[BACK]Return to errata59.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/errata59.html, Revision 1.38

1.1       deraadt     1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
                      2: <html>
                      3: <head>
1.6       tj          4: <title>OpenBSD 5.9 Errata</title>
1.1       deraadt     5: <meta name="description" content="the OpenBSD CD errata page">
                      6: <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
1.4       deraadt     7: <meta name="viewport" content="width=device-width, initial-scale=1">
                      8: <link rel="stylesheet" type="text/css" href="openbsd.css">
1.23      tb          9: <link rel="canonical" href="https://www.openbsd.org/errata59.html">
1.1       deraadt    10: </head>
                     11:
                     12: <!--
                     13:                        IMPORTANT REMINDER
                     14:        IF YOU ADD A NEW ERRATUM, MAIL THE PATCH TO TECH AND ANNOUNCE
                     15: -->
                     16: <body bgcolor="#ffffff" text="#000000" link="#23238E">
                     17:
1.4       deraadt    18: <h2>
                     19: <a href="index.html">
                     20: <font color="#0000ff"><i>Open</i></font><font color="#000084">BSD</font></a>
1.6       tj         21: <font color="#e00000">5.9 Errata</font>
                     22: </h2>
1.4       deraadt    23: <hr>
1.1       deraadt    24:
                     25: For errata on a certain release, click below:<br>
                     26: <a href="errata21.html">2.1</a>,
                     27: <a href="errata22.html">2.2</a>,
                     28: <a href="errata23.html">2.3</a>,
                     29: <a href="errata24.html">2.4</a>,
                     30: <a href="errata25.html">2.5</a>,
                     31: <a href="errata26.html">2.6</a>,
                     32: <a href="errata27.html">2.7</a>,
                     33: <a href="errata28.html">2.8</a>,
                     34: <a href="errata29.html">2.9</a>,
                     35: <a href="errata30.html">3.0</a>,
                     36: <a href="errata31.html">3.1</a>,
                     37: <a href="errata32.html">3.2</a>,
                     38: <a href="errata33.html">3.3</a>,
                     39: <a href="errata34.html">3.4</a>,
                     40: <a href="errata35.html">3.5</a>,
                     41: <a href="errata36.html">3.6</a>,
                     42: <br>
                     43: <a href="errata37.html">3.7</a>,
                     44: <a href="errata38.html">3.8</a>,
                     45: <a href="errata39.html">3.9</a>,
                     46: <a href="errata40.html">4.0</a>,
                     47: <a href="errata41.html">4.1</a>,
                     48: <a href="errata42.html">4.2</a>,
                     49: <a href="errata43.html">4.3</a>,
                     50: <a href="errata44.html">4.4</a>,
                     51: <a href="errata45.html">4.5</a>,
                     52: <a href="errata46.html">4.6</a>,
                     53: <a href="errata47.html">4.7</a>,
                     54: <a href="errata48.html">4.8</a>,
                     55: <a href="errata49.html">4.9</a>,
                     56: <a href="errata50.html">5.0</a>,
                     57: <a href="errata51.html">5.1</a>,
                     58: <a href="errata52.html">5.2</a>,
                     59: <br>
                     60: <a href="errata53.html">5.3</a>,
                     61: <a href="errata54.html">5.4</a>,
                     62: <a href="errata55.html">5.5</a>,
                     63: <a href="errata56.html">5.6</a>,
                     64: <a href="errata57.html">5.7</a>,
1.20      deraadt    65: <a href="errata58.html">5.8</a>,
1.38    ! tj         66: <a href="errata60.html">6.0</a>,
        !            67: <a href="errata61.html">6.1</a>.
1.1       deraadt    68: <hr>
                     69:
                     70: <p>
1.38    ! tj         71: Patches for the OpenBSD base system are distributed as unified diffs.
        !            72: Each patch is cryptographically signed with the
        !            73: <a href="http://man.openbsd.org/signify">signify(1)</a> tool and contains
        !            74: usage instructions.
        !            75: All the following patches are also available in one
        !            76: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9.tar.gz">tar.gz file</a>
        !            77: for convenience.
