OpenBSD Errata

OpenBSD Commit messages in 280 characters or less. Commits to stable branches, errata, and stable packages. For more see @OpenBSD_CVS

[OpenBSD Errata @OpenBSD_stable]

OPENBSD_7_3 jeremy@ modified databases/postgresql: Update to PostgreSQL 15.3 Fixes CVE-2023-2454 and CVE-2023-2455

[OpenBSD Errata @OpenBSD_stable]

OPENBSD_7_3 ajacoutot@ changed print/cups-filters: Merge upstream SECURITY fix for CVE-2023-24805 https://t.co/Z5bv24EPty

[OpenBSD Errata @OpenBSD_stable]

OPENBSD_7_3 ajacoutot@ modified net/bro: SECURITY update to zeek-5.0.9.

[OpenBSD Errata @OpenBSD_stable]

OPENBSD_7_3 naddy@ changed net/curl: net/curl: security update to 8.1.0 curl(1): add --proxy-http2 Includes fixes for CVE-2023-28319: UAF in SSH sha256 fingerprint check CVE-2023-28320: siglongjmp race condition CVE-2023-28321: IDN wildcard match CVE-2023-28322: more POST-afte...

[OpenBSD Errata @OpenBSD_stable]

OPENBSD_7_2 tb@ modified usr.sbin/rpki-client/validate.c: In valid_cert() also skip the check for CERT_IP_INHERIT objects like it is done for CERT_AS_INHERIT. Without this inheritance of IP address resources does not work. Problem noticed by Ties de Kock (tdekock (at) ripe...

[OpenBSD Errata @OpenBSD_stable]

OPENBSD_7_3 tb@ modified usr.sbin/rpki-client/validate.c: In valid_cert() also skip the check for CERT_IP_INHERIT objects like it is done for CERT_AS_INHERIT. Without this inheritance of IP address resources does not work. Problem noticed by Ties de Kock (tdekock (at) ripe...

[OpenBSD Errata @OpenBSD_stable]

OPENBSD_7_3 sthen@ modified net/isc-bind: update to isc-bind-9.18.15

[OpenBSD Errata @OpenBSD_stable]

OPENBSD_7_3 landry@ changed www/mozilla-firefox: www/mozilla-firefox: MFC patch silencing JSWindowActorChild warnings those were meant to be debug - from #1832242

[OpenBSD Errata @OpenBSD_stable]

New OpenBSD 7.3 syspatch for i386: 002_bgpd

[OpenBSD Errata @OpenBSD_stable]

New OpenBSD 7.3 syspatch for arm64: 002_bgpd

[OpenBSD Errata @OpenBSD_stable]

New OpenBSD 7.3 syspatch for amd64: 002_bgpd

[OpenBSD Errata @OpenBSD_stable]

OPENBSD_7_3 tb@ modified usr.sbin/bgp*: Rename 'invalid' to 'disqualified' in the 'show rib' table. 'invalid' conflicts with the 'in' keyword and the parser is not smart enough to handle this. As a secondary benefit the term 'invalid' is less overloaded. There are various reas...

[OpenBSD Errata @OpenBSD_stable]

OPENBSD_7_3 caspar@ modified a few things: Tor Browser: update to 12.0.6

[OpenBSD Errata @OpenBSD_stable]

OPENBSD_7_3 landry@ modified www/mozilla-firefox: www/mozilla-firefox: MFC update to 113.0.1. see https://t.co/EmPQI8vDnh

[OpenBSD Errata @OpenBSD_stable]

OPENBSD_7_3 sthen@ modified lang/php/8.1: update to php-8.1.19

[OpenBSD Errata @OpenBSD_stable]

OPENBSD_7_3 sthen@ modified lang/php/8.2: update to php-8.2.6

[OpenBSD Errata @OpenBSD_stable]

OPENBSD_7_3 landry@ modified mail/mozilla-thunderbird: mail/mozilla-thunderbird: MFC update to 102.11.0. see https://t.co/sPQ1dEhaKl fixes https://t.co/xRMQ7PUxpu

[OpenBSD Errata @OpenBSD_stable]

OPENBSD_7_3 landry@ removed www/mozilla-firefox/patches/patch-mozglue_misc_Uptime_cpp: www/mozilla-firefox: forgot to cvs rm merged patch reminded by bowser5555 at netscapenet, thanks !

[OpenBSD Errata @OpenBSD_stable]

OPENBSD_7_3 landry@ modified www/firefox-esr: www/firefox-esr: MFC update to 102.11.0. see https://t.co/HzbRwQUP1I fixes https://t.co/hDtzqvBFTa

[OpenBSD Errata @OpenBSD_stable]

OPENBSD_7_3 landry@ modified www/mozilla-firefox: www/mozilla-firefox: MFC update to 113.0 - see https://t.co/8OSAhMinl8 - fixes https://t.co/lW0XNTjKuX