[BACK]Return to errata36.html CVS log [TXT][DIR] Up to [local] / www

Diff for /www/errata36.html between version 1.60 and 1.61

version 1.60, 2019/04/02 12:46:57 version 1.61, 2019/05/27 22:55:19
Line 1 
Line 1 
 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">  <!doctype html>
 <html>  <html lang=en id=errata>
 <head>  <meta charset=utf-8>
   
 <title>OpenBSD 3.6 Errata</title>  <title>OpenBSD 3.6 Errata</title>
 <meta name="description" content="the OpenBSD CD errata page">  <meta name="description" content="the OpenBSD CD errata page">
 <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">  
 <meta name="viewport" content="width=device-width, initial-scale=1">  <meta name="viewport" content="width=device-width, initial-scale=1">
 <link rel="stylesheet" type="text/css" href="openbsd.css">  <link rel="stylesheet" type="text/css" href="openbsd.css">
 <link rel="canonical" href="https://www.openbsd.org/errata36.html">  <link rel="canonical" href="https://www.openbsd.org/errata36.html">
 </head>  
   
 <!--  <!--
                         IMPORTANT REMINDER                          IMPORTANT REMINDER
         IF YOU ADD A NEW ERRATUM, MAIL THE PATCH TO TECH AND ANNOUNCE          IF YOU ADD A NEW ERRATUM, MAIL THE PATCH TO TECH AND ANNOUNCE
 -->  -->
   
 <body bgcolor="#ffffff" text="#000000" link="#23238E">  
   
 <h2>  <h2 id=OpenBSD>
 <a href="index.html">  <a href="index.html">
 <font color="#0000ff"><i>Open</i></font><font color="#000084">BSD</font></a>  <i>Open</i><b>BSD</b></a>
 <font color="#e00000">3.6 Errata</font>  3.6 Errata
 </h2>  </h2>
 <hr>  <hr>
   
Line 88 
Line 86 
 <ul>  <ul>
   
 <li id="libz2">  <li id="libz2">
 <font color="#009000"><strong>020: SECURITY FIX: July 21, 2005</strong></font>  <strong>020: SECURITY FIX: July 21, 2005</strong>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A buffer overflow has been found in  A buffer overflow has been found in
 <a href="https://man.openbsd.org/OpenBSD-3.6/compress.3">compress(3)</a>  <a href="https://man.openbsd.org/OpenBSD-3.6/compress.3">compress(3)</a>
Line 100 
Line 98 
 <p>  <p>
   
 <li id="libz">  <li id="libz">
 <font color="#009000"><strong>019: SECURITY FIX: July 6, 2005</strong></font>  <strong>019: SECURITY FIX: July 6, 2005</strong>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A buffer overflow has been found in  A buffer overflow has been found in
 <a href="https://man.openbsd.org/OpenBSD-3.6/compress.3">compress(3)</a>  <a href="https://man.openbsd.org/OpenBSD-3.6/compress.3">compress(3)</a>
Line 111 
Line 109 
 <p>  <p>
   
 <li id="sudo">  <li id="sudo">
 <font color="#009000"><strong>018: SECURITY FIX: June 20, 2005</strong></font>  <strong>018: SECURITY FIX: June 20, 2005</strong>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Due to a race condition in its command pathname handling, a user with  Due to a race condition in its command pathname handling, a user with
 <a href="https://man.openbsd.org/OpenBSD-3.6/sudo.8">sudo(8)</a>  <a href="https://man.openbsd.org/OpenBSD-3.6/sudo.8">sudo(8)</a>
 privileges may be able to run arbitrary commands if the user's entry  privileges may be able to run arbitrary commands if the user's entry
 is followed by an entry that grants <tt>sudo ALL</tt> privileges to  is followed by an entry that grants <code>sudo ALL</code> privileges to
 another user.  another user.
 <br>  <br>
 <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.6/common/018_sudo.patch">  <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.6/common/018_sudo.patch">
Line 124 
Line 122 
 <p>  <p>
   
 <li id="getsockopt">  <li id="getsockopt">
 <font color="#009000"><strong>017: RELIABILITY FIX: June 15, 2005</strong></font>  <strong>017: RELIABILITY FIX: June 15, 2005</strong>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 As discovered by Stefan Miltchev calling  As discovered by Stefan Miltchev calling
 <a href="https://man.openbsd.org/OpenBSD-3.6/getsockopt.2">getsockopt(2)</a>  <a href="https://man.openbsd.org/OpenBSD-3.6/getsockopt.2">getsockopt(2)</a>
Line 137 
Line 135 
 <p>  <p>
   
