1 854f9a5d 2020-04-25 deraadt <!doctype html>
2 854f9a5d 2020-04-25 deraadt <html lang=en id=errata>
3 854f9a5d 2020-04-25 deraadt <meta charset=utf-8>
5 854f9a5d 2020-04-25 deraadt <title>OpenBSD 6.7 Errata</title>
6 854f9a5d 2020-04-25 deraadt <meta name="description" content="the OpenBSD errata page">
7 854f9a5d 2020-04-25 deraadt <meta name="viewport" content="width=device-width, initial-scale=1">
8 854f9a5d 2020-04-25 deraadt <link rel="stylesheet" type="text/css" href="openbsd.css">
9 604b5d93 2020-04-25 schwarze <link rel="canonical" href="https://www.openbsd.org/errata67.html">
12 854f9a5d 2020-04-25 deraadt IMPORTANT REMINDER
13 854f9a5d 2020-04-25 deraadt IF YOU ADD A NEW ERRATUM, MAIL THE PATCH TO TECH AND ANNOUNCE
16 854f9a5d 2020-04-25 deraadt <h2 id=OpenBSD>
17 854f9a5d 2020-04-25 deraadt <a href="index.html">
18 854f9a5d 2020-04-25 deraadt <i>Open</i><b>BSD</b></a>
19 854f9a5d 2020-04-25 deraadt 6.7 Errata
23 854f9a5d 2020-04-25 deraadt For errata on a certain release, click below:<br>
24 604b5d93 2020-04-25 schwarze <a href="errata20.html">2.0</a>,
25 854f9a5d 2020-04-25 deraadt <a href="errata21.html">2.1</a>,
26 854f9a5d 2020-04-25 deraadt <a href="errata22.html">2.2</a>,
27 854f9a5d 2020-04-25 deraadt <a href="errata23.html">2.3</a>,
28 854f9a5d 2020-04-25 deraadt <a href="errata24.html">2.4</a>,
29 854f9a5d 2020-04-25 deraadt <a href="errata25.html">2.5</a>,
30 854f9a5d 2020-04-25 deraadt <a href="errata26.html">2.6</a>,
31 854f9a5d 2020-04-25 deraadt <a href="errata27.html">2.7</a>,
32 854f9a5d 2020-04-25 deraadt <a href="errata28.html">2.8</a>,
33 854f9a5d 2020-04-25 deraadt <a href="errata29.html">2.9</a>,
34 854f9a5d 2020-04-25 deraadt <a href="errata30.html">3.0</a>,
35 854f9a5d 2020-04-25 deraadt <a href="errata31.html">3.1</a>,
36 854f9a5d 2020-04-25 deraadt <a href="errata32.html">3.2</a>,
37 854f9a5d 2020-04-25 deraadt <a href="errata33.html">3.3</a>,
38 854f9a5d 2020-04-25 deraadt <a href="errata34.html">3.4</a>,
39 854f9a5d 2020-04-25 deraadt <a href="errata35.html">3.5</a>,
41 604b5d93 2020-04-25 schwarze <a href="errata36.html">3.6</a>,
42 854f9a5d 2020-04-25 deraadt <a href="errata37.html">3.7</a>,
43 854f9a5d 2020-04-25 deraadt <a href="errata38.html">3.8</a>,
44 854f9a5d 2020-04-25 deraadt <a href="errata39.html">3.9</a>,
45 854f9a5d 2020-04-25 deraadt <a href="errata40.html">4.0</a>,
46 854f9a5d 2020-04-25 deraadt <a href="errata41.html">4.1</a>,
47 854f9a5d 2020-04-25 deraadt <a href="errata42.html">4.2</a>,
48 854f9a5d 2020-04-25 deraadt <a href="errata43.html">4.3</a>,
49 854f9a5d 2020-04-25 deraadt <a href="errata44.html">4.4</a>,
50 854f9a5d 2020-04-25 deraadt <a href="errata45.html">4.5</a>,
51 854f9a5d 2020-04-25 deraadt <a href="errata46.html">4.6</a>,
52 854f9a5d 2020-04-25 deraadt <a href="errata47.html">4.7</a>,
53 854f9a5d 2020-04-25 deraadt <a href="errata48.html">4.8</a>,
54 854f9a5d 2020-04-25 deraadt <a href="errata49.html">4.9</a>,
