===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata42.html,v
retrieving revision 1.60
retrieving revision 1.61
diff -c -r1.60 -r1.61
*** www/errata42.html	2017/03/28 04:04:52	1.60
--- www/errata42.html	2017/03/28 06:41:18	1.61
***************
*** 83,89 ****
  
  <ul>
  
! <li id="015_ndp">
  <font color="#009000"><strong>015: SECURITY FIX: October 2, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  The Neighbor Discovery Protocol (ndp) did not correctly verify neighbor
--- 83,89 ----
  
  <ul>
  
! <li id="p015_ndp">
  <font color="#009000"><strong>015: SECURITY FIX: October 2, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  The Neighbor Discovery Protocol (ndp) did not correctly verify neighbor
***************
*** 96,102 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="014_pcb">
  <font color="#009000"><strong>014: RELIABILITY FIX: July 29, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  Some kinds of IPv6 usage would leak kernel memory (in particular, this path
--- 96,102 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p014_pcb">
  <font color="#009000"><strong>014: RELIABILITY FIX: July 29, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  Some kinds of IPv6 usage would leak kernel memory (in particular, this path
***************
*** 107,113 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="013_bind">
  <font color="#009000"><strong>013: SECURITY FIX: July 23, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  <strong>2nd revision, July 23, 2008</strong><br>
--- 107,113 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p013_bind">
  <font color="#009000"><strong>013: SECURITY FIX: July 23, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  <strong>2nd revision, July 23, 2008</strong><br>
***************
*** 119,125 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="012_xorg2">
  <font color="#009000"><strong>012: SECURITY FIX: July 15, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  Multiple vulnerabilities have been discovered in X.Org.<br>
--- 119,125 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p012_xorg2">
  <font color="#009000"><strong>012: SECURITY FIX: July 15, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  Multiple vulnerabilities have been discovered in X.Org.<br>
***************
*** 138,144 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="011_openssh2">
  <font color="#009000"><strong>011: SECURITY FIX: April 3, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  Avoid possible hijacking of X11-forwarded connections with sshd(8)
--- 138,144 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p011_openssh2">
  <font color="#009000"><strong>011: SECURITY FIX: April 3, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  Avoid possible hijacking of X11-forwarded connections with sshd(8)
***************
*** 148,154 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="010_openssh">
  <font color="#009000"><strong>010: SECURITY FIX: March 30, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  sshd(8) would execute ~/.ssh/rc even when a sshd_config(5) <em>ForceCommand</em>
--- 148,154 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p010_openssh">
  <font color="#009000"><strong>010: SECURITY FIX: March 30, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  sshd(8) would execute ~/.ssh/rc even when a sshd_config(5) <em>ForceCommand</em>
***************
*** 159,165 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="009_ppp">
  <font color="#009000"><strong>009: SECURITY FIX: March 7, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  Buffer overflow in ppp command prompt parsing.<br>
--- 159,165 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p009_ppp">
  <font color="#009000"><strong>009: SECURITY FIX: March 7, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  Buffer overflow in ppp command prompt parsing.<br>
***************
*** 167,173 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="008_ip6rthdr">
  <font color="#009000"><strong>008: RELIABILITY FIX: February 25, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  Malformed IPv6 routing headers can cause a kernel panic.<br>
--- 167,173 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p008_ip6rthdr">
  <font color="#009000"><strong>008: RELIABILITY FIX: February 25, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  Malformed IPv6 routing headers can cause a kernel panic.<br>
***************
*** 175,181 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="007_tcprespond">
  <font color="#009000"><strong>007: RELIABILITY FIX: February 22, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  Incorrect assumptions in tcp_respond can lead to a kernel panic.<br>
--- 175,181 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p007_tcprespond">
  <font color="#009000"><strong>007: RELIABILITY FIX: February 22, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  Incorrect assumptions in tcp_respond can lead to a kernel panic.<br>
***************
*** 183,189 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="006_xorg">
  <font color="#009000"><strong>006: SECURITY FIX: February 8, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  <strong>2nd revision, February 10, 2008</strong><br>
--- 183,189 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p006_xorg">
  <font color="#009000"><strong>006: SECURITY FIX: February 8, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  <strong>2nd revision, February 10, 2008</strong><br>
***************
*** 205,211 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="005_ifrtlabel">
  <font color="#009000"><strong>005: RELIABILITY FIX: January 11, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  A missing NULL pointer check can lead to a kernel panic.<br>
--- 205,211 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p005_ifrtlabel">
  <font color="#009000"><strong>005: RELIABILITY FIX: January 11, 2008</strong></font>
  &nbsp; <i>All architectures</i><br>
  A missing NULL pointer check can lead to a kernel panic.<br>
***************
*** 213,219 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="004_pf">
  <font color="#009000"><strong>004: RELIABILITY FIX: November 27, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  A memory leak in pf can lead to machine lockups.<br>
--- 213,219 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p004_pf">
  <font color="#009000"><strong>004: RELIABILITY FIX: November 27, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  A memory leak in pf can lead to machine lockups.<br>
***************
*** 221,227 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="003_i386_boot">
  <font color="#009000"><strong>003: CD BOOT FAILURE ON OLDER COMPUTERS : October 30, 2007</strong></font>
  &nbsp; <i>i386 only</i><br>
  Some older BIOSes are unable to boot CD1 (ie. the commercial release sold
--- 221,227 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p003_i386_boot">
  <font color="#009000"><strong>003: CD BOOT FAILURE ON OLDER COMPUTERS : October 30, 2007</strong></font>
  &nbsp; <i>i386 only</i><br>
  Some older BIOSes are unable to boot CD1 (ie. the commercial release sold
***************
*** 242,248 ****
  
  <p>
  
! <li id="002_openssl">
  <font color="#009000"><strong>002: SECURITY FIX: October 10, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  The SSL_get_shared_ciphers() function in OpenSSL contains an off-by-one overflow.<br>
--- 242,248 ----
  
  <p>
  
! <li id="p002_openssl">
  <font color="#009000"><strong>002: SECURITY FIX: October 10, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  The SSL_get_shared_ciphers() function in OpenSSL contains an off-by-one overflow.<br>
***************
*** 250,256 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="001_dhcpd">
  <font color="#009000"><strong>001: SECURITY FIX: October 8, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  Malicious DHCP clients could cause dhcpd(8) to corrupt its stack<br>
--- 250,256 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p001_dhcpd">
  <font color="#009000"><strong>001: SECURITY FIX: October 8, 2007</strong></font>
  &nbsp; <i>All architectures</i><br>
  Malicious DHCP clients could cause dhcpd(8) to corrupt its stack<br>