| version 1.34, 2014/03/31 03:12:47 |
version 1.35, 2014/03/31 16:02:48 |
|
|
| <ul> |
<ul> |
| |
|
| <li><a name="libz2"></a> |
<li><a name="libz2"></a> |
| <font color="#009000"><strong>020: SECURITY FIX: July 21, 2005</strong></font> <i>All architectures</i><br> |
<font color="#009000"><strong>020: SECURITY FIX: July 21, 2005</strong></font> |
| |
<i>All architectures</i><br> |
| A buffer overflow has been found in |
A buffer overflow has been found in |
| <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=3">compress(3)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=3">compress(3)</a> |
| which may be exploitable.<br> |
which may be exploitable.<br> |
|
|
| <p> |
<p> |
| |
|
| <li><a name="libz"></a> |
<li><a name="libz"></a> |
| <font color="#009000"><strong>019: SECURITY FIX: July 6, 2005</strong></font> <i>All architectures</i><br> |
<font color="#009000"><strong>019: SECURITY FIX: July 6, 2005</strong></font> |
| |
<i>All architectures</i><br> |
| A buffer overflow has been found in |
A buffer overflow has been found in |
| <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=3">compress(3)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=3">compress(3)</a> |
| which may be exploitable. |
which may be exploitable. |
|
|
| <p> |
<p> |
| |
|
| <li><a name="sudo"></a> |
<li><a name="sudo"></a> |
| <font color="#009000"><strong>018: SECURITY FIX: June 20, 2005</strong></font> <i>All architectures</i><br> |
<font color="#009000"><strong>018: SECURITY FIX: June 20, 2005</strong></font> |
| |
<i>All architectures</i><br> |
| Due to a race condition in its command pathname handling, a user with |
Due to a race condition in its command pathname handling, a user with |
| <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a> |
| privileges may be able to run arbitrary commands if the user's entry |
privileges may be able to run arbitrary commands if the user's entry |
|
|
| <p> |
<p> |
| |
|
| <li><a name="getsockopt"></a> |
<li><a name="getsockopt"></a> |
| <font color="#009000"><strong>017: RELIABILITY FIX: June 15, 2005</strong></font> <i>All architectures</i><br> |
<font color="#009000"><strong>017: RELIABILITY FIX: June 15, 2005</strong></font> |
| |
<i>All architectures</i><br> |
| As discovered by Stefan Miltchev calling |
As discovered by Stefan Miltchev calling |
| <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getsockopt&sektion=2">getsockopt(2)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getsockopt&sektion=2">getsockopt(2)</a> |
| to get |
to get |
|
|
| <p> |
<p> |
| |
|
| <li><a name="cvs"></a> |
<li><a name="cvs"></a> |
| <font color="#009000"><strong>016: SECURITY FIX: April 28, 2005</strong></font> <i>All architectures</i><br> |
<font color="#009000"><strong>016: SECURITY FIX: April 28, 2005</strong></font> |
| |
<i>All architectures</i><br> |
| Fix a buffer overflow, memory leaks, and NULL pointer dereference in |
Fix a buffer overflow, memory leaks, and NULL pointer dereference in |
| <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a> |
| . None of these issues are known to be exploitable. |
. None of these issues are known to be exploitable. |
|
|
| <p> |
<p> |
| |
|
| <li><a name="tcp"></a> |
<li><a name="tcp"></a> |
| <font color="#009000"><strong>015: RELIABILITY FIX: April 4, 2005</strong></font> <i>All architectures</i><br> |
<font color="#009000"><strong>015: RELIABILITY FIX: April 4, 2005</strong></font> |
| |
<i>All architectures</i><br> |
| Handle an edge condition in |
Handle an edge condition in |
| <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcp&sektion=4">tcp(4)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcp&sektion=4">tcp(4)</a> |
| timestamps. |
timestamps. |
|
|
| <p> |
<p> |
| |
|
| <li><a name="telnet"></a> |
<li><a name="telnet"></a> |
| <font color="#009000"><strong>014: SECURITY FIX: March 30, 2005</strong></font> <i>All architectures</i><br> |
<font color="#009000"><strong>014: SECURITY FIX: March 30, 2005</strong></font> |
| |
<i>All architectures</i><br> |
| Due to buffer overflows in |
Due to buffer overflows in |
| <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnet&sektion=1">telnet(1)</a>, |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnet&sektion=1">telnet(1)</a>, |
| a malicious server or man-in-the-middle attack could allow execution of |
a malicious server or man-in-the-middle attack could allow execution of |