1.1       deraadt    78:
                     79: <p>
1.38    ! tj         80: Patches for supported releases are also incorporated into the
        !            81: <a href="stable.html">-stable branch</a>, which is maintained for one year
        !            82: after release.
1.1       deraadt    83:
                     84: <hr>
                     85:
                     86: <ul>
                     87:
1.2       deraadt    88: <li id="001_sshd">
                     89: <font color="#009000"><strong>001: SECURITY FIX: March 10, 2016</strong></font>
                     90: &nbsp; <i>All architectures</i><br>
1.29      tb         91: <a href="https://www.openssh.com/txt/x11fwd.adv">
1.2       deraadt    92: Lack of credential sanitization allows injection of commands to xauth(1).</a>
                     93: <br>
                     94: Prevent this problem immediately by not using the "X11Forwarding" feature
                     95: (which is disabled by default)
                     96: <br>
1.29      tb         97: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/001_sshd.patch.sig">
1.2       deraadt    98: A source code patch exists which remedies this problem.</a>
                     99: <p>
1.1       deraadt   100:
1.3       deraadt   101: <li id="002_in6bind">
                    102: <font color="#009000"><strong>002: SECURITY FIX: March 16, 2016</strong></font>
                    103: &nbsp; <i>All architectures</i><br>
                    104: Insufficient checks in IPv6 socket binding and UDP IPv6 option
                    105: processing allow a local user to send UDP packets with a source
                    106: (IPv6 address + port) already reserved by another user.
                    107: <br>
1.29      tb        108: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/002_in6bind.patch.sig">
1.3       deraadt   109: A source code patch exists which remedies this problem.</a>
                    110: <p>
                    111:
                    112: <li id="003_pledge">
                    113: <font color="#009000"><strong>003: RELIABILITY FIX: March 16, 2016</strong></font>
                    114: &nbsp; <i>All architectures</i><br>
                    115: Incorrect path processing in pledge_namei() could result in unexpected
                    116: program termination of pledge(2)'d programs.
                    117: <br>
1.29      tb        118: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/003_pledge.patch.sig">
1.3       deraadt   119: A source code patch exists which remedies this problem.</a>
                    120: <p>
                    121:
1.7       sthen     122: <li id="004_mbuf">
                    123: <font color="#009000"><strong>004: RELIABILITY FIX: April 30, 2016</strong></font>
                    124: &nbsp; <i>All architectures</i><br>
                    125: A problem in m_dup_pkt() can result in kernel crashes with carp(4).
                    126: <br>
1.29      tb        127: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/004_mbuf.patch.sig">
1.7       sthen     128: A source code patch exists which remedies this problem.</a>
                    129: <p>
                    130:
1.8       tedu      131: <li id="005_crypto">
                    132: <font color="#009000"><strong>005: SECURITY FIX: May 3, 2016</strong></font>
                    133: &nbsp; <i>All architectures</i><br>
                    134: Fix issues in the libcrypto library.
                    135: Refer to <a href="https://www.openssl.org/news/secadv/20160503.txt">the advisory</a>.
                    136: <ul>
                    137: <li>Memory corruption in the ASN.1 encoder (CVE-2016-2108)
                    138: <li>Padding oracle in AES-NI CBC MAC check (CVE-2016-2107)
                    139: <li>EVP_EncodeUpdate overflow (CVE-2016-2105)
                    140: <li>EVP_EncryptUpdate overflow (CVE-2016-2106)
                    141: <li>ASN.1 BIO excessive memory allocation (CVE-2016-2109)
                    142: </ul>
1.29      tb        143: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/005_crypto.patch.sig">
1.8       tedu      144: A source code patch exists which remedies this problem.</a>
                    145: <p>
                    146:
1.9       gilles    147: <li id="006_smtpd">
                    148: <font color="#009000"><strong>006: RELIABILITY FIX: May 16, 2016</strong></font>
                    149: &nbsp; <i>All architectures</i><br>
                    150: Fix issues in smtpd.
                    151: <ul>
                    152:   <li>Fix logic issue in smtp state machine that can lead to invalid state and result in crash.
