OpenBSD 3.9 Errata

=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/errata39.html,v retrieving revision 1.69 retrieving revision 1.70 diff -u -r1.69 -r1.70 --- www/errata39.html 2019/04/02 12:46:57 1.69 +++ www/errata39.html 2019/05/27 22:55:20 1.70 @@ -1,25 +1,23 @@ - - - + + + + OpenBSD 3.9 Errata - - - -

+

-OpenBSD -3.9 Errata +OpenBSD +3.9 Errata

@@ -88,7 +86,7 @@

-023: STABILITY FIX: April 26, 2007 +023: STABILITY FIX: April 26, 2007 PowerPC
An unhandled AltiVec assist exception can cause a kernel panic.
@@ -96,7 +94,7 @@
-022: SECURITY FIX: April 23, 2007 +022: SECURITY FIX: April 23, 2007 All architectures
IPv6 type 0 route headers can be used to mount a DoS attack against hosts and networks. This is a design flaw in IPv6 and not a bug in @@ -106,7 +104,7 @@
-021: SECURITY FIX: April 4, 2007 +021: SECURITY FIX: April 4, 2007 All architectures
Multiple vulnerabilities have been discovered in X.Org.
XC-MISC extension ProcXCMiscGetXIDList memory corruption vulnerability, @@ -124,9 +122,9 @@
-020: SECURITY FIX: March 7, 2007 +020: SECURITY FIX: March 7, 2007 All architectures
-2nd revision, March 17, 2007
+2nd revision, March 17, 2007
Incorrect mbuf handling for ICMP6 packets.
Using pf(4) @@ -139,7 +137,7 @@
-019: INTEROPERABILITY FIX: February 4, 2007 +019: INTEROPERABILITY FIX: February 4, 2007 All architectures
A US daylight saving time rules change takes effect in 2007.
@@ -148,7 +146,7 @@
-018: RELIABILITY FIX: January 16, 2007 +018: RELIABILITY FIX: January 16, 2007 All architectures
Under some circumstances, processing an ICMP6 echo request would cause the kernel to enter an infinite loop. @@ -158,14 +156,14 @@
-017: SECURITY FIX: January 3, 2007 +017: SECURITY FIX: January 3, 2007 i386 only
Insufficient validation in vga(4) may allow an attacker to gain root privileges if the kernel is compiled with -option PCIAGP +option PCIAGP and the actual device is not an AGP device. -The PCIAGP option is present by default on i386 +The PCIAGP option is present by default on i386 kernels only.
@@ -173,7 +171,7 @@
-016: SECURITY FIX: November 19, 2006 +016: SECURITY FIX: November 19, 2006 All architectures
The ELF ld.so(1) @@ -186,7 +184,7 @@
-015: SECURITY FIX: October 12, 2006 +015: SECURITY FIX: October 12, 2006 All architectures
Fix 2 security bugs found in OpenSSH. A pre-authentication denial of service (found by Tavis Ormandy) that would cause @@ -202,7 +200,7 @@
-014: SECURITY FIX: October 7, 2006 +014: SECURITY FIX: October 7, 2006 All architectures
Fix for an integer overflow in systrace(4)'s @@ -215,7 +213,7 @@
-013: SECURITY FIX: October 7, 2006 +013: SECURITY FIX: October 7, 2006 All architectures
Several problems have been found in OpenSSL. While parsing certain invalid ASN.1 structures an error condition is mishandled, possibly resulting in an infinite @@ -233,7 +231,7 @@
-012: SECURITY FIX: October 7, 2006 +012: SECURITY FIX: October 7, 2006 All architectures
httpd(8) does not sanitize the Expect header from an HTTP request when it is @@ -246,7 +244,7 @@
-011: SECURITY FIX: September 8, 2006 +011: SECURITY FIX: September 8, 2006 All architectures
Due to incorrect PKCS#1 v1.5 padding validation in OpenSSL, it is possible for an attacker to construct an invalid signature which OpenSSL would accept as a @@ -258,7 +256,7 @@
-010: SECURITY FIX: September 8, 2006 +010: SECURITY FIX: September 8, 2006 All architectures
Two Denial of Service issues have been found with BIND. An attacker who can perform recursive lookups on a DNS server and is able @@ -275,7 +273,7 @@
-009: SECURITY FIX: September 2, 2006 +009: SECURITY FIX: September 2, 2006 All architectures
Due to the failure to correctly validate LCP configuration option lengths, it is possible for an attacker to send LCP packets via an @@ -288,7 +286,7 @@
-008: SECURITY FIX: August 25, 2006 +008: SECURITY FIX: August 25, 2006 All architectures
A problem in isakmpd(8) @@ -303,7 +301,7 @@
-007: SECURITY FIX: August 25, 2006 +007: SECURITY FIX: August 25, 2006 All architectures
It is possible to cause the kernel to panic when more than the default number of sempahores have been allocated. @@ -313,7 +311,7 @@
-006: SECURITY FIX: August 25, 2006 +006: SECURITY FIX: August 25, 2006 All architectures
Due to an off-by-one error in dhcpd(8), @@ -327,7 +325,7 @@
-005: SECURITY FIX: August 25, 2006 +005: SECURITY FIX: August 25, 2006 All architectures
A potential denial of service problem has been found in sendmail. A message with really long header lines could trigger a use-after-free bug causing @@ -338,7 +336,7 @@
-004: SECURITY FIX: July 30, 2006 +004: SECURITY FIX: July 30, 2006 All architectures
httpd(8)'s mod_rewrite has a potentially exploitable off-by-one buffer overflow. @@ -352,7 +350,7 @@
-003: SECURITY FIX: June 15, 2006 +003: SECURITY FIX: June 15, 2006 All architectures
A potential denial of service problem has been found in sendmail. A malformed MIME message could trigger excessive recursion which will lead to stack exhaustion. @@ -366,7 +364,7 @@
-002: SECURITY FIX: May 2, 2006 +002: SECURITY FIX: May 2, 2006 All architectures
A security vulnerability has been found in the X.Org server -- CVE-2006-1526. @@ -378,7 +376,7 @@
-001: SECURITY FIX: March 25, 2006 +001: SECURITY FIX: March 25, 2006 All architectures
A race condition has been reported to exist in the handling by sendmail of asynchronous signals. A remote attacker may be able to execute arbitrary code with the @@ -392,6 +390,3 @@

- - -