===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata36.html,v
retrieving revision 1.34
retrieving revision 1.35
diff -c -r1.34 -r1.35
*** www/errata36.html	2014/03/31 03:12:47	1.34
--- www/errata36.html	2014/03/31 16:02:48	1.35
***************
*** 79,85 ****
  <ul>
  
  <li><a name="libz2"></a>
! <font color="#009000"><strong>020: SECURITY FIX: July 21, 2005</strong></font> &nbsp; <i>All architectures</i><br>
  A buffer overflow has been found in
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=3">compress(3)</a>
  which may be exploitable.<br>
--- 79,86 ----
  <ul>
  
  <li><a name="libz2"></a>
! <font color="#009000"><strong>020: SECURITY FIX: July 21, 2005</strong></font>
! &nbsp; <i>All architectures</i><br>
  A buffer overflow has been found in
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=3">compress(3)</a>
  which may be exploitable.<br>
***************
*** 90,96 ****
  <p>
  
  <li><a name="libz"></a>
! <font color="#009000"><strong>019: SECURITY FIX: July 6, 2005</strong></font> &nbsp; <i>All architectures</i><br>
  A buffer overflow has been found in
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=3">compress(3)</a>
  which may be exploitable.
--- 91,98 ----
  <p>
  
  <li><a name="libz"></a>
! <font color="#009000"><strong>019: SECURITY FIX: July 6, 2005</strong></font>
! &nbsp; <i>All architectures</i><br>
  A buffer overflow has been found in
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=3">compress(3)</a>
  which may be exploitable.
***************
*** 100,106 ****
  <p>
  
  <li><a name="sudo"></a>
! <font color="#009000"><strong>018: SECURITY FIX: June 20, 2005</strong></font> &nbsp; <i>All architectures</i><br>
  Due to a race condition in its command pathname handling, a user with
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a>
  privileges may be able to run arbitrary commands if the user's entry
--- 102,109 ----
  <p>
  
  <li><a name="sudo"></a>
! <font color="#009000"><strong>018: SECURITY FIX: June 20, 2005</strong></font>
! &nbsp; <i>All architectures</i><br>
  Due to a race condition in its command pathname handling, a user with
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a>
  privileges may be able to run arbitrary commands if the user's entry
***************
*** 112,118 ****
  <p>
  
  <li><a name="getsockopt"></a>
! <font color="#009000"><strong>017: RELIABILITY FIX: June 15, 2005</strong></font> &nbsp; <i>All architectures</i><br>
  As discovered by Stefan Miltchev calling
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getsockopt&sektion=2">getsockopt(2)</a>
  to get
--- 115,122 ----
  <p>
  
  <li><a name="getsockopt"></a>
! <font color="#009000"><strong>017: RELIABILITY FIX: June 15, 2005</strong></font>
! &nbsp; <i>All architectures</i><br>
  As discovered by Stefan Miltchev calling
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getsockopt&sektion=2">getsockopt(2)</a>
  to get
***************
*** 124,130 ****
  <p>
  
  <li><a name="cvs"></a>
! <font color="#009000"><strong>016: SECURITY FIX: April 28, 2005</strong></font> &nbsp; <i>All architectures</i><br>
  Fix a buffer overflow, memory leaks, and NULL pointer dereference in
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a>
  . None of these issues are known to be exploitable.
--- 128,135 ----
  <p>
  
  <li><a name="cvs"></a>
! <font color="#009000"><strong>016: SECURITY FIX: April 28, 2005</strong></font>
! &nbsp; <i>All architectures</i><br>
  Fix a buffer overflow, memory leaks, and NULL pointer dereference in
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a>
  . None of these issues are known to be exploitable.
***************
*** 136,142 ****
  <p>
  
  <li><a name="tcp"></a>
! <font color="#009000"><strong>015: RELIABILITY FIX: April 4, 2005</strong></font> &nbsp; <i>All architectures</i><br>
  Handle an edge condition in
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcp&sektion=4">tcp(4)</a>
  timestamps.
--- 141,148 ----
  <p>
  
  <li><a name="tcp"></a>
! <font color="#009000"><strong>015: RELIABILITY FIX: April 4, 2005</strong></font>
! &nbsp; <i>All architectures</i><br>
  Handle an edge condition in
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcp&sektion=4">tcp(4)</a>
  timestamps.
***************
*** 146,152 ****
  <p>
  
  <li><a name="telnet"></a>
! <font color="#009000"><strong>014: SECURITY FIX: March 30, 2005</strong></font> &nbsp; <i>All architectures</i><br>
  Due to buffer overflows in
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnet&sektion=1">telnet(1)</a>,
  a malicious server or man-in-the-middle attack could allow execution of
--- 152,159 ----
  <p>
  
