===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata41.html,v
retrieving revision 1.56
retrieving revision 1.57
diff -c -r1.56 -r1.57
*** www/errata41.html	2017/03/28 04:04:52	1.56
--- www/errata41.html	2017/03/28 06:41:18	1.57
***************
*** 83,89 ****
  
  <ul>
  
! <li id="016_openssh2">
  <font color="#009000"><strong>016: SECURITY FIX: April 3, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  Avoid possible hijacking of X11-forwarded connections with sshd(8)
--- 83,89 ----
  
  <ul>
  
! <li id="p016_openssh2">
  <font color="#009000"><strong>016: SECURITY FIX: April 3, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  Avoid possible hijacking of X11-forwarded connections with sshd(8)
***************
*** 93,99 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="015_openssh">
  <font color="#009000"><strong>015: SECURITY FIX: March 30, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  sshd(8) would execute ~/.ssh/rc even when a sshd_config(5) <em>ForceCommand</em>
--- 93,99 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p015_openssh">
  <font color="#009000"><strong>015: SECURITY FIX: March 30, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  sshd(8) would execute ~/.ssh/rc even when a sshd_config(5) <em>ForceCommand</em>
***************
*** 104,110 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="014_ppp">
  <font color="#009000"><strong>014: SECURITY FIX: March 7, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  Buffer overflow in ppp command prompt parsing.<br>
--- 104,110 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p014_ppp">
  <font color="#009000"><strong>014: SECURITY FIX: March 7, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  Buffer overflow in ppp command prompt parsing.<br>
***************
*** 112,118 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="013_tcprespond">
  <font color="#009000"><strong>013: RELIABILITY FIX: February 22, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  Incorrect assumptions in tcp_respond can lead to a kernel panic.<br>
--- 112,118 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p013_tcprespond">
  <font color="#009000"><strong>013: RELIABILITY FIX: February 22, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  Incorrect assumptions in tcp_respond can lead to a kernel panic.<br>
***************
*** 120,126 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="012_xorg">
  <font color="#009000"><strong>012: SECURITY FIX: February 8, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  <strong>2nd revision, February 10, 2008</strong><br>
--- 120,126 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p012_xorg">
  <font color="#009000"><strong>012: SECURITY FIX: February 8, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  <strong>2nd revision, February 10, 2008</strong><br>
***************
*** 142,148 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="011_openssl">
  <font color="#009000"><strong>011: SECURITY FIX: October 10, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  The SSL_get_shared_ciphers() function in OpenSSL contains an off-by-one overflow.
--- 142,148 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p011_openssl">
  <font color="#009000"><strong>011: SECURITY FIX: October 10, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  The SSL_get_shared_ciphers() function in OpenSSL contains an off-by-one overflow.
***************
*** 151,157 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="010_dhcpd">
  <font color="#009000"><strong>010: SECURITY FIX: October 8, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  Malicious DHCP clients could cause dhcpd(8) to corrupt its stack<br>
--- 151,157 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p010_dhcpd">
  <font color="#009000"><strong>010: SECURITY FIX: October 8, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  Malicious DHCP clients could cause dhcpd(8) to corrupt its stack<br>
***************
*** 162,168 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="009_file">
  <font color="#009000"><strong>009: SECURITY FIX: July 9, 2007</strong></font>
  &nbsp; <i>All Architectures</i><br>
  Fix possible heap overflow in file(1), aka CVE-2007-1536.<br>
--- 162,168 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p009_file">
  <font color="#009000"><strong>009: SECURITY FIX: July 9, 2007</strong></font>
  &nbsp; <i>All Architectures</i><br>
  Fix possible heap overflow in file(1), aka CVE-2007-1536.<br>
***************
*** 170,176 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="008_xorg">
  <font color="#009000"><strong>008: STABILITY FIX: May 9, 2007</strong></font>
  &nbsp; <i>All Architectures</i><br>
  A malicious client can cause a division by zero.<br>
--- 170,176 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p008_xorg">
  <font color="#009000"><strong>008: STABILITY FIX: May 9, 2007</strong></font>
  &nbsp; <i>All Architectures</i><br>
  A malicious client can cause a division by zero.<br>
***************
*** 178,184 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="007_kroute">
  <font color="#009000"><strong>007: RELIABILITY FIX: April 30, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  Link state is not correctly tracked in ospfd and ripd.<br>
--- 178,184 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p007_kroute">
  <font color="#009000"><strong>007: RELIABILITY FIX: April 30, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  Link state is not correctly tracked in ospfd and ripd.<br>
***************
*** 186,192 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="006_altivec">
  <font color="#009000"><strong>006: STABILITY FIX: April 27, 2007</strong></font>
  &nbsp; <i>PowerPC</i><br>
  An unhandled AltiVec assist exception can cause a kernel panic.<br>
--- 186,192 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p006_altivec">
  <font color="#009000"><strong>006: STABILITY FIX: April 27, 2007</strong></font>
  &nbsp; <i>PowerPC</i><br>
  An unhandled AltiVec assist exception can cause a kernel panic.<br>
***************
*** 194,200 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="005_route6">
  <font color="#009000"><strong>005: SECURITY FIX: April 27, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  IPv6 type 0 route headers can be used to mount a DoS attack against
--- 194,200 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p005_route6">
  <font color="#009000"><strong>005: SECURITY FIX: April 27, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  IPv6 type 0 route headers can be used to mount a DoS attack against
***************
*** 204,210 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="004_xorg">
  <font color="#009000"><strong>004: SECURITY FIX: April 27, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  Multiple vulnerabilities have been discovered in X.Org.<br>
--- 204,210 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p004_xorg">
  <font color="#009000"><strong>004: SECURITY FIX: April 27, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  Multiple vulnerabilities have been discovered in X.Org.<br>
***************
*** 222,228 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="003_spamd">
  <font color="#009000"><strong>003: RELIABILITY FIX: April 27, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  Bugs found in the spamd sychronization mechanism could cause corrupted
--- 222,228 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p003_spamd">
  <font color="#009000"><strong>003: RELIABILITY FIX: April 27, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  Bugs found in the spamd sychronization mechanism could cause corrupted
***************
*** 231,237 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="002_splnet">
  <font color="#009000"><strong>002: STABILITY FIX: April 27, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  Incorrect spl level can lead to panics under heavy kqueue usage.<br>
--- 231,237 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p002_splnet">
  <font color="#009000"><strong>002: STABILITY FIX: April 27, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  Incorrect spl level can lead to panics under heavy kqueue usage.<br>
***************
*** 239,250 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="001_mbuf">
  <font color="#009000"><strong>001: SECURITY FIX: April 27, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  Incorrect mbuf handling for ICMP6 packets.<br>
  Using
! <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a>
  to avoid the problem packets is an effective workaround until the patch
  can be installed.<br>
  Use "block in inet6" in /etc/pf.conf
--- 239,250 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p001_mbuf">
  <font color="#009000"><strong>001: SECURITY FIX: April 27, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  Incorrect mbuf handling for ICMP6 packets.<br>
  Using
! <a href="http://man.openbsd.org/OpenBSD-4.1/pf.4">pf(4)</a>
  to avoid the problem packets is an effective workaround until the patch
  can be installed.<br>
  Use "block in inet6" in /etc/pf.conf