[BACK]Return to errata.html CVS log [TXT][DIR] Up to [local] / www

Diff for /www/errata.html between version 1.268 and 1.269

version 1.268, 2000/09/18 17:00:13 version 1.269, 2000/10/03 22:44:53
Line 40 
Line 40 
 <a name=all></a>  <a name=all></a>
 <li><h3><font color=#e00000>All architectures</font></h3>  <li><h3><font color=#e00000>All architectures</font></h3>
 <ul>  <ul>
   <a name=pw_error></a>
   <li><font color=#009000><strong>025: SECURITY FIX: Oct 3, 2000</strong></font><br>
   A format string vulnerability exists in the pw_error(3) function.  This
   manifests itself as a security hole in the chpass utility.  As a workaround
   which disables its functionality, do
   <pre>
   # chmod u-s /usr/bin/chpass
   </pre>
   <br>
   <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/025_pw_error.patch>
   A source code patch exists which remedies this problem.</a>
   <p>
 <a name=ipsec></a>  <a name=ipsec></a>
 <li><font color=#009000><strong>024: SECURITY FIX: Sep 18, 2000</strong></font><br>  <li><font color=#009000><strong>024: SECURITY FIX: Sep 18, 2000</strong></font><br>
 Bad ESP/AH packets could cause a crash under certain conditions.  Bad ESP/AH packets could cause a crash under certain conditions.
Line 49 
Line 61 
 <a name=xlock></a>  <a name=xlock></a>
 <li><font color=#009000><strong>023: SECURITY FIX: Aug 16, 2000</strong></font><br>  <li><font color=#009000><strong>023: SECURITY FIX: Aug 16, 2000</strong></font><br>
 A format string vulnerability exists in xlock. As a workaround which disables  A format string vulnerability exists in xlock. As a workaround which disables
 it's functionality, do  its functionality, do
 <pre>  <pre>
 # chmod u-s /usr/X11R6/bin/xlock  # chmod u-s /usr/X11R6/bin/xlock
 </pre>  </pre>
Legend:
Removed from v.1.268  
changed lines
  Added in v.1.269