===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata.html,v
retrieving revision 1.321
retrieving revision 1.322
diff -c -r1.321 -r1.322
*** www/errata.html	2001/04/10 16:05:48	1.321
--- www/errata.html	2001/04/23 22:12:17	1.322
***************
*** 45,50 ****
--- 45,60 ----
  <a name=all></a>
  <li><h3><font color=#e00000>All architectures</font></h3>
  <ul>
+ <a name=ipf_frag></a>
+ <li><font color=#009000><strong>027: SECURITY FIX: Apr 23, 2001</strong></font><br>
+ IPF has a serious problem with fragment cacheing, the bug is triggered if you use the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipf&sektion=5">ipf(5)</a> syntax &quot;keep state&quot;.<br>
+ <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.8/common/027_ipf-frag.patch">A source code patch exists which remedies the problem.</a><br>
+ <p>
+ <a name=glob_limit></a>
+ <li><font color=#009000><strong>026: SECURITY FIX: Apr 23, 2001</strong></font><br>
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=glob&sektion=3">ftpd(8)</a> has a potential DoS related to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=glob&sektion=3">glob(3)</a>. This patch introduces a GLOB_LIMIT, eliminating the DoS. You must have <a href="#glob">025_glob.patch</a> installed before installing this patch.<br>
+ <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.8/common/026_globlimit.patch">A source code patch exists which remedies the problem.</a><br>
+ <p>
  <a name=glob></a>
  <li><font color=#009000><strong>025: SECURITY FIX: Apr 10, 2001</strong></font><br>
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=glob&sektion=3">glob(3)</a> contains multiple buffer overflows. <br>
***************
*** 364,370 ****
  
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: errata.html,v 1.321 2001/04/10 16:05:48 millert Exp $</small>
  
  </body>
  </html>
--- 374,380 ----
  
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: errata.html,v 1.322 2001/04/23 22:12:17 ericj Exp $</small>
  
  </body>
  </html>