[BACK]Return to errata56.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/errata56.html, Revision 1.45

1.1       jsg         1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
                      2: <html>
                      3: <head>
1.45    ! tj          4: <title>OpenBSD 5.6 Errata</title>
1.1       jsg         5: <meta name="description" content="the OpenBSD CD errata page">
                      6: <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
1.44      deraadt     7: <meta name="viewport" content="width=device-width, initial-scale=1">
                      8: <link rel="stylesheet" type="text/css" href="openbsd.css">
1.30      sthen       9: <link rel="canonical" href="http://www.openbsd.org/errata56.html">
1.1       jsg        10: </head>
                     11:
                     12: <!--
                     13:                        IMPORTANT REMINDER
                     14:        IF YOU ADD A NEW ERRATUM, MAIL THE PATCH TO TECH AND ANNOUNCE
                     15: -->
                     16:
                     17: <body bgcolor="#ffffff" text="#000000" link="#23238E">
                     18:
1.44      deraadt    19: <h2>
                     20: <a href="index.html">
                     21: <font color="#0000ff"><i>Open</i></font><font color="#000084">BSD</font></a>
1.45    ! tj         22: <font color="#e00000">5.6 Errata</font>
        !            23: </h2>
1.44      deraadt    24: <hr>
1.1       jsg        25:
                     26: <a href=stable.html>For OpenBSD patch branch information, please refer here.</a><br>
                     27: <br>
                     28: For errata on a certain release, click below:<br>
                     29: <a href="errata21.html">2.1</a>,
                     30: <a href="errata22.html">2.2</a>,
                     31: <a href="errata23.html">2.3</a>,
                     32: <a href="errata24.html">2.4</a>,
                     33: <a href="errata25.html">2.5</a>,
                     34: <a href="errata26.html">2.6</a>,
                     35: <a href="errata27.html">2.7</a>,
                     36: <a href="errata28.html">2.8</a>,
                     37: <a href="errata29.html">2.9</a>,
                     38: <a href="errata30.html">3.0</a>,
                     39: <a href="errata31.html">3.1</a>,
                     40: <a href="errata32.html">3.2</a>,
                     41: <a href="errata33.html">3.3</a>,
                     42: <a href="errata34.html">3.4</a>,
                     43: <a href="errata35.html">3.5</a>,
                     44: <a href="errata36.html">3.6</a>,
                     45: <br>
                     46: <a href="errata37.html">3.7</a>,
                     47: <a href="errata38.html">3.8</a>,
                     48: <a href="errata39.html">3.9</a>,
                     49: <a href="errata40.html">4.0</a>,
                     50: <a href="errata41.html">4.1</a>,
                     51: <a href="errata42.html">4.2</a>,
                     52: <a href="errata43.html">4.3</a>,
                     53: <a href="errata44.html">4.4</a>,
                     54: <a href="errata45.html">4.5</a>,
                     55: <a href="errata46.html">4.6</a>,
                     56: <a href="errata47.html">4.7</a>,
                     57: <a href="errata48.html">4.8</a>,
                     58: <a href="errata49.html">4.9</a>,
                     59: <a href="errata50.html">5.0</a>,
                     60: <a href="errata51.html">5.1</a>,
                     61: <a href="errata52.html">5.2</a>,
                     62: <br>
                     63: <a href="errata53.html">5.3</a>,
                     64: <a href="errata54.html">5.4</a>,
1.21      deraadt    65: <a href="errata55.html">5.5</a>,
1.39      deraadt    66: <a href="errata57.html">5.7</a>,
1.43      deraadt    67: <a href="errata58.html">5.8</a>,
                     68: <a href="errata59.html">5.9</a>.
1.1       jsg        69: <br>
                     70: <hr>
                     71:
                     72: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6.tar.gz">
                     73: You can also fetch a tar.gz file containing all the following patches</a>.
                     74: This file is updated once a day.
                     75: <p>
                     76:
                     77: The patches below are available in CVS via the
                     78: <code>OPENBSD_5_6</code> <a href="stable.html">patch branch</a>.
                     79: <p>
                     80:
                     81: For more detailed information on how to install patches to OpenBSD, please
                     82: consult the <a href="./faq/faq10.html#Patches">OpenBSD FAQ</a>.
