===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata37.html,v
retrieving revision 1.40
retrieving revision 1.41
diff -c -r1.40 -r1.41
*** www/errata37.html	2014/03/31 03:12:47	1.40
--- www/errata37.html	2014/03/31 16:02:48	1.41
***************
*** 79,85 ****
  <ul>
  
  <li><a name="xorg"></a>
! <font color="#009000"><strong>013: SECURITY FIX: May 2, 2006</strong></font> &nbsp; <i>All architectures</i><br>
  A security vulnerability has been found in the X.Org server --
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1526">CVE-2006-1526</a>.
  Clients authorized to connect to the X server are able to crash it and to execute
--- 79,86 ----
  <ul>
  
  <li><a name="xorg"></a>
! <font color="#009000"><strong>013: SECURITY FIX: May 2, 2006</strong></font>
! &nbsp; <i>All architectures</i><br>
  A security vulnerability has been found in the X.Org server --
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1526">CVE-2006-1526</a>.
  Clients authorized to connect to the X server are able to crash it and to execute
***************
*** 90,96 ****
  <p>
  
  <li><a name="sendmail"></a>
! <font color="#009000"><strong>012: SECURITY FIX: March 25, 2006</strong></font> &nbsp; <i>All architectures</i><br>
  A race condition has been reported to exist in the handling by sendmail of
  asynchronous signals. A remote attacker may be able to execute arbitrary code with the
  privileges of the user running sendmail, typically root.
--- 91,98 ----
  <p>
  
  <li><a name="sendmail"></a>
! <font color="#009000"><strong>012: SECURITY FIX: March 25, 2006</strong></font>
! &nbsp; <i>All architectures</i><br>
  A race condition has been reported to exist in the handling by sendmail of
  asynchronous signals. A remote attacker may be able to execute arbitrary code with the
  privileges of the user running sendmail, typically root.
***************
*** 100,106 ****
  <p>
  
  <li><a name="ssh"></a>
! <font color="#009000"><strong>011: SECURITY FIX: February 12, 2006</strong></font> &nbsp; <i>All architectures</i><br>
  Josh Bressers has reported a weakness in OpenSSH caused due to the insecure use of the
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=system&amp;sektion=3">system(3)</a>
  function in
--- 102,109 ----
  <p>
  
  <li><a name="ssh"></a>
! <font color="#009000"><strong>011: SECURITY FIX: February 12, 2006</strong></font>
! &nbsp; <i>All architectures</i><br>
  Josh Bressers has reported a weakness in OpenSSH caused due to the insecure use of the
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=system&amp;sektion=3">system(3)</a>
  function in
***************
*** 114,120 ****
  <p>
  
  <li><a name="i386machdep"></a>
! <font color="#009000"><strong>010: RELIABILITY FIX: January 13, 2006</strong></font> &nbsp; <i>i386 architecture</i><br>
  Constrain
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=i386_set_ioperm&amp;arch=i386&amp;sektion=2">i386_set_ioperm(2)</a>
  so even root is blocked from accessing the ioports
--- 117,124 ----
  <p>
  
  <li><a name="i386machdep"></a>
! <font color="#009000"><strong>010: RELIABILITY FIX: January 13, 2006</strong></font>
! &nbsp; <i>i386 architecture</i><br>
  Constrain
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=i386_set_ioperm&amp;arch=i386&amp;sektion=2">i386_set_ioperm(2)</a>
  so even root is blocked from accessing the ioports
***************
*** 125,131 ****
  <p>
  
  <li><a name="i386pmap"></a>
! <font color="#009000"><strong>009: RELIABILITY FIX: January 13, 2006</strong></font> &nbsp; <i>i386 architecture</i><br>
  Change the implementation of i386 W^X so that the "execute line" can move around.
  Before it was limited to being either at 512MB (below which all code normally
  lands) or at the top of the stack. Now the line can float as
--- 129,136 ----
  <p>
  
  <li><a name="i386pmap"></a>
! <font color="#009000"><strong>009: RELIABILITY FIX: January 13, 2006</strong></font>
! &nbsp; <i>i386 architecture</i><br>
  Change the implementation of i386 W^X so that the "execute line" can move around.
  Before it was limited to being either at 512MB (below which all code normally
  lands) or at the top of the stack. Now the line can float as
***************
*** 140,146 ****
  <p>
  
  <li><a name="fd"></a>
! <font color="#009000"><strong>008: SECURITY FIX: January 5, 2006</strong></font> &nbsp; <i>All architectures</i><br>
  Do not allow users to trick suid programs into re-opening files via /dev/fd.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.7/common/008_fd.patch">
--- 145,152 ----
  <p>
  
