https://syspatch.se/ Errata och säkerhetspatchar för OpenBSD en jt@fegis.nu (syspatch.se) jt@fegis.nu (syspatch.se) Sat, 14 Nov 2026 00:00:00 +0000 https://syspatch.se/8.0/019_wscons.html https://syspatch.se/8.0/019_wscons.html Sat, 14 Nov 2026 00:00:00 +0000 A local user logged in on the glass console could write out of bounds to kernel memory and use this to gain root privileges. https://syspatch.se/8.0/018_nd6dad.html https://syspatch.se/8.0/018_nd6dad.html Sat, 14 Nov 2026 00:00:00 +0000 A race in IPv6 duplicate address detection could corrupt kernel memory. https://syspatch.se/8.0/017_tcpsyn.html https://syspatch.se/8.0/017_tcpsyn.html Sat, 14 Nov 2026 00:00:00 +0000 A race in TCP syn cache could crash the kernel remotely. https://syspatch.se/8.0/016_tcpsack.html https://syspatch.se/8.0/016_tcpsack.html Sat, 14 Nov 2026 00:00:00 +0000 TCP SACK packets could crash the kernel remotely. https://syspatch.se/8.0/015_libcasr.html https://syspatch.se/8.0/015_libcasr.html Sat, 14 Nov 2026 00:00:00 +0000 Fix a buffer overflow in the libc stub DNS resolver. https://syspatch.se/8.0/014_kbind.html https://syspatch.se/8.0/014_kbind.html Sat, 14 Nov 2026 00:00:00 +0000 Fix a local root exploit through a reference count race in the vnode pager that can be triggered with kbind(2). https://syspatch.se/8.0/013_libressl.html https://syspatch.se/8.0/013_libressl.html Sat, 14 Nov 2026 00:00:00 +0000 Fix an out of bounds read that may happen during renegotiation in TLSv1.2. Fix TLS interoperability with peers sending more than 32 signature algorithms. https://syspatch.se/8.0/012_syszlib.html https://syspatch.se/8.0/012_syszlib.html Sat, 14 Nov 2026 00:00:00 +0000 Fix out of bounds reads and writes as well as info leaks in zlib. https://syspatch.se/8.0/011_zlib.html https://syspatch.se/8.0/011_zlib.html Sat, 14 Nov 2026 00:00:00 +0000 Fix out of bounds reads and writes as well as info leaks in zlib. https://syspatch.se/8.0/010_xserver.html https://syspatch.se/8.0/010_xserver.html Sat, 14 Nov 2026 00:00:00 +0000 Multiple vulnerabilities in the X server Resources, Test, Xv extensions and EDID Display range parsing. CVE-2026-109091 CVE-2026-109092 CVE-2026-109093 CVE-2026-109904 CVE-2026-109094 CVE-2026-109095 CVE-2026-109096 CVE-2026-109903 https://syspatch.se/7.9/054_wscons.html https://syspatch.se/7.9/054_wscons.html Sat, 14 Nov 2026 00:00:00 +0000 A local user logged in on the glass console could write out of bounds to kernel memory and use this to gain root privileges. https://syspatch.se/7.9/053_nd6dad.html https://syspatch.se/7.9/053_nd6dad.html Sat, 14 Nov 2026 00:00:00 +0000 A race in IPv6 duplicate address detection could corrupt kernel memory. https://syspatch.se/7.9/052_tcpsyn.html https://syspatch.se/7.9/052_tcpsyn.html Sat, 14 Nov 2026 00:00:00 +0000 A race in TCP syn cache could crash the kernel remotely. https://syspatch.se/7.9/051_tcpsack.html https://syspatch.se/7.9/051_tcpsack.html Sat, 14 Nov 2026 00:00:00 +0000 TCP SACK packets could crash the kernel remotely. https://syspatch.se/7.9/050_libcasr.html https://syspatch.se/7.9/050_libcasr.html Sat, 14 Nov 2026 00:00:00 +0000 Fix a buffer overflow in the libc stub DNS resolver. Update the resolver code to the version in OpenBSD 8.0. https://syspatch.se/7.9/049_kbind.html https://syspatch.se/7.9/049_kbind.html Sat, 14 Nov 2026 00:00:00 +0000 Fix a local root exploit through a reference count race in the vnode pager that can be triggered with kbind(2). https://syspatch.se/7.9/048_libressl.html https://syspatch.se/7.9/048_libressl.html Sat, 14 Nov 2026 00:00:00 +0000 Fix TLS interoperability with peers sending more than 32 signature algorithms. https://syspatch.se/7.9/047_syszlib.html https://syspatch.se/7.9/047_syszlib.html