                     83: <p>
                     84:
                     85: <hr>
                     86:
                     87: <ul>
                     88:
1.16      bentley    89: <li id="001_rxr">
1.1       jsg        90: <font color="#009000"><strong>001: RELIABILITY FIX: September 5, 2014</strong></font>
                     91: &nbsp; <i>All architectures</i><br>
                     92: Incorrect RX ring computation leads to panics under load with bge(4), em(4) and ix(4).
                     93: <br>
1.2       stsp       94: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/001_rxr.patch.sig">
                     95: A source code patch exists which remedies this problem.</a>
                     96: <p>
                     97:
1.16      bentley    98: <li id="002_nd6">
1.2       stsp       99: <font color="#009000"><strong>002: RELIABILITY FIX: October 1, 2014</strong></font>
                    100: &nbsp; <i>All architectures</i><br>
                    101: If IPv6 autoconf is active on an interface and the autoconfprivacy extension is used,
                    102: redundant addresses are added whenever an autoconfprivacy address expires.
                    103: The autoconfprivacy extension is used by default and can be disabled with ifconfig(8)
                    104: as a workaround:
                    105: <pre>
                    106: # ifconfig em0 -autoconfprivacy
                    107: </pre>
                    108: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/002_nd6.patch.sig">
                    109: A source code patch exists which remedies this problem.</a>
                    110: <p>
                    111:
1.16      bentley   112: <li id="003_nginx">
1.2       stsp      113: <font color="#009000"><strong>003: SECURITY FIX: October 1, 2014</strong></font>
                    114: &nbsp; <i>All architectures</i><br>
                    115: nginx can reuse cached SSL sessions in unrelated contexts, allowing virtual
                    116: host confusion attacks in some configurations.
                    117: This issue was assigned CVE-2014-3616.
                    118: <br>
                    119: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/003_nginx.patch.sig">
1.1       jsg       120: A source code patch exists which remedies this problem.</a>
                    121: <p>
                    122:
1.16      bentley   123: <li id="004_kernexec">
1.4       tedu      124: <font color="#009000"><strong>004: RELIABILITY FIX: October 20, 2014</strong></font>
                    125: &nbsp; <i>All architectures</i><br>
                    126: Executable headers with an unaligned address will trigger a kernel panic.
                    127: <br>
                    128: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/004_kernexec.patch.sig">
                    129: A source code patch exists which remedies this problem.</a>
                    130: <p>
                    131:
1.16      bentley   132: <li id="005_nosslv3">
1.5       tedu      133: <font color="#009000"><strong>005: SECURITY FIX: October 20, 2014</strong></font>
                    134: &nbsp; <i>All architectures</i><br>
                    135: This patch disables the SSLv3 protocol by default.
                    136: <p>
                    137: <i>
                    138: Applications depending on SSLv3 may need to be recompiled with
                    139: <pre>    SSL_CTX_clear_option(ctx, SSL_OP_NO_SSLv3);</pre>
                    140: but we recommend against the continued use of this obsolete protocol.
                    141: </i>
                    142: <p>
                    143: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/005_nosslv3.patch.sig">
                    144: A source code patch exists which remedies this problem.</a>
                    145: <p>
                    146:
1.16      bentley   147: <li id="006_relayd">
1.6       florian   148: <font color="#009000"><strong>006: RELIABILITY FIX: November 17, 2014</strong></font>
                    149: &nbsp; <i>All architectures</i><br>
                    150: Certain http requests can crash relayd.
                    151: <br>
                    152: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/006_relayd.patch.sig">
                    153: A source code patch exists which remedies this problem.</a>
                    154: <p>
                    155:
1.16      bentley   156: <li id="007_pfctl">
1.8       tedu      157: <font color="#009000"><strong>007: RELIABILITY FIX: November 17, 2014</strong></font>
1.7       sthen     158: &nbsp; <i>All architectures</i><br>
1.8       tedu      159: A PF rule using an IPv4 address
                    160: followed by an IPv6 address and then a dynamic address, e.g. "pass
                    161: from {192.0.2.1 2001:db8::1} to (pppoe0)", will have an incorrect /32
                    162: mask applied to the dynamic address.