  <li><a name="telnet"></a>
! <font color="#009000"><strong>014: SECURITY FIX: March 30, 2005</strong></font>
! &nbsp; <i>All architectures</i><br>
  Due to buffer overflows in
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnet&sektion=1">telnet(1)</a>,
  a malicious server or man-in-the-middle attack could allow execution of
***************
*** 160,166 ****
  <p>
  
  <li><a name="sack"></a>
! <font color="#009000"><strong>013: RELIABILITY FIX: March 30, 2005</strong></font> &nbsp; <i>All architectures</i><br>
  Bugs in the
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcp&sektion=4">tcp(4)</a>
  stack can lead to memory exhaustion or processing of TCP segments with
--- 167,174 ----
  <p>
  
  <li><a name="sack"></a>
! <font color="#009000"><strong>013: RELIABILITY FIX: March 30, 2005</strong></font>
! &nbsp; <i>All architectures</i><br>
  Bugs in the
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcp&sektion=4">tcp(4)</a>
  stack can lead to memory exhaustion or processing of TCP segments with
***************
*** 171,177 ****
  <p>
  
  <li><a name="copy"></a>
! <font color="#009000"><strong>012: SECURITY FIX: March 16, 2005</strong></font> &nbsp; <strong>amd64 only</strong><br>
  More stringent checking should be done in the
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=copy&sektion=9">copy(9)</a>
  functions to prevent their misuse.
--- 179,186 ----
  <p>
  
  <li><a name="copy"></a>
! <font color="#009000"><strong>012: SECURITY FIX: March 16, 2005</strong></font>
! &nbsp; <strong>amd64 only</strong><br>
  More stringent checking should be done in the
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=copy&sektion=9">copy(9)</a>
  functions to prevent their misuse.
***************
*** 181,187 ****
  <p>
  
  <li><a name="locore"></a>
! <font color="#009000"><strong>011: SECURITY FIX: February 28, 2005</strong></font> &nbsp; <strong>i386 only</strong><br>
  More stringent checking should be done in the
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=copy&sektion=9">copy(9)</a>
  functions to prevent their misuse.
--- 190,197 ----
  <p>
  
  <li><a name="locore"></a>
! <font color="#009000"><strong>011: SECURITY FIX: February 28, 2005</strong></font>
! &nbsp; <strong>i386 only</strong><br>
  More stringent checking should be done in the
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=copy&sektion=9">copy(9)</a>
  functions to prevent their misuse.
***************
*** 191,197 ****
  <p>
  
  <li><a name="rtt"></a>
! <font color="#009000"><strong>010: RELIABILITY FIX: January 11, 2005</strong></font> &nbsp; <i>All architectures</i><br>
  A bug in the
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcp&sektion=4">tcp(4)</a>
  stack allows an invalid argument to be used in calculating the TCP
--- 201,208 ----
  <p>
  
  <li><a name="rtt"></a>
! <font color="#009000"><strong>010: RELIABILITY FIX: January 11, 2005</strong></font>
! &nbsp; <i>All architectures</i><br>
  A bug in the
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcp&sektion=4">tcp(4)</a>
  stack allows an invalid argument to be used in calculating the TCP
***************
*** 203,209 ****
  <p>
  
  <li><a name="httpd"></a>
! <font color="#009000"><strong>009: SECURITY FIX: January 12, 2005</strong></font> &nbsp; <i>All architectures</i><br>
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&apropos=0&sektion=8&manpath=OpenBSD+Current&arch=i386&format=html">httpd(8)</a>
  's mod_include module fails to properly validate the length of
  user supplied tag strings prior to copying them to a local buffer,
--- 214,221 ----
  <p>
  
  <li><a name="httpd"></a>
! <font color="#009000"><strong>009: SECURITY FIX: January 12, 2005</strong></font>
! &nbsp; <i>All architectures</i><br>
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&apropos=0&sektion=8&manpath=OpenBSD+Current&arch=i386&format=html">httpd(8)</a>
  's mod_include module fails to properly validate the length of
  user supplied tag strings prior to copying them to a local buffer,
***************
*** 217,223 ****
  <p>
  
  <li><a name="getcwd"></a>
! <font color="#009000"><strong>008: RELIABILITY FIX: January 6, 2005</strong></font> &nbsp; <i>All architectures</i><br>
  The
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getcwd&sektion=3">getcwd(3)</a>
  library function contains a memory management error, which causes failure
--- 229,236 ----
  <p>
  
  <li><a name="getcwd"></a>
! <font color="#009000"><strong>008: RELIABILITY FIX: January 6, 2005</strong></font>
! &nbsp; <i>All architectures</i><br>
  The
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getcwd&sektion=3">getcwd(3)</a>
  library function contains a memory management error, which causes failure
***************
*** 228,234 ****
  <p>
  
  <li><a name="pfkey"></a>
! <font color="#009000"><strong>007: SECURITY FIX: December 14, 2004</strong></font> &nbsp; <i>All architectures</i><br>
  On systems running
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>
  it is possible for a local user to cause kernel memory corruption
--- 241,248 ----
  <p>
  