|
|
| <p> |
<p> |
| |
|
| <li><a name="sack"></a> |
<li><a name="sack"></a> |
| <font color="#009000"><strong>013: RELIABILITY FIX: March 30, 2005</strong></font> <i>All architectures</i><br> |
<font color="#009000"><strong>013: RELIABILITY FIX: March 30, 2005</strong></font> |
| |
<i>All architectures</i><br> |
| Bugs in the |
Bugs in the |
| <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcp&sektion=4">tcp(4)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcp&sektion=4">tcp(4)</a> |
| stack can lead to memory exhaustion or processing of TCP segments with |
stack can lead to memory exhaustion or processing of TCP segments with |
|
|
| <p> |
<p> |
| |
|
| <li><a name="copy"></a> |
<li><a name="copy"></a> |
| <font color="#009000"><strong>012: SECURITY FIX: March 16, 2005</strong></font> <strong>amd64 only</strong><br> |
<font color="#009000"><strong>012: SECURITY FIX: March 16, 2005</strong></font> |
| |
<strong>amd64 only</strong><br> |
| More stringent checking should be done in the |
More stringent checking should be done in the |
| <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=copy&sektion=9">copy(9)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=copy&sektion=9">copy(9)</a> |
| functions to prevent their misuse. |
functions to prevent their misuse. |
|
|
| <p> |
<p> |
| |
|
| <li><a name="locore"></a> |
<li><a name="locore"></a> |
| <font color="#009000"><strong>011: SECURITY FIX: February 28, 2005</strong></font> <strong>i386 only</strong><br> |
<font color="#009000"><strong>011: SECURITY FIX: February 28, 2005</strong></font> |
| |
<strong>i386 only</strong><br> |
| More stringent checking should be done in the |
More stringent checking should be done in the |
| <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=copy&sektion=9">copy(9)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=copy&sektion=9">copy(9)</a> |
| functions to prevent their misuse. |
functions to prevent their misuse. |
|
|
| <p> |
<p> |
| |
|
| <li><a name="rtt"></a> |
<li><a name="rtt"></a> |
| <font color="#009000"><strong>010: RELIABILITY FIX: January 11, 2005</strong></font> <i>All architectures</i><br> |
<font color="#009000"><strong>010: RELIABILITY FIX: January 11, 2005</strong></font> |
| |
<i>All architectures</i><br> |
| A bug in the |
A bug in the |
| <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcp&sektion=4">tcp(4)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcp&sektion=4">tcp(4)</a> |
| stack allows an invalid argument to be used in calculating the TCP |
stack allows an invalid argument to be used in calculating the TCP |
|
|
| <p> |
<p> |
| |
|
| <li><a name="httpd"></a> |
<li><a name="httpd"></a> |
| <font color="#009000"><strong>009: SECURITY FIX: January 12, 2005</strong></font> <i>All architectures</i><br> |
<font color="#009000"><strong>009: SECURITY FIX: January 12, 2005</strong></font> |
| |
<i>All architectures</i><br> |
| <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&apropos=0&sektion=8&manpath=OpenBSD+Current&arch=i386&format=html">httpd(8)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&apropos=0&sektion=8&manpath=OpenBSD+Current&arch=i386&format=html">httpd(8)</a> |
| 's mod_include module fails to properly validate the length of |
's mod_include module fails to properly validate the length of |
| user supplied tag strings prior to copying them to a local buffer, |
user supplied tag strings prior to copying them to a local buffer, |
|
|
| <p> |
<p> |
| |
|
| <li><a name="getcwd"></a> |
<li><a name="getcwd"></a> |
| <font color="#009000"><strong>008: RELIABILITY FIX: January 6, 2005</strong></font> <i>All architectures</i><br> |
<font color="#009000"><strong>008: RELIABILITY FIX: January 6, 2005</strong></font> |
| |
<i>All architectures</i><br> |
| The |
The |
| <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getcwd&sektion=3">getcwd(3)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getcwd&sektion=3">getcwd(3)</a> |
| library function contains a memory management error, which causes failure |
library function contains a memory management error, which causes failure |
|
|
| <p> |
<p> |
| |
|
| <li><a name="pfkey"></a> |
<li><a name="pfkey"></a> |
| <font color="#009000"><strong>007: SECURITY FIX: December 14, 2004</strong></font> <i>All architectures</i><br> |
<font color="#009000"><strong>007: SECURITY FIX: December 14, 2004</strong></font> |