55 854f9a5d 2020-04-25 deraadt <a href="errata50.html">5.0</a>,
56 854f9a5d 2020-04-25 deraadt <a href="errata51.html">5.1</a>,
58 604b5d93 2020-04-25 schwarze <a href="errata52.html">5.2</a>,
59 854f9a5d 2020-04-25 deraadt <a href="errata53.html">5.3</a>,
60 854f9a5d 2020-04-25 deraadt <a href="errata54.html">5.4</a>,
61 854f9a5d 2020-04-25 deraadt <a href="errata55.html">5.5</a>,
62 854f9a5d 2020-04-25 deraadt <a href="errata56.html">5.6</a>,
63 854f9a5d 2020-04-25 deraadt <a href="errata57.html">5.7</a>,
64 854f9a5d 2020-04-25 deraadt <a href="errata58.html">5.8</a>,
65 854f9a5d 2020-04-25 deraadt <a href="errata59.html">5.9</a>,
66 854f9a5d 2020-04-25 deraadt <a href="errata60.html">6.0</a>,
67 854f9a5d 2020-04-25 deraadt <a href="errata61.html">6.1</a>,
68 854f9a5d 2020-04-25 deraadt <a href="errata62.html">6.2</a>,
69 854f9a5d 2020-04-25 deraadt <a href="errata63.html">6.3</a>,
70 854f9a5d 2020-04-25 deraadt <a href="errata64.html">6.4</a>,
71 854f9a5d 2020-04-25 deraadt <a href="errata65.html">6.5</a>,
72 650b262f 2020-09-22 deraadt <a href="errata66.html">6.6</a>,
73 468be29c 2021-04-13 deraadt <a href="errata68.html">6.8</a>,
75 c4b6807e 2021-09-19 deraadt <a href="errata69.html">6.9</a>,
76 51b06bb0 2022-03-26 deraadt <a href="errata70.html">7.0</a>,
77 59f57020 2022-09-24 deraadt <a href="errata71.html">7.1</a>,
78 c69b933b 2023-03-19 tj <a href="errata72.html">7.2</a>,
79 d4b998ff 2023-09-27 tj <a href="errata73.html">7.3</a>,
80 e502ae6d 2024-03-10 tj <a href="errata74.html">7.4</a>,
81 e502ae6d 2024-03-10 tj <a href="errata75.html">7.5</a>.
85 854f9a5d 2020-04-25 deraadt Patches for the OpenBSD base system are distributed as unified diffs.
86 854f9a5d 2020-04-25 deraadt Each patch is cryptographically signed with the
87 854f9a5d 2020-04-25 deraadt <a href="https://man.openbsd.org/OpenBSD-6.7/signify.1">signify(1)</a> tool and contains
88 854f9a5d 2020-04-25 deraadt usage instructions.
89 854f9a5d 2020-04-25 deraadt All the following patches are also available in one
90 854f9a5d 2020-04-25 deraadt <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7.tar.gz">tar.gz file</a>
91 854f9a5d 2020-04-25 deraadt for convenience.
94 854f9a5d 2020-04-25 deraadt Alternatively, the <a href="https://man.openbsd.org/syspatch">syspatch(8)</a>
95 854f9a5d 2020-04-25 deraadt utility can be used to apply binary updates on the following architectures:
96 854f9a5d 2020-04-25 deraadt amd64, i386, arm64.
99 854f9a5d 2020-04-25 deraadt Patches for supported releases are also incorporated into the
100 854f9a5d 2020-04-25 deraadt <a href="stable.html">-stable branch</a>, which is maintained for one year
101 854f9a5d 2020-04-25 deraadt after release.
107 5ab2957c 2020-05-13 tj <li id="p001_wscons">
108 5ab2957c 2020-05-13 tj <strong>001: SECURITY FIX: May 19, 2020</strong>
109 5ab2957c 2020-05-13 tj <i>All architectures</i>
111 5ab2957c 2020-05-13 tj An out-of-bounds index access in wscons(4) can cause a kernel crash.
