OpenBSD 4.1 Errata

=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/errata41.html,v retrieving revision 1.62 retrieving revision 1.63 diff -c -r1.62 -r1.63 *** www/errata41.html 2019/04/02 12:46:57 1.62 --- www/errata41.html 2019/05/27 22:55:20 1.63 *************** *** 1,25 **** ! ! ! OpenBSD 4.1 Errata - - - !

! OpenBSD ! 4.1 Errata

--- 1,23 ---- ! ! ! ! OpenBSD 4.1 Errata !

! OpenBSD ! 4.1 Errata

*************** *** 88,94 ****

! 016: SECURITY FIX: April 3, 2008 All architectures
Avoid possible hijacking of X11-forwarded connections with sshd(8) by refusing to listen on a port unless all address families bind --- 86,92 ----
- ! 016: SECURITY FIX: April 3, 2008 All architectures
  Avoid possible hijacking of X11-forwarded connections with sshd(8) by refusing to listen on a port unless all address families bind *************** *** 98,104 ****
- ! 015: SECURITY FIX: March 30, 2008 All architectures
  sshd(8) would execute ~/.ssh/rc even when a sshd_config(5) ForceCommand directive was in effect, allowing users with write access to this file to --- 96,102 ----
- ! 015: SECURITY FIX: March 30, 2008 All architectures
  sshd(8) would execute ~/.ssh/rc even when a sshd_config(5) ForceCommand directive was in effect, allowing users with write access to this file to *************** *** 109,115 ****
- ! 014: SECURITY FIX: March 7, 2008 All architectures
  Buffer overflow in ppp command prompt parsing.
  --- 107,113 ----
- ! 014: SECURITY FIX: March 7, 2008 All architectures
  Buffer overflow in ppp command prompt parsing.
  *************** *** 117,123 ****
- ! 013: RELIABILITY FIX: February 22, 2008 All architectures
  Incorrect assumptions in tcp_respond can lead to a kernel panic.
  --- 115,121 ----
- ! 013: RELIABILITY FIX: February 22, 2008 All architectures
  Incorrect assumptions in tcp_respond can lead to a kernel panic.
  *************** *** 125,133 ****
- ! 012: SECURITY FIX: February 8, 2008 All architectures
  ! 2nd revision, February 10, 2008
  Multiple vulnerabilities have been discovered in X.Org.
  XFree86 Misc extension out of bounds array index, File existence disclosure, --- 123,131 ----
- ! 012: SECURITY FIX: February 8, 2008 All architectures
  ! 2nd revision, February 10, 2008
  Multiple vulnerabilities have been discovered in X.Org.
  XFree86 Misc extension out of bounds array index, File existence disclosure, *************** *** 147,153 ****
- ! 011: SECURITY FIX: October 10, 2007 All architectures
  The SSL_get_shared_ciphers() function in OpenSSL contains an off-by-one overflow.
  --- 145,151 ----
- ! 011: SECURITY FIX: October 10, 2007 All architectures
  The SSL_get_shared_ciphers() function in OpenSSL contains an off-by-one overflow.
  *************** *** 156,162 ****
- ! 010: SECURITY FIX: October 8, 2007 All architectures
  Malicious DHCP clients could cause dhcpd(8) to corrupt its stack
  A DHCP client that claimed to require a maximum message size less than --- 154,160 ----
- ! 010: SECURITY FIX: October 8, 2007 All architectures
  Malicious DHCP clients could cause dhcpd(8) to corrupt its stack
  A DHCP client that claimed to require a maximum message size less than *************** *** 167,173 ****
- ! 009: SECURITY FIX: July 9, 2007 All Architectures
  Fix possible heap overflow in file(1), aka CVE-2007-1536.
  --- 165,171 ----
- ! 009: SECURITY FIX: July 9, 2007 All Architectures
  Fix possible heap overflow in file(1), aka CVE-2007-1536.
  *************** *** 175,181 ****
- ! 008: STABILITY FIX: May 9, 2007 All Architectures
  A malicious client can cause a division by zero.
  --- 173,179 ----
- ! 008: STABILITY FIX: May 9, 2007 All Architectures
  A malicious client can cause a division by zero.
  *************** *** 183,189 ****
- ! 007: RELIABILITY FIX: April 30, 2007 All architectures
  Link state is not correctly tracked in ospfd and ripd.
  --- 181,187 ----
- ! 007: RELIABILITY FIX: April 30, 2007 All architectures
  Link state is not correctly tracked in ospfd and ripd.
  *************** *** 191,197 ****
- ! 006: STABILITY FIX: April 27, 2007 PowerPC
  An unhandled AltiVec assist exception can cause a kernel panic.
  --- 189,195 ----
- ! 006: STABILITY FIX: April 27, 2007 PowerPC
  An unhandled AltiVec assist exception can cause a kernel panic.
  *************** *** 199,205 ****
- ! 005: SECURITY FIX: April 27, 2007 All architectures
  IPv6 type 0 route headers can be used to mount a DoS attack against hosts and networks. This is a design flaw in IPv6 and not a bug in --- 197,203 ----
- ! 005: SECURITY FIX: April 27, 2007 All architectures
  IPv6 type 0 route headers can be used to mount a DoS attack against hosts and networks. This is a design flaw in IPv6 and not a bug in *************** *** 209,215 ****
- ! 004: SECURITY FIX: April 27, 2007 All architectures
  Multiple vulnerabilities have been discovered in X.Org.
  XC-MISC extension ProcXCMiscGetXIDList memory corruption vulnerability, --- 207,213 ----
- ! 004: SECURITY FIX: April 27, 2007 All architectures
  Multiple vulnerabilities have been discovered in X.Org.
  XC-MISC extension ProcXCMiscGetXIDList memory corruption vulnerability, *************** *** 227,233 ****
- ! 003: RELIABILITY FIX: April 27, 2007 All architectures
  Bugs found in the spamd sychronization mechanism could cause corrupted databases.
  --- 225,231 ----
- ! 003: RELIABILITY FIX: April 27, 2007 All architectures
  Bugs found in the spamd sychronization mechanism could cause corrupted databases.
  *************** *** 236,242 ****
- ! 002: STABILITY FIX: April 27, 2007 All architectures
  Incorrect spl level can lead to panics under heavy kqueue usage.
  --- 234,240 ----
- ! 002: STABILITY FIX: April 27, 2007 All architectures
  Incorrect spl level can lead to panics under heavy kqueue usage.
  *************** *** 244,250 ****
- ! 001: SECURITY FIX: April 27, 2007 All architectures
  Incorrect mbuf handling for ICMP6 packets.
  Using --- 242,248 ----
- ! 001: SECURITY FIX: April 27, 2007 All architectures
  Incorrect mbuf handling for ICMP6 packets.
  Using *************** *** 260,265 ****
- - - --- 258,260 ----