===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata40.html,v
retrieving revision 1.28
retrieving revision 1.29
diff -c -r1.28 -r1.29
*** www/errata40.html	2010/03/08 21:53:37	1.28
--- www/errata40.html	2010/07/08 19:00:07	1.29
***************
*** 54,60 ****
  <br>
  <hr>
  
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0.tar.gz">
  You can also fetch a tar.gz file containing all the following patches</a>.
  This file is updated once a day.
  
--- 54,60 ----
  <br>
  <hr>
  
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0.tar.gz">
  You can also fetch a tar.gz file containing all the following patches</a>.
  This file is updated once a day.
  
***************
*** 91,97 ****
  <font color="#009000"><strong>017: SECURITY FIX: October 10, 2007</strong></font> &nbsp; <i>All architectures</i><br>
  The SSL_get_shared_ciphers() function in OpenSSL contains an off-by-one overflow.
  <br>
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/017_openssl.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
--- 91,97 ----
  <font color="#009000"><strong>017: SECURITY FIX: October 10, 2007</strong></font> &nbsp; <i>All architectures</i><br>
  The SSL_get_shared_ciphers() function in OpenSSL contains an off-by-one overflow.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/017_openssl.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
***************
*** 101,128 ****
  A DHCP client that claimed to require a maximum message size less than
  the minimum IP MTU could cause dhcpd(8) to overwrite stack memory.
  <br>
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/016_dhcpd.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
  <li><a name="015_file"></a>
  <font color="#009000"><strong>015: SECURITY FIX: July 9, 2007</strong></font> &nbsp; <i>All Architectures</i><br>
  Fix possible heap overflow in file(1), aka CVE-2007-1536.<br>
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/015_file.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
  <li><a name="014_xorg"></a>
  <font color="#009000"><strong>014: STABILITY FIX: May 9, 2007</strong></font> &nbsp; <i>All Architectures</i><br>
  A malicious client can cause a division by zero.<br>
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/014_xorg.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
  <li><a name="013_altivec"></a>
  <font color="#009000"><strong>013: STABILITY FIX: April 26, 2007</strong></font> &nbsp; <i>PowerPC</i><br>
  An unhandled AltiVec assist exception can cause a kernel panic.<br>
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0/macppc/013_altivec.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
--- 101,128 ----
  A DHCP client that claimed to require a maximum message size less than
  the minimum IP MTU could cause dhcpd(8) to overwrite stack memory.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/016_dhcpd.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
  <li><a name="015_file"></a>
  <font color="#009000"><strong>015: SECURITY FIX: July 9, 2007</strong></font> &nbsp; <i>All Architectures</i><br>
  Fix possible heap overflow in file(1), aka CVE-2007-1536.<br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/015_file.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
  <li><a name="014_xorg"></a>
  <font color="#009000"><strong>014: STABILITY FIX: May 9, 2007</strong></font> &nbsp; <i>All Architectures</i><br>
  A malicious client can cause a division by zero.<br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/014_xorg.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
  <li><a name="013_altivec"></a>
  <font color="#009000"><strong>013: STABILITY FIX: April 26, 2007</strong></font> &nbsp; <i>PowerPC</i><br>
  An unhandled AltiVec assist exception can cause a kernel panic.<br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/macppc/013_altivec.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
***************
*** 131,137 ****
  IPv6 type 0 route headers can be used to mount a DoS attack against
  hosts and networks.  This is a design flaw in IPv6 and not a bug in
  OpenBSD.<br>
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/012_route6.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
--- 131,137 ----
  IPv6 type 0 route headers can be used to mount a DoS attack against
  hosts and networks.  This is a design flaw in IPv6 and not a bug in
  OpenBSD.<br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/012_route6.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
***************
*** 148,154 ****
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1352">CVE-2007-1352</a>,
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1667">CVE-2007-1667</a>.
  <br>
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/011_xorg.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
--- 148,154 ----
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1352">CVE-2007-1352</a>,
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1667">CVE-2007-1667</a>.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/011_xorg.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
***************
*** 162,168 ****
  can be installed.<br>
  Use "block in inet6" in /etc/pf.conf
  <br>
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/010_m_dup1.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
--- 162,168 ----
  can be installed.<br>
  Use "block in inet6" in /etc/pf.conf
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/010_m_dup1.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
***************
*** 170,176 ****
  <font color="#009000"><strong>009: INTEROPERABILITY FIX: February 4, 2007</strong></font> &nbsp; <i>All architectures</i><br>
  A US daylight saving time rules change takes effect in 2007.
  <br>
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/009_timezone.patch">
  A source code patch exists which syncs the timezone data files with tzdata2007a</a>.<br>
  <p>
  