113 5ab2957c 2020-05-13 tj <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/001_wscons.patch.sig">
114 5ab2957c 2020-05-13 tj A source code patch exists which remedies this problem.</a>
117 70adde5f 2020-05-18 tj <li id="p002_rpki">
118 9892f904 2020-05-18 tj <strong>002: RELIABILITY FIX: May 22, 2020</strong>
119 9892f904 2020-05-18 tj <i>All architectures</i>
121 9892f904 2020-05-18 tj rpki-client could hang because of an improper waitpid idiom for rsync
124 70adde5f 2020-05-18 tj <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/002_rpki.patch.sig">
125 9892f904 2020-05-18 tj A source code patch exists which remedies this problem.</a>
128 70adde5f 2020-05-18 tj <li id="p003_ssh">
129 9892f904 2020-05-18 tj <strong>003: SECURITY FIX: May 22, 2020</strong>
130 9892f904 2020-05-18 tj <i>All architectures</i>
132 9892f904 2020-05-18 tj When attempting to download resident keys from a FIDO token that does
133 9892f904 2020-05-18 tj not require a password/PIN, ssh-keygen would crash with a NULL
136 70adde5f 2020-05-18 tj <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/003_ssh.patch.sig">
137 9892f904 2020-05-18 tj A source code patch exists which remedies this problem.</a>
140 a8d30024 2020-05-20 tj <li id="p004_libssl">
141 a8d30024 2020-05-20 tj <strong>004: RELIABILITY FIX: May 22, 2020</strong>
142 a8d30024 2020-05-20 tj <i>All architectures</i>
144 a8d30024 2020-05-20 tj A TLS client with peer verification disabled may crash when contacting a
145 a8d30024 2020-05-20 tj server that sends an empty certificate list.
147 a8d30024 2020-05-20 tj <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/004_libssl.patch.sig">
148 a8d30024 2020-05-20 tj A source code patch exists which remedies this problem.</a>
151 a8d30024 2020-05-20 tj <li id="p005_unbound">
152 a8d30024 2020-05-20 tj <strong>005: SECURITY FIX: May 22, 2020</strong>
153 a8d30024 2020-05-20 tj <i>All architectures</i>
155 a8d30024 2020-05-20 tj Specially crafted queries may crash unbound and unwind.
156 a8d30024 2020-05-20 tj Both can be tricked into amplifying an incoming query.
158 a8d30024 2020-05-20 tj <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/005_unbound.patch.sig">
159 a8d30024 2020-05-20 tj A source code patch exists which remedies this problem.</a>
162 6fe46165 2020-05-24 tj <li id="p006_smtpd_sockaddr">
163 6fe46165 2020-05-24 tj <strong>006: SECURITY FIX: May 25, 2020</strong>
164 6fe46165 2020-05-24 tj <i>All architectures</i>
166 6fe46165 2020-05-24 tj Incorrect use of getpeername(2) storage for outgoing IPv6 connections
167 6fe46165 2020-05-24 tj corrupts stack memory. The nature of the corruption and existing
168 6fe46165 2020-05-24 tj mitigations appear to make this difficult to effectively target.
170 6fe46165 2020-05-24 tj <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/006_smtpd_sockaddr.patch.sig">
171 6fe46165 2020-05-24 tj A source code patch exists which remedies this problem.</a>
174 3c973d0e 2020-06-01 tj <li id="p007_perl">
175 3c973d0e 2020-06-01 tj <strong>007: SECURITY FIX: June 1, 2020</strong>
176 3c973d0e 2020-06-01 tj <i>All architectures</i>
178 3c973d0e 2020-06-01 tj Several problems in Perl's regular expression compiler could lead to
179 3c973d0e 2020-06-01 tj corruption of the intermediate language state of a compiled regular
182 3c973d0e 2020-06-01 tj <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/007_perl.patch.sig">
183 3c973d0e 2020-06-01 tj A source code patch exists which remedies this problem.</a>
186 942e48c7 2020-06-04 tj <li id="p008_hid">
187 942e48c7 2020-06-04 tj <strong>008: SECURITY FIX: June 5, 2020</strong>
188 942e48c7 2020-06-04 tj <i>All architectures</i>
190 942e48c7 2020-06-04 tj Malicious HID descriptors could be misparsed.
192 942e48c7 2020-06-04 tj <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/008_hid.patch.sig">
193 942e48c7 2020-06-04 tj A source code patch exists which remedies this problem.</a>
196 fe40023f 2020-06-07 tj <li id="p009_asr">
197 fe40023f 2020-06-07 tj <strong>009: RELIABILITY FIX: June 8, 2020</strong>
198 fe40023f 2020-06-07 tj <i>All architectures</i>
200 fe40023f 2020-06-07 tj libc's resolver could get into a corrupted state.
