OpenBSD 7.1 has been released

YesItsMe · 08-01-2022, 12:32 PM

008 (all architectures): bgpd(8) could fail to invalidate nexthops and incorrectly leave them in the FIB or Adj-RIB-Out.

YesItsMe · 09-23-2022, 11:54 AM

009 and 010 (all architectures):
- A missing length check in zlib could lead to a heap buffer overflow.
- In libexpat fix heap use-after-free vulnerability CVE-2022-40674.

YesItsMe · 09-27-2022, 02:22 PM

011 (all architectures): In smtpd(8), possible use-after-free if TLS handshake fails for outbound connections.

YesItsMe · 12-01-2022, 02:03 PM

012, 013, 014 (all architectures):
- In libexpat fix heap use-after-free vulnerability CVE-2022-43680.
- CVE-2022-44638: An integer overflow in pixman may lead to an out-of-bounds write.
- A crafted TCP query from localhost could crash the unwind(8) daemon.

YesItsMe · 01-13-2023, 04:08 AM

Syspatch 015 (all architectures):
In X11 server fix local privileges elevation and and remote code execution for ssh X forwarding sessions. This addresses CVE-2022-46340 CVE-2022-46341 CVE-2022-46342 CVE-2022-46343 CVE-2022-46344.

Syspatch 016 (AMD64, i386):
TLB entries were not invalidated for all types of engine on 12th generation Intel graphics (Tiger Lake, Rocket Lake, Alder Lake).

Syspatch 017 (all architectures):
Removing a domain can result in an out-of-bounds write in acme-client(8).

Syspatch 018 (all architectures):
A TCP packet with destination port 0 that matches a pf divert-to rule could crash the kernel.

YesItsMe · 01-18-2023, 04:57 AM

Syspatch 019 (all architectures):
Input validation issues and path validation issues in libXpm can lead to infinite loops, memory corruption or arbitrary command execution. CVE-2022-46285, CVE-2022-44617 and CVE-2022-4883

YesItsMe · 01-23-2023, 08:46 AM

Syspatch 020 (all architectures):
vmm(4) exposed unsupported cpuid feature flags to guests.

Syspatch 021 (all architectures):
vmd(8) exposed unsupported cpuid feature flags to guests.

YesItsMe · 02-07-2023, 02:42 PM

Syspatch 022 (all architectures):
A malicious certificate revocation list or timestamp response token would allow an attacker to read arbitrary memory.

Syspatch 023 (all architectures):
CVE-2023-0494: use after free in the Xinput X server extension.

Syspatch 024 (all architectures):
smtpd(8) could abort due to a connection from a local, scoped ipv6 address.

YesItsMe · 02-27-2023, 04:03 AM

Syspatch 025 (all architectures):
Missing bounds check in console terminal emulation could cause a kernel crash after receiving specially crafted escape sequences.

YesItsMe · 03-18-2023, 08:51 PM

Syspatch 026 (all architectures):
Out of bounds accesses in libc resolver.

YesItsMe · 03-29-2023, 04:03 PM

Syspatch 027 (all architectures):
Incorrect length checks allow an out-of-bounds read in bgpd(8).

Syspatch 028 (all architectures):
Xserver, CVE-2023-1393: use after free bug in the Composite server extension.