[BACK]Return to errata55.html CVS log [TXT][DIR] Up to [local] / www

Diff for /www/errata55.html between version 1.30 and 1.31

version 1.30, 2015/01/13 19:47:25 version 1.31, 2015/02/14 04:36:51
Line 83 
Line 83 
   
 <ul>  <ul>
   
 <li><a name="001_icmp"></a>  <li id="001_icmp">
 <font color="#009000"><strong>001: RELIABILITY FIX: March 15, 2014</strong></font>  <font color="#009000"><strong>001: RELIABILITY FIX: March 15, 2014</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Memory corruption happens during  Memory corruption happens during
Line 93 
Line 93 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="002_openssl"></a>  <li id="002_openssl">
 <font color="#009000"><strong>002: SECURITY FIX: April 8, 2014</strong></font>  <font color="#009000"><strong>002: SECURITY FIX: April 8, 2014</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Missing bounds checking in OpenSSL's implementation of the TLS/DTLS  Missing bounds checking in OpenSSL's implementation of the TLS/DTLS
Line 103 
Line 103 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="003_ftp"></a>  <li id="003_ftp">
 <font color="#009000"><strong>003: SECURITY FIX: April 9, 2014</strong></font>  <font color="#009000"><strong>003: SECURITY FIX: April 9, 2014</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Missing hostname check for HTTPS connections in the  Missing hostname check for HTTPS connections in the
Line 114 
Line 114 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="004_openssl"></a>  <li id="004_openssl">
 <font color="#009000"><strong>004: SECURITY FIX: April 12, 2014</strong></font>  <font color="#009000"><strong>004: SECURITY FIX: April 12, 2014</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A use-after-free race condition in OpenSSL's read buffer may permit an attacker  A use-after-free race condition in OpenSSL's read buffer may permit an attacker
Line 124 
Line 124 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="005_openssl"></a>  <li id="005_openssl">
 <font color="#009000"><strong>005: RELIABILITY FIX: May 1, 2014</strong></font>  <font color="#009000"><strong>005: RELIABILITY FIX: May 1, 2014</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 An attacker can trigger generation of an SSL alert which could cause  An attacker can trigger generation of an SSL alert which could cause
Line 134 
Line 134 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="006_libXfont"></a>  <li id="006_libXfont">
 <font color="#009000"><strong>006: SECURITY FIX: May 24, 2014</strong></font>  <font color="#009000"><strong>006: SECURITY FIX: May 24, 2014</strong></font>
 &nbsp; <i>All architectures with X server</i><br>  &nbsp; <i>All architectures with X server</i><br>
 X Font Service Protocol & Font metadata file handling issues in libXfont  X Font Service Protocol & Font metadata file handling issues in libXfont
Line 149 
Line 149 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="007_sendmail"></a>  <li id="007_sendmail">
 <font color="#009000"><strong>007: SECURITY FIX: June 5, 2014</strong></font>  <font color="#009000"><strong>007: SECURITY FIX: June 5, 2014</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Sendmail was not properly closing file descriptions before executing programs.  Sendmail was not properly closing file descriptions before executing programs.
Line 160 
Line 160 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="008_openssl"></a>  <li id="008_openssl">
 <font color="#009000"><strong>008: SECURITY FIX: June 6, 2014</strong></font>  <font color="#009000"><strong>008: SECURITY FIX: June 6, 2014</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 This patch contains a number of SSL library fixes.  This patch contains a number of SSL library fixes.
Line 169 
Line 169 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="009_dhcp"></a>  <li id="009_dhcp">
 <font color="#009000"><strong>009: RELIABILITY FIX: July 30, 2014</strong></font>  <font color="#009000"><strong>009: RELIABILITY FIX: July 30, 2014</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Packets with illegal DHCP options can lead to memory exhaustion of  Packets with illegal DHCP options can lead to memory exhaustion of
Line 181 
Line 181 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="010_openssl"></a>  <li id="010_openssl">
 <font color="#009000"><strong>010: SECURITY FIX: August 9, 2014</strong></font>  <font color="#009000"><strong>010: SECURITY FIX: August 9, 2014</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 This patch contains a number of SSL library fixes.  This patch contains a number of SSL library fixes.
Line 190 
