Errata fixes

Nils Reuße <[email protected]>
Newsgroups gmane.os.openbsd.www
Message-ID <CAH2jFc2eC7HP=2OAzi8_NDOg9xTz=evPO99HQDPb=O7vJOG5-g@mail.gmail.com>
Hi,

as stated in another mail, the security fix for 5.1 is not announced
on errata51.html. Here is a patch, along with two other patches that
add a link to errata51.html from errata{21,49}.html for consistency.

Best regards,
Nils


diff -r 7811b2bd3f34 errata51.html
--- a/errata51.html	Sun May 06 20:34:57 2012 +0200
+++ b/errata51.html	Sun May 06 20:59:38 2012 +0200
@@ -92,7 +92,13 @@
 <a name="zaurus"></a>

 <ul>
-<li>None yet
+<li><a name="001_libcrypto"></a>
+<font color="#009000"><strong>001: SECURITY FIX: April 23,
2012</strong></font> &nbsp; <i>All architectures</i><br>
+A heap overflow vulnerability has been found in libcrypto's ASN.1 parsing code
+(<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110">CVE-2012-2110</a>).
+<br>
+<a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.1/common/001_libcrypto.patch">A
source code patch exists which remedies this problem</a>.<br>
+<p>
 </ul>

 <hr>
diff -r b5c8ab94fb33 errata21.html
--- a/errata21.html	Sun May 06 20:46:02 2012 +0200
+++ b/errata21.html	Sun May 06 21:00:10 2012 +0200
@@ -52,6 +52,7 @@
 <a href="errata48.html">4.8</a>,
 <a href="errata49.html">4.9</a>,
 <a href="errata50.html">5.0</a>.
+<a href="errata51.html">5.1</a>.
 <br>
 <hr>

@@ -263,6 +264,7 @@
 <a href="errata48.html">4.8</a>,
 <a href="errata49.html">4.9</a>,
 <a href="errata50.html">5.0</a>.
+<a href="errata51.html">5.1</a>.
 <br>

 <hr>
diff -r 73529ef5b58e errata49.html
--- a/errata49.html	Sun May 06 20:40:06 2012 +0200
+++ b/errata49.html	Sun May 06 21:02:10 2012 +0200
@@ -53,6 +53,7 @@
 <a href="errata47.html">4.7</a>,
 <a href="errata48.html">4.8</a>,
 <a href="errata50.html">5.0</a>.
+<a href="errata51.html">5.1</a>.
 <br>
 <hr>

@@ -136,6 +137,7 @@
 <a href="errata47.html">4.7</a>,
 <a href="errata48.html">4.8</a>,
 <a href="errata50.html">5.0</a>.
+<a href="errata51.html">5.1</a>.
 <br>

 <hr>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.