                    153:   <li>Plug file pointer leak that can lead to resources exhaustion and result in crash.
                    154: </ul>
1.29      tb        155: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/006_smtpd.patch.sig">
1.9       gilles    156: A source code patch exists which remedies this problem.</a>
                    157: <p>
                    158:
1.10      kettenis  159: <li id="007_uvideo">
                    160: <font color="#009000"><strong>007: SECURITY FIX: May 17, 2016</strong></font>
                    161: &nbsp; <i>All architectures</i><br>
                    162: Insufficient checks in the uvideo(4) V4L2 ioctl handling leak kernel
                    163: memory contents to a local user.
                    164: <br>
1.29      tb        165: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/007_uvideo.patch.sig">
1.10      kettenis  166: A source code patch exists which remedies this problem.</a>
                    167: <p>
                    168:
1.11      otto      169: <li id="008_bnx">
                    170: <font color="#009000"><strong>008: RELIABILITY FIX: May 18, 2016</strong></font>
                    171: &nbsp; <i>All architectures</i><br>
                    172: Fix issue in the bnx(4) ethernet driver that could cause data corruption.
1.12      tj        173: <br>
1.29      tb        174: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/008_bnx.patch.sig">
1.11      otto      175: A source code patch exists which remedies this problem.</a>
                    176: <p>
1.13      bcook     177:
                    178: <li id="009_crypto">
                    179: <font color="#009000"><strong>009: RELIABILITY FIX: May 29, 2016</strong></font>
                    180: &nbsp; <i>All architectures</i><br>
                    181: Fix a bug in the libcrypto library when parsing certain ASN.1 elements.
                    182: <br>
1.29      tb        183: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/009_crypto.patch.sig">
1.13      bcook     184: A source code patch exists which remedies this problem.</a>
                    185: <p>
1.14      deraadt   186:
                    187: <li id="010_libexpat">
                    188: <font color="#009000"><strong>010: SECURITY FIX: June 2, 2016</strong></font>
                    189: &nbsp; <i>All architectures</i><br>
                    190: Fix issues in the libexpat library to prevent multiple integer and
                    191: buffer overflows.
                    192: <br>
1.29      tb        193: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/010_libexpat.patch.sig">
1.14      deraadt   194: A source code patch exists which remedies this problem.</a>
                    195: <p>
                    196:
1.15      awolk     197: <li id="011_crypto">
                    198: <font color="#009000"><strong>011: SECURITY FIX: June 6, 2016</strong></font>
                    199: &nbsp; <i>All architectures</i><br>
                    200: Correct a problem that prevents the DSA signing algorithm from running
                    201: in constant time even if the flag BN_FLG_CONSTTIME is set.
                    202: <br>
1.29      tb        203: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/011_crypto.patch.sig">
1.15      awolk     204: A source code patch exists which remedies this problem.</a>
                    205: <p>
                    206:
1.16      beck      207: <li id="012_crypto">
                    208: <font color="#009000"><strong>012: SECURITY FIX: June 27, 2016</strong></font>
                    209: &nbsp; <i>All architectures</i><br>
                    210: Correct a problem that could result in incorrect parsing/encoding of times in OCSP messages.
                    211: <br>
1.29      tb        212: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/012_crypto.patch.sig">
1.16      beck      213: A source code patch exists which remedies this problem.</a>
                    214: <p>
                    215:
1.17      deraadt   216: <li id="013_splice">
                    217: <font color="#009000"><strong>013: RELIABILITY FIX: July 14, 2016</strong></font>
                    218: &nbsp; <i>All architectures</i><br>
                    219: Splicing sockets in a loop could cause a kernel spin.
                    220: <br>
1.29      tb        221: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/013_splice.patch.sig">
1.17      deraadt   222: A source code patch exists which remedies this problem.</a>
                    223: <p>
                    224:
                    225: <li id="014_unp">
                    226: <font color="#009000"><strong>014: RELIABILITY FIX: July 14, 2016</strong></font>
                    227: &nbsp; <i>All architectures</i><br>
                    228: Multiple processes exiting with a fd-passing control message on a
                    229: shared socket could crash the system.
