the bitrig master branch has been updated by patrick with 3 new commits: commit baa3186f4cb6bc1f2aa4fd6062c48e9998bfa2ae diff: https://github.com/bitrig/bitrig/commit/baa3186 author: Patrick Wildt <[email protected]> date: Mon Jun 1 14:13:40 2015 +0200
OpenBSD 5.7 errata 6, Apr 30, 2015: Missing validity checks in the kernel ELF loader meant malformed binaries could trigger kernel panics or view kernel memory. M sys/kern/exec_elf.c commit 2daadf93672111a85198302eb0fb8908ab1c2dd1 diff: https://github.com/bitrig/bitrig/commit/2daadf9 author: Patrick Wildt <[email protected]> date: Mon Jun 1 14:12:42 2015 +0200 OpenBSD 5.7 errata 5, Apr 30, 2015: Logging to a log file is only possible after the logging system was initialized. Trying to log too early allows a remote user to crash httpd. M usr.sbin/httpd/server.c commit a12e2595bc2014bd6f2822247d8b047d5a308cba diff: https://github.com/bitrig/bitrig/commit/a12e259 author: Patrick Wildt <[email protected]> date: Mon Jun 1 14:11:31 2015 +0200 OpenBSD 5.7 errata 4, Apr 19, 2015 Incorrect logic in smtpd(8) can lead to unexpected client disconnect, invalid certificate in SNI negotiation or server crash. M usr.sbin/smtpd/smtp_session.c M usr.sbin/smtpd/smtpd.h M usr.sbin/smtpd/ssl_smtpd.c
