===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata40.html,v
retrieving revision 1.44
retrieving revision 1.45
diff -c -r1.44 -r1.45
*** www/errata40.html	2014/10/02 14:34:45	1.44
--- www/errata40.html	2015/02/14 04:36:51	1.45
***************
*** 83,89 ****
  
  <ul>
  
! <li><a name="017_openssl"></a>
  <font color="#009000"><strong>017: SECURITY FIX: October 10, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  The SSL_get_shared_ciphers() function in OpenSSL contains an off-by-one overflow.
--- 83,89 ----
  
  <ul>
  
! <li id="017_openssl">
  <font color="#009000"><strong>017: SECURITY FIX: October 10, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  The SSL_get_shared_ciphers() function in OpenSSL contains an off-by-one overflow.
***************
*** 92,98 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="016_dhcpd"></a>
  <font color="#009000"><strong>016: SECURITY FIX: October 8, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  Malicious DHCP clients could cause dhcpd(8) to corrupt its stack<br>
--- 92,98 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="016_dhcpd">
  <font color="#009000"><strong>016: SECURITY FIX: October 8, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  Malicious DHCP clients could cause dhcpd(8) to corrupt its stack<br>
***************
*** 103,109 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="015_file"></a>
  <font color="#009000"><strong>015: SECURITY FIX: July 9, 2007</strong></font>
  &nbsp; <i>All Architectures</i><br>
  Fix possible heap overflow in file(1), aka CVE-2007-1536.<br>
--- 103,109 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="015_file">
  <font color="#009000"><strong>015: SECURITY FIX: July 9, 2007</strong></font>
  &nbsp; <i>All Architectures</i><br>
  Fix possible heap overflow in file(1), aka CVE-2007-1536.<br>
***************
*** 111,117 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="014_xorg"></a>
  <font color="#009000"><strong>014: STABILITY FIX: May 9, 2007</strong></font>
  &nbsp; <i>All Architectures</i><br>
  A malicious client can cause a division by zero.<br>
--- 111,117 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="014_xorg">
  <font color="#009000"><strong>014: STABILITY FIX: May 9, 2007</strong></font>
  &nbsp; <i>All Architectures</i><br>
  A malicious client can cause a division by zero.<br>
***************
*** 119,125 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="013_altivec"></a>
  <font color="#009000"><strong>013: STABILITY FIX: April 26, 2007</strong></font>
  &nbsp; <i>PowerPC</i><br>
  An unhandled AltiVec assist exception can cause a kernel panic.<br>
--- 119,125 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="013_altivec">
  <font color="#009000"><strong>013: STABILITY FIX: April 26, 2007</strong></font>
  &nbsp; <i>PowerPC</i><br>
  An unhandled AltiVec assist exception can cause a kernel panic.<br>
***************
*** 127,133 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="012_route6"></a>
  <font color="#009000"><strong>012: SECURITY FIX: April 23, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  IPv6 type 0 route headers can be used to mount a DoS attack against
--- 127,133 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="012_route6">
  <font color="#009000"><strong>012: SECURITY FIX: April 23, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  IPv6 type 0 route headers can be used to mount a DoS attack against
***************
*** 137,143 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="011_xorg"></a>
  <font color="#009000"><strong>011: SECURITY FIX: April 4, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  Multiple vulnerabilities have been discovered in X.Org.<br>
--- 137,143 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="011_xorg">
  <font color="#009000"><strong>011: SECURITY FIX: April 4, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  Multiple vulnerabilities have been discovered in X.Org.<br>
***************
*** 155,161 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="m_dup1"></a>
  <font color="#009000"><strong>010: SECURITY FIX: March 7, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  <strong>2nd revision, March 17, 2007</strong><br>
--- 155,161 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="m_dup1">
  <font color="#009000"><strong>010: SECURITY FIX: March 7, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  <strong>2nd revision, March 17, 2007</strong><br>
***************
*** 170,176 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="timezone"></a>
  <font color="#009000"><strong>009: INTEROPERABILITY FIX: February 4, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  A US daylight saving time rules change takes effect in 2007.
--- 170,176 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="timezone">
  <font color="#009000"><strong>009: INTEROPERABILITY FIX: February 4, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  A US daylight saving time rules change takes effect in 2007.
***************
*** 179,185 ****
  A source code patch exists which syncs the timezone data files with tzdata2007a</a>.<br>
  <p>
  
! <li><a name="icmp6"></a>
  <font color="#009000"><strong>008: RELIABILITY FIX: January 16, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  Under some circumstances, processing an ICMP6 echo request would cause
--- 179,185 ----
  A source code patch exists which syncs the timezone data files with tzdata2007a</a>.<br>
  <p>
  
! <li id="icmp6">
  <font color="#009000"><strong>008: RELIABILITY FIX: January 16, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  Under some circumstances, processing an ICMP6 echo request would cause
***************
*** 189,195 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="agp"></a>
  <font color="#009000"><strong>007: SECURITY FIX: January 3, 2007</strong></font>
  &nbsp; <i>i386 only</i><br>
  Insufficient validation in
--- 189,195 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="agp">
  <font color="#009000"><strong>007: SECURITY FIX: January 3, 2007</strong></font>
  &nbsp; <i>i386 only</i><br>
  Insufficient validation in
***************
*** 204,210 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="ports-tar"></a>
  <font color="#009000"><strong>006: FTP DISTRIBUTION ERROR: December 4, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  The <strong>src.tar.gz</strong> and <strong>ports.tar.gz</strong> archives
--- 204,210 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="ports-tar">
  <font color="#009000"><strong>006: FTP DISTRIBUTION ERROR: December 4, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  The <strong>src.tar.gz</strong> and <strong>ports.tar.gz</strong> archives
***************
*** 220,226 ****
  <br>
  <p>
  
! <li><a name="ldso"></a>
  <font color="#009000"><strong>005: SECURITY FIX: November 19, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  The ELF
--- 220,226 ----
  <br>
  <p>
  
! <li id="ldso">
  <font color="#009000"><strong>005: SECURITY FIX: November 19, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  The ELF
***************
*** 233,239 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="arc"></a>
  <font color="#009000"><strong>004: RELIABILITY FIX: November 7, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Due to a bug in the
--- 233,239 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="arc">
  <font color="#009000"><strong>004: RELIABILITY FIX: November 7, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Due to a bug in the
***************
*** 247,253 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="systrace"></a>
  <font color="#009000"><strong>003: SECURITY FIX: November 4, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Fix for an integer overflow in
--- 247,253 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="systrace">
  <font color="#009000"><strong>003: SECURITY FIX: November 4, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Fix for an integer overflow in
***************
*** 260,266 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="openssl2"></a>
  <font color="#009000"><strong>002: SECURITY FIX: November 4, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Several problems have been found in OpenSSL. While parsing certain invalid ASN.1
--- 260,266 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="openssl2">
  <font color="#009000"><strong>002: SECURITY FIX: November 4, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  Several problems have been found in OpenSSL. While parsing certain invalid ASN.1
***************
*** 279,285 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li><a name="httpd"></a>
  <font color="#009000"><strong>001: SECURITY FIX: November 4, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&amp;sektion=8">httpd(8)</a>
--- 279,285 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="httpd">
  <font color="#009000"><strong>001: SECURITY FIX: November 4, 2006</strong></font>
  &nbsp; <i>All architectures</i><br>
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&amp;sektion=8">httpd(8)</a>