version 1.5, 2020/05/18 17:06:38 |
version 1.6, 2020/05/20 21:57:42 |
|
|
A source code patch exists which remedies this problem.</a> |
A source code patch exists which remedies this problem.</a> |
<p> |
<p> |
|
|
|
<li id="p004_libssl"> |
|
<strong>004: RELIABILITY FIX: May 22, 2020</strong> |
|
<i>All architectures</i> |
|
<br> |
|
A TLS client with peer verification disabled may crash when contacting a |
|
server that sends an empty certificate list. |
|
<br> |
|
<a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/004_libssl.patch.sig"> |
|
A source code patch exists which remedies this problem.</a> |
|
<p> |
|
|
|
<li id="p005_unbound"> |
|
<strong>005: SECURITY FIX: May 22, 2020</strong> |
|
<i>All architectures</i> |
|
<br> |
|
Specially crafted queries may crash unbound and unwind. |
|
Both can be tricked into amplifying an incoming query. |
|
<br> |
|
<a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/005_unbound.patch.sig"> |
|
A source code patch exists which remedies this problem.</a> |
|
<p> |
|
|
</ul> |
</ul> |
|
|
<hr> |
<hr> |