version 1.30, 2015/01/13 19:47:25 |
version 1.31, 2015/02/14 04:36:51 |
|
|
|
|
<ul> |
<ul> |
|
|
<li><a name="001_icmp"></a> |
<li id="001_icmp"> |
<font color="#009000"><strong>001: RELIABILITY FIX: March 15, 2014</strong></font> |
<font color="#009000"><strong>001: RELIABILITY FIX: March 15, 2014</strong></font> |
<i>All architectures</i><br> |
<i>All architectures</i><br> |
Memory corruption happens during |
Memory corruption happens during |
|
|
A source code patch exists which remedies this problem.</a> |
A source code patch exists which remedies this problem.</a> |
<p> |
<p> |
|
|
<li><a name="002_openssl"></a> |
<li id="002_openssl"> |
<font color="#009000"><strong>002: SECURITY FIX: April 8, 2014</strong></font> |
<font color="#009000"><strong>002: SECURITY FIX: April 8, 2014</strong></font> |
<i>All architectures</i><br> |
<i>All architectures</i><br> |
Missing bounds checking in OpenSSL's implementation of the TLS/DTLS |
Missing bounds checking in OpenSSL's implementation of the TLS/DTLS |
|
|
A source code patch exists which remedies this problem.</a> |
A source code patch exists which remedies this problem.</a> |
<p> |
<p> |
|
|
<li><a name="003_ftp"></a> |
<li id="003_ftp"> |
<font color="#009000"><strong>003: SECURITY FIX: April 9, 2014</strong></font> |
<font color="#009000"><strong>003: SECURITY FIX: April 9, 2014</strong></font> |
<i>All architectures</i><br> |
<i>All architectures</i><br> |
Missing hostname check for HTTPS connections in the |
Missing hostname check for HTTPS connections in the |
|
|
A source code patch exists which remedies this problem.</a> |
A source code patch exists which remedies this problem.</a> |
<p> |
<p> |
|
|
<li><a name="004_openssl"></a> |
<li id="004_openssl"> |
<font color="#009000"><strong>004: SECURITY FIX: April 12, 2014</strong></font> |
<font color="#009000"><strong>004: SECURITY FIX: April 12, 2014</strong></font> |
<i>All architectures</i><br> |
<i>All architectures</i><br> |
A use-after-free race condition in OpenSSL's read buffer may permit an attacker |
A use-after-free race condition in OpenSSL's read buffer may permit an attacker |
|
|
A source code patch exists which remedies this problem.</a> |
A source code patch exists which remedies this problem.</a> |
<p> |
<p> |
|
|
<li><a name="005_openssl"></a> |
<li id="005_openssl"> |
<font color="#009000"><strong>005: RELIABILITY FIX: May 1, 2014</strong></font> |
<font color="#009000"><strong>005: RELIABILITY FIX: May 1, 2014</strong></font> |
<i>All architectures</i><br> |
<i>All architectures</i><br> |
An attacker can trigger generation of an SSL alert which could cause |
An attacker can trigger generation of an SSL alert which could cause |
|
|
A source code patch exists which remedies this problem.</a> |
A source code patch exists which remedies this problem.</a> |
<p> |
<p> |
|
|
<li><a name="006_libXfont"></a> |
<li id="006_libXfont"> |
<font color="#009000"><strong>006: SECURITY FIX: May 24, 2014</strong></font> |
<font color="#009000"><strong>006: SECURITY FIX: May 24, 2014</strong></font> |
<i>All architectures with X server</i><br> |
<i>All architectures with X server</i><br> |
X Font Service Protocol & Font metadata file handling issues in libXfont |
X Font Service Protocol & Font metadata file handling issues in libXfont |
|
|
A source code patch exists which remedies this problem.</a> |
A source code patch exists which remedies this problem.</a> |
<p> |
<p> |
|
|
<li><a name="007_sendmail"></a> |
<li id="007_sendmail"> |
<font color="#009000"><strong>007: SECURITY FIX: June 5, 2014</strong></font> |
<font color="#009000"><strong>007: SECURITY FIX: June 5, 2014</strong></font> |
<i>All architectures</i><br> |
<i>All architectures</i><br> |
