OpenBSD 4.1 Errata

=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/errata41.html,v retrieving revision 1.62 retrieving revision 1.63 diff -u -r1.62 -r1.63 --- www/errata41.html 2019/04/02 12:46:57 1.62 +++ www/errata41.html 2019/05/27 22:55:20 1.63 @@ -1,25 +1,23 @@ - - - + + + + OpenBSD 4.1 Errata - - - -

+

-OpenBSD -4.1 Errata +OpenBSD +4.1 Errata

@@ -88,7 +86,7 @@

-016: SECURITY FIX: April 3, 2008 +016: SECURITY FIX: April 3, 2008 All architectures
Avoid possible hijacking of X11-forwarded connections with sshd(8) by refusing to listen on a port unless all address families bind @@ -98,7 +96,7 @@
-015: SECURITY FIX: March 30, 2008 +015: SECURITY FIX: March 30, 2008 All architectures
sshd(8) would execute ~/.ssh/rc even when a sshd_config(5) ForceCommand directive was in effect, allowing users with write access to this file to @@ -109,7 +107,7 @@
-014: SECURITY FIX: March 7, 2008 +014: SECURITY FIX: March 7, 2008 All architectures
Buffer overflow in ppp command prompt parsing.
@@ -117,7 +115,7 @@
-013: RELIABILITY FIX: February 22, 2008 +013: RELIABILITY FIX: February 22, 2008 All architectures
Incorrect assumptions in tcp_respond can lead to a kernel panic.
@@ -125,9 +123,9 @@
-012: SECURITY FIX: February 8, 2008 +012: SECURITY FIX: February 8, 2008 All architectures
-2nd revision, February 10, 2008
+2nd revision, February 10, 2008
Multiple vulnerabilities have been discovered in X.Org.
XFree86 Misc extension out of bounds array index, File existence disclosure, @@ -147,7 +145,7 @@
-011: SECURITY FIX: October 10, 2007 +011: SECURITY FIX: October 10, 2007 All architectures
The SSL_get_shared_ciphers() function in OpenSSL contains an off-by-one overflow.
@@ -156,7 +154,7 @@
-010: SECURITY FIX: October 8, 2007 +010: SECURITY FIX: October 8, 2007 All architectures
Malicious DHCP clients could cause dhcpd(8) to corrupt its stack
A DHCP client that claimed to require a maximum message size less than @@ -167,7 +165,7 @@
-009: SECURITY FIX: July 9, 2007 +009: SECURITY FIX: July 9, 2007 All Architectures
Fix possible heap overflow in file(1), aka CVE-2007-1536.
@@ -175,7 +173,7 @@
-008: STABILITY FIX: May 9, 2007 +008: STABILITY FIX: May 9, 2007 All Architectures
A malicious client can cause a division by zero.
@@ -183,7 +181,7 @@
-007: RELIABILITY FIX: April 30, 2007 +007: RELIABILITY FIX: April 30, 2007 All architectures
Link state is not correctly tracked in ospfd and ripd.
@@ -191,7 +189,7 @@
-006: STABILITY FIX: April 27, 2007 +006: STABILITY FIX: April 27, 2007 PowerPC
An unhandled AltiVec assist exception can cause a kernel panic.
@@ -199,7 +197,7 @@
-005: SECURITY FIX: April 27, 2007 +005: SECURITY FIX: April 27, 2007 All architectures
IPv6 type 0 route headers can be used to mount a DoS attack against hosts and networks. This is a design flaw in IPv6 and not a bug in @@ -209,7 +207,7 @@
-004: SECURITY FIX: April 27, 2007 +004: SECURITY FIX: April 27, 2007 All architectures
Multiple vulnerabilities have been discovered in X.Org.
XC-MISC extension ProcXCMiscGetXIDList memory corruption vulnerability, @@ -227,7 +225,7 @@
-003: RELIABILITY FIX: April 27, 2007 +003: RELIABILITY FIX: April 27, 2007 All architectures
Bugs found in the spamd sychronization mechanism could cause corrupted databases.
@@ -236,7 +234,7 @@
-002: STABILITY FIX: April 27, 2007 +002: STABILITY FIX: April 27, 2007 All architectures
Incorrect spl level can lead to panics under heavy kqueue usage.
@@ -244,7 +242,7 @@
-001: SECURITY FIX: April 27, 2007 +001: SECURITY FIX: April 27, 2007 All architectures
Incorrect mbuf handling for ICMP6 packets.
Using @@ -260,6 +258,3 @@