21 november, 2006
016: SECURITY FIX: November 19, 2006All architectures
ld.so(1) fails to properly sanitize the environment. There is a potential
localhost security problem in cases we have not found yet.
Patch for OpenBSD 3.9:
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.9/common/016_ldso.patch
005: SECURITY FIX: November 19, 2006
All architectures
The ELF ld.so(1) fails to properly sanitize the environment.
There is a potential localhost security problem in cases we have
not found yet. This patch applies to all ELF-based systems (m68k,
m88k, and vax are a.out-based systems).
Patch for OpenBSD 4.0:
ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/005_ldso.patch
004: RELIABILITY FIX: November 7, 2006
All architectures
Due to a bug in the arc(4) RAID driver the driver will not
properly synchronize the cache to the logical volumes upon system
shut down. The result being that the mounted file systems within
the logical volumes will not be properly marked as being clean and
fsck will be run for the subsequent boot up.
Patch for OpenBSD 4.0:
ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/004_arc.patch
003: SECURITY FIX: November 4, 2006
All architectures
Fix for an integer overflow in systrace(4)'s STRIOCREPLACE
support, found by Chris Evans. This could be exploited for DoS,
limited kmem reads or local privilege escalation.
Patch for OpenBSD 4.0:
ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/003_systrace.patch
002: SECURITY FIX: November 4, 2006
All architectures
Several problems have been found in OpenSSL. While parsing certain
invalid ASN.1 structures an error condition is mishandled,
possibly resulting in an infinite loop. A buffer overflow exists
in the SSL_get_shared_ciphers function. A NULL pointer may be
dereferenced in the SSL version 2 client code. In addition, many
applications using OpenSSL do not perform any validation of the
lengths of public keys being used. CVE-2006-2937, CVE-2006-3738,
CVE-2006-4343, CVE-2006-2940
Patch for OpenBSD 4.0:
ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/002_openssl.patch
001: SECURITY FIX: November 4, 2006
All architectures
httpd(8) does not sanitize the Expect header from an HTTP
request when it is reflected back in an error message, which might
allow cross-site scripting (XSS) style attacks. CVE-2006-3918
Patch for OpenBSD 4.0:
ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/001_httpd.patch