===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata.html,v
retrieving revision 1.318
retrieving revision 1.319
diff -c -r1.318 -r1.319
*** www/errata.html	2001/03/19 16:37:04	1.318
--- www/errata.html	2001/03/22 10:43:35	1.319
***************
*** 47,56 ****
  <ul>
  <a name=readline></a>
  <li><font color=#009000><strong>024: SECURITY FIX: Mar 18, 2001</strong></font><br>
! The readline library shipped with OpenBSD allows history files creation with
! a permissive umask.  This can lead to the leakage of sensitive information
! in applications that use passwords and the like during user interaction
! (one such application is mysql).<br>
  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.8/common/024_readline.patch">A source code patch exists which remedies the problem.</a><br>
  <p>
  <a name=ipsec_ah></a>
--- 47,58 ----
  <ul>
  <a name=readline></a>
  <li><font color=#009000><strong>024: SECURITY FIX: Mar 18, 2001</strong></font><br>
! The readline library shipped with OpenBSD allows history files creation
! with a permissive
! <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=umask&sektion=2">umask(2)</a>.
! This can lead to the leakage of sensitive information in applications
! that use passwords and the like during user interaction (one such
! application is mysql).<br>
  <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.8/common/024_readline.patch">A source code patch exists which remedies the problem.</a><br>
  <p>
  <a name=ipsec_ah></a>
***************
*** 357,363 ****
  
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: errata.html,v 1.318 2001/03/19 16:37:04 jason Exp $</small>
  
  </body>
  </html>
--- 359,365 ----
  
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: errata.html,v 1.319 2001/03/22 10:43:35 horacio Exp $</small>
  
  </body>
  </html>