===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata57.html,v
retrieving revision 1.44
retrieving revision 1.45
diff -c -r1.44 -r1.45
*** www/errata57.html	2017/03/28 04:04:52	1.44
--- www/errata57.html	2017/03/28 06:41:18	1.45
***************
*** 71,77 ****
  <p>
  Patches for the OpenBSD base system are distributed as unified diffs.
  Each patch is cryptographically signed with the
! <a href="http://man.openbsd.org/signify">signify(1)</a> tool and contains
  usage instructions.
  All the following patches are also available in one
  <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.7.tar.gz">tar.gz file</a>
--- 71,77 ----
  <p>
  Patches for the OpenBSD base system are distributed as unified diffs.
  Each patch is cryptographically signed with the
! <a href="http://man.openbsd.org/OpenBSD-5.7/signify.1">signify(1)</a> tool and contains
  usage instructions.
  All the following patches are also available in one
  <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.7.tar.gz">tar.gz file</a>
***************
*** 85,91 ****
  
  <ul>
  
! <li id="001_sparc64_miniroot">
  <font color="#009000"><strong>001: INSTALL ISSUE: May 1, 2015</strong></font>
  &nbsp; <i>sparc64</i><br>
  The "miniroot" install method is broken (related to the addition of
--- 85,91 ----
  
  <ul>
  
! <li id="p001_sparc64_miniroot">
  <font color="#009000"><strong>001: INSTALL ISSUE: May 1, 2015</strong></font>
  &nbsp; <i>sparc64</i><br>
  The "miniroot" install method is broken (related to the addition of
***************
*** 95,101 ****
  No patch is available for obvious reasons, so use a different install method.
  <p>
  
! <li id="002_libxfont">
  <font color="#009000"><strong>002: SECURITY FIX: March 18, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  Buffer overflows in libXfont
--- 95,101 ----
  No patch is available for obvious reasons, so use a different install method.
  <p>
  
! <li id="p002_libxfont">
  <font color="#009000"><strong>002: SECURITY FIX: March 18, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  Buffer overflows in libXfont
***************
*** 108,114 ****
  <br>Note that the instructions should read <code>cd /usr/xenocara/lib/libXfont</code>.
  <p>
  
! <li id="003_openssl">
  <font color="#009000"><strong>003: SECURITY FIX: March 19, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  Fix several crash causing defects from OpenSSL.<br>
--- 108,114 ----
  <br>Note that the instructions should read <code>cd /usr/xenocara/lib/libXfont</code>.
  <p>
  
! <li id="p003_openssl">
  <font color="#009000"><strong>003: SECURITY FIX: March 19, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  Fix several crash causing defects from OpenSSL.<br>
***************
*** 127,133 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="004_smtpd">
  <font color="#009000"><strong>004: RELIABILITY FIX: April 17, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  Fix a logic error in smtpd handling of SNI.
--- 127,133 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p004_smtpd">
  <font color="#009000"><strong>004: RELIABILITY FIX: April 17, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  Fix a logic error in smtpd handling of SNI.
***************
*** 137,143 ****
  A source code patch exists which remedies this problem.</a>
  <p>
    
! <li id="005_httpd">
  <font color="#009000"><strong>005: RELIABILITY FIX: April 30, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  A remote user can crash httpd by forcing the daemon to log to a file
--- 137,143 ----
  A source code patch exists which remedies this problem.</a>
  <p>
    