                    230: <br>
1.29      tb        231: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/014_unp.patch.sig">
1.17      deraadt   232: A source code patch exists which remedies this problem.</a>
                    233: <p>
                    234:
                    235: <li id="015_dirent">
                    236: <font color="#009000"><strong>015: RELIABILITY FIX: July 14, 2016</strong></font>
                    237: &nbsp; <i>All architectures</i><br>
                    238: ufs_readdir failed to limit size of memory allocation, leading to panics.
                    239: <br>
1.29      tb        240: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/015_dirent.patch.sig">
1.17      deraadt   241: A source code patch exists which remedies this problem.</a>
                    242: <p>
                    243:
                    244: <li id="016_mmap">
                    245: <font color="#009000"><strong>016: SECURITY FIX: July 14, 2016</strong></font>
                    246: &nbsp; <i>All architectures</i><br>
                    247: The mmap extension __MAP_NOFAULT could overcommit resources and crash
                    248: the system.
                    249: <br>
1.29      tb        250: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/016_mmap.patch.sig">
1.17      deraadt   251: A source code patch exists which remedies this problem.</a>
                    252: <p>
                    253:
1.18      tj        254: <li id="017_arp">
1.17      deraadt   255: <font color="#009000"><strong>017: RELIABILITY FIX: July 14, 2016</strong></font>
                    256: &nbsp; <i>All architectures</i><br>
1.18      tj        257: A race occuring in the unlocked ARP input path can lead to a kernel
                    258: NULL dereference.
                    259: <br>
1.29      tb        260: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/017_arp.patch.sig">
1.18      tj        261: A source code patch exists which remedies this problem.</a>
                    262: <p>
                    263:
                    264: <li id="018_timeout">
                    265: <font color="#009000"><strong>018: RELIABILITY FIX: July 14, 2016</strong></font>
                    266: &nbsp; <i>All architectures</i><br>
1.17      deraadt   267: Tick counting overflows could cause a kernel crash.
                    268: <br>
1.29      tb        269: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/018_timeout.patch.sig">
1.17      deraadt   270: A source code patch exists which remedies this problem.</a>
                    271: <p>
                    272:
1.18      tj        273: <li id="019_kevent">
                    274: <font color="#009000"><strong>019: RELIABILITY FIX: July 14, 2016</strong></font>
1.17      deraadt   275: &nbsp; <i>All architectures</i><br>
                    276: Invalid file descriptor use with kevent(2) could lead to a kernel crash.
                    277: <br>
1.29      tb        278: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/019_kevent.patch.sig">
1.17      deraadt   279: A source code patch exists which remedies this problem.</a>
                    280: <p>
                    281:
1.18      tj        282: <li id="020_amap">
                    283: <font color="#009000"><strong>020: RELIABILITY FIX: July 14, 2016</strong></font>
1.17      deraadt   284: &nbsp; <i>All architectures</i><br>
                    285: Unchecked parameters and integer overflows in the amap allocation routines
                    286: could cause malloc(9) to either not allocate enough memory, leading to memory
                    287: corruption, or to trigger a "malloc: allocation too large" panic.
                    288: <br>
1.29      tb        289: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/020_amap.patch.sig">
1.17      deraadt   290: A source code patch exists which remedies this problem.</a>
                    291: <p>
                    292:
1.19      benno     293: <li id="021_relayd">
                    294: <font color="#009000"><strong>021: RELIABILITY FIX: July 25, 2016</strong></font>
                    295: &nbsp; <i>All architectures</i><br>
                    296: When signaling an error to an HTTP relay client, the connection can be
                    297: terminated prematurely, leading to a crash.
                    298: <br>
1.29      tb        299: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/021_relayd.patch.sig">
1.19      benno     300: A source code patch exists which remedies this problem.</a>
                    301: <p>
                    302:
1.21      tj        303: <li id="022_sysctl">
                    304: <font color="#009000">
                    305: <strong>022: RELIABILITY FIX: August 2, 2016</strong></font>
                    306: &nbsp; <i>All architectures</i>
                    307: <br>
                    308: A missing NULL check in sysctl code results in a crash.