Sendmail was not properly closing file descriptions before executing programs. |
Sendmail was not properly closing file descriptions before executing programs. |
|
|
A source code patch exists which remedies this problem.</a> |
A source code patch exists which remedies this problem.</a> |
<p> |
<p> |
|
|
<li><a name="008_openssl"></a> |
<li id="008_openssl"> |
<font color="#009000"><strong>008: SECURITY FIX: June 6, 2014</strong></font> |
<font color="#009000"><strong>008: SECURITY FIX: June 6, 2014</strong></font> |
<i>All architectures</i><br> |
<i>All architectures</i><br> |
This patch contains a number of SSL library fixes. |
This patch contains a number of SSL library fixes. |
|
|
A source code patch exists which remedies this problem.</a> |
A source code patch exists which remedies this problem.</a> |
<p> |
<p> |
|
|
<li><a name="009_dhcp"></a> |
<li id="009_dhcp"> |
<font color="#009000"><strong>009: RELIABILITY FIX: July 30, 2014</strong></font> |
<font color="#009000"><strong>009: RELIABILITY FIX: July 30, 2014</strong></font> |
<i>All architectures</i><br> |
<i>All architectures</i><br> |
Packets with illegal DHCP options can lead to memory exhaustion of |
Packets with illegal DHCP options can lead to memory exhaustion of |
|
|
A source code patch exists which remedies this problem.</a> |
A source code patch exists which remedies this problem.</a> |
<p> |
<p> |
|
|
<li><a name="010_openssl"></a> |
<li id="010_openssl"> |
<font color="#009000"><strong>010: SECURITY FIX: August 9, 2014</strong></font> |
<font color="#009000"><strong>010: SECURITY FIX: August 9, 2014</strong></font> |
<i>All architectures</i><br> |
<i>All architectures</i><br> |
This patch contains a number of SSL library fixes. |
This patch contains a number of SSL library fixes. |
|
|
A source code patch exists which remedies this problem.</a> |
A source code patch exists which remedies this problem.</a> |
<p> |
<p> |
|
|
<li><a name="011_nginx"></a> |
<li id="011_nginx"> |
<font color="#009000"><strong>011: SECURITY FIX: October 1, 2014</strong></font> |
<font color="#009000"><strong>011: SECURITY FIX: October 1, 2014</strong></font> |
<i>All architectures</i><br> |
<i>All architectures</i><br> |
nginx can reuse cached SSL sessions in unrelated contexts, allowing virtual |
nginx can reuse cached SSL sessions in unrelated contexts, allowing virtual |
|
|
A source code patch exists which remedies this problem.</a> |
A source code patch exists which remedies this problem.</a> |
<p> |
<p> |
|
|
<li><a name="012_openssl"></a> |
<li id="012_openssl"> |
<font color="#009000"><strong>012: RELIABILITY FIX: October 20, 2014</strong></font> |
<font color="#009000"><strong>012: RELIABILITY FIX: October 20, 2014</strong></font> |
<i>All architectures</i><br> |
<i>All architectures</i><br> |
Two remotely triggerable memory leaks in OpenSSL can lead to a denial of |
Two remotely triggerable memory leaks in OpenSSL can lead to a denial of |
|
|
A source code patch exists which remedies this problem.</a> |
A source code patch exists which remedies this problem.</a> |
<p> |
<p> |
|
|
<li><a name="013_kernexec"></a> |
<li id="013_kernexec"> |
<font color="#009000"><strong>013: RELIABILITY FIX: October 20, 2014</strong></font> |
<font color="#009000"><strong>013: RELIABILITY FIX: October 20, 2014</strong></font> |
<i>All architectures</i><br> |
<i>All architectures</i><br> |
Executable headers with an unaligned address will trigger a kernel panic. |
Executable headers with an unaligned address will trigger a kernel panic. |
|
|
A source code patch exists which remedies this problem.</a> |
A source code patch exists which remedies this problem.</a> |
<p> |
<p> |
|
|
<li><a name="014_pfctl"></a> |
<li id="014_pfctl"> |