| |
<i>All architectures</i><br> |
| On systems running |
On systems running |
| <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> |
| it is possible for a local user to cause kernel memory corruption |
it is possible for a local user to cause kernel memory corruption |
|
|
| <p> |
<p> |
| |
|
| <li><a name="xl"></a> |
<li><a name="xl"></a> |
| <font color="#009000"><strong>006: RELIABILITY FIX: November 21, 2004</strong></font> <i>All architectures</i><br> |
<font color="#009000"><strong>006: RELIABILITY FIX: November 21, 2004</strong></font> |
| |
<i>All architectures</i><br> |
| Fix for transmit side breakage on macppc and mbuf leaks with |
Fix for transmit side breakage on macppc and mbuf leaks with |
| <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&sektion=4">xl(4)</a>. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&sektion=4">xl(4)</a>. |
| <br> |
<br> |
|
|
| <p> |
<p> |
| |
|
| <li><a name="isakmpd"></a> |
<li><a name="isakmpd"></a> |
| <font color="#009000"><strong>005: RELIABILITY FIX: November 21, 2004</strong></font> <i>All architectures</i><br> |
<font color="#009000"><strong>005: RELIABILITY FIX: November 21, 2004</strong></font> |
| |
<i>All architectures</i><br> |
| Wrong calculation of NAT-D payloads may cause interoperability problems between |
Wrong calculation of NAT-D payloads may cause interoperability problems between |
| <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> |
| and other ISAKMP/IKE implementations. |
and other ISAKMP/IKE implementations. |
|
|
| |
|
| <p> |
<p> |
| <li><a name="lynx"></a> |
<li><a name="lynx"></a> |
| <font color="#009000"><strong>004: RELIABILITY FIX: November 10, 2004</strong></font> <i>All architectures</i><br> |
<font color="#009000"><strong>004: RELIABILITY FIX: November 10, 2004</strong></font> |
| |
<i>All architectures</i><br> |
| Due to a bug in |
Due to a bug in |
| <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lynx&sektion=1">lynx(1)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lynx&sektion=1">lynx(1)</a> |
| it is possible for pages such as |
it is possible for pages such as |
|
|
| <p> |
<p> |
| |
|
| <li><a name="pppd"></a> |
<li><a name="pppd"></a> |
| <font color="#009000"><strong>003: RELIABILITY FIX: November 10, 2004</strong></font> <i>All architectures</i><br> |
<font color="#009000"><strong>003: RELIABILITY FIX: November 10, 2004</strong></font> |
| |
<i>All architectures</i><br> |
| <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppd&sektion=8">pppd(8)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppd&sektion=8">pppd(8)</a> |
| contains a bug that allows an attacker to crash his own connection, but it cannot |
contains a bug that allows an attacker to crash his own connection, but it cannot |
| be used to deny service to other users. |
be used to deny service to other users. |
|
|
| <p> |
<p> |
| |
|
| <li><a name="bind"></a> |
<li><a name="bind"></a> |
| <font color="#009000"><strong>002: RELIABILITY FIX: November 10, 2004</strong></font> <i>All architectures</i><br> |
<font color="#009000"><strong>002: RELIABILITY FIX: November 10, 2004</strong></font> |
| |
<i>All architectures</i><br> |
| BIND contains a bug which results in BIND trying to contact nameservers via IPv6, even in |
BIND contains a bug which results in BIND trying to contact nameservers via IPv6, even in |
| cases where IPv6 connectivity is non-existent. This results in unnecessary timeouts and |
cases where IPv6 connectivity is non-existent. This results in unnecessary timeouts and |
| thus slow DNS queries. |
thus slow DNS queries. |
|
|
| <p> |
<p> |
| |
|
| <li><a name="st"></a> |
<li><a name="st"></a> |
| <font color="#009000"><strong>001: RELIABILITY FIX: November 10, 2004</strong></font> <i>All architectures</i><br> |
<font color="#009000"><strong>001: RELIABILITY FIX: November 10, 2004</strong></font> |
| |
<i>All architectures</i><br> |
| Fix detection of tape blocksize during device open. Corrects problem with |
Fix detection of tape blocksize during device open. Corrects problem with |
| <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=restore&sektion=8">restore(8)</a>. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=restore&sektion=8">restore(8)</a>. |
| <br> |
<br> |
![[BACK]](/icons/back.gif){kind=icon}
Return to errata36.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www