[BACK]Return to errata61.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/errata61.html, Revision 1.13

1.1       tj          1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
                      2: <html>
                      3: <head>
                      4: <title>OpenBSD 6.1 Errata</title>
                      5: <meta name="description" content="the OpenBSD errata page">
                      6: <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
                      7: <meta name="viewport" content="width=device-width, initial-scale=1">
                      8: <link rel="stylesheet" type="text/css" href="openbsd.css">
                      9: <link rel="canonical" href="https://www.openbsd.org/errata61.html">
                     10: </head>
                     11:
                     12: <!--
                     13:                        IMPORTANT REMINDER
                     14:        IF YOU ADD A NEW ERRATUM, MAIL THE PATCH TO TECH AND ANNOUNCE
                     15: -->
                     16: <body bgcolor="#ffffff" text="#000000" link="#23238E">
                     17:
                     18: <h2>
                     19: <a href="index.html">
                     20: <font color="#0000ff"><i>Open</i></font><font color="#000084">BSD</font></a>
                     21: <font color="#e00000">6.1 Errata</font>
                     22: </h2>
                     23: <hr>
                     24:
                     25: For errata on a certain release, click below:<br>
                     26: <a href="errata21.html">2.1</a>,
                     27: <a href="errata22.html">2.2</a>,
                     28: <a href="errata23.html">2.3</a>,
                     29: <a href="errata24.html">2.4</a>,
                     30: <a href="errata25.html">2.5</a>,
                     31: <a href="errata26.html">2.6</a>,
                     32: <a href="errata27.html">2.7</a>,
                     33: <a href="errata28.html">2.8</a>,
                     34: <a href="errata29.html">2.9</a>,
                     35: <a href="errata30.html">3.0</a>,
                     36: <a href="errata31.html">3.1</a>,
                     37: <a href="errata32.html">3.2</a>,
                     38: <a href="errata33.html">3.3</a>,
                     39: <a href="errata34.html">3.4</a>,
                     40: <a href="errata35.html">3.5</a>,
                     41: <a href="errata36.html">3.6</a>,
                     42: <br>
                     43: <a href="errata37.html">3.7</a>,
                     44: <a href="errata38.html">3.8</a>,
                     45: <a href="errata39.html">3.9</a>,
                     46: <a href="errata40.html">4.0</a>,
                     47: <a href="errata41.html">4.1</a>,
                     48: <a href="errata42.html">4.2</a>,
                     49: <a href="errata43.html">4.3</a>,
                     50: <a href="errata44.html">4.4</a>,
                     51: <a href="errata45.html">4.5</a>,
                     52: <a href="errata46.html">4.6</a>,
                     53: <a href="errata47.html">4.7</a>,
                     54: <a href="errata48.html">4.8</a>,
                     55: <a href="errata49.html">4.9</a>,
                     56: <a href="errata50.html">5.0</a>,
                     57: <a href="errata51.html">5.1</a>,
                     58: <a href="errata52.html">5.2</a>,
                     59: <br>
                     60: <a href="errata53.html">5.3</a>,
                     61: <a href="errata54.html">5.4</a>,
                     62: <a href="errata55.html">5.5</a>,
                     63: <a href="errata56.html">5.6</a>,
                     64: <a href="errata57.html">5.7</a>,
                     65: <a href="errata58.html">5.8</a>,
                     66: <a href="errata59.html">5.9</a>,
                     67: <a href="errata60.html">6.0</a>.
                     68: <hr>
                     69:
                     70: <p>
                     71: Patches for the OpenBSD base system are distributed as unified diffs.
                     72: Each patch is cryptographically signed with the
1.2       tb         73: <a href="http://man.openbsd.org/OpenBSD-6.1/signify.1">signify(1)</a> tool and contains
1.1       tj         74: usage instructions.
                     75: All the following patches are also available in one
                     76: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.1.tar.gz">tar.gz file</a>
                     77: for convenience.
                     78:
                     79: <p>
                     80: Alternatively, the <a href="http://man.openbsd.org/syspatch">syspatch(8)</a>
                     81: utility can be used to apply binary updates on the following architectures:
1.3       tj         82: amd64, i386.
1.1       tj         83:
                     84: <p>
                     85: Patches for supported releases are also incorporated into the
                     86: <a href="stable.html">-stable branch</a>, which is maintained for one year
                     87: after release.
                     88:
                     89: <hr>
                     90:
                     91: <ul>
                     92:
1.4       tj         93: <li id="p001_dhcpd">
                     94: <font color="#009000">
                     95: <strong>001: INTEROPERABILITY FIX: May 2, 2017</strong></font>
                     96: &nbsp; <i>All architectures</i>
                     97: <br>
                     98: dhcpd unconditionally echoed the client identifier, preventing some devices
1.5       tb         99: from acquiring a lease.