<font color="#009000"><strong>014: RELIABILITY FIX: November 17, 2014</strong></font> |
<font color="#009000"><strong>014: RELIABILITY FIX: November 17, 2014</strong></font> |
<i>All architectures</i><br> |
<i>All architectures</i><br> |
A PF rule using an IPv4 address |
A PF rule using an IPv4 address |
|
|
A source code patch exists which remedies this problem.</a> |
A source code patch exists which remedies this problem.</a> |
<p> |
<p> |
|
|
<li><a name="015_asr"></a> |
<li id="015_asr"> |
<font color="#009000"><strong>015: RELIABILITY FIX: November 17, 2014</strong></font> |
<font color="#009000"><strong>015: RELIABILITY FIX: November 17, 2014</strong></font> |
<i>All architectures</i><br> |
<i>All architectures</i><br> |
Querying an invalid hostname with gethostbyname(3) could cause a NULL deref. |
Querying an invalid hostname with gethostbyname(3) could cause a NULL deref. |
|
|
A source code patch exists which remedies this problem.</a> |
A source code patch exists which remedies this problem.</a> |
<p> |
<p> |
|
|
<li><a name="016_pipex"></a> |
<li id="016_pipex"> |
<font color="#009000"><strong>016: RELIABILITY FIX: December 5, 2014</strong></font> |
<font color="#009000"><strong>016: RELIABILITY FIX: December 5, 2014</strong></font> |
<i>All architectures</i><br> |
<i>All architectures</i><br> |
Several bugs were fixed that allowed a crash from remote when an active pipex |
Several bugs were fixed that allowed a crash from remote when an active pipex |
|
|
A source code patch exists which remedies this problem.</a> |
A source code patch exists which remedies this problem.</a> |
<p> |
<p> |
|
|
<li><a name="017_pppoe"></a> |
<li id="017_pppoe"> |
<font color="#009000"><strong>017: RELIABILITY FIX: December 5, 2014</strong></font> |
<font color="#009000"><strong>017: RELIABILITY FIX: December 5, 2014</strong></font> |
<i>All architectures</i><br> |
<i>All architectures</i><br> |
An incorrect memcpy call would result in corrupted MAC addresses when |
An incorrect memcpy call would result in corrupted MAC addresses when |
|
|
A source code patch exists which remedies this problem.</a> |
A source code patch exists which remedies this problem.</a> |
<p> |
<p> |
|
|
<li><a name="018_virtio"></a> |
<li id="018_virtio"> |
<font color="#009000"><strong>018: RELIABILITY FIX: December 9, 2014</strong></font> |
<font color="#009000"><strong>018: RELIABILITY FIX: December 9, 2014</strong></font> |
<i>All architectures</i><br> |
<i>All architectures</i><br> |
Several bugs in virtio(4) can lead to hangs with virtio devices, |
Several bugs in virtio(4) can lead to hangs with virtio devices, |
|
|
A source code patch exists which remedies this problem.</a> |
A source code patch exists which remedies this problem.</a> |
<p> |
<p> |
|
|
<li><a name="019_xserver"></a> |
<li id="019_xserver"> |
<font color="#009000"><strong>019: SECURITY FIX: December 9, 2014</strong></font> |
<font color="#009000"><strong>019: SECURITY FIX: December 9, 2014</strong></font> |
<i>All architectures</i><br> |
<i>All architectures</i><br> |
One year after Ilja van Sprundel discovered and reported a large number |
One year after Ilja van Sprundel discovered and reported a large number |
|
|
A source code patch exists which remedies this problem.</a> |
A source code patch exists which remedies this problem.</a> |
<p> |
<p> |
|
|
<li><a name="020_libevent"></a> |
<li id="020_libevent"> |
<font color="#009000"><strong>020: SECURITY FIX: January 13, 2015</strong></font> |
<font color="#009000"><strong>020: SECURITY FIX: January 13, 2015</strong></font> |
<i>All architectures</i><br> |
<i>All architectures</i><br> |
Fix CVE-2014-6272 in libevent 1.4 event buffer handling. OpenBSD |
Fix CVE-2014-6272 in libevent 1.4 event buffer handling. OpenBSD |