This is the OpenBSD 2.3 release errata & patch list:

• All architectures

  • SECURITY FIX
    A possible new security problem exists if you rely on securelevels and immutable or append-only files or character devices. The fix does not permit mmap'ing of immutable or append-only files which are otherwise writeable, as the VM system will bypass the meaning of the file flags when writes happen to the file. A source code patch exists which remedies this problem.

  • SECURITY FIX
    If IPSEC communication is attempted by starting photurisd(8) (which is disabled by default), a system crash may be evoked from remote if an attacker uses some classes of invalid packets. A source code patch exists which remedies this problem.

  • SECURITY FIX
    As stated in CERT advisory VB-98.04, there are buffer overrun problems in xterm related to the input-Method, preeditType, and *Keymap resources. Additional buffer overruns exist in the Xaw library related to the inputMethod and preeditType resources. The xterm(1) problem represents a security vulnerability for any platform where xterm is installed setuid-root (as is the case for all OpenBSD platforms). The Xaw problem represents a security vulnerability for any setuid-root program that uses the Xaw library (including xterm). Patch1 from XFree86 3.3.2 corrects these problems. We provide a version of this patch file specifically for the OpenBSD 2.3 tree. We also provide tar files which replace the xterm(1) binary and the libXaw libraries on your system. These are expected to be extracted in /usr/X11R6 using the command "tar xvfpz Xawfix.tgz". The files are... i386, alpha, mac68k, mvme68k, hp300, sparc, pmax, and arc.

• i386

  • CORRUPTED FILE
    The CD version of the precompiled ghostscript package is corrupted and not installable. The correct file can be retrieved by FTP from: ftp://ftp.openbsd.org/pub/OpenBSD/2.3/packages/i386/ghostscript-5.10.tgz. Its checksums (obtained with cksum(1), md5(1) and sha1(1) respectively) are:
    • 725752890 3639338 ghostscript-5.10.tgz
    • MD5 (ghostscript-5.10.tgz) = 3144ca814ad1965d671be2b7be3d3050
    • SHA1 (ghostscript-5.10.tgz) = bd9374fa547ac0078d5207463d3b0a19d80d213c

• mac68k

  • No problems identified yet.

• sparc

  • RELIABILITY FIX
    The 2.3 release does not run reliably on the sun4m LX/LC machines (ie. Sparc Classic). A source code patch exists which remedies this problem. Two kernels which replace the ones in the release are also provided: bsd and bsd.scsi3.

• amiga

  • No problems identified yet.

• pmax

  • RELEASE WARNING
    The XFree86 binary set shipped on the CD and FTP site are not the exact final set that we shipped for the other releases. A few minor changes, mostly in xdm(1) configuration, were made after those binaries were made. Patches for this might come out later.

  • X11 RELEASE ERROR
    The XFree86 binary set was linked with an older version of the X library. To work around the problem, do the following as root.
    cd /usr/lib/
    ln -s libc.so.18.0 libc.so.17

  • INSTALLATION PROCESS FLAW
    The pmax install does not correctly install the boot block. To work around the problem, after the install program has finished, do the following (assuming scsi id 0):
    disklabel rz0 > /tmp/label
    disklabel -R -B rz0 /tmp/label

• arc

  • RELEASE WARNING
    The XFree86 binary set shipped on the CD and FTP site are not the exact final set that we shipped for the other releases. A few minor changes, mostly in xdm(1) configuration, were made after those binaries were made. Patches for this might come out later.

  • X11 RELEASE ERROR
    The XFree86 binary set was linked with an older version of the X library. To work around the problem, do the following as root.
    cd /usr/lib/
    ln -s libc.so.18.0 libc.so.17

• alpha

  • RELEASE WARNING
    When you start the install an upgrade option is advertised but there really is no such option.

• hp300

  • RELEASE WARNING
    When you start the install an upgrade option is advertised but there really is no such option.

  • RELEASE WARNING
    Unlabelled disks with weird geometries can panic the kernel. A fix will be made available when 2.3 is out.

• mvme68k

  • No problems identified yet.

• powerpc

  • SECURITY FIX
    The powerpc release shipped on the OpenBSD 2.3 CD does not contain two late fixes applied late in the release cycle. The rmjob and uucpd patches should be applied to the system if those subsystems are used.