Line 190 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="011_nginx"></a>  <li id="011_nginx">
 <font color="#009000"><strong>011: SECURITY FIX: October 1, 2014</strong></font>  <font color="#009000"><strong>011: SECURITY FIX: October 1, 2014</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 nginx can reuse cached SSL sessions in unrelated contexts, allowing virtual  nginx can reuse cached SSL sessions in unrelated contexts, allowing virtual
Line 201 
Line 201 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="012_openssl"></a>  <li id="012_openssl">
 <font color="#009000"><strong>012: RELIABILITY FIX: October 20, 2014</strong></font>  <font color="#009000"><strong>012: RELIABILITY FIX: October 20, 2014</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Two remotely triggerable memory leaks in OpenSSL can lead to a denial of  Two remotely triggerable memory leaks in OpenSSL can lead to a denial of
Line 211 
Line 211 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="013_kernexec"></a>  <li id="013_kernexec">
 <font color="#009000"><strong>013: RELIABILITY FIX: October 20, 2014</strong></font>  <font color="#009000"><strong>013: RELIABILITY FIX: October 20, 2014</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Executable headers with an unaligned address will trigger a kernel panic.  Executable headers with an unaligned address will trigger a kernel panic.
Line 220 
Line 220 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="014_pfctl"></a>  <li id="014_pfctl">
 <font color="#009000"><strong>014: RELIABILITY FIX: November 17, 2014</strong></font>  <font color="#009000"><strong>014: RELIABILITY FIX: November 17, 2014</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A PF rule using an IPv4 address  A PF rule using an IPv4 address
Line 232 
Line 232 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="015_asr"></a>  <li id="015_asr">
 <font color="#009000"><strong>015: RELIABILITY FIX: November 17, 2014</strong></font>  <font color="#009000"><strong>015: RELIABILITY FIX: November 17, 2014</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Querying an invalid hostname with gethostbyname(3) could cause a NULL deref.  Querying an invalid hostname with gethostbyname(3) could cause a NULL deref.
Line 241 
Line 241 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="016_pipex"></a>  <li id="016_pipex">
 <font color="#009000"><strong>016: RELIABILITY FIX: December 5, 2014</strong></font>  <font color="#009000"><strong>016: RELIABILITY FIX: December 5, 2014</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Several bugs were fixed that allowed a crash from remote when an active pipex  Several bugs were fixed that allowed a crash from remote when an active pipex
Line 251 
Line 251 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="017_pppoe"></a>  <li id="017_pppoe">
 <font color="#009000"><strong>017: RELIABILITY FIX: December 5, 2014</strong></font>  <font color="#009000"><strong>017: RELIABILITY FIX: December 5, 2014</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 An incorrect memcpy call would result in corrupted MAC addresses when  An incorrect memcpy call would result in corrupted MAC addresses when
Line 261 
Line 261 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="018_virtio"></a>  <li id="018_virtio">
 <font color="#009000"><strong>018: RELIABILITY FIX: December 9, 2014</strong></font>  <font color="#009000"><strong>018: RELIABILITY FIX: December 9, 2014</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Several bugs in virtio(4) can lead to hangs with virtio devices,  Several bugs in virtio(4) can lead to hangs with virtio devices,
Line 271 
Line 271 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="019_xserver"></a>  <li id="019_xserver">
 <font color="#009000"><strong>019: SECURITY FIX: December 9, 2014</strong></font>  <font color="#009000"><strong>019: SECURITY FIX: December 9, 2014</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 One year after Ilja van Sprundel discovered and reported a large number  One year after Ilja van Sprundel discovered and reported a large number
Line 284 
Line 284 
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   
 <li><a name="020_libevent"></a>  <li id="020_libevent">
 <font color="#009000"><strong>020: SECURITY FIX: January 13, 2015</strong></font>  <font color="#009000"><strong>020: SECURITY FIX: January 13, 2015</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Fix CVE-2014-6272 in libevent 1.4 event buffer handling.  OpenBSD  Fix CVE-2014-6272 in libevent 1.4 event buffer handling.  OpenBSD
Legend:
Removed from v.1.30  
changed lines
  Added in v.1.31