202 fe40023f 2020-06-07 tj <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/009_asr.patch.sig">
203 fe40023f 2020-06-07 tj A source code patch exists which remedies this problem.</a>
206 28304a4a 2020-06-10 tj <li id="p010_x509">
207 28304a4a 2020-06-10 tj <strong>010: RELIABILITY FIX: June 11, 2020</strong>
208 28304a4a 2020-06-10 tj <i>All architectures</i>
210 28304a4a 2020-06-10 tj libcrypto may fail to build a valid certificate chain due to
211 28304a4a 2020-06-10 tj expired untrusted issuer certificates.
213 28304a4a 2020-06-10 tj <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/010_x509.patch.sig">
214 28304a4a 2020-06-10 tj A source code patch exists which remedies this problem.</a>
217 8e516d67 2020-07-09 tj <li id="p011_shmget">
218 8e516d67 2020-07-09 tj <strong>011: SECURITY FIX: July 9, 2020</strong>
219 8e516d67 2020-07-09 tj <i>All architectures</i>
221 8e516d67 2020-07-09 tj shmget IPC_STAT leaked some kernel data.
223 8e516d67 2020-07-09 tj <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/011_shmget.patch.sig">
224 8e516d67 2020-07-09 tj A source code patch exists which remedies this problem.</a>
227 90b666fd 2020-07-15 tj <li id="p012_tty">
228 b18e084e 2020-07-15 tj <strong>012: RELIABILITY FIX: July 16, 2020</strong>
229 90b666fd 2020-07-15 tj <i>All architectures</i>
231 90b666fd 2020-07-15 tj tty subsystem abuse can impact performance badly.
233 90b666fd 2020-07-15 tj <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/012_tty.patch.sig">
234 90b666fd 2020-07-15 tj A source code patch exists which remedies this problem.</a>
237 d6bd7c44 2020-07-21 tj <li id="p013_tty">
238 d6bd7c44 2020-07-21 tj <strong>013: RELIABILITY FIX: July 22, 2020</strong>
239 d6bd7c44 2020-07-21 tj <i>All architectures</i>
241 d6bd7c44 2020-07-21 tj Only pty devices need reprint delays.
243 d6bd7c44 2020-07-21 tj <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/013_tty.patch.sig">
244 d6bd7c44 2020-07-21 tj A source code patch exists which remedies this problem.</a>
247 f3f3a812 2020-07-27 bluhm <li id="p014_iked">
248 f3f3a812 2020-07-27 bluhm <strong>014: SECURITY FIX: July 27, 2020</strong>
249 f3f3a812 2020-07-27 bluhm <i>All architectures</i>
251 f3f3a812 2020-07-27 bluhm In iked, incorrect use of EVP_PKEY_cmp allows an authentication bypass.
253 f3f3a812 2020-07-27 bluhm <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/014_iked.patch.sig">
254 f3f3a812 2020-07-27 bluhm A source code patch exists which remedies this problem.</a>
257 f3f3a812 2020-07-27 bluhm <li id="p015_rpki">
258 f3f3a812 2020-07-27 bluhm <strong>015: SECURITY FIX: July 27, 2020</strong>
259 f3f3a812 2020-07-27 bluhm <i>All architectures</i>
261 f3f3a812 2020-07-27 bluhm In rpki-client, incorrect use of EVP_PKEY_cmp allows an authentication bypass.
263 f3f3a812 2020-07-27 bluhm <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/015_rpki.patch.sig">
264 f3f3a812 2020-07-27 bluhm A source code patch exists which remedies this problem.</a>
267 c9cba5df 2020-07-31 tj <li id="p016_ximcp">
268 c9cba5df 2020-07-31 tj <strong>016: SECURITY FIX: July 31, 2020</strong>
269 c9cba5df 2020-07-31 tj <i>All architectures</i>
271 c9cba5df 2020-07-31 tj Malformed messages can cause heap corruption in the X Input Method
272 c9cba5df 2020-07-31 tj client implementation in libX11.
