      otto       87: <font color="#009000"><strong>025: RELIABILITY FIX: January 6, 2005</strong></font><br>
1.9       otto       88: The
                     89: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getcwd&amp;apropos=0&amp;sektion=3&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">getcwd(3)</a>
                     90: library function contains a memory management error, which causes failure
                     91: to retrieve the current working directory if the path is very long.
                     92: <br>
1.10      otto       93: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/025_getcwd.patch">
1.9       otto       94: A source code patch exists which remedies this problem</a>.<br>
                     95: <p>
                     96:
1.7       markus     97: <li><a name="pfkey"></a>
                     98: <font color="#009000"><strong>024: SECURITY FIX: December 14, 2004</strong></font><br>
                     99: On systems running
                    100: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;apropos=0&amp;sektion=8&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">isakmpd(8)</a>
                    101: it is possible for a local user to cause kernel memory corruption
                    102: and system panic by setting
1.8       jaredy    103: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&amp;apropos=0&amp;sektion=4&amp;manpath=OpenBSD+Current&amp;format=html">ipsec(4)</a>
1.7       markus    104: credentials on a socket.
                    105: <br>
                    106: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/024_pfkey.patch">
                    107: A source code patch exists which remedies this problem</a>.<br>
                    108: <p>
1.4       brad      109: <li><a name="lynx"></a>
                    110: <font color="#009000"><strong>023: RELIABILITY FIX: November 10, 2004</strong></font><br>
                    111: Due to a bug in
                    112: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lynx&amp;apropos=0&amp;sektion=1&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">lynx(1)</a>
                    113: it is possible for pages such as
                    114: <a href="http://lcamtuf.coredump.cx/mangleme/gallery/lynx_die1.html">this</a>
                    115: to cause
                    116: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lynx&amp;apropos=0&amp;sektion=1&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">lynx(1)</a>
                    117: to exhaust memory and then crash when parsing such pages.
                    118: <br>
                    119: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/023_lynx.patch">
                    120: A source code patch exists which remedies this problem</a>.<br>
                    121: <p>
1.2       brad      122: <li><a name="pppd"></a>
1.3       brad      123: <font color="#009000"><strong>022: RELIABILITY FIX: November 10, 2004</strong></font><br>
1.2       brad      124: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppd&amp;apropos=0&amp;sektion=8&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">pppd(8)</a>
                    125: contains a bug that allows an attacker to crash his own connection, but it cannot
                    126: be used to deny service to other users.
                    127: <br>
                    128: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/022_pppd.patch">
                    129: A source code patch exists which remedies this problem</a>.<br>
                    130: <p>
                    131: <li><a name="bind"></a>
1.3       brad      132: <font color="#009000"><strong>021: RELIABILITY FIX: November 10, 2004</strong></font><br>
1.2       brad      133: BIND contains a bug which results in BIND trying to contact nameservers via IPv6, even in
1.5       otto      134: cases where IPv6 connectivity is non-existent. This results in unneccessary timeouts and
1.2       brad      135: thus slow DNS queries.
                    136: <br>
                    137: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/021_bind.patch">
                    138: A source code patch exists which remedies this problem</a>.<br>
                    139: <p>
1.1       miod      140: <li><a name="radius"></a>
                    141: <font color="#009000"><strong>020: SECURITY FIX: September 20, 2004</strong></font><br>
                    142: Eilko Bos reported that radius authentication, as implemented by
                    143: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login_radius&amp;apropos=0&amp;sektion=8&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">login_radius(8)</a>,
                    144: was not checking the shared secret used for replies sent by the radius server.
                    145: This could allow an attacker to spoof a reply granting access to the
                    146: attacker.  Note that OpenBSD does not ship with radius authentication enabled.
                    147: <br>
                    148: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/020_radius.patch">
                    149: A source code patch exists which remedies this problem</a>.<br>
                    150: <p>
                    151: <li><a name="xpm"></a>
                    152: <font color="#009000"><strong>019: SECURITY FIX: September 16, 2004</strong></font><br>
                    153: Chris Evans reported several flaws (stack and integer overflows) in the
                    154: <a href="http://www.inria.fr/koala/lehors/xpm.html">Xpm</a>
                    155: library code that parses image files
                    156: (<a href="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0687">CAN-2004-0687</a>,
                    157: <a href="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0688">CAN-2004-0688</a>).
