===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata40.html,v
retrieving revision 1.58
retrieving revision 1.59
diff -c -r1.58 -r1.59
*** www/errata40.html	2016/08/15 02:22:06	1.58
--- www/errata40.html	2016/10/16 19:11:29	1.59
***************
*** 70,76 ****
  <br>
  <hr>
  
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0.tar.gz">
  You can also fetch a tar.gz file containing all the following patches</a>.
  This file is updated once a day.
  <p>
--- 70,76 ----
  <br>
  <hr>
  
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.0.tar.gz">
  You can also fetch a tar.gz file containing all the following patches</a>.
  This file is updated once a day.
  <p>
***************
*** 92,98 ****
  &nbsp; <i>All architectures</i><br>
  The SSL_get_shared_ciphers() function in OpenSSL contains an off-by-one overflow.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/017_openssl.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 92,98 ----
  &nbsp; <i>All architectures</i><br>
  The SSL_get_shared_ciphers() function in OpenSSL contains an off-by-one overflow.
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/017_openssl.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 103,109 ****
  A DHCP client that claimed to require a maximum message size less than
  the minimum IP MTU could cause dhcpd(8) to overwrite stack memory.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/016_dhcpd.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 103,109 ----
  A DHCP client that claimed to require a maximum message size less than
  the minimum IP MTU could cause dhcpd(8) to overwrite stack memory.
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/016_dhcpd.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 111,117 ****
  <font color="#009000"><strong>015: SECURITY FIX: July 9, 2007</strong></font>
  &nbsp; <i>All Architectures</i><br>
  Fix possible heap overflow in file(1), aka CVE-2007-1536.<br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/015_file.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 111,117 ----
  <font color="#009000"><strong>015: SECURITY FIX: July 9, 2007</strong></font>
  &nbsp; <i>All Architectures</i><br>
  Fix possible heap overflow in file(1), aka CVE-2007-1536.<br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/015_file.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 119,125 ****
  <font color="#009000"><strong>014: STABILITY FIX: May 9, 2007</strong></font>
  &nbsp; <i>All Architectures</i><br>
  A malicious client can cause a division by zero.<br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/014_xorg.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 119,125 ----
  <font color="#009000"><strong>014: STABILITY FIX: May 9, 2007</strong></font>
  &nbsp; <i>All Architectures</i><br>
  A malicious client can cause a division by zero.<br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/014_xorg.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 127,133 ****
  <font color="#009000"><strong>013: STABILITY FIX: April 26, 2007</strong></font>
  &nbsp; <i>PowerPC</i><br>
  An unhandled AltiVec assist exception can cause a kernel panic.<br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/macppc/013_altivec.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 127,133 ----
  <font color="#009000"><strong>013: STABILITY FIX: April 26, 2007</strong></font>
  &nbsp; <i>PowerPC</i><br>
  An unhandled AltiVec assist exception can cause a kernel panic.<br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.0/macppc/013_altivec.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 137,143 ****
  IPv6 type 0 route headers can be used to mount a DoS attack against
  hosts and networks.  This is a design flaw in IPv6 and not a bug in
  OpenBSD.<br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/012_route6.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 137,143 ----
  IPv6 type 0 route headers can be used to mount a DoS attack against
  hosts and networks.  This is a design flaw in IPv6 and not a bug in
  OpenBSD.<br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/012_route6.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 155,161 ****
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1352">CVE-2007-1352</a>,
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1667">CVE-2007-1667</a>.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/011_xorg.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 155,161 ----
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1352">CVE-2007-1352</a>,
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1667">CVE-2007-1667</a>.
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/011_xorg.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 170,176 ****
  can be installed.<br>
  Use "block in inet6" in /etc/pf.conf
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/010_m_dup1.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 170,176 ----
  can be installed.<br>
  Use "block in inet6" in /etc/pf.conf
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/010_m_dup1.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 179,185 ****
  &nbsp; <i>All architectures</i><br>
  A US daylight saving time rules change takes effect in 2007.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/009_timezone.patch">
  A source code patch exists which syncs the timezone data files with tzdata2007a</a>.<br>
  <p>
  
--- 179,185 ----
  &nbsp; <i>All architectures</i><br>
  A US daylight saving time rules change takes effect in 2007.
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/009_timezone.patch">
  A source code patch exists which syncs the timezone data files with tzdata2007a</a>.<br>
  <p>
  
***************
*** 189,195 ****
  Under some circumstances, processing an ICMP6 echo request would cause
  the kernel to enter an infinite loop.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/008_icmp6.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 189,195 ----
  Under some circumstances, processing an ICMP6 echo request would cause
  the kernel to enter an infinite loop.
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/008_icmp6.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 204,210 ****
  The <tt>PCIAGP</tt> option is present by default on i386
  kernels only.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/i386/007_agp.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 204,210 ----
  The <tt>PCIAGP</tt> option is present by default on i386
  kernels only.
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.0/i386/007_agp.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 217,225 ****
  them from a <a href="ftp.html">mirror</a>.
  <br>
  The archives have been corrected. The correct MD5 of
! <a href="http://ftp.openbsd.org/pub/OpenBSD/4.0/ports.tar.gz">
  ports.tar.gz</a> is eff352b4382a7fb7ffce1e8b37e9eb56, and for
! <a href="http://ftp.openbsd.org/pub/OpenBSD/4.0/src.tar.gz">
  src.tar.gz</a> it is b8d7a0dc6f3d27a5377a23d69c40688e.
  <br>
  <p>
--- 217,225 ----
  them from a <a href="ftp.html">mirror</a>.
  <br>
  The archives have been corrected. The correct MD5 of
! <a href="https://ftp.openbsd.org/pub/OpenBSD/4.0/ports.tar.gz">
  ports.tar.gz</a> is eff352b4382a7fb7ffce1e8b37e9eb56, and for
! <a href="https://ftp.openbsd.org/pub/OpenBSD/4.0/src.tar.gz">
  src.tar.gz</a> it is b8d7a0dc6f3d27a5377a23d69c40688e.
  <br>
  <p>
***************
*** 233,239 ****
  problem in cases we have not found yet.  This patch applies to all ELF-based
  systems (m68k, m88k, and vax are a.out-based systems).
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/005_ldso.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 233,239 ----
  problem in cases we have not found yet.  This patch applies to all ELF-based
  systems (m68k, m88k, and vax are a.out-based systems).
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/005_ldso.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 247,253 ****
  volumes will not be properly marked as being clean and fsck will be run for the subsequent
  boot up.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/004_arc.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 247,253 ----
  volumes will not be properly marked as being clean and fsck will be run for the subsequent
  boot up.
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/004_arc.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 260,266 ****
  Chris Evans. This could be exploited for DoS, limited kmem reads or local
  privilege escalation.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/003_systrace.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 260,266 ----
  Chris Evans. This could be exploited for DoS, limited kmem reads or local
  privilege escalation.
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/003_systrace.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 279,285 ****
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2940">CVE-2006-2940</a>
  <br>
  
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/002_openssl.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 279,285 ----
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2940">CVE-2006-2940</a>
  <br>
  
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/002_openssl.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 293,299 ****
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3918">CVE-2006-3918</a>
  
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/001_httpd.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 293,299 ----
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3918">CVE-2006-3918</a>
  
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/001_httpd.patch">
  A source code patch exists which remedies this problem.</a>
  <p>