1.7       sthen     163: <br>
                    164: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/007_pfctl.patch.sig">
1.8       tedu      165: A source code patch exists which remedies this problem.</a>
                    166: <p>
                    167:
1.16      bentley   168: <li id="008_asr">
1.8       tedu      169: <font color="#009000"><strong>008: RELIABILITY FIX: November 17, 2014</strong></font>
                    170: &nbsp; <i>All architectures</i><br>
                    171: Querying an invalid hostname with gethostbyname(3) could cause a NULL deref.
                    172: <br>
                    173: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/008_asr.patch.sig">
1.7       sthen     174: A source code patch exists which remedies this problem.</a>
                    175: <p>
                    176:
1.16      bentley   177: <li id="009_httpd">
1.9       reyk      178: <font color="#009000"><strong>009: RELIABILITY FIX: November 18, 2014</strong></font>
                    179: &nbsp; <i>All architectures</i><br>
                    180: httpd was developed very rapidly in the weeks before 5.6 release, and
                    181: it has a few flaws.  It would be nice to get these flaws fully
                    182: remediated before the next release, and that requires the community to
                    183: want to use it.  Therefore here is a "jumbo" patch that brings in the
                    184: most important fixes.
                    185: <br>
                    186: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/009_httpd.patch.sig">
                    187: A source code patch exists which remedies this problem.</a>
1.19      tedu      188: <br>
                    189: <i>Unfortunately the source tree found on the CD set contains a slightly different
                    190: checkout, from just before the release was finished and is missing a few httpd
                    191: commits. Therefore, the patch above will not apply correctly. Users are encouraged
                    192: to use cvs to get the latest httpd sources if interested.</i>
1.9       reyk      193: <p>
                    194:
1.16      bentley   195: <li id="010_pipex">
1.10      tedu      196: <font color="#009000"><strong>010: RELIABILITY FIX: December 5, 2014</strong></font>
                    197: &nbsp; <i>All architectures</i><br>
                    198: Several bugs were fixed that allowed a crash from remote when an active pipex
                    199: session exists.
                    200: <br>
                    201: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/010_pipex.patch.sig">
                    202: A source code patch exists which remedies this problem.</a>
                    203: <p>
                    204:
1.16      bentley   205: <li id="011_pppoe">
1.11      tedu      206: <font color="#009000"><strong>011: RELIABILITY FIX: December 5, 2014</strong></font>
1.10      tedu      207: &nbsp; <i>All architectures</i><br>
                    208: An incorrect memcpy call would result in corrupted MAC addresses when
                    209: using PPPOE.
                    210: <br>
                    211: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/011_pppoe.patch.sig">
                    212: A source code patch exists which remedies this problem.</a>
                    213: <p>
                    214:
1.16      bentley   215: <li id="012_unbound">
1.14      tedu      216: <font color="#009000"><strong>012: RELIABILITY FIX: December 9, 2014</strong></font>
1.12      tedu      217: &nbsp; <i>All architectures</i><br>
1.13      tedu      218: Fix a denial of service where a malicious authority could make the resolver chase an
                    219: endless series of delegations. (CVE-2014-8602)
1.12      tedu      220: <br>
1.13      tedu      221: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/012_unbound.patch.sig">
1.12      tedu      222: A source code patch exists which remedies this problem.</a>
                    223: <p>
                    224:
1.16      bentley   225: <li id="013_virtio">
1.14      tedu      226: <font color="#009000"><strong>013: RELIABILITY FIX: December 9, 2014</strong></font>
1.12      tedu      227: &nbsp; <i>All architectures</i><br>
1.13      tedu      228: Missing memory barriers in virtio(4) can lead to hangs with virtio devices,
                    229: like vio(4) and vioblk(4).
1.12      tedu      230: <br>
1.13      tedu      231: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/013_virtio.patch.sig">
1.12      tedu      232: A source code patch exists which remedies this problem.</a>
                    233: <p>
                    234:
1.16      bentley   235: <li id="014_xserver">
1.14      tedu      236: <font color="#009000"><strong>014: SECURITY FIX: December 9, 2014</strong></font>
1.12      tedu      237: &nbsp; <i>All architectures</i><br>
                    238: One year after Ilja van Sprundel discovered and reported a large number
                    239: of issues in the way the X server code base handles requests from X clients,
                    240: they have been fixed.