                    158: Some of these would be exploitable when parsing malicious image files in
                    159: an application that handles XPM images, if they could escape ProPolice.
                    160: <br>
                    161: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/019_xpm.patch">
                    162: A source code patch exists which remedies this problem</a>.<br>
                    163: <p>
                    164: <li><a name="httpd2"></a>
                    165: <font color="#009000"><strong>018: SECURITY FIX: September 10, 2004</strong></font><br>
                    166: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&amp;apropos=0&amp;sektion=8&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">httpd(8)</a>
                    167: 's mod_rewrite module can be made to write one zero byte in an arbitrary memory
                    168: position outside of a char array, causing a DoS or possibly buffer overflows.
                    169: This would require enabling dbm for mod_rewrite and making use of a malicious
                    170: dbm file.
                    171: <br>
                    172: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/018_httpd2.patch">
                    173: A source code patch exists which remedies this problem</a>.<br>
                    174: <p>
                    175: <li><a name="libz"></a>
                    176: <font color="#009000"><strong>017: RELIABILITY FIX: August 29, 2004</strong></font><br>
                    177: Due to incorrect error handling in zlib an attacker could potentially cause a Denial
                    178: of Service attack.
                    179: <a href="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0797">CAN-2004-0797</a>
                    180: .
                    181: <br>
                    182: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/017_libz.patch">
                    183: A source code patch exists which remedies this problem</a>.<br>
                    184: <p>
                    185: <li><a name="bridge"></a>
                    186: <font color="#009000"><strong>016: RELIABILITY FIX: August 26, 2004</strong></font><br>
                    187: As
                    188: <a href="http://marc.theaimsgroup.com/?l=bugtraq&amp;m=109345131508824&amp;w=2">reported</a>
                    189: by Vafa Izadinia
                    190: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&amp;apropos=0&amp;sektion=4&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">bridge(4)</a>
                    191: with IPsec processing enabled can be crashed remotely by a single ICMP echo traversing the bridge.
                    192: <br>
                    193: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/016_bridge.patch">
                    194: A source code patch exists which remedies this problem</a>.<br>
                    195: <p>
                    196: <li><a name="icmp"></a>
                    197: <font color="#009000"><strong>015: RELIABILITY FIX: August 25, 2004</strong></font><br>
                    198: Improved verification of ICMP errors in order to minimize the impact of ICMP attacks
                    199: against TCP.
                    200: <br>
1.6       brad      201: <a href="http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html">http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html</a>
1.1       miod      202: <br>
                    203: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/015_icmp.patch">
                    204: A source code patch exists which remedies this problem</a>.<br>
                    205: <p>
                    206: <li><a name="rnd"></a>
                    207: <font color="#009000"><strong>014: RELIABILITY FIX: July 25, 2004</strong></font><br>
                    208: Under a certain network load the kernel can run out of stack space.  This was
                    209: encountered in an environment using CARP on a VLAN interface.  This issue initially
                    210: manifested itself as a FPU related crash on boot up.
                    211: <br>
                    212: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/014_rnd.patch">
                    213: A source code patch exists which remedies this problem</a>.<br>
                    214: <p>
                    215: <li><a name="httpd"></a>
                    216: <font color="#009000"><strong>013: SECURITY FIX: June 12, 2004</strong></font><br>
                    217: Multiple vulnerabilities have been found in
                    218: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&amp;apropos=0&amp;sektion=8&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">httpd(8)</a>
                    219: / mod_ssl.
                    220: <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0020">CAN-2003-0020</a>,
                    221: <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0987">CAN-2003-0987</a>,
                    222: <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0488">CAN-2004-0488</a>,
                    223: <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0492">CAN-2004-0492</a>.