Sat, 14 Nov 2026 00:00:00 +0000 Fix out of bounds reads and writes as well as info leaks in zlib. https://syspatch.se/7.9/046_zlib.html https://syspatch.se/7.9/046_zlib.html Sat, 14 Nov 2026 00:00:00 +0000 Fix out of bounds reads and writes as well as info leaks in zlib. CVE-2026-76844 CVE-2026-85091 https://syspatch.se/7.9/045_xserver.html https://syspatch.se/7.9/045_xserver.html Sat, 14 Nov 2026 00:00:00 +0000 Multiple vulnerabilities in the X server Resources, Test, Xv extensions and EDID Display range parsing. CVE-2026-109091 CVE-2026-109092 CVE-2026-109093 CVE-2026-109904 CVE-2026-109094 CVE-2026-109095 CVE-2026-109096 CVE-2026-109903 https://syspatch.se/8.0/009_unveil.html https://syspatch.se/8.0/009_unveil.html Thu, 05 Nov 2026 00:00:00 +0000 With unveil(2), an obscure filesystem use could lock the kernel. https://syspatch.se/8.0/008_pffq.html https://syspatch.se/8.0/008_pffq.html Thu, 05 Nov 2026 00:00:00 +0000 If pf is configured with FQ-CoDel queueing, sustained traffic overloading a queue could crash the kernel. https://syspatch.se/8.0/007_xlibs.html https://syspatch.se/8.0/007_xlibs.html Thu, 05 Nov 2026 00:00:00 +0000 Multiple security issues in X.Org X client libraries. CVE-2026-88806 CVE-2026-88807 CVE-2026-93541 CVE-2026-93542 CVE-2026-93543 CVE-2026-93544 CVE-2026-93545 CVE-2026-94281 CVE-2026-94282 CVE-2026-94283 CVE-2026-94284 CVE-2026-94285 CVE-2026-94286 CVE-2026-94287 CVE-2026-109088 CVE-2026-109089 CVE-2026-109090 https://syspatch.se/8.0/006_isakmpd.html https://syspatch.se/8.0/006_isakmpd.html Thu, 05 Nov 2026 00:00:00 +0000 By sending crafted IKEv1 messages, an unauthenticated remote attacker could crash isakmpd(8) due to a NULL pointer dereference, out-of-bounds memory accesses or a double free. https://syspatch.se/7.9/044_unveil.html https://syspatch.se/7.9/044_unveil.html Thu, 05 Nov 2026 00:00:00 +0000 With unveil(2), an obscure filesystem use could lock the kernel. https://syspatch.se/7.9/043_pffq.html https://syspatch.se/7.9/043_pffq.html Thu, 05 Nov 2026 00:00:00 +0000 If pf is configured with FQ-CoDel queueing, sustained traffic overloading a queue could wrap a drop counter and disturb queue management. https://syspatch.se/7.9/042_xlibs.html https://syspatch.se/7.9/042_xlibs.html Thu, 05 Nov 2026 00:00:00 +0000 Multiple security issues in X.Org X client libraries. CVE-2026-88806 CVE-2026-88807 CVE-2026-93541 CVE-2026-93542 CVE-2026-93543 CVE-2026-93544 CVE-2026-93545 CVE-2026-94281 CVE-2026-94282 CVE-2026-94283 CVE-2026-94284 CVE-2026-94285 CVE-2026-94286 CVE-2026-94287 CVE-2026-109088 CVE-2026-109089 CVE-2026-109090 https://syspatch.se/7.9/041_isakmpd.html https://syspatch.se/7.9/041_isakmpd.html Thu, 05 Nov 2026 00:00:00 +0000 By sending crafted IKEv1 messages, an unauthenticated remote attacker could crash isakmpd(8) due to a NULL pointer dereference, out-of-bounds memory accesses or a double free. https://syspatch.se/8.0/005_dbupdate.html https://syspatch.se/8.0/005_dbupdate.html Fri, 23 Oct 2026 00:00:00 +0000 Add the dbupdate utility that can be used to update /etc/ssl/cert.pem and /usr/share/zoneinfo. This erratum includes an updated /etc/ssl/cert.pem. If you require local overrides, place them in /etc/ssl/cert.local.pem. Running dbupdate(8) will prepend these overrides to the updated cert.pem. https://syspatch.se/7.9/040_dbupdate.html https://syspatch.se/7.9/040_dbupdate.html Fri, 23 Oct 2026 00:00:00 +0000 Add the dbupdate utility that can be used to update /etc/ssl/cert.pem and /usr/share/zoneinfo. This erratum includes an updated /etc/ssl/cert.pem. If you require local overrides, place them in /etc/ssl/cert.local.pem. Running dbupdate(8) will prepend these overrides to the updated cert.pem.