                    241: <br>
                    242: <a href="http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/">X Advisory</a>
                    243: <br>
                    244: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/014_xserver.patch.sig">
                    245: A source code patch exists which remedies this problem.</a>
                    246: <p>
                    247:
1.16      bentley   248: <li id="015_libevent">
1.15      bluhm     249: <font color="#009000"><strong>015: SECURITY FIX: January 13, 2015</strong></font>
                    250: &nbsp; <i>All architectures</i><br>
                    251: Fix CVE-2014-6272 in libevent 1.4 event buffer handling.  OpenBSD
                    252: base uses it for the programs: cu tmux ftp-proxy httpd ldapd relayd
                    253: tftp-proxy tftpd
                    254: <br>
                    255: <a href="http://www.wangafu.net/~nickm/volatile/advisory.txt.asc">Libevent Advisory</a>
                    256: <br>
                    257: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/015_libevent.patch.sig">
                    258: A source code patch exists which remedies this problem.</a>
                    259: <p>
1.10      tedu      260:
1.17      tedu      261: <li id="016_xserver">
                    262: <font color="#009000"><strong>016: SECURITY FIX: March 3, 2015</strong></font>
                    263: &nbsp; <i>All architectures</i><br>
                    264: Information leak in the XkbSetGeometry request of X servers.
                    265: <br>
                    266: For more information, see the
                    267: <a href="http://www.x.org/wiki/Development/Security/Advisory-2015-02-10/">X.org advisory</a>.
                    268: <br>
                    269: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/016_xserver.patch.sig">
                    270: A source code patch exists which remedies this problem.</a>
                    271: <p>
                    272:
1.20      tedu      273: <li id="017_openssl">
                    274: <font color="#009000"><strong>017: SECURITY FIX: March 13, 2015</strong></font>
                    275: &nbsp; <i>All architectures</i><br>
                    276: Don't permit TLS client connections to be downgraded to weak keys.
                    277: <br>
                    278: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/017_openssl.patch.sig">
                    279: A source code patch exists which remedies this problem.</a>
                    280: <p>
                    281:
                    282: <li id="018_freetype">
                    283: <font color="#009000"><strong>018: SECURITY FIX: March 13, 2015</strong></font>
                    284: &nbsp; <i>All architectures</i><br>
                    285: Another fix for buffer overflows in malformed fonts.
                    286: <br>
                    287: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/018_freetype.patch.sig">
                    288: A source code patch exists which remedies this problem.</a>
                    289: <p>
                    290:
1.23      tedu      291: <li id="019_libxfont">
1.22      tedu      292: <font color="#009000"><strong>019: SECURITY FIX: March 18, 2015</strong></font>
                    293: &nbsp; <i>All architectures</i><br>
                    294: Buffer overflows in libXfont
                    295: <br>
                    296: For more information, see the
                    297: <a href="http://www.x.org/wiki/Development/Security/Advisory-2015-03-17/">X.org advisory</a>.
                    298: <br>
                    299: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/019_libxfont.patch.sig">
1.23      tedu      300: A source code patch exists which remedies this problem.</a>
1.24      tedu      301: <br>Note that the instructions should read <code>cd /usr/xenocara/lib/libXfont</code>.
1.23      tedu      302: <p>
                    303:
                    304: <li id="020_openssl">
                    305: <font color="#009000"><strong>020: SECURITY FIX: March 19, 2015</strong></font>
                    306: &nbsp; <i>All architectures</i><br>
                    307: Fix several crash causing defects from OpenSSL.<br>
                    308: These include:<br>
                    309: CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error<br>
                    310: CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp<br>
                    311: CVE-2015-0287 - ASN.1 structure reuse memory corruption<br>
                    312: CVE-2015-0288 - X509_to_X509_REQ NULL pointer deref<br>
                    313: CVE-2015-0289 - PKCS7 NULL pointer dereferences<br>
                    314: <br>
                    315: Several other issues did not apply or were already fixed.<br>
                    316: For more information, see the
                    317: <a href="https://www.openssl.org/news/secadv_20150319.txt">OpenSSL advisory</a>.