                    224: <br>
                    225: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/013_httpd.patch">
                    226: A source code patch exists which remedies this problem</a>.<br>
                    227: <p>
                    228: <li><a name="isakmpd"></a>
                    229: <font color="#009000"><strong>012: SECURITY FIX: June 10, 2004</strong></font><br>
                    230: As
                    231: <a href="http://seclists.org/lists/fulldisclosure/2004/Jun/0191.html">disclosed</a>
                    232: by Thomas Walpuski
                    233: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;apropos=0&amp;sektion=8&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">isakmpd(8)</a>
                    234: is still vulnerable to unauthorized SA deletion.  An attacker can delete IPsec
                    235: tunnels at will.
                    236: <br>
                    237: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/012_isakmpd.patch">
                    238: A source code patch exists which remedies this problem</a>.<br>
                    239: <p>
                    240: <li><a name="cvs3"></a>
                    241: <font color="#009000"><strong>011: SECURITY FIX: June 9, 2004</strong></font><br>
                    242: Multiple remote vulnerabilities have been found in the
                    243: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&amp;apropos=0&amp;sektion=1&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">cvs(1)</a>
                    244: server that allow an attacker to crash the server or possibly execute arbitrary
                    245: code with the same privileges as the CVS server program.
                    246: <br>
                    247: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/011_cvs3.patch">
                    248: A source code patch exists which remedies this problem</a>.<br>
                    249: <p>
                    250: <li><a name="fifofs"></a>
                    251: <font color="#009000"><strong>010: RELIABILITY FIX: June 9, 2004</strong></font><br>
                    252: A FIFO bug was introduced in OpenBSD 3.5 that occurs when a FIFO is opened in
                    253: non-blocking mode for writing when there are no processes reading the FIFO.
                    254: One program affected by this is the <a href="http://www.qmail.org/">qmail</a>
                    255: mail server which could go into an infinite loop and consume all CPU.
                    256: <br>
                    257: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/010_fifofs.patch">
                    258: A source code patch exists which remedies this problem</a>.<br>
                    259: <p>
                    260: <li><a name="kerberos"></a>
                    261: <font color="#00900"><strong>009: SECURITY FIX: May 30,
                    262: 2004</strong></font><br>
                    263: A flaw in the Kerberos V <a
                    264: href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdc">kdc(8)</a>
                    265: server could result in the administrator of a Kerberos realm having
                    266: the ability to impersonate any principal in any other realm which
                    267: has established a cross-realm trust with their realm. The flaw is due to
                    268: inadequate checking of the "transited" field in a Kerberos request. For
                    269: more details see <a href="http://www.pdc.kth.se/heimdal/advisory/2004-04-01/">
                    270: Heimdal's announcement</a>.
                    271: <br>
                    272: <a
                    273: href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/009_kerberos.patch">
                    274: A source code patch exists which remedies this problem</a>.<br>
                    275: <p>
                    276: <li><a name="xdm"></a>
                    277: <font color="#00900"><strong>008: SECURITY FIX: May 26,
                    278: 2004</strong></font><br>
                    279: With the introduction of IPv6 code in
                    280: <a
                    281: href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&amp;apropos=0&amp;sektion=0&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">xdm(1)</a>,
                    282: one test on the 'requestPort' resource was deleted by accident. This
                    283: makes xdm create the chooser socket even if xdmcp is disabled in
                    284: xdm-config, by setting requestPort to 0. See
                    285: <a href="http://bugs.xfree86.org/show_bug.cgi?id=1376">XFree86
                    286: bugzilla</a> for details.
                    287: <br>
                    288: <a
                    289: href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/008_xdm.patch">
                    290: A source code patch exists which remedies this problem</a>.<br>
                    291: <p>
                    292: <li><a name="cvs2"></a>
                    293: <font color="#009000"><strong>007: SECURITY FIX: May 20,
                    294: 2004</strong></font><br>
                    295: A heap overflow in the
                    296: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&amp;apropos=0&amp;sektion=1&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">cvs(1)</a>
                    297: server has been discovered that can be exploited by clients sending
                    298: malformed requests, enabling these clients to run arbitrary code
                    299: with the same privileges as the CVS server program.