274 c9cba5df 2020-07-31 tj <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/016_ximcp.patch.sig">
275 c9cba5df 2020-07-31 tj A source code patch exists which remedies this problem.</a>
278 c9cba5df 2020-07-31 tj <li id="p017_dix">
279 c9cba5df 2020-07-31 tj <strong>017: SECURITY FIX: July 31, 2020</strong>
280 c9cba5df 2020-07-31 tj <i>All architectures</i>
282 c9cba5df 2020-07-31 tj Pixmaps inside the xserver were an info leak.
284 c9cba5df 2020-07-31 tj <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/017_dix.patch.sig">
285 71824a57 2020-08-06 tj A source code patch exists which remedies this problem.</a>
288 71824a57 2020-08-06 tj <li id="p018_ximcp">
289 71824a57 2020-08-06 tj <strong>018: RELIABILITY FIX: August 7, 2020</strong>
290 71824a57 2020-08-06 tj <i>All architectures</i>
292 71824a57 2020-08-06 tj The recent security errata 016 broke X11 input methods.
294 71824a57 2020-08-06 tj <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/018_ximcp.patch.sig">
295 c9cba5df 2020-07-31 tj A source code patch exists which remedies this problem.</a>
298 a6e6d9b1 2020-08-10 tj <li id="p019_libssl">
299 a6e6d9b1 2020-08-10 tj <strong>019: RELIABILITY FIX: August 11, 2020</strong>
300 a6e6d9b1 2020-08-10 tj <i>All architectures</i>
302 a6e6d9b1 2020-08-10 tj The TLSv1.3 client could hang, crash, leak memory or not interoperate with
303 a6e6d9b1 2020-08-10 tj some TLSv1.3 servers.
305 a6e6d9b1 2020-08-10 tj <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/019_libssl.patch.sig">
306 4efef345 2020-08-17 tj A source code patch exists which remedies this problem.</a>
309 4efef345 2020-08-17 tj <li id="p020_libssl">
310 4efef345 2020-08-17 tj <strong>020: RELIABILITY FIX: August 18, 2020</strong>
311 4efef345 2020-08-17 tj <i>All architectures</i>
313 4efef345 2020-08-17 tj The previous errata patch 019 broke bidirectional SSL_shutdown.
315 42b8dfcf 2020-08-17 tj <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/020_libssl.patch.sig">
316 a6e6d9b1 2020-08-10 tj A source code patch exists which remedies this problem.</a>
319 13e38d7d 2020-08-25 tj <li id="p021_xinitom">
320 13e38d7d 2020-08-25 tj <strong>021: SECURITY FIX: August 25, 2020</strong>
321 13e38d7d 2020-08-25 tj <i>All architectures</i>
323 13e38d7d 2020-08-25 tj An integer overflow in libX11 could lead to a double free.
324 13e38d7d 2020-08-25 tj Additionally fix a regression in ximcp.
326 13e38d7d 2020-08-25 tj <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/021_xinitom.patch.sig">
327 13e38d7d 2020-08-25 tj A source code patch exists which remedies this problem.</a>
330 13e38d7d 2020-08-25 tj <li id="p022_xserverlen">
331 13e38d7d 2020-08-25 tj <strong>022: SECURITY FIX: August 25, 2020</strong>
332 13e38d7d 2020-08-25 tj <i>All architectures</i>
334 13e38d7d 2020-08-25 tj Various X server extensions had deficient input validation.
336 13e38d7d 2020-08-25 tj <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/022_xserverlen.patch.sig">
337 13e38d7d 2020-08-25 tj A source code patch exists which remedies this problem.</a>
340 77374c18 2020-09-04 tj <li id="p023_amdgpu">
341 77374c18 2020-09-04 tj <strong>023: SECURITY FIX: September 5, 2020</strong>
342 77374c18 2020-09-04 tj <i>amd64, arm64</i>
344 77374c18 2020-09-04 tj A buffer overflow was discovered in an amdgpu ioctl.
346 77374c18 2020-09-04 tj <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/023_amdgpu.patch.sig">
347 77374c18 2020-09-04 tj A source code patch exists which remedies this problem.</a>
350 bbce4897 2020-10-06 tj <li id="p024_mmap">
351 bbce4897 2020-10-06 tj <strong>024: RELIABILITY FIX: October 6, 2020</strong>
352 bbce4897 2020-10-06 tj <i>All architectures</i>
354 bbce4897 2020-10-06 tj mmap can exhaust kernel memory for PROT_NONE MAP_SHARED mappings.