  <li><a name="fd"></a>
! <font color="#009000"><strong>008: SECURITY FIX: January 5, 2006</strong></font>
! &nbsp; <i>All architectures</i><br>
  Do not allow users to trick suid programs into re-opening files via /dev/fd.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.7/common/008_fd.patch">
***************
*** 148,154 ****
  <p>
  
  <li><a name="perl"></a>
! <font color="#009000"><strong>007: SECURITY FIX: January 5, 2006</strong></font> &nbsp; <i>All architectures</i><br>
  A buffer overflow has been found in the Perl interpreter with the sprintf function which
  may be exploitable under certain conditions.
  <br>
--- 154,161 ----
  <p>
  
  <li><a name="perl"></a>
! <font color="#009000"><strong>007: SECURITY FIX: January 5, 2006</strong></font>
! &nbsp; <i>All architectures</i><br>
  A buffer overflow has been found in the Perl interpreter with the sprintf function which
  may be exploitable under certain conditions.
  <br>
***************
*** 157,163 ****
  <p>
  
  <li><a name="nat-t"></a>
! <font color="#009000"><strong>006: RELIABILITY FIX: November 5, 2005</strong></font> &nbsp; <i>All architectures</i><br>
  Due to wrong advertisement of RFC 3947 compliance interoperability problems with
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>
  may occur.
--- 164,171 ----
  <p>
  
  <li><a name="nat-t"></a>
! <font color="#009000"><strong>006: RELIABILITY FIX: November 5, 2005</strong></font>
! &nbsp; <i>All architectures</i><br>
  Due to wrong advertisement of RFC 3947 compliance interoperability problems with
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>
  may occur.
***************
*** 167,173 ****
  <p>
  
  <li><a name="libz2"></a>
! <font color="#009000"><strong>005: SECURITY FIX: July 21, 2005</strong></font> &nbsp; <i>All architectures</i><br>
  A buffer overflow has been found in
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=3">compress(3)</a>
  which may be exploitable.<br>
--- 175,182 ----
  <p>
  
  <li><a name="libz2"></a>
! <font color="#009000"><strong>005: SECURITY FIX: July 21, 2005</strong></font>
! &nbsp; <i>All architectures</i><br>
  A buffer overflow has been found in
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=3">compress(3)</a>
  which may be exploitable.<br>
***************
*** 178,184 ****
  <p>
  
  <li><a name="libz"></a>
! <font color="#009000"><strong>004: SECURITY FIX: July 6, 2005</strong></font> &nbsp; <i>All architectures</i><br>
  A buffer overflow has been found in
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=3">compress(3)</a>
  which may be exploitable.
--- 187,194 ----
  <p>
  
  <li><a name="libz"></a>
! <font color="#009000"><strong>004: SECURITY FIX: July 6, 2005</strong></font>
! &nbsp; <i>All architectures</i><br>
  A buffer overflow has been found in
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=3">compress(3)</a>
  which may be exploitable.
***************
*** 188,194 ****
  <p>
  
  <li><a name="sudo"></a>
! <font color="#009000"><strong>003: SECURITY FIX: June 20, 2005</strong></font> &nbsp; <i>All architectures</i><br>
  Due to a race condition in its command pathname handling, a user with
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a>
  privileges may be able to run arbitrary commands if the user's entry
--- 198,205 ----
  <p>
  
  <li><a name="sudo"></a>
! <font color="#009000"><strong>003: SECURITY FIX: June 20, 2005</strong></font>
! &nbsp; <i>All architectures</i><br>
  Due to a race condition in its command pathname handling, a user with
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a>
  privileges may be able to run arbitrary commands if the user's entry
***************
*** 200,206 ****
  <p>
  
  <li><a name="getsockopt"></a>
! <font color="#009000"><strong>002: RELIABILITY FIX: June 15, 2005</strong></font> &nbsp; <i>All architectures</i><br>
  As discovered by Stefan Miltchev calling
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getsockopt&sektion=2">getsockopt(2)</a>
  to get
--- 211,218 ----
  <p>
  
  <li><a name="getsockopt"></a>
! <font color="#009000"><strong>002: RELIABILITY FIX: June 15, 2005</strong></font>
! &nbsp; <i>All architectures</i><br>
  As discovered by Stefan Miltchev calling
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getsockopt&sektion=2">getsockopt(2)</a>
  to get
***************
*** 212,218 ****
  <p>
  
  <li><a name="cvs"></a>
! <font color="#009000"><strong>001: SECURITY FIX: June 7, 2005</strong></font> &nbsp; <i>All architectures</i><br>
  
  Fix a buffer overflow, memory leaks, and NULL pointer dereference in
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a>
--- 224,231 ----
  <p>
  
  <li><a name="cvs"></a>
! <font color="#009000"><strong>001: SECURITY FIX: June 7, 2005</strong></font>
! &nbsp; <i>All architectures</i><br>
  
  Fix a buffer overflow, memory leaks, and NULL pointer dereference in
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a>