===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata44.html,v
retrieving revision 1.55
retrieving revision 1.56
diff -c -r1.55 -r1.56
*** www/errata44.html	2016/08/15 02:22:06	1.55
--- www/errata44.html	2016/10/16 19:11:30	1.56
***************
*** 68,74 ****
  <br>
  <hr>
  
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.4.tar.gz">
  You can also fetch a tar.gz file containing all the following patches</a>.
  This file is updated once a day.
  <p>
--- 68,74 ----
  <br>
  <hr>
  
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.4.tar.gz">
  You can also fetch a tar.gz file containing all the following patches</a>.
  This file is updated once a day.
  <p>
***************
*** 90,96 ****
  getsockopt(2) with any of IP_AUTH_LEVEL, IP_ESP_TRANS_LEVEL, IP_ESP_NETWORK_LEVEL,
  IP_IPCOMP_LEVEL will crash the system.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/016_getsockopt.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 90,96 ----
  getsockopt(2) with any of IP_AUTH_LEVEL, IP_ESP_TRANS_LEVEL, IP_ESP_NETWORK_LEVEL,
  IP_IPCOMP_LEVEL will crash the system.
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/016_getsockopt.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 99,105 ****
  &nbsp; <i>i386 only</i><br>
  XMM exceptions are not correctly handled resulting in a kernel panic.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.4/i386/015_xmm.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 99,105 ----
  &nbsp; <i>i386 only</i><br>
  XMM exceptions are not correctly handled resulting in a kernel panic.
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.4/i386/015_xmm.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 111,117 ****
  An attacker could crash a server with a specially crafted dynamic update message to a
  zone for which the server is master.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/014_bind.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 111,117 ----
  An attacker could crash a server with a specially crafted dynamic update message to a
  zone for which the server is master.
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/014_bind.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 132,138 ****
  <pre>
      nat/rdr ... inet6 proto { tcp udp icmp6 } ...
  </pre>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/013_pf.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 132,138 ----
  <pre>
      nat/rdr ... inet6 proto { tcp udp icmp6 } ...
  </pre>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/013_pf.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 150,156 ****
  <a href="http://www.openssl.org/news/secadv_20090325.txt">OpenSSL security advisory</a>, but note that the other issue described there "Incorrect Error
  Checking During CMS verification" relates to code not enabled in OpenBSD.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/012_openssl.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 150,156 ----
  <a href="http://www.openssl.org/news/secadv_20090325.txt">OpenSSL security advisory</a>, but note that the other issue described there "Incorrect Error
  Checking During CMS verification" relates to code not enabled in OpenBSD.
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/012_openssl.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 163,169 ****
  when the user being granted privileges is also a member of the group
  in the RunAs portion of the rule.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/011_sudo.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 163,169 ----
  when the user being granted privileges is also a member of the group
  in the RunAs portion of the rule.
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/011_sudo.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 173,179 ****
  bgpd(8) did not correctly prepend its own AS to very long AS paths, causing
  the process to terminate because of the resulting corrupt path.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/010_bgpd.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 173,179 ----
  bgpd(8) did not correctly prepend its own AS to very long AS paths, causing
  the process to terminate because of the resulting corrupt path.
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/010_bgpd.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 186,192 ****
  sessions.
  In the worst case Internet connectivity could be lost.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/009_bgpd.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 186,192 ----
  sessions.
  In the worst case Internet connectivity could be lost.
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/009_bgpd.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 198,204 ****
  signatures.
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0025">CVE-2009-0025</a>.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/008_bind.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 198,204 ----
  signatures.
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0025">CVE-2009-0025</a>.
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/008_bind.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 212,218 ****
  certificate.
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5077">CVE-2008-5077</a>.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/007_openssl.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 212,218 ----
  certificate.
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5077">CVE-2008-5077</a>.
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/007_openssl.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 223,229 ****
  DHCP clients such as Solaris/OpenSolaris and some embedded routers not
  accepting DHCP offers.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/006_dhcpd.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 223,229 ----
  DHCP clients such as Solaris/OpenSolaris and some embedded routers not
  accepting DHCP offers.
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/006_dhcpd.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 233,239 ****
  A software bug could cause memory allocation to cause a kernel panic
  accessing an array out of its bounds, when physical memory is exhausted.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/005_pglistalloc.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 233,239 ----
  A software bug could cause memory allocation to cause a kernel panic
  accessing an array out of its bounds, when physical memory is exhausted.
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/005_pglistalloc.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 246,252 ****
  will result in child processes crashing when utilizing proxy rules during an
  HTTP session.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/004_httpd.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 246,252 ----
  will result in child processes crashing when utilizing proxy rules during an
  HTTP session.
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/004_httpd.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 257,263 ****
  can result in TCP connections between two IPs being reset instead of accepted
  if being received on a socket in the TIME_WAIT state.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/003_tcpinput.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 257,263 ----
  can result in TCP connections between two IPs being reset instead of accepted
  if being received on a socket in the TIME_WAIT state.
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/003_tcpinput.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 267,273 ****
  Due to a bug in the vr(4) driver it is possible for a system using the vr(4)
  driver to panic under heavy load if the RX path runs out of mbufs.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/002_vr.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 267,273 ----
  Due to a bug in the vr(4) driver it is possible for a system using the vr(4)
  driver to panic under heavy load if the RX path runs out of mbufs.
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/002_vr.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
***************
*** 280,286 ****
  this vulnerability to be exploited.
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2476">CVE-2008-2476</a>.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/001_ndp.patch">
  A source code patch exists which remedies this problem.</a>
  <p>
  
--- 280,286 ----
  this vulnerability to be exploited.
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2476">CVE-2008-2476</a>.
  <br>
! <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/001_ndp.patch">
  A source code patch exists which remedies this problem.</a>
  <p>