===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata.html,v
retrieving revision 1.268
retrieving revision 1.269
diff -c -r1.268 -r1.269
*** www/errata.html	2000/09/18 17:00:13	1.268
--- www/errata.html	2000/10/03 22:44:53	1.269
***************
*** 40,45 ****
--- 40,57 ----
  <a name=all></a>
  <li><h3><font color=#e00000>All architectures</font></h3>
  <ul>
+ <a name=pw_error></a>
+ <li><font color=#009000><strong>025: SECURITY FIX: Oct 3, 2000</strong></font><br>
+ A format string vulnerability exists in the pw_error(3) function.  This
+ manifests itself as a security hole in the chpass utility.  As a workaround
+ which disables its functionality, do
+ <pre>
+ # chmod u-s /usr/bin/chpass
+ </pre>
+ <br>
+ <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/025_pw_error.patch>
+ A source code patch exists which remedies this problem.</a>
+ <p>
  <a name=ipsec></a>
  <li><font color=#009000><strong>024: SECURITY FIX: Sep 18, 2000</strong></font><br>
  Bad ESP/AH packets could cause a crash under certain conditions.
***************
*** 49,55 ****
  <a name=xlock></a>
  <li><font color=#009000><strong>023: SECURITY FIX: Aug 16, 2000</strong></font><br>
  A format string vulnerability exists in xlock. As a workaround which disables
! it's functionality, do
  <pre>
  # chmod u-s /usr/X11R6/bin/xlock
  </pre>
--- 61,67 ----
  <a name=xlock></a>
  <li><font color=#009000><strong>023: SECURITY FIX: Aug 16, 2000</strong></font><br>
  A format string vulnerability exists in xlock. As a workaround which disables
! its functionality, do
  <pre>
  # chmod u-s /usr/X11R6/bin/xlock
  </pre>
***************
*** 369,375 ****
  
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: errata.html,v 1.268 2000/09/18 17:00:13 jason Exp $</small>
  
  </body>
  </html>
--- 381,387 ----
  
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: errata.html,v 1.269 2000/10/03 22:44:53 millert Exp $</small>
  
  </body>
  </html>