                    300: <br>
                    301: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/007_cvs2.patch">
                    302: A source code patch exists which remedies this problem</a>.<br>
                    303: <p>
                    304: <li><a name="procfs"></a>
                    305: <font color="#009000"><strong>006: SECURITY FIX: May 13,
                    306: 2004</strong></font><br>
                    307: Check for integer overflow in procfs.  Use of procfs is not recommended.
                    308: <br>
                    309: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/006_procfs.patch">
                    310: A source code patch exists which remedies this problem</a>.<br>
                    311: <p>
                    312: <li><a name="tcp"></a>
                    313: <font color="#009000"><strong>005: RELIABILITY FIX: May 6,
                    314: 2004</strong></font><br>
                    315: Reply to in-window SYN with a rate-limited ACK.
                    316: <br>
                    317: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/005_tcp.patch">
                    318: A source code patch exists which remedies this problem</a>.<br>
                    319: <p>
                    320: <li><a name="scsi"></a>
                    321: <font color="#009000"><strong>004: RELIABILITY FIX: May 5,
                    322: 2004</strong></font><br>
                    323: Restore the ability to negotiate tags/wide/sync with some SCSI controllers ( i.e.
                    324: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=siop&amp;apropos=0&amp;sektion=4&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">siop(4)</a>,
                    325: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=trm&amp;apropos=0&amp;sektion=4&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">trm(4)</a>,
                    326: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iha&amp;apropos=0&amp;sektion=4&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">iha(4)</a>
                    327: ).
                    328: <br>
                    329: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/004_scsi.patch">
                    330: A source code patch exists which remedies this problem</a>.<br>
                    331: <p>
                    332: <li><a name="gdt"></a>
                    333: <font color="#009000"><strong>003: RELIABILITY FIX: May 5,
                    334: 2004</strong></font><br>
                    335: Under load "recent model"
                    336: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gdt&amp;apropos=0&amp;sektion=4&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">gdt(4)</a>
                    337: controllers will lock up.
                    338: <br>
                    339: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/003_gdt.patch">
                    340: A source code patch exists which remedies this problem</a>.<br>
                    341: <p>
                    342: <li><a name="cvs"></a>
                    343: <font color="#009000"><strong>002: SECURITY FIX: May 5,
                    344: 2004</strong></font><br>
                    345: Pathname validation problems have been found in
                    346: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&amp;apropos=0&amp;sektion=1&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">cvs(1)</a>,
                    347: allowing malicious clients to create files outside the repository, allowing
                    348: malicious servers to overwrite files outside the local CVS tree on
                    349: the client and allowing clients to check out files outside the CVS
                    350: repository.
                    351: <br>
                    352: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/002_cvs.patch">
                    353: A source code patch exists which remedies this problem</a>.<br>
                    354: <p>
                    355: </ul>
                    356: <p>
                    357: <a name="i386"></a>
                    358: <h3><font color="#e00000">i386</font></h3>
                    359: <ul>
1.15      brad      360: <li><a name="locore"></a>
                    361: <font color="#009000"><strong>028: SECURITY FIX: February 28, 2005</strong></font><br>
                    362: More stringent checking should be done in the
                    363: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=copy&amp;apropos=0&amp;sektion=9&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">copy(9)</a>
                    364: functions to prevent their misuse.
                    365: <br>
                    366: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/i386/028_locore.patch">
                    367: A source code patch exists which remedies this problem</a>.<br>
                    368: <p>
1.1       miod      369: </ul>
                    370: <p>
                    371: <a name="alpha"></a>
                    372: <h3><font color="#e00000">alpha</font></h3>
                    373: <ul>
                    374: <li>No problems identified yet.
                    375: </ul>
                    376: <p>
                    377: <a name="amd64"></a>
                    378: <h3><font color="#e00000">amd64</font></h3>
                    379: <ul>
1.16      brad      380: <li><a name="copy"></a>
                    381: <font color="#009000"><strong>029: SECURITY FIX: March 16, 2005</strong></font><br>
                    382: More stringent checking should be done in the
                    383: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=copy&amp;apropos=0&amp;sektion=9&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">copy(9)</a>
                    384: functions to prevent their misuse.