                    318: <br>
                    319: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/020_openssl.patch.sig">
1.22      tedu      320: A source code patch exists which remedies this problem.</a>
                    321: <p>
                    322:
1.25      gilles    323: <li id="021_smtpd">
                    324: <font color="#009000"><strong>021: RELIABILITY FIX: April 17, 2015</strong></font>
                    325: &nbsp; <i>All architectures</i><br>
                    326: Fix a logic error in smtpd handling of SNI.
                    327: This could allow a remote user to crash the server or provoke a disconnect of other sessions.
                    328: <br>
                    329: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/021_smtpd.patch.sig">
1.28      deraadt   330: A source code patch exists which remedies this problem.</a>
1.25      gilles    331: <p>
                    332:
1.26      florian   333: <li id="022_httpd">
                    334: <font color="#009000"><strong>022: RELIABILITY FIX: April 30, 2015</strong></font>
                    335: &nbsp; <i>All architectures</i><br>
                    336: A remote user can crash httpd by forcing the daemon to log to a file
                    337: before the logging system was initialized.
                    338: <br>
                    339: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/022_httpd.patch.sig">
1.28      deraadt   340: A source code patch exists which remedies this problem.</a>
1.26      florian   341: <p>
                    342:
1.27      guenther  343: <li id="023_elf">
1.29      deraadt   344: <font color="#009000"><strong>023: SECURITY FIX: April 30, 2015</strong></font>
1.27      guenther  345: &nbsp; <i>All architectures</i><br>
                    346: Malformed binaries could trigger kernel panics or view kernel memory.
                    347: <br>
                    348: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/023_elf.patch.sig">
1.28      deraadt   349: A source code patch exists which remedies this problem.</a>
1.27      guenther  350: <p>
                    351:
                    352: <li id="024_tar">
1.29      deraadt   353: <font color="#009000"><strong>024: SECURITY FIX: April 30, 2015</strong></font>
1.27      guenther  354: &nbsp; <i>All architectures</i><br>
                    355: Multiple issues in tar/pax/cpio:
                    356: <ul>
                    357: <li>extracting a malicious archive could create files outside of
                    358: the current directory without using pre-existing symlinks to 'escape',
                    359: and could change the timestamps and modes on preexisting files
                    360: <li>tar without -P would permit extraction of paths with ".." components
                    361: <li>there was a buffer overflow in the handling of pax extension headers
                    362: </ul>
                    363: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/024_tar.patch.sig">
1.31      deraadt   364: A source code patch exists which remedies this problem.</a>
                    365: <p>
                    366:
                    367: <li id="025_smtpd">
                    368: <font color="#009000"><strong>025: RELIABILITY FIX: June 11, 2015</strong></font>
                    369: &nbsp; <i>All architectures</i><br>
                    370: Fix multiple reliability issues in smtpd:
                    371: <ul>
                    372: <li>a local user can cause smtpd to fail by writing an invalid imsg to control socket.
                    373: <li>a local user can prevent smtpd from serving new requests by exhausting descriptors.
                    374: </ul>
                    375: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/025_smtpd.patch.sig">
                    376: A source code patch exists which remedies this problem.</a>
                    377: <p>
                    378:
                    379: <li id="026_openssl">
                    380: <font color="#009000"><strong>026: SECURITY FIX: June 11, 2015</strong></font>
                    381: &nbsp; <i>All architectures</i><br>
                    382: Fix several defects from OpenSSL:
                    383: <ul>
                    384: <li>CVE-2015-1788 - Malformed ECParameters causes infinite loop
                    385: <li>CVE-2015-1789 - Exploitable out-of-bounds read in X509_cmp_time
                    386: <li>CVE-2015-1792 - CMS verify infinite loop with unknown hash function
                    387: </ul>
1.32      doug      388: Note that CMS was already disabled in LibreSSL.
                    389: Several other issues did not apply or were already fixed and one is under review.<br>
                    390: For more information, see the
                    391: <a href="https://www.openssl.org/news/secadv_20150611.txt">OpenSSL advisory</a>.