  <li><a name="pfkey"></a>
! <font color="#009000"><strong>007: SECURITY FIX: December 14, 2004</strong></font>
! &nbsp; <i>All architectures</i><br>
  On systems running
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>
  it is possible for a local user to cause kernel memory corruption
***************
*** 241,247 ****
  <p>
  
  <li><a name="xl"></a>
! <font color="#009000"><strong>006: RELIABILITY FIX: November 21, 2004</strong></font> &nbsp; <i>All architectures</i><br>
  Fix for transmit side breakage on macppc and mbuf leaks with
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&sektion=4">xl(4)</a>.
  <br>
--- 255,262 ----
  <p>
  
  <li><a name="xl"></a>
! <font color="#009000"><strong>006: RELIABILITY FIX: November 21, 2004</strong></font>
! &nbsp; <i>All architectures</i><br>
  Fix for transmit side breakage on macppc and mbuf leaks with
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&sektion=4">xl(4)</a>.
  <br>
***************
*** 250,256 ****
  <p>
  
  <li><a name="isakmpd"></a>
! <font color="#009000"><strong>005: RELIABILITY FIX: November 21, 2004</strong></font> &nbsp; <i>All architectures</i><br>
  Wrong calculation of NAT-D payloads may cause interoperability problems between
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>
  and other ISAKMP/IKE implementations.
--- 265,272 ----
  <p>
  
  <li><a name="isakmpd"></a>
! <font color="#009000"><strong>005: RELIABILITY FIX: November 21, 2004</strong></font>
! &nbsp; <i>All architectures</i><br>
  Wrong calculation of NAT-D payloads may cause interoperability problems between
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>
  and other ISAKMP/IKE implementations.
***************
*** 260,266 ****
  
  <p>
  <li><a name="lynx"></a>
! <font color="#009000"><strong>004: RELIABILITY FIX: November 10, 2004</strong></font> &nbsp; <i>All architectures</i><br>
  Due to a bug in
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lynx&sektion=1">lynx(1)</a>
  it is possible for pages such as
--- 276,283 ----
  
  <p>
  <li><a name="lynx"></a>
! <font color="#009000"><strong>004: RELIABILITY FIX: November 10, 2004</strong></font>
! &nbsp; <i>All architectures</i><br>
  Due to a bug in
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lynx&sektion=1">lynx(1)</a>
  it is possible for pages such as
***************
*** 274,280 ****
  <p>
  
  <li><a name="pppd"></a>
! <font color="#009000"><strong>003: RELIABILITY FIX: November 10, 2004</strong></font> &nbsp; <i>All architectures</i><br>
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppd&sektion=8">pppd(8)</a>
  contains a bug that allows an attacker to crash his own connection, but it cannot
  be used to deny service to other users.
--- 291,298 ----
  <p>
  
  <li><a name="pppd"></a>
! <font color="#009000"><strong>003: RELIABILITY FIX: November 10, 2004</strong></font>
! &nbsp; <i>All architectures</i><br>
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppd&sektion=8">pppd(8)</a>
  contains a bug that allows an attacker to crash his own connection, but it cannot
  be used to deny service to other users.
***************
*** 284,290 ****
  <p>
  
  <li><a name="bind"></a>
! <font color="#009000"><strong>002: RELIABILITY FIX: November 10, 2004</strong></font> &nbsp; <i>All architectures</i><br>
  BIND contains a bug which results in BIND trying to contact nameservers via IPv6, even in
  cases where IPv6 connectivity is non-existent. This results in unnecessary timeouts and
  thus slow DNS queries.
--- 302,309 ----
  <p>
  
  <li><a name="bind"></a>
! <font color="#009000"><strong>002: RELIABILITY FIX: November 10, 2004</strong></font>
! &nbsp; <i>All architectures</i><br>
  BIND contains a bug which results in BIND trying to contact nameservers via IPv6, even in
  cases where IPv6 connectivity is non-existent. This results in unnecessary timeouts and
  thus slow DNS queries.
***************
*** 294,300 ****
  <p>
  
  <li><a name="st"></a>
! <font color="#009000"><strong>001: RELIABILITY FIX: November 10, 2004</strong></font> &nbsp; <i>All architectures</i><br>
  Fix detection of tape blocksize during device open. Corrects problem with
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=restore&sektion=8">restore(8)</a>.
  <br>
--- 313,320 ----
  <p>
  
  <li><a name="st"></a>
! <font color="#009000"><strong>001: RELIABILITY FIX: November 10, 2004</strong></font>
! &nbsp; <i>All architectures</i><br>
  Fix detection of tape blocksize during device open. Corrects problem with
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=restore&sektion=8">restore(8)</a>.
  <br>