--- 170,176 ----
  <font color="#009000"><strong>009: INTEROPERABILITY FIX: February 4, 2007</strong></font> &nbsp; <i>All architectures</i><br>
  A US daylight saving time rules change takes effect in 2007.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/009_timezone.patch">
  A source code patch exists which syncs the timezone data files with tzdata2007a</a>.<br>
  <p>
  
***************
*** 179,185 ****
  Under some circumstances, processing an ICMP6 echo request would cause
  the kernel to enter an infinite loop.
  <br>
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/008_icmp6.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
--- 179,185 ----
  Under some circumstances, processing an ICMP6 echo request would cause
  the kernel to enter an infinite loop.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/008_icmp6.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
***************
*** 194,200 ****
  The <tt>PCIAGP</tt> option is present by default on i386
  kernels only.
  <br>
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0/i386/007_agp.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
--- 194,200 ----
  The <tt>PCIAGP</tt> option is present by default on i386
  kernels only.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/i386/007_agp.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
***************
*** 206,214 ****
  them from a <a href="ftp.html">mirror</a>.
  <br>
  The archives have been corrected. The correct MD5 of
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/4.0/ports.tar.gz">
  ports.tar.gz</a> is eff352b4382a7fb7ffce1e8b37e9eb56, and for
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/4.0/src.tar.gz">
  src.tar.gz</a> it is b8d7a0dc6f3d27a5377a23d69c40688e.
  <br>
  <p>
--- 206,214 ----
  them from a <a href="ftp.html">mirror</a>.
  <br>
  The archives have been corrected. The correct MD5 of
! <a href="http://ftp.openbsd.org/pub/OpenBSD/4.0/ports.tar.gz">
  ports.tar.gz</a> is eff352b4382a7fb7ffce1e8b37e9eb56, and for
! <a href="http://ftp.openbsd.org/pub/OpenBSD/4.0/src.tar.gz">
  src.tar.gz</a> it is b8d7a0dc6f3d27a5377a23d69c40688e.
  <br>
  <p>
***************
*** 221,227 ****
  problem in cases we have not found yet.  This patch applies to all ELF-based
  systems (m68k, m88k, and vax are a.out-based systems).
  <br>
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/005_ldso.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
--- 221,227 ----
  problem in cases we have not found yet.  This patch applies to all ELF-based
  systems (m68k, m88k, and vax are a.out-based systems).
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/005_ldso.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
***************
*** 234,240 ****
  volumes will not be properly marked as being clean and fsck will be run for the subsequent
  boot up.
  <br>
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/004_arc.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
--- 234,240 ----
  volumes will not be properly marked as being clean and fsck will be run for the subsequent
  boot up.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/004_arc.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
***************
*** 246,252 ****
  Chris Evans. This could be exploited for DoS, limited kmem reads or local
  privilege escalation.
  <br>
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/003_systrace.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
--- 246,252 ----
  Chris Evans. This could be exploited for DoS, limited kmem reads or local
  privilege escalation.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/003_systrace.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
***************
*** 264,270 ****
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2940">CVE-2006-2940</a>
  <br>
  
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/002_openssl.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
--- 264,270 ----
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2940">CVE-2006-2940</a>
  <br>
  
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/002_openssl.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  
***************
*** 277,283 ****
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3918">CVE-2006-3918</a>
  
  <br>
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/001_httpd.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  </ul>
--- 277,283 ----
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3918">CVE-2006-3918</a>
  
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/001_httpd.patch">
  A source code patch exists which remedies this problem</a>.<br>
  <p>
  </ul>
***************
*** 321,327 ****
  <hr>
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
! <br><small>$OpenBSD: errata40.html,v 1.28 2010/03/08 21:53:37 deraadt Exp $</small>
  
  </body>
  </html>
--- 321,327 ----
  <hr>
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
! <br><small>$OpenBSD: errata40.html,v 1.29 2010/07/08 19:00:07 sthen Exp $</small>
  
  </body>
  </html>