356 bbce4897 2020-10-06 tj <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/024_mmap.patch.sig">
357 bbce4897 2020-10-06 tj A source code patch exists which remedies this problem.</a>
360 715b78dc 2020-10-27 tj <li id="p025_bgpd">
361 715b78dc 2020-10-27 tj <strong>025: RELIABILITY FIX: October 29, 2020</strong>
362 715b78dc 2020-10-27 tj <i>All architectures</i>
364 715b78dc 2020-10-27 tj In bgpd, the roa-set parser could leak memory.
366 715b78dc 2020-10-27 tj <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/025_bgpd.patch.sig">
367 0f239c9a 2020-10-28 tb A source code patch exists which remedies this problem.</a>
370 0f239c9a 2020-10-28 tb <li id="p026_icmp6">
371 0f239c9a 2020-10-28 tb <strong>026: SECURITY FIX: October 29, 2020</strong>
372 0f239c9a 2020-10-28 tb <i>All architectures</i>
374 0f239c9a 2020-10-28 tb When generating the ICMP6 response to an IPv6 packet, the kernel
375 0f239c9a 2020-10-28 tb could use mbuf memory after freeing it.
377 0f239c9a 2020-10-28 tb <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/026_icmp6.patch.sig">
378 715b78dc 2020-10-27 tj A source code patch exists which remedies this problem.</a>
381 e6f6dfc2 2020-10-29 tb <li id="p027_tmux">
382 e6f6dfc2 2020-10-29 tb <strong>027: SECURITY FIX: October 29, 2020</strong>
383 e6f6dfc2 2020-10-29 tb <i>All architectures</i>
385 e6f6dfc2 2020-10-29 tb tmux has a stack overflow in CSI parsing.
387 e6f6dfc2 2020-10-29 tb <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/027_tmux.patch.sig">
388 2f5c49bc 2020-11-09 tb A source code patch exists which remedies this problem.</a>
391 2f5c49bc 2020-11-09 tb <li id="p028_unwind">
392 2f5c49bc 2020-11-09 tb <strong>028: RELIABILITY FIX: November 10, 2020</strong>
393 2f5c49bc 2020-11-09 tb <i>All architectures</i>
395 2f5c49bc 2020-11-09 tb unwind fails to process large DNS replies.
397 2f5c49bc 2020-11-09 tb <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/028_unwind.patch.sig">
398 e6f6dfc2 2020-10-29 tb A source code patch exists which remedies this problem.</a>
401 2f5c49bc 2020-11-09 tb <li id="p029_rpki">
402 2f5c49bc 2020-11-09 tb <strong>029: RELIABILITY FIX: November 10, 2020</strong>
403 2f5c49bc 2020-11-09 tb <i>All architectures</i>
405 2f5c49bc 2020-11-09 tb rpki-client incorrectly checks the manifest validity interval.
407 2f5c49bc 2020-11-09 tb <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/029_rpki.patch.sig">
408 2f5c49bc 2020-11-09 tb A source code patch exists which remedies this problem.</a>
411 5399c4ab 2020-12-01 tb <li id="p030_xmaplen">
412 5399c4ab 2020-12-01 tb <strong>030: SECURITY FIX: December 1, 2020</strong>
413 5399c4ab 2020-12-01 tb <i>All architectures</i>
415 5399c4ab 2020-12-01 tb Multiple input validation failures in the X server XKB extension can lead
416 5399c4ab 2020-12-01 tb to out of bounds memory accesses for authorized clients.
418 5399c4ab 2020-12-01 tb <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/030_xmaplen.patch.sig">
419 7fae9de2 2020-12-08 tb A source code patch exists which remedies this problem.</a>
422 7fae9de2 2020-12-08 tb <li id="p031_asn1">
423 7fae9de2 2020-12-08 tb <strong>031: SECURITY FIX: December 8, 2020</strong>
424 7fae9de2 2020-12-08 tb <i>All architectures</i>
426 7fae9de2 2020-12-08 tb Malformed ASN.1 in a certificate revocation list or a timestamp
427 7fae9de2 2020-12-08 tb response token can lead to a NULL pointer dereference.