                    392: <br>
1.31      deraadt   393: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/026_openssl.patch.sig">
1.28      deraadt   394: A source code patch exists which remedies this problem.</a>
1.27      guenther  395: <p>
                    396:
1.37      deraadt   397: <li id="027_tcp">
1.34      deraadt   398: <font color="#009000"><strong>027: SECURITY FIX: July 14, 2015</strong></font>
                    399: &nbsp; <i>All architectures</i><br>
                    400: A TCP socket can become confused and not properly cleanup resources.
                    401: <br>
1.36      deraadt   402: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/027_tcp_persist.patch.sig">
1.37      deraadt   403: A source code patch exists which remedies this problem.</a>
                    404: <p>
                    405:
                    406: <li id="028_execve">
                    407: <font color="#009000"><strong>028: RELIABILITY FIX: July 26, 2015</strong></font>
                    408: &nbsp; <i>All architectures</i><br>
                    409: A kernel memory leak could be triggered by an unprivileged user in
                    410: a failure case when using execve under systrace.
                    411: <br>
                    412: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/028_execve.patch.sig">
                    413: A source code patch exists which remedies this problem.</a>
                    414: <p>
                    415:
                    416: <li id="029_patch">
                    417: <font color="#009000"><strong>029: SECURITY FIX: July 26, 2015</strong></font>
                    418: &nbsp; <i>All architectures</i><br>
                    419: The patch utility could be made to invoke arbitrary commands via
                    420: the obsolete SCCS and RCS support when processing a crafted input file.
                    421: This patch deletes the SCCS and RCS support.
                    422: <br>
                    423: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/029_patch.patch.sig">
1.34      deraadt   424: A source code patch exists which remedies this problem.</a>
                    425: <p>
                    426:
1.38      deraadt   427: <li id="030_patch">
                    428: <font color="#009000"><strong>030: SECURITY FIX: July 30, 2015</strong></font>
                    429: &nbsp; <i>All architectures</i><br>
                    430: The patch utility could become desyncronized processing ed(1)-style diffs.
                    431: <br>
                    432: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/030_patch.patch.sig">
                    433: A source code patch exists which remedies this problem.</a>
                    434: <p>
                    435:
1.40      deraadt   436: <li id="031_smtpd">
                    437: <font color="#009000"><strong>031: SECURITY FIX: October 1, 2015</strong></font>
                    438: &nbsp; <i>All architectures</i><br>
                    439: Fix multiple reliability and security issues in smtpd:<br>
                    440: <ul>
                    441: <li>local and remote users could make smtpd crash or stop serving requests.
                    442: <li>a buffer overflow in the unprivileged, non-chrooted smtpd (lookup)
                    443:     process could allow a local user to cause a crash or potentially
                    444:     execute arbitrary code.
                    445: <li>a use-after-free in the unprivileged, non-chrooted smtpd (lookup)
                    446:     process could allow a remote attacker to cause a crash or potentially
                    447:     execute arbitrary code.
                    448: <li>hardlink and symlink attacks allowed a local user to unset chflags or
                    449:     leak the first line of an arbitrary file.
                    450: </ul>
                    451: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/031_smtpd.patch.sig">
                    452: A source code patch exists which remedies this problem.</a>
                    453: <p>
                    454:
1.41      sthen     455: <li id="032_kevent">
                    456: <font color="#009000"><strong>032: RELIABILITY FIX: October 14, 2015</strong></font>
                    457: &nbsp; <i>All architectures</i><br>
                    458: A problem with timer kevents could result in a kernel hang (local denial
                    459: of service).<br>
                    460: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/032_kevent.patch.sig">
                    461: A source code patch exists which remedies this problem.</a>
                    462: <p>
                    463:
1.42      tedu      464: <li id="033_obj2txt">
                    465: <font color="#009000"><strong>033: RELIABILITY FIX: October 15, 2015</strong></font>
                    466: &nbsp; <i>All architectures</i><br>
                    467: The OBJ_obj2txt function in libcrypto contains a one byte buffer overrun
                    468: and memory leak, as reported by Qualys Security.<br>
                    469: <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/033_obj2txt.patch.sig">
                    470: A source code patch exists which remedies this problem.</a>
                    471: <p>
                    472:
1.1       jsg       473: </ul>
                    474:
1.18      tedu      475: <hr>
                    476:
1.1       jsg       477: </body>
                    478: </html>