===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata38.html,v
retrieving revision 1.47
retrieving revision 1.48
diff -c -r1.47 -r1.48
*** www/errata38.html	2014/10/02 14:34:45	1.47
--- www/errata38.html	2015/02/14 04:36:51	1.48
***************
*** 83,89 ****
  
  <ul>
  
! <li><a name="ssh2"></a>
  <font color="#009000"><strong>020: SECURITY FIX: October 12, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Fix 2 security bugs found in OpenSSH. A pre-authentication denial of service (found
--- 83,89 ----
  
  <ul>
  
! <li id="ssh2">
  <font color="#009000"><strong>020: SECURITY FIX: October 12, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Fix 2 security bugs found in OpenSSH. A pre-authentication denial of service (found
***************
*** 99,105 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="systrace"></a>
  <font color="#009000"><strong>019: SECURITY FIX: October 7, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Fix for an integer overflow in
--- 99,105 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="systrace">
  <font color="#009000"><strong>019: SECURITY FIX: October 7, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Fix for an integer overflow in
***************
*** 112,118 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="openssl2"></a>
  <font color="#009000"><strong>018: SECURITY FIX: October 7, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Several problems have been found in OpenSSL. While parsing certain invalid ASN.1
--- 112,118 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="openssl2">
  <font color="#009000"><strong>018: SECURITY FIX: October 7, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Several problems have been found in OpenSSL. While parsing certain invalid ASN.1
***************
*** 130,136 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="httpd2"></a>
  <font color="#009000"><strong>017: SECURITY FIX: October 7, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&amp;sektion=8">httpd(8)</a>
--- 130,136 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="httpd2">
  <font color="#009000"><strong>017: SECURITY FIX: October 7, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&amp;sektion=8">httpd(8)</a>
***************
*** 143,149 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="openssl"></a>
  <font color="#009000"><strong>016: SECURITY FIX: September 8, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Due to incorrect PKCS#1 v1.5 padding validation in OpenSSL, it is possible for
--- 143,149 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="openssl">
  <font color="#009000"><strong>016: SECURITY FIX: September 8, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Due to incorrect PKCS#1 v1.5 padding validation in OpenSSL, it is possible for
***************
*** 155,161 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="bind"></a>
  <font color="#009000"><strong>015: SECURITY FIX: September 8, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Two Denial of Service issues have been found with BIND.
--- 155,161 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="bind">
  <font color="#009000"><strong>015: SECURITY FIX: September 8, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Two Denial of Service issues have been found with BIND.
***************
*** 172,178 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="sppp"></a>
  <font color="#009000"><strong>014: SECURITY FIX: September 2, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Due to the failure to correctly validate LCP configuration option lengths,
--- 172,178 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="sppp">
  <font color="#009000"><strong>014: SECURITY FIX: September 2, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Due to the failure to correctly validate LCP configuration option lengths,
***************
*** 185,191 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="isakmpd"></a>
  <font color="#009000"><strong>013: SECURITY FIX: August 25, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  A problem in
--- 185,191 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="isakmpd">
  <font color="#009000"><strong>013: SECURITY FIX: August 25, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  A problem in
***************
*** 200,206 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="sem"></a>
  <font color="#009000"><strong>012: SECURITY FIX: August 25, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  It is possible to cause the kernel to panic when more than the default number of
--- 200,206 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="sem">
  <font color="#009000"><strong>012: SECURITY FIX: August 25, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  It is possible to cause the kernel to panic when more than the default number of
***************
*** 210,216 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="dhcpd"></a>
  <font color="#009000"><strong>011: SECURITY FIX: August 25, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Due to an off-by-one error in
--- 210,216 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="dhcpd">
  <font color="#009000"><strong>011: SECURITY FIX: August 25, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Due to an off-by-one error in
***************
*** 224,230 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="sendmail3"></a>
  <font color="#009000"><strong>010: SECURITY FIX: August 25, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  A potential denial of service problem has been found in sendmail. A message
--- 224,230 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="sendmail3">
  <font color="#009000"><strong>010: SECURITY FIX: August 25, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  A potential denial of service problem has been found in sendmail. A message
***************
*** 235,241 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="httpd"></a>
  <font color="#009000"><strong>009: SECURITY FIX: July 30, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&amp;sektion=8">httpd(8)</a>'s
--- 235,241 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="httpd">
  <font color="#009000"><strong>009: SECURITY FIX: July 30, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&amp;sektion=8">httpd(8)</a>'s
***************
*** 249,255 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="sendmail2"></a>
  <font color="#009000"><strong>008: SECURITY FIX: June 15, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  A potential denial of service problem has been found in sendmail. A malformed MIME
--- 249,255 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="sendmail2">
  <font color="#009000"><strong>008: SECURITY FIX: June 15, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  A potential denial of service problem has been found in sendmail. A malformed MIME
***************
*** 263,269 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="xorg"></a>
  <font color="#009000"><strong>007: SECURITY FIX: May 2, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  A security vulnerability has been found in the X.Org server --
--- 263,269 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="xorg">
  <font color="#009000"><strong>007: SECURITY FIX: May 2, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  A security vulnerability has been found in the X.Org server --
***************
*** 275,281 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="sendmail"></a>
  <font color="#009000"><strong>006: SECURITY FIX: March 25, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  A race condition has been reported to exist in the handling by sendmail of
--- 275,281 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="sendmail">
  <font color="#009000"><strong>006: SECURITY FIX: March 25, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  A race condition has been reported to exist in the handling by sendmail of
***************
*** 286,292 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="ssh"></a>
  <font color="#009000"><strong>005: SECURITY FIX: February 12, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Josh Bressers has reported a weakness in OpenSSH caused due to the insecure use of the
--- 286,292 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="ssh">
  <font color="#009000"><strong>005: SECURITY FIX: February 12, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Josh Bressers has reported a weakness in OpenSSH caused due to the insecure use of the
***************
*** 301,307 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="i386machdep"></a>
  <font color="#009000"><strong>004: RELIABILITY FIX: January 13, 2006</strong></font>
  &nbsp; <i>i386 architecture</i><br>
  Constrain
--- 301,307 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="i386machdep">
  <font color="#009000"><strong>004: RELIABILITY FIX: January 13, 2006</strong></font>
  &nbsp; <i>i386 architecture</i><br>
  Constrain
***************
*** 313,319 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="i386pmap"></a>
  <font color="#009000"><strong>003: RELIABILITY FIX: January 13, 2006</strong></font>
  &nbsp; <i>i386 architecture</i><br>
  Change the implementation of i386 W^X so that the "execute line" can move around.
--- 313,319 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="i386pmap">
  <font color="#009000"><strong>003: RELIABILITY FIX: January 13, 2006</strong></font>
  &nbsp; <i>i386 architecture</i><br>
  Change the implementation of i386 W^X so that the "execute line" can move around.
***************
*** 329,335 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="fd"></a>
  <font color="#009000"><strong>002: SECURITY FIX: January 5, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Do not allow users to trick suid programs into re-opening files via /dev/fd.
--- 329,335 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="fd">
  <font color="#009000"><strong>002: SECURITY FIX: January 5, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Do not allow users to trick suid programs into re-opening files via /dev/fd.
***************
*** 338,344 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="perl"></a>
  <font color="#009000"><strong>001: SECURITY FIX: January 5, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  A buffer overflow has been found in the Perl interpreter with the sprintf function which
--- 338,344 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="perl">
  <font color="#009000"><strong>001: SECURITY FIX: January 5, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  A buffer overflow has been found in the Perl interpreter with the sprintf function which