===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.381
retrieving revision 1.382
diff -u -r1.381 -r1.382
--- www/security.html	2009/11/01 00:25:36	1.381
+++ www/security.html	2009/11/08 15:26:53	1.382
@@ -241,16 +241,10 @@
 
 <p>
 <ul>
-<li><a href="errata46.html#003_getsockopt">October 28, 2009:
-        getsockopt(2) with any of IP_AUTH_LEVEL, IP_ESP_TRANS_LEVEL,
-	IP_ESP_NETWORK_LEVEL, IP_IPCOMP_LEVEL will crash the system.</a>
-<li><a href="errata46.html#002_xmm">October 5, 2009:
-        XMM exceptions are not correctly handled resulting in a kernel panic.</a>
-<li><a href="errata46.html#001_bind">July 29, 2009:
-        BIND's named could be made to crash with a specially crafted
-	dynamic update message to a zone for which the server is
-	master.</a>
+<li>None yet.
 </ul>
+
+<li>
 <a name="45"></a>
 
 <h3><font color="#e00000">OpenBSD 4.5 Security Advisories</font></h3>
@@ -260,25 +254,15 @@
 
 <p>
 <ul>
-<li><a href="errata45.html#009_getsockopt">October 28, 2009:
-        getsockopt(2) with any of IP_AUTH_LEVEL, IP_ESP_TRANS_LEVEL,
-	IP_ESP_NETWORK_LEVEL, IP_IPCOMP_LEVEL will crash the system.</a>
-<li><a href="errata45.html#008_xmm">October 5, 2009:
-        XMM exceptions are not correctly handled resulting in a kernel panic.</a>
-<li><a href="errata45.html#007_bind">July 29, 2009:
-        BIND's named could be made to crash with a specially crafted
-	dynamic update message to a zone for which the server is
-	master.</a>
-<li><a href="errata45.html#002_pf">April 11, 2009:
-        When pf attempts to perform translation on a specially
-        crafted IP datagram, a null pointer dereference will occur,
-        resulting in a kernel panic.</a>
-<li><a href="errata45.html#001_openssl">April 8, 2009:
-	OpenSSL's ASN.1 handling code could be forced to make invalid
-	memory accesses by certain invalid strings or structures, allowing
-	denial-of-service attacks.</a>
+<li>None yet.
 </ul>
 
+<p>
+OpenBSD 4.4 and earlier releases are not supported anymore. The following
+paragraphs only list advisories issued while they were maintained; these
+releases are likely to be affected by the advisories for more recent releases.
+<br>
+
 <li>
 <a name="44"></a>
 
@@ -289,23 +273,6 @@
 
 <p>
 <ul>
-<li><a href="errata44.html#016_getsockopt">October 28, 2009:
-        getsockopt(2) with any of IP_AUTH_LEVEL, IP_ESP_TRANS_LEVEL,
-	IP_ESP_NETWORK_LEVEL, IP_IPCOMP_LEVEL will crash the system.</a>
-<li><a href="errata46.html#015_xmm">October 5, 2009:
-        XMM exceptions are not correctly handled resulting in a kernel panic.</a>
-<li><a href="errata44.html#014_bind">July 29, 2009:
-        BIND's named could be made to crash with a specially crafted
-	dynamic update message to a zone for which the server is
-	master.</a>
-<li><a href="errata44.html#013_pf">April 11, 2009:
-        When pf attempts to perform translation on a specially
-        crafted IP datagram, a null pointer dereference will occur,
-        resulting in a kernel panic.</a>
-<li><a href="errata44.html#012_openssl">April 8, 2009:
-	OpenSSL's ASN.1 handling code could be forced to make invalid
-	memory accesses by certain invalid strings or structures, allowing
-	denial-of-service attacks.</a>
 <li><a href="errata44.html#011_sudo">February 22, 2009:
 	sudo(8) may allow a user listed in sudoers to run a command
 	as a different user than their access rule specifies when a Unix
@@ -322,12 +289,6 @@
 	to intercept traffic.</a>
 </ul>
 
-<p>
-OpenBSD 4.3 and earlier releases are not supported anymore. The following
-paragraphs only list advisories issued while they were maintained; these
-releases are likely to be affected by the advisories for more recent releases.
-<br>
-
 <li>
 <a name="43"></a>
 
@@ -338,14 +299,6 @@
 
 <p>
 <ul>
-<li><a href="errata43.html#013_pf">April 11, 2009:
-        When pf attempts to perform translation on a specially
-        crafted IP datagram, a null pointer dereference will occur,
-        resulting in a kernel panic.</a>
-<li><a href="errata43.html#012_openssl">April 8, 2009:
-	OpenSSL's ASN.1 handling code could be forced to make invalid
-	memory accesses by certain invalid strings or structures, allowing
-	denial-of-service attacks.</a>
 <li><a href="errata43.html#011_sudo">February 22, 2009:
 	sudo(8) may allow a user listed in sudoers to run a command
 	as a different user than their access rule specifies when a Unix
@@ -356,7 +309,7 @@
 <li><a href="errata43.html#007_openssl">January 9, 2009:
 	OpenSSL suffered from some logic errors that allowed bypass
 	of DSA/ECDSA certificate validation.</a>
-<li><a href="errata43.html#005_ndp">October 2, 2008:
+<li><a href="errata43.html#006_ndp">October 2, 2008:
 	The Neighbor Discovery Protocol (ndp) did not correctly verify
 	neighbor solicitation requests maybe allowing a nearby attacker
 	to intercept traffic.</a>
@@ -397,10 +350,6 @@
 	Command prompt parsing buffer overflow in ppp.</a>
 <li><a href="errata42.html#006_xorg">Feb 8, 2008:
 	Multiple vulnerabilities in X.Org.</a>
-<li><a href="errata42.html#005_ifrtlabel">Jan 11, 2008:
-	A missing NULL pointer check can lead to a kernel panic.</a>
-<li><a href="errata42.html#004_pf">Nov 27, 2007:
-	A memory leak in pf can lead to machine lockups.</a>
 <li><a href="errata42.html#002_openssl">Oct 10, 2007:
 	Fix off-by-one overflow in OpenSSL.</a>
 <li><a href="errata42.html#001_dhcpd">Oct 9, 2007:
@@ -451,6 +400,9 @@
 
 <p>
 <ul>
+<li><a href="errata40.html#017_openssl">Oct 10, 2007:
+	The SSL_get_shared_ciphers() function in OpenSSL contains an
+	off-by-one overflow.</a>
 <li><a href="errata40.html#016_dhcpd">Oct 9, 2007:
 	Fix stack corruption problem in dhcpd(8).</a>
 <li><a href="errata40.html#015_file">Jul 9, 2007:
@@ -1771,7 +1723,7 @@
 <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
 <a href="mailto:www@openbsd.org">www@openbsd.org</a>
 <br>
-<small>$OpenBSD: security.html,v 1.381 2009/11/01 00:25:36 deraadt Exp $</small>
+<small>$OpenBSD: security.html,v 1.382 2009/11/08 15:26:53 tobias Exp $</small>
 
 </body>
 </html>