 <li id="cvs">  <li id="cvs">
 <font color="#009000"><strong>016: SECURITY FIX: April 28, 2005</strong></font>  <strong>016: SECURITY FIX: April 28, 2005</strong>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Fix a buffer overflow, memory leaks, and NULL pointer dereference in  Fix a buffer overflow, memory leaks, and NULL pointer dereference in
 <a href="https://man.openbsd.org/OpenBSD-3.6/cvs.1">cvs(1)</a>  <a href="https://man.openbsd.org/OpenBSD-3.6/cvs.1">cvs(1)</a>
Line 150 
Line 148 
 <p>  <p>
   
 <li id="tcp">  <li id="tcp">
 <font color="#009000"><strong>015: RELIABILITY FIX: April 4, 2005</strong></font>  <strong>015: RELIABILITY FIX: April 4, 2005</strong>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Handle an edge condition in  Handle an edge condition in
 <a href="https://man.openbsd.org/OpenBSD-3.6/tcp.4">tcp(4)</a>  <a href="https://man.openbsd.org/OpenBSD-3.6/tcp.4">tcp(4)</a>
Line 161 
Line 159 
 <p>  <p>
   
 <li id="telnet">  <li id="telnet">
 <font color="#009000"><strong>014: SECURITY FIX: March 30, 2005</strong></font>  <strong>014: SECURITY FIX: March 30, 2005</strong>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Due to buffer overflows in  Due to buffer overflows in
 <a href="https://man.openbsd.org/OpenBSD-3.6/telnet.1">telnet(1)</a>,  <a href="https://man.openbsd.org/OpenBSD-3.6/telnet.1">telnet(1)</a>,
Line 176 
Line 174 
 <p>  <p>
   
 <li id="sack">  <li id="sack">
 <font color="#009000"><strong>013: RELIABILITY FIX: March 30, 2005</strong></font>  <strong>013: RELIABILITY FIX: March 30, 2005</strong>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Bugs in the  Bugs in the
 <a href="https://man.openbsd.org/OpenBSD-3.6/tcp.4">tcp(4)</a>  <a href="https://man.openbsd.org/OpenBSD-3.6/tcp.4">tcp(4)</a>
Line 188 
Line 186 
 <p>  <p>
   
 <li id="copy">  <li id="copy">
 <font color="#009000"><strong>012: SECURITY FIX: March 16, 2005</strong></font>  <strong>012: SECURITY FIX: March 16, 2005</strong>
 &nbsp; <strong>amd64 only</strong><br>  &nbsp; <i>amd64 only</i><br>
 More stringent checking should be done in the  More stringent checking should be done in the
 <a href="https://man.openbsd.org/OpenBSD-3.6/copy.9">copy(9)</a>  <a href="https://man.openbsd.org/OpenBSD-3.6/copy.9">copy(9)</a>
 functions to prevent their misuse.  functions to prevent their misuse.
Line 199 
Line 197 
 <p>  <p>
   
 <li id="locore">  <li id="locore">
 <font color="#009000"><strong>011: SECURITY FIX: February 28, 2005</strong></font>  <strong>011: SECURITY FIX: February 28, 2005</strong>
 &nbsp; <strong>i386 only</strong><br>  &nbsp; <i>i386 only</i><br>
 More stringent checking should be done in the  More stringent checking should be done in the
 <a href="https://man.openbsd.org/OpenBSD-3.6/copy.9">copy(9)</a>  <a href="https://man.openbsd.org/OpenBSD-3.6/copy.9">copy(9)</a>
 functions to prevent their misuse.  functions to prevent their misuse.
Line 210 
Line 208 
 <p>  <p>
   
 <li id="rtt">  <li id="rtt">
 <font color="#009000"><strong>010: RELIABILITY FIX: January 11, 2005</strong></font>  <strong>010: RELIABILITY FIX: January 11, 2005</strong>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A bug in the  A bug in the
 <a href="https://man.openbsd.org/OpenBSD-3.6/tcp.4">tcp(4)</a>  <a href="https://man.openbsd.org/OpenBSD-3.6/tcp.4">tcp(4)</a>
Line 223 
Line 221 
 <p>  <p>
   
 <li id="httpd">  <li id="httpd">
 <font color="#009000"><strong>009: SECURITY FIX: January 12, 2005</strong></font>  <strong>009: SECURITY FIX: January 12, 2005</strong>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 <a href="https://man.openbsd.org/OpenBSD-3.6/httpd.8">httpd(8)</a>  <a href="https://man.openbsd.org/OpenBSD-3.6/httpd.8">httpd(8)</a>
 's mod_include module fails to properly validate the length of  's mod_include module fails to properly validate the length of
Line 238 
Line 236 
 <p>  <p>
   
