OpenBSD 4.0 Errata

=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/errata40.html,v retrieving revision 1.67 retrieving revision 1.68 diff -u -r1.67 -r1.68 --- www/errata40.html 2019/04/02 12:46:57 1.67 +++ www/errata40.html 2019/05/27 22:55:20 1.68 @@ -1,25 +1,23 @@ - - - + + + + OpenBSD 4.0 Errata - - - -

+

-OpenBSD -4.0 Errata +OpenBSD +4.0 Errata

@@ -88,7 +86,7 @@

-017: SECURITY FIX: October 10, 2007 +017: SECURITY FIX: October 10, 2007 All architectures
The SSL_get_shared_ciphers() function in OpenSSL contains an off-by-one overflow.
@@ -97,7 +95,7 @@
-016: SECURITY FIX: October 8, 2007 +016: SECURITY FIX: October 8, 2007 All architectures
Malicious DHCP clients could cause dhcpd(8) to corrupt its stack
A DHCP client that claimed to require a maximum message size less than @@ -108,7 +106,7 @@
-015: SECURITY FIX: July 9, 2007 +015: SECURITY FIX: July 9, 2007 All Architectures
Fix possible heap overflow in file(1), aka CVE-2007-1536.
@@ -116,7 +114,7 @@
-014: STABILITY FIX: May 9, 2007 +014: STABILITY FIX: May 9, 2007 All Architectures
A malicious client can cause a division by zero.
@@ -124,7 +122,7 @@
-013: STABILITY FIX: April 26, 2007 +013: STABILITY FIX: April 26, 2007 PowerPC
An unhandled AltiVec assist exception can cause a kernel panic.
@@ -132,7 +130,7 @@
-012: SECURITY FIX: April 23, 2007 +012: SECURITY FIX: April 23, 2007 All architectures
IPv6 type 0 route headers can be used to mount a DoS attack against hosts and networks. This is a design flaw in IPv6 and not a bug in @@ -142,7 +140,7 @@
-011: SECURITY FIX: April 4, 2007 +011: SECURITY FIX: April 4, 2007 All architectures
Multiple vulnerabilities have been discovered in X.Org.
XC-MISC extension ProcXCMiscGetXIDList memory corruption vulnerability, @@ -160,9 +158,9 @@
-010: SECURITY FIX: March 7, 2007 +010: SECURITY FIX: March 7, 2007 All architectures
-2nd revision, March 17, 2007
+2nd revision, March 17, 2007
Incorrect mbuf handling for ICMP6 packets.
Using pf(4) @@ -175,7 +173,7 @@
-009: INTEROPERABILITY FIX: February 4, 2007 +009: INTEROPERABILITY FIX: February 4, 2007 All architectures
A US daylight saving time rules change takes effect in 2007.
@@ -184,7 +182,7 @@
-008: RELIABILITY FIX: January 16, 2007 +008: RELIABILITY FIX: January 16, 2007 All architectures
Under some circumstances, processing an ICMP6 echo request would cause the kernel to enter an infinite loop. @@ -194,14 +192,14 @@
-007: SECURITY FIX: January 3, 2007 +007: SECURITY FIX: January 3, 2007 i386 only
Insufficient validation in vga(4) may allow an attacker to gain root privileges if the kernel is compiled with -option PCIAGP +option PCIAGP and the actual device is not an AGP device. -The PCIAGP option is present by default on i386 +The PCIAGP option is present by default on i386 kernels only.
@@ -209,9 +207,9 @@
-006: FTP DISTRIBUTION ERROR: December 4, 2006 +006: FTP DISTRIBUTION ERROR: December 4, 2006 All architectures
-The src.tar.gz and ports.tar.gz archives +The src.tar.gz and ports.tar.gz archives released on FTP were created incorrectly, a week after the 4.0 release. The archives on the CD sets are correct; this only affects people who downloaded them from a mirror. @@ -225,7 +223,7 @@
-005: SECURITY FIX: November 19, 2006 +005: SECURITY FIX: November 19, 2006 All architectures
The ELF ld.so(1) @@ -238,7 +236,7 @@
-004: RELIABILITY FIX: November 7, 2006 +004: RELIABILITY FIX: November 7, 2006 All architectures
Due to a bug in the arc(4) @@ -252,7 +250,7 @@
-003: SECURITY FIX: November 4, 2006 +003: SECURITY FIX: November 4, 2006 All architectures
Fix for an integer overflow in systrace(4)'s @@ -265,7 +263,7 @@
-002: SECURITY FIX: November 4, 2006 +002: SECURITY FIX: November 4, 2006 All architectures
Several problems have been found in OpenSSL. While parsing certain invalid ASN.1 structures an error condition is mishandled, possibly resulting in an infinite @@ -284,7 +282,7 @@
-001: SECURITY FIX: November 4, 2006 +001: SECURITY FIX: November 4, 2006 All architectures
httpd(8) does not sanitize the Expect header from an HTTP request when it is @@ -300,6 +298,3 @@

- - -