                    309: <br>
1.29      tb        310: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/022_sysctl.patch.sig">
1.21      tj        311: A source code patch exists which remedies this problem.</a>
                    312: <p>
                    313:
                    314: <li id="023_uvmisavail">
                    315: <font color="#009000">
                    316: <strong>023: RELIABILITY FIX: August 2, 2016</strong></font>
                    317: &nbsp; <i>All architectures</i>
                    318: <br>
                    319: Missing overflow checks in uvm may result in panics.
                    320: <br>
1.29      tb        321: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/023_uvmisavail.patch.sig">
1.21      tj        322: A source code patch exists which remedies this problem.</a>
                    323: <p>
                    324:
1.22      tj        325: <li id="024_perl">
                    326: <font color="#009000">
                    327: <strong>024: SECURITY FIX: August 6, 2016</strong></font>
                    328: &nbsp; <i>All architectures</i>
                    329: <br>
                    330: Don't look in the current working directory for perl modules to load.
                    331: See the <a href="http://marc.info/?l=perl5-porters&amp;m=146945269625067&amp;w=2">
                    332: perl5-porters announcement</a> for details.
                    333: <br>
1.29      tb        334: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/024_perl.patch.sig">
1.22      tj        335: A source code patch exists which remedies this problem.</a>
                    336: <p>
                    337:
                    338: <li id="025_relayd">
                    339: <font color="#009000">
                    340: <strong>025: RELIABILITY FIX: August 6, 2016</strong></font>
                    341: &nbsp; <i>All architectures</i>
                    342: <br>
                    343: Improve relayd's parsing of the Host-header by following RFC 7230
                    344: Section 5.4 more strictly.
                    345: <br>
1.29      tb        346: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/025_relayd.patch.sig">
1.22      tj        347: A source code patch exists which remedies this problem.</a>
                    348: <p>
                    349:
1.24      tj        350: <li id="026_wsfont">
                    351: <font color="#009000">
                    352: <strong>026: RELIABILITY FIX: September 17, 2016</strong></font>
                    353: &nbsp; <i>All architectures</i>
                    354: <br>
                    355: Limit the number of wscons fonts that can be loaded into the kernel.
                    356: <br>
1.29      tb        357: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/026_wsfont.patch.sig">
1.24      tj        358: A source code patch exists which remedies this problem.</a>
                    359: <p>
                    360:
1.25      tj        361: <li id="027_libssl">
                    362: <font color="#009000">
                    363: <strong>027: RELIABILITY FIX: September 22, 2016</strong></font>
                    364: &nbsp; <i>All architectures</i>
                    365: <br>
                    366: Avoid unbounded memory growth in libssl, which can be triggered by a TLS
                    367: client repeatedly renegotiating and sending OCSP Status Request TLS extensions.
                    368: <br>
1.29      tb        369: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/027_libssl.patch.sig">
1.25      tj        370: A source code patch exists which remedies this problem.</a>
                    371: <p>
                    372:
                    373: <li id="028_libssl">
                    374: <font color="#009000">
                    375: <strong>028: SECURITY FIX: September 22, 2016</strong></font>
                    376: &nbsp; <i>All architectures</i>
                    377: <br>
                    378: Avoid falling back to a weak digest for (EC)DH when using SNI with libssl.
                    379: <br>
1.29      tb        380: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/028_libssl.patch.sig">
1.25      tj        381: A source code patch exists which remedies this problem.</a>
                    382: <p>
                    383:
1.26      tj        384: <li id="029_xorg_libs">
                    385: <font color="#009000">
                    386: <strong>029: SECURITY FIX: October 4, 2016</strong></font>
                    387: &nbsp; <i>All architectures</i>
                    388: <br>
                    389: Fix a number of issues in the way various X client libraries handle
                    390: server responses.
                    391: <br>
1.29      tb        392: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/029_xorg_libs.patch.sig">
1.26      tj        393: A source code patch exists which remedies this problem.</a>
                    394: <p>
                    395:
1.27      tj        396: <li id="030_ssh_kexinit">
                    397: <font color="#009000">
                    398: <strong>030: RELIABILITY FIX: October 10, 2016</strong></font>
                    399: &nbsp; <i>All architectures</i>
                    400: <br>
                    401: A protocol parsing bug in sshd can lead to unauthenticated memory
                    402: and CPU consumption.
