OpenBSD 43 Errata http://www.openbsd.org/errata43.html OpenBSD 43 Errata en-us mike@erdelynet.com erdelynet.com http://erdelynet.com/images/puffy96x83.gif http://www.openbsd.org/errata43.html 96 83 OpenBSD 43 Errata 005 RELIABILITY 005_pcb http://www.openbsd.org/errata43.html#005_pcb RELIABILITY All architectures July 29, 2008 A source code patch exists which remedies this problem.
]]> 004 SECURITY 004_bind http://www.openbsd.org/errata43.html#004_bind SECURITY All architectures July 23, 2008 2nd revision, July 23, 2008
A vulnerability has been found with BIND. An attacker could use this vulnerability to poison the cache of a recursive resolving name server. CVE-2008-1447.
A source code patch exists which remedies this problem.
]]> 003 SECURITY 003_xorg http://www.openbsd.org/errata43.html#003_xorg SECURITY All architectures July 15, 2008 RENDER Extension heap buffer overflow, RENDER Extension crash, RENDER Extension memory corruption, MIT-SHM arbitrary memory read, RECORD and Security extensions memory corruption. CVE-2008-2360, CVE-2008-2361, CVE-2008-2362, CVE-2008-1379, CVE-2008-1377.
A source code patch exists which remedies this problem.
]]> 002 SECURITY 002_openssh2 http://www.openbsd.org/errata43.html#002_openssh2 SECURITY All architectures April 3, 2008 A source code patch exists which remedies this problem.
]]> 001 SECURITY 001_openssh http://www.openbsd.org/errata43.html#001_openssh SECURITY All architectures March 30, 2008 ForceCommand directive was in effect, allowing users with write access to this file to execute arbitrary commands. This behaviour was documented, but was an unsafe default and an extra hassle for administrators.
A source code patch exists which remedies this problem.
]]>