                    385: <br>
1.17    ! brad      386: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/amd64/029_copy.patch">
1.16      brad      387: A source code patch exists which remedies this problem</a>.<br>
                    388: <p>
1.1       miod      389: </ul>
                    390: <p>
                    391: <a name="cats"></a>
                    392: <h3><font color="#e00000">cats</font></h3>
                    393: <ul>
                    394: <li>No problems identified yet.
                    395: </ul>
                    396: <p>
                    397: <a name="mac68k"></a>
                    398: <h3><font color="#e00000">mac68k</font></h3>
                    399: <ul>
                    400: <li>No problems identified yet.
                    401: </ul>
                    402: <p>
                    403: <a name="sparc"></a>
                    404: <h3><font color="#e00000">sparc</font></h3>
                    405: <ul>
                    406: <li>No problems identified yet.
                    407: </ul>
                    408: <p>
                    409: <a name="sparc64"></a>
                    410: <h3><font color="#e00000">sparc64</font></h3>
                    411: <ul>
                    412: <li>No problems identified yet.
                    413: </ul>
                    414: <p>
                    415: <a name="hppa"></a>
                    416: <h3><font color="#e00000">hppa</font></h3>
                    417: <ul>
                    418: <li>No problems identified yet.
                    419: </ul>
                    420: <p>
                    421: <a name="hp300"></a>
                    422: <h3><font color="#e00000">hp300</font></h3>
                    423: <ul>
                    424: <li>No problems identified yet.
                    425: </ul>
                    426: <p>
                    427: <a name="mvme68k"></a>
                    428: <h3><font color="#e00000">mvme68k</font></h3>
                    429: <ul>
                    430: <li>No problems identified yet.
                    431: </ul>
                    432: <p>
                    433: <a name="mvme88k"></a>
                    434: <h3><font color="#e00000">mvme88k</font></h3>
                    435: <ul>
                    436: <li>No problems identified yet.
                    437: </ul>
                    438: <p>
                    439: <a name="macppc"></a>
                    440: <h3><font color="#e00000">macppc</font></h3>
                    441: <ul>
                    442: <li><a name="autobook_package"></a>
                    443: <font color="#009000"><strong>001: BROKEN PACKAGE ON CD: May 4, 2004</strong></font><br>
                    444: The powerpc autobook-1.3.tgz package found on CD2 has been found to be corrupt,
                    445: and will not extract.
                    446: A replacement package can be found on the ftp sites.
                    447: <p>
                    448: </ul>
                    449: <p>
                    450: <a name="vax"></a>
                    451: <h3><font color="#e00000">vax</font></h3>
                    452: <ul>
                    453: <li>No problems identified yet.
                    454: </ul>
                    455:
                    456: <br>
                    457:
                    458: <hr>
                    459: <a href=stable.html>For OpenBSD patch branch information, please refer here.</a><br>
                    460: <a href=pkg-stable35.html>For important packages updates, please refer here.</a><br>
                    461: <br>
                    462: For errata on a certain release, click below:<br>
                    463: <a href="errata21.html">2.1</a>,
                    464: <a href="errata22.html">2.2</a>,
                    465: <a href="errata23.html">2.3</a>,
                    466: <a href="errata24.html">2.4</a>,
                    467: <a href="errata25.html">2.5</a>,
                    468: <a href="errata26.html">2.6</a>,
                    469: <a href="errata27.html">2.7</a>,
                    470: <a href="errata28.html">2.8</a>,
                    471: <a href="errata29.html">2.9</a>,
                    472: <a href="errata30.html">3.0</a>,
                    473: <a href="errata31.html">3.1</a>,
                    474: <a href="errata32.html">3.2</a>,
                    475: <a href="errata33.html">3.3</a>,
                    476: <a href="errata34.html">3.4</a>,
                    477: <a href="errata.html">3.6</a>.
                    478: <br>
                    479:
                    480: <hr>
                    481: <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
                    482: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
1.17    ! brad      483: <br><small>$OpenBSD: errata35.html,v 1.16 2005/03/17 01:30:04 brad Exp $</small>
1.1       miod      484:
                    485: </body>
                    486: </html>