===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata52.html,v
retrieving revision 1.15
retrieving revision 1.16
diff -c -r1.15 -r1.16
*** www/errata52.html	2014/03/31 03:12:47	1.15
--- www/errata52.html	2014/03/31 16:02:48	1.16
***************
*** 77,83 ****
  
  <ul>
  <li><a name="001_bgpd"></a>
! <font color="#009000"><strong>001: RELIABILITY FIX: November 29, 2012</strong></font> &nbsp; <i>All architectures</i><br>
  Some other systems have started sending incorrect flags which
  cause session failures in OpenBSD's bgpd, and cause it
  to propagate incorrect updates.
--- 77,84 ----
  
  <ul>
  <li><a name="001_bgpd"></a>
! <font color="#009000"><strong>001: RELIABILITY FIX: November 29, 2012</strong></font>
! &nbsp; <i>All architectures</i><br>
  Some other systems have started sending incorrect flags which
  cause session failures in OpenBSD's bgpd, and cause it
  to propagate incorrect updates.
***************
*** 87,93 ****
  <p>
  
  <li><a name="002_bgpd"></a>
! <font color="#009000"><strong>002: RELIABILITY FIX: March 15, 2013</strong></font> &nbsp; <i>All architectures</i><br>
  A rare condition during session startup may cause bgpd to replace
  an active session leading to unknown consequences.  Bug found by
  inspection (we do not know how to reproduce it, consider that a challenge).
--- 88,95 ----
  <p>
  
  <li><a name="002_bgpd"></a>
! <font color="#009000"><strong>002: RELIABILITY FIX: March 15, 2013</strong></font>
! &nbsp; <i>All architectures</i><br>
  A rare condition during session startup may cause bgpd to replace
  an active session leading to unknown consequences.  Bug found by
  inspection (we do not know how to reproduce it, consider that a challenge).
***************
*** 98,104 ****
  <p>
  
  <li><a name="003_tftpd"></a>
! <font color="#009000"><strong>003: RELIABILITY FIX: March 21, 2013</strong></font> &nbsp; <i>All architectures</i><br>
  A denial of services was discovered where certain combinations of
  TFTP options could cause OACK generation to fail, which in turn
  caused a double free in tftpd.
--- 100,107 ----
  <p>
  
  <li><a name="003_tftpd"></a>
! <font color="#009000"><strong>003: RELIABILITY FIX: March 21, 2013</strong></font>
! &nbsp; <i>All architectures</i><br>
  A denial of services was discovered where certain combinations of
  TFTP options could cause OACK generation to fail, which in turn
  caused a double free in tftpd.
***************
*** 109,115 ****
  <p>
  
  <li><a name="004_nginx"></a>
! <font color="#009000"><strong>004: RELIABILITY FIX: May 17, 2013</strong></font> &nbsp; <i>All architectures</i><br>
  A problem exists in
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nginx&sektion=8">nginx(8)</a>
  if proxy_pass is used with untrusted HTTP backend servers.
--- 112,119 ----
  <p>
  
  <li><a name="004_nginx"></a>
! <font color="#009000"><strong>004: RELIABILITY FIX: May 17, 2013</strong></font>
! &nbsp; <i>All architectures</i><br>
  A problem exists in
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nginx&sektion=8">nginx(8)</a>
  if proxy_pass is used with untrusted HTTP backend servers.
***************
*** 124,130 ****
  <p>
  
  <li><a name="005_in6"></a>
! <font color="#009000"><strong>005: RELIABILITY FIX: May 31, 2013</strong></font> &nbsp; <i>All architectures</i><br>
  A local denial of service is possible by an unprivileged user if the
  SIOCSIFADDR ioctl is performed upon an AF_INET6 socket with a specially
  crafted parameter.
--- 128,135 ----
  <p>
  
  <li><a name="005_in6"></a>
! <font color="#009000"><strong>005: RELIABILITY FIX: May 31, 2013</strong></font>
! &nbsp; <i>All architectures</i><br>
  A local denial of service is possible by an unprivileged user if the
  SIOCSIFADDR ioctl is performed upon an AF_INET6 socket with a specially
  crafted parameter.