                    403: <br>
                    404: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/030_ssh_kexinit.patch.sig">
                    405: A source code patch exists which remedies this problem.</a>
                    406: <p>
                    407:
1.28      tj        408: <li id="031_smtpd.patch">
                    409: <font color="#009000">
                    410: <strong>031: RELIABILITY FIX: October 13, 2016</strong></font>
                    411: &nbsp; <i>All architectures</i>
                    412: <br>
                    413: A logic issue in smtpd's header parsing can cause SMTP sessions to hang.
                    414: <br>
                    415: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/031_smtpd.patch.sig">
                    416: A source code patch exists which remedies this problem.</a>
                    417: <p>
                    418:
1.30      tj        419: <li id="032_libssl.patch">
                    420: <font color="#009000">
                    421: <strong>032: RELIABILITY FIX: November 5, 2016</strong></font>
                    422: &nbsp; <i>All architectures</i>
                    423: <br>
                    424: Avoid continual processing of an unlimited number of TLS records.
                    425: <br>
                    426: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/032_libssl.patch.sig">
                    427: A source code patch exists which remedies this problem.</a>
                    428: <p>
                    429:
1.31      tj        430: <li id="033_libcrypto.patch">
                    431: <font color="#009000">
                    432: <strong>033: SECURITY FIX: January 5, 2017</strong></font>
                    433: &nbsp; <i>All architectures</i>
                    434: <br>
                    435: Avoid possible side-channel leak of ECDSA private keys when signing.
                    436: <br>
                    437: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/033_libcrypto.patch.sig">
                    438: A source code patch exists which remedies this problem.</a>
                    439: <p>
                    440:
1.32      tb        441: <li id="034_httpd.patch">
                    442: <font color="#009000">
                    443: <strong>034: RELIABILITY FIX: January 31, 2017</strong></font>
                    444: &nbsp; <i>All architectures</i>
                    445: <br>
                    446: A bug in the processing of range heanders in httpd can lead to memory
                    447: exhaustion and a crash of httpd. This patch disables range heander
                    448: processing.
                    449: <br>
                    450: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/034_httpd.patch.sig">
                    451: A source code patch exists which remedies this problem.</a>
                    452: <p>
                    453:
1.33      tj        454: <li id="035_net80211.patch">
                    455: <font color="#009000">
                    456: <strong>035: SECURITY FIX: March 1, 2017</strong></font>
                    457: &nbsp; <i>All architectures</i>
                    458: <br>
1.34      stsp      459: WiFi clients using WPA1 or WPA2 are vulnerable to a man-in-the-middle attack
1.35      stsp      460: by rogue access points.
1.33      tj        461: <br>
                    462: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/035_net80211.patch.sig">
                    463: A source code patch exists which remedies this problem.</a>
                    464: <p>
                    465:
1.36      tj        466: <li id="036_pf.patch">
                    467: <font color="#009000">
                    468: <strong>036: RELIABILITY FIX: March 9, 2017</strong></font>
                    469: &nbsp; <i>All architectures</i>
                    470: <br>
                    471: Prevent integer overflow in PF when calculating the adaptive timeout,
                    472: causing spuriously expired states under pressure.
                    473: <br>
                    474: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/036_pf.patch.sig">
                    475: A source code patch exists which remedies this problem.</a>
                    476: <p>
                    477:
1.37      tj        478: <li id="037_exec_elf.patch">
                    479: <font color="#009000">
                    480: <strong>037: SECURITY FIX: March 20, 2017</strong></font>
                    481: &nbsp; <i>All architectures</i>
                    482: <br>
                    483: ELF auxiliary vector storage leaks piece of kernel stack.
                    484: <br>
                    485: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/037_exec_elf.patch.sig">
                    486: A source code patch exists which remedies this problem.</a>
                    487: <p>
                    488:
1.1       deraadt   489: </ul>
                    490:
                    491: <hr>
                    492:
                    493: </body>
                    494: </html>