===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata.html,v
retrieving revision 1.254
retrieving revision 1.255
diff -c -r1.254 -r1.255
*** www/errata.html	2000/07/05 04:15:26	1.254
--- www/errata.html	2000/07/05 22:40:38	1.255
***************
*** 40,45 ****
--- 40,62 ----
  <a name=all></a>
  <li><h3><font color=#e00000>All architectures</font></h3>
  <ul>
+ <a name=ftpd></a>
+ <li><font color=#009000><strong>019: SECURITY FIX: July 5, 2000</strong></font><br>
+ Just like pretty much all the other unix ftp daemons on the planet, 
+ ftpd had a remote root hole in it.  Luckily, ftpd was not enabled by default.
+ The problem exists if anonymous ftp is enabled, or if a hostile user has a
+ valid login.
+ <br>
+ <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/019_ftpd.patch>
+ A source code patch exists which remedies this problem.</a>
+ <p>
+ <a name=mopd></a>
+ <li><font color=#009000><strong>018: SECURITY FIX: July 5, 2000</strong></font><br>
+ Mopd contained a buffer overflow.
+ <br>
+ <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/018_mopd.patch>
+ A source code patch exists which remedies this problem.</a>
+ <p>
  <a name=screen></a>
  <li><font color=#009000><strong>017: INSTALLATION FIX: July 3, 2000</strong></font>
  <br>
***************
*** 275,281 ****
  
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: errata.html,v 1.254 2000/07/05 04:15:26 deraadt Exp $</small>
  
  </body>
  </html>
--- 292,298 ----
  
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: errata.html,v 1.255 2000/07/05 22:40:38 deraadt Exp $</small>
  
  </body>
  </html>