OpenBSD security announcements

Todd C. Miller | 4 Oct 2003 00:45

DoS bugs in OpenSSL

The use of certain ASN.1 encodings or malformed public keys may
allow an attacker to mount a denial of service attack against
applications linked with ssl(3).  This does not affect OpenSSH.

For full details, please see the OpenSSL advisory:
    http://www.openssl.org/news/secadv_20030930.txt

A fix has been committed to the OpenBSD 3.2 and 3.3 -stable
branches.  Patches are also available for OpenBSD 3.2 and 3.3.

Patch for OpenBSD 3.2:
    ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/020_asn1.patch

Patch for OpenBSD 3.3:
    ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.3/common/007_asn1.patch

headers

Todd C. Miller | 7 Oct 2003 00:45

ARP-based denial of service attack

Under certain circumstances, an attacker may be able to mount a
denial of service attack against a machine by flooding it with bogus
ARP requests.  This can lead to resource starvation, ultimately
resulting in a kernel panic.

The problem was reported by Apple Computer; for more info, see:
    http://www.securityfocus.com/bid/8689/discussion

A fix has been committed to the OpenBSD 3.2 and 3.3 -stable
branches.  Patches are also available for OpenBSD 3.2 and 3.3.

Patch for OpenBSD 3.2:
    ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/021_arp.patch

Patch for OpenBSD 3.3:
    ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.3/common/008_arp.patch


Mon	Tue	Wed	Thu	Fri	Sat	Sun
		1	2	3	4	5
6	7	8	9	10	11	12
13	14	15	16	17	18	19
20	21	22	23	24	25	26
27	28	29	30	31

Mon

Tue

Wed

Thu

Fri

Sat

Sun

1	December 2011
1	November 2009
1	October 2009
4	April 2009
1	February 2009
2	January 2009
2	November 2008
1	January 2008
2	October 2007
2	April 2007
1	March 2007
1	January 2007
1	November 2006
1	June 2006
1	May 2006
1	March 2006
2	July 2005
2	June 2005
2	April 2005
1	December 2004
2	September 2004
1	August 2004
2	June 2004
3	May 2004
4	March 2004
2	February 2004
1	January 2004
1	December 2003
4	November 2003
2	October 2003
5	September 2003
5	August 2003
6	March 2003
1	January 2003
3	November 2002
2	August 2002
2	July 2002
6	June 2002
2	May 2002
8	April 2002
2	March 2002