429 7fae9de2 2020-12-08 tb <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/031_asn1.patch.sig">
430 7fae9de2 2020-12-08 tb A source code patch exists which remedies this problem.</a>
433 7fae9de2 2020-12-08 tb <li id="p032_exit">
434 7fae9de2 2020-12-08 tb <strong>032: RELIABILITY FIX: December 8, 2020</strong>
435 7fae9de2 2020-12-08 tb <i>All architectures</i>
437 7fae9de2 2020-12-08 tb Process exit in multithreaded programs could result in the wrong exit
438 7fae9de2 2020-12-08 tb code being reported.
440 7fae9de2 2020-12-08 tb <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/032_exit.patch.sig">
441 5399c4ab 2020-12-01 tb A source code patch exists which remedies this problem.</a>
444 c96801fb 2020-12-23 tb <li id="p033_smtpd">
445 c96801fb 2020-12-23 tb <strong>033: RELIABILITY FIX: December 24, 2020</strong>
446 c96801fb 2020-12-23 tb <i>All architectures</i>
448 c96801fb 2020-12-23 tb smtpd's filter state machine can prematurely release resources
449 c96801fb 2020-12-23 tb leading to a crash.
451 c96801fb 2020-12-23 tb <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/033_smtpd.patch.sig">
452 c96801fb 2020-12-23 tb A source code patch exists which remedies this problem.</a>
455 dc00eb08 2021-01-11 benno <li id="p034_nd6">
456 dc00eb08 2021-01-11 benno <strong>034: RELIABILITY FIX: January 11, 2021</strong>
457 dc00eb08 2021-01-11 benno <i>All architectures</i>
459 dc00eb08 2021-01-11 benno When an NDP entry is invalidated the associated layer 2 address
460 dc00eb08 2021-01-11 benno is not invalidated.
462 dc00eb08 2021-01-11 benno <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/034_nd6.patch.sig">
463 dc00eb08 2021-01-11 benno A source code patch exists which remedies this problem.</a>
466 58fc38a5 2021-02-24 bluhm <li id="p035_pffrag">
467 0883fcee 2021-03-01 patrick <strong>035: SECURITY FIX: February 24, 2021</strong>
468 58fc38a5 2021-02-24 bluhm <i>All architectures</i>
470 58fc38a5 2021-02-24 bluhm A sequence of overlapping IPv4 fragments could crash the kernel in
471 58fc38a5 2021-02-24 bluhm pf due to an assertion.
473 58fc38a5 2021-02-24 bluhm <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/035_pffrag.patch.sig">
474 b2ca888f 2021-03-03 bluhm A source code patch exists which remedies this problem.</a>
477 b2ca888f 2021-03-03 bluhm <li id="p036_sshagent">
478 b2ca888f 2021-03-03 bluhm <strong>036: SECURITY FIX: March 4, 2021</strong>
479 b2ca888f 2021-03-03 bluhm <i>All architectures</i>
481 b2ca888f 2021-03-03 bluhm Double free in ssh-agent(1)
483 b2ca888f 2021-03-03 bluhm <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/036_sshagent.patch.sig">
484 e3b0f8cf 2021-03-08 bluhm A source code patch exists which remedies this problem.</a>
487 e3b0f8cf 2021-03-08 bluhm <li id="p037_npppd">
488 e3b0f8cf 2021-03-08 bluhm <strong>037: SECURITY FIX: March 9, 2021</strong>
489 e3b0f8cf 2021-03-08 bluhm <i>All architectures</i>
491 e3b0f8cf 2021-03-08 bluhm npppd PPTP protocol handler can cause heap over-read leading to a crash.
493 e3b0f8cf 2021-03-08 bluhm <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/037_npppd.patch.sig">
494 58fc38a5 2021-02-24 bluhm A source code patch exists which remedies this problem.</a>
497 4297ab84 2021-04-13 bluhm <li id="p038_xi">
498 4297ab84 2021-04-13 bluhm <strong>038: SECURITY FIX: April 13, 2021</strong>
499 4297ab84 2021-04-13 bluhm <i>All architectures</i>
501 4297ab84 2021-04-13 bluhm Input validation failures in X server XInput extension can lead to
502 4297ab84 2021-04-13 bluhm privileges elevations for authorized clients.
504 4297ab84 2021-04-13 bluhm <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/038_xi.patch.sig">
505 4297ab84 2021-04-13 bluhm A source code patch exists which remedies this problem.</a>
