This is the OpenBSD 3.6 release errata & patch list:

The patches below are available in CVS via the OPENBSD_3_6 patch branch.

For more detailed information on how to install patches to OpenBSD, please consult the OpenBSD FAQ.

All architectures

• 007: SECURITY FIX: December 14, 2004
  On systems running isakmpd(8) it is possible for a local user to cause kernel memory corruption and system panic by setting ipsec(4) credentials on a socket.
  A source code patch exists which remedies this problem.
  

• 006: RELIABILITY FIX: November 21, 2004
  Fix for transmit side breakage on macppc and mbuf leaks with xl(4).
  A source code patch exists which remedies this problem.
  

• 005: RELIABILITY FIX: November 21, 2004
  Wrong calculation of NAT-D payloads may cause interoperability problems between isakmpd(8) and other ISAKMP/IKE implementations.
  A source code patch exists which remedies this problem.
  

• 004: RELIABILITY FIX: November 10, 2004
  Due to a bug in lynx(1) it is possible for pages such as this to cause lynx(1) to exhaust memory and then crash when parsing such pages.
  A source code patch exists which remedies this problem.
  

• 003: RELIABILITY FIX: November 10, 2004
  pppd(8) contains a bug that allows an attacker to crash his own connection, but it cannot be used to deny service to other users.
  A source code patch exists which remedies this problem.
  

• 002: RELIABILITY FIX: November 10, 2004
  BIND contains a bug which results in BIND trying to contact nameservers via IPv6, even in cases where IPv6 connectivity is non-existent. This results in unneccessary timeouts and thus slow DNS queries.
  A source code patch exists which remedies this problem.
  

• 001: RELIABILITY FIX: November 10, 2004
  Fix detection of tape blocksize during device open. Corrects problem with restore(8).
  A source code patch exists which remedies this problem.
  

alpha

• No problems identified yet.

amd64

• No problems identified yet.

cats

• No problems identified yet.

hp300

• No problems identified yet.

hppa

• No problems identified yet.

i386

• No problems identified yet.

luna88k

• No problems identified yet.

mac68k

• No problems identified yet.

macppc

• No problems identified yet.

mvme68k

• No problems identified yet.

mvme88k

• No problems identified yet.

sparc

• No problems identified yet.

sparc64

• No problems identified yet.

vax

• No problems identified yet.