! <li id="p005_httpd">
  <font color="#009000"><strong>005: RELIABILITY FIX: April 30, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  A remote user can crash httpd by forcing the daemon to log to a file
***************
*** 147,153 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="006_elf">
  <font color="#009000"><strong>006: SECURITY FIX: April 30, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  Malformed binaries could trigger kernel panics or view kernel memory.
--- 147,153 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p006_elf">
  <font color="#009000"><strong>006: SECURITY FIX: April 30, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  Malformed binaries could trigger kernel panics or view kernel memory.
***************
*** 156,162 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="007_tar">
  <font color="#009000"><strong>007: SECURITY FIX: April 30, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  Multiple issues in tar/pax/cpio:
--- 156,162 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p007_tar">
  <font color="#009000"><strong>007: SECURITY FIX: April 30, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  Multiple issues in tar/pax/cpio:
***************
*** 171,177 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="008_smtpd">
  <font color="#009000"><strong>008: RELIABILITY FIX: June 11, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  Fix multiple reliability issues in smtpd:
--- 171,177 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p008_smtpd">
  <font color="#009000"><strong>008: RELIABILITY FIX: June 11, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  Fix multiple reliability issues in smtpd:
***************
*** 183,189 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="009_openssl">
  <font color="#009000"><strong>009: SECURITY FIX: June 11, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  Fix several defects from OpenSSL:
--- 183,189 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p009_openssl">
  <font color="#009000"><strong>009: SECURITY FIX: June 11, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  Fix several defects from OpenSSL:
***************
*** 201,207 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="010_tcp">
  <font color="#009000"><strong>010: SECURITY FIX: July 14, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  A TCP socket can become confused and not properly cleanup resources.
--- 201,207 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p010_tcp">
  <font color="#009000"><strong>010: SECURITY FIX: July 14, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  A TCP socket can become confused and not properly cleanup resources.
***************
*** 210,216 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="011_execve">
  <font color="#009000"><strong>011: RELIABILITY FIX: July 26, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  A kernel memory leak could be triggered by an unprivileged user in
--- 210,216 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p011_execve">
  <font color="#009000"><strong>011: RELIABILITY FIX: July 26, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  A kernel memory leak could be triggered by an unprivileged user in
***************
*** 220,226 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="012_patch">
  <font color="#009000"><strong>012: SECURITY FIX: July 26, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  The patch utility could be made to invoke arbitrary commands via
--- 220,226 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p012_patch">
  <font color="#009000"><strong>012: SECURITY FIX: July 26, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  The patch utility could be made to invoke arbitrary commands via
***************
*** 231,237 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="013_patch">
  <font color="#009000"><strong>013: SECURITY FIX: July 30, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  The patch utility could become desyncronized processing ed(1)-style diffs.
--- 231,237 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p013_patch">
  <font color="#009000"><strong>013: SECURITY FIX: July 30, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  The patch utility could become desyncronized processing ed(1)-style diffs.
***************
*** 240,246 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="014_sshd">
  <font color="#009000"><strong>014: SECURITY FIX: August 16, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  A change to sshd resulted in incorrect permissions being applied to pseudo
--- 240,246 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p014_sshd">
  <font color="#009000"><strong>014: SECURITY FIX: August 16, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  A change to sshd resulted in incorrect permissions being applied to pseudo
***************
*** 250,256 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="015_relayd">
  <font color="#009000"><strong>015: RELIABILITY FIX: September 28, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  Various problems were identified in relayd and merged back from
--- 250,256 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p015_relayd">
  <font color="#009000"><strong>015: RELIABILITY FIX: September 28, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  Various problems were identified in relayd and merged back from
***************
*** 260,266 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="016_uvm">
  <font color="#009000"><strong>016: RELIABILITY FIX: September 28, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  An incorrect operation in uvm could result in system panics.
--- 260,266 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p016_uvm">
  <font color="#009000"><strong>016: RELIABILITY FIX: September 28, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  An incorrect operation in uvm could result in system panics.
***************
*** 269,275 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="017_smtpd">
  <font color="#009000"><strong>017: SECURITY FIX: October 1, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  Fix multiple reliability and security issues in smtpd:<br>
--- 269,275 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p017_smtpd">
  <font color="#009000"><strong>017: SECURITY FIX: October 1, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  Fix multiple reliability and security issues in smtpd:<br>
***************
*** 288,294 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="018_kevent">
  <font color="#009000"><strong>018: RELIABILITY FIX: October 14, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  A problem with timer kevents could result in a kernel hang (local denial
--- 288,294 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p018_kevent">
  <font color="#009000"><strong>018: RELIABILITY FIX: October 14, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  A problem with timer kevents could result in a kernel hang (local denial
***************
*** 297,303 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="019_obj2txt">
  <font color="#009000"><strong>019: RELIABILITY FIX: October 15, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  The OBJ_obj2txt function in libcrypto contains a one byte buffer overrun
--- 297,303 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p019_obj2txt">
  <font color="#009000"><strong>019: RELIABILITY FIX: October 15, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  The OBJ_obj2txt function in libcrypto contains a one byte buffer overrun
***************
*** 306,312 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="020_rsn">
  <font color="#009000"><strong>020: RELIABILITY FIX: November 9, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  Insufficient validation of RSN element group cipher values in 802.11
--- 306,312 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p020_rsn">
  <font color="#009000"><strong>020: RELIABILITY FIX: November 9, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  Insufficient validation of RSN element group cipher values in 802.11
***************
*** 315,321 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="021_clientcert">
  <font color="#009000"><strong>021: RELIABILITY FIX: Dec 3, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  A NULL pointer deference could be triggered by a crafted certificate sent to
--- 315,321 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p021_clientcert">
  <font color="#009000"><strong>021: RELIABILITY FIX: Dec 3, 2015</strong></font>
  &nbsp; <i>All architectures</i><br>
  A NULL pointer deference could be triggered by a crafted certificate sent to
***************
*** 324,330 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="022_sshd">
  <font color="#009000"><strong>022: SECURITY FIX: January 14, 2016</strong></font>
  &nbsp; <i>All architectures</i><br>
  Experimental roaming code in the ssh client could be tricked by a hostile sshd
--- 324,330 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p022_sshd">
  <font color="#009000"><strong>022: SECURITY FIX: January 14, 2016</strong></font>
  &nbsp; <i>All architectures</i><br>
  Experimental roaming code in the ssh client could be tricked by a hostile sshd
***************
*** 337,343 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="023_sshd">
  <font color="#009000"><strong>023: SECURITY FIX: March 10, 2016</strong></font>
  &nbsp; <i>All architectures</i><br>
  <a href="https://www.openssh.com/txt/x11fwd.adv">
--- 337,343 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p023_sshd">
  <font color="#009000"><strong>023: SECURITY FIX: March 10, 2016</strong></font>
  &nbsp; <i>All architectures</i><br>
  <a href="https://www.openssh.com/txt/x11fwd.adv">
***************
*** 350,356 ****
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="024_in6bind">
  <font color="#009000"><strong>024: SECURITY FIX: March 16, 2016</strong></font>
  &nbsp; <i>All architectures</i><br>
  Insufficient checks in IPv6 socket binding and UDP IPv6 option
--- 350,356 ----
  A source code patch exists which remedies this problem.</a>
  <p>
  
! <li id="p024_in6bind">
  <font color="#009000"><strong>024: SECURITY FIX: March 16, 2016</strong></font>
  &nbsp; <i>All architectures</i><br>
  Insufficient checks in IPv6 socket binding and UDP IPv6 option