 <li id="getcwd">  <li id="getcwd">
 <font color="#009000"><strong>008: RELIABILITY FIX: January 6, 2005</strong></font>  <strong>008: RELIABILITY FIX: January 6, 2005</strong>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 The  The
 <a href="https://man.openbsd.org/OpenBSD-3.6/getcwd.3">getcwd(3)</a>  <a href="https://man.openbsd.org/OpenBSD-3.6/getcwd.3">getcwd(3)</a>
Line 250 
Line 248 
 <p>  <p>
   
 <li id="pfkey">  <li id="pfkey">
 <font color="#009000"><strong>007: SECURITY FIX: December 14, 2004</strong></font>  <strong>007: SECURITY FIX: December 14, 2004</strong>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 On systems running  On systems running
 <a href="https://man.openbsd.org/OpenBSD-3.6/isakmpd.8">isakmpd(8)</a>  <a href="https://man.openbsd.org/OpenBSD-3.6/isakmpd.8">isakmpd(8)</a>
Line 264 
Line 262 
 <p>  <p>
   
 <li id="xl">  <li id="xl">
 <font color="#009000"><strong>006: RELIABILITY FIX: November 21, 2004</strong></font>  <strong>006: RELIABILITY FIX: November 21, 2004</strong>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Fix for transmit side breakage on macppc and mbuf leaks with  Fix for transmit side breakage on macppc and mbuf leaks with
 <a href="https://man.openbsd.org/OpenBSD-3.6/xl.4">xl(4)</a>.  <a href="https://man.openbsd.org/OpenBSD-3.6/xl.4">xl(4)</a>.
Line 274 
Line 272 
 <p>  <p>
   
 <li id="isakmpd">  <li id="isakmpd">
 <font color="#009000"><strong>005: RELIABILITY FIX: November 21, 2004</strong></font>  <strong>005: RELIABILITY FIX: November 21, 2004</strong>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Wrong calculation of NAT-D payloads may cause interoperability problems between  Wrong calculation of NAT-D payloads may cause interoperability problems between
 <a href="https://man.openbsd.org/OpenBSD-3.6/isakmpd.8">isakmpd(8)</a>  <a href="https://man.openbsd.org/OpenBSD-3.6/isakmpd.8">isakmpd(8)</a>
Line 285 
Line 283 
   
 <p>  <p>
 <li id="lynx">  <li id="lynx">
 <font color="#009000"><strong>004: RELIABILITY FIX: November 10, 2004</strong></font>  <strong>004: RELIABILITY FIX: November 10, 2004</strong>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Due to a bug in  Due to a bug in
 <a href="https://man.openbsd.org/OpenBSD-3.6/lynx.1">lynx(1)</a>  <a href="https://man.openbsd.org/OpenBSD-3.6/lynx.1">lynx(1)</a>
Line 300 
Line 298 
 <p>  <p>
   
 <li id="pppd">  <li id="pppd">
 <font color="#009000"><strong>003: RELIABILITY FIX: November 10, 2004</strong></font>  <strong>003: RELIABILITY FIX: November 10, 2004</strong>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 <a href="https://man.openbsd.org/OpenBSD-3.6/pppd.8">pppd(8)</a>  <a href="https://man.openbsd.org/OpenBSD-3.6/pppd.8">pppd(8)</a>
 contains a bug that allows an attacker to crash his own connection, but it cannot  contains a bug that allows an attacker to crash his own connection, but it cannot
Line 311 
Line 309 
 <p>  <p>
   
 <li id="bind">  <li id="bind">
 <font color="#009000"><strong>002: RELIABILITY FIX: November 10, 2004</strong></font>  <strong>002: RELIABILITY FIX: November 10, 2004</strong>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 BIND contains a bug which results in BIND trying to contact nameservers via IPv6, even in  BIND contains a bug which results in BIND trying to contact nameservers via IPv6, even in
 cases where IPv6 connectivity is non-existent. This results in unnecessary timeouts and  cases where IPv6 connectivity is non-existent. This results in unnecessary timeouts and
Line 322 
Line 320 
 <p>  <p>
   
 <li id="st">  <li id="st">
 <font color="#009000"><strong>001: RELIABILITY FIX: November 10, 2004</strong></font>  <strong>001: RELIABILITY FIX: November 10, 2004</strong>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Fix detection of tape blocksize during device open. Corrects problem with  Fix detection of tape blocksize during device open. Corrects problem with
 <a href="https://man.openbsd.org/OpenBSD-3.6/restore.8">restore(8)</a>.  <a href="https://man.openbsd.org/OpenBSD-3.6/restore.8">restore(8)</a>.
Line 334 
Line 332 
 </ul>  </ul>
   
 <hr>  <hr>
   
 </body>  
 </html>  
Legend:
Removed from v.1.60  
changed lines
  Added in v.1.61