🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: OpenBSD 7.4 📖 ~4 min read • Source: OpenBSD 7.4 errata 014_vmm Errata topic: Security: vmm (amd64) Issued: February 29, 2024 Upstream summary: vmm(4) did not restore GDTR limits properly on Intel (VMX) CPUs. Table of contents Symptom & Impact Environment & […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: OpenBSD 7.4 📖 ~4 min read • Source: OpenBSD 7.4 errata 012_xserver Errata topic: Security: xserver (All architectures) Issued: January 16, 2024 Related CVEs: CVE-2023-6816 CVE-2024-0229 CVE-2024-0408 CVE-2024-0409 CVE-2024-21885 CVE-2024-21886 Upstream summary: Fix multiple xserver heap buffer overflows, out of bounds memory […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: OpenBSD 7.4 📖 ~4 min read • Source: OpenBSD 7.4 errata 003_patch Errata topic: Reliability: patch (All architectures) Issued: November 21, 2023 Upstream summary: patch(1) with explicit patchfile did not work in 7.4 due to overeager unveil(2) restrictions. Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: OpenBSD 7.4 📖 ~4 min read • Source: OpenBSD 7.4 errata 022_readdir Errata topic: Security: readdir (All architectures) Issued: September 17, 2024 Upstream summary: In readdir name validation exclude any '/' to avoid unexpected directory traversal on untrusted file systems. Table of […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: OpenBSD 7.4 📖 ~4 min read • Source: OpenBSD 7.4 errata 007_perl Errata topic: Security: perl (All architectures) Issued: November 29, 2023 Related CVEs: CVE-2023-47038 Upstream summary: A crafted regular expression when compiled by perl can cause a one-byte attacker controlled buffer […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: OpenBSD 7.4 📖 ~4 min read • Source: OpenBSD 7.4 errata 020_expat Errata topic: Security: expat (All architectures) Issued: September 17, 2024 Related CVEs: CVE-2024-45490 CVE-2024-45491 CVE-2024-45492 Upstream summary: In libexpat add integer range checks. CVE-2024-45490 CVE-2024-45491 CVE-2024-45492 Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: OpenBSD 7.4 📖 ~4 min read • Source: OpenBSD 7.4 errata 002_msplit Errata topic: Security: msplit (All architectures) Issued: October 25, 2023 Upstream summary: A network buffer that had to be split at certain length could crash the kernel. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: OpenBSD 7.4 📖 ~4 min read • Source: OpenBSD 7.4 errata 011_ssh Errata topic: Security: ssh (All architectures) Issued: December 18, 2023 Upstream summary: An SSH protocol weakness (the Terrapin Attack) exists that allows an on-path adversary to disable keystroke timing obfuscation. […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: OpenBSD 7.4 📖 ~4 min read • Source: OpenBSD 7.4 errata 017_bgpd Errata topic: Reliability: bgpd (All architectures) Issued: June 26, 2024 Upstream summary: Repair a withdraw desyncronization problem in bgpd(8). Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: OpenBSD 7.4 📖 ~4 min read • Source: OpenBSD 7.4 errata 006_httpd Errata topic: Reliability: httpd (All architectures) Issued: November 21, 2023 Upstream summary: httpd(8): Avoid a NULL dereference when handling a malformed fastcgi request. Table of contents Symptom & Impact Environment […]
