5.2 Errata
Patches for the OpenBSD base system are distributed as unified diffs. Each patch contains usage instructions. All the following patches are also available in one tar.gz file for convenience.
Patches for supported releases are also incorporated into the -stable branch.
-
001: RELIABILITY FIX: November 29, 2012
All architectures
Some other systems have started sending incorrect flags which cause session failures in OpenBSD's bgpd, and cause it to propagate incorrect updates.
A source code patch exists which remedies this problem. -
002: RELIABILITY FIX: March 15, 2013
All architectures
A rare condition during session startup may cause bgpd to replace an active session leading to unknown consequences. Bug found by inspection (we do not know how to reproduce it, consider that a challenge).
A source code patch exists which remedies this problem. -
003: RELIABILITY FIX: March 21, 2013
All architectures
A denial of services was discovered where certain combinations of TFTP options could cause OACK generation to fail, which in turn caused a double free in tftpd.
A source code patch exists which remedies this problem. -
004: RELIABILITY FIX: May 17, 2013
All architectures
A problem exists in nginx(8) if proxy_pass is used with untrusted HTTP backend servers. The problem may lead to a denial of service or a disclosure of a worker process memory on a specially crafted response from an upstream proxied server. This issue was assigned CVE-2013-2070.
A source code patch exists which remedies this problem. -
005: RELIABILITY FIX: May 31, 2013
All architectures
A local denial of service is possible by an unprivileged user if the SIOCSIFADDR ioctl is performed upon an AF_INET6 socket with a specially crafted parameter.
A source code patch exists which remedies this problem.