1.4       tj        100: <br>
                    101: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.1/common/001_dhcpd.patch.sig">
                    102: A source code patch exists which remedies this problem.</a>
                    103: <p>
                    104:
                    105: <li id="p002_vmmfpu">
                    106: <font color="#009000">
                    107: <strong>002: SECURITY FIX: May 2, 2017</strong></font>
1.6       mlarkin   108: &nbsp; <i>amd64</i>
1.4       tj        109: <br>
                    110: vmm mismanaged floating point contexts.
                    111: <br>
                    112: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.1/common/002_vmmfpu.patch.sig">
                    113: A source code patch exists which remedies this problem.</a>
                    114: <p>
                    115:
                    116: <li id="p003_libressl">
                    117: <font color="#009000">
                    118: <strong>003: SECURITY FIX: May 2, 2017</strong></font>
                    119: &nbsp; <i>All architectures</i>
                    120: <br>
                    121: A consistency check error could cause programs to incorrectly verify
                    122: TLS certificates when using callbacks that always return 1.
                    123: <br>
                    124: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.1/common/003_libressl.patch.sig">
                    125: A source code patch exists which remedies this problem.</a>
                    126: <p>
                    127:
                    128: <li id="p004_softraid_concat">
                    129: <font color="#009000">
                    130: <strong>004: RELIABILITY FIX: May 2, 2017</strong></font>
                    131: &nbsp; <i>All architectures</i>
                    132: <br>
                    133: softraid was unable to create usable concat volumes because
                    134: it always set the size of the volume to zero sectors.
                    135: <br>
                    136: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.1/common/004_softraid_concat.patch.sig">
                    137: A source code patch exists which remedies this problem.</a>
                    138: <p>
1.1       tj        139:
1.7       tj        140: <li id="p005_pf_src_tracking">
                    141: <font color="#009000">
                    142: <strong>005: RELIABILITY FIX: May 6, 2017</strong></font>
                    143: &nbsp; <i>All architectures</i>
                    144: <br>
                    145: Expired pf source tracking entries never got removed, leading to
                    146: memory exhaustion.
                    147: <br>
                    148: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.1/common/005_pf_src_tracking.patch.sig">
                    149: A source code patch exists which remedies this problem.</a>
                    150: <p>
                    151:
1.8       tj        152: <li id="p006_libssl">
                    153: <font color="#009000">
                    154: <strong>006: RELIABILITY FIX: May 8, 2017</strong></font>
                    155: &nbsp; <i>All architectures</i>
                    156: <br>
                    157: Incorrect DTLS cookie handling can result in a NULL pointer dereference.
                    158: <br>
                    159: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.1/common/006_libssl.patch.sig">
                    160: A source code patch exists which remedies this problem.</a>
                    161: <p>
                    162:
1.9       tj        163: <li id="p007_freetype">
                    164: <font color="#009000">
1.10      tj        165: <strong>007: SECURITY FIX: May 13, 2017</strong></font>
1.9       tj        166: &nbsp; <i>All architectures</i>
                    167: <br>
                    168: Heap-based buffer overflows in freetype can result in out-of-bounds writes.
                    169: <br>
                    170: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.1/common/007_freetype.patch.sig">
                    171: A source code patch exists which remedies this problem.</a>
                    172: <p>
                    173:
1.11      tj        174: <li id="p008_exec_subr">
                    175: <font color="#009000">
                    176: <strong>008: SECURITY FIX: May 19, 2017</strong></font>
                    177: &nbsp; <i>All architectures</i>
                    178: <br>
                    179: An additional mitigation is added by placing a gap of 1 MB between the
                    180: stack and mmap spaces.
                    181: <br>
                    182: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.1/common/008_exec_subr.patch.sig">
                    183: A source code patch exists which remedies this problem.</a>
                    184: <p>
                    185:
1.12      tj        186: <li id="p009_icmp_opts">
                    187: <font color="#009000">
                    188: <strong>009: RELIABILITY FIX: May 22, 2017</strong></font>
                    189: &nbsp; <i>All architectures</i>
                    190: <br>
                    191: The kernel could leak memory when processing ICMP packets with IP options.
                    192: Note that pf blocks such packets by default.
                    193: <br>
                    194: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.1/common/009_icmp_opts.patch.sig">
                    195: A source code patch exists which remedies this problem.</a>
                    196: <p>
                    197:
1.13    ! tj        198: <li id="p010_perl">
        !           199: <font color="#009000">
        !           200: <strong>010: SECURITY FIX: June 4, 2017</strong></font>
        !           201: &nbsp; <i>All architectures</i>
        !           202: <br>
        !           203: A race condition exists in the File::Path perl module.
        !           204: <br>
        !           205: <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.1/common/010_perl.patch.sig">
        !           206: A source code patch exists which remedies this problem.</a>
        !           207: <p>
        !           208:
1.1       tj        209: </ul>
                    210:
                    211: <hr>
                    212:
                    213: </body>
                    214: </html>