===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata.html,v
retrieving revision 1.364
retrieving revision 1.365
diff -c -r1.364 -r1.365
*** www/errata.html	2001/12/11 05:45:50	1.364
--- www/errata.html	2001/12/13 19:01:39	1.365
***************
*** 75,81 ****
  <a name=sshd>
  <li><font color=#009000><strong>002: SECURITY FIX: November 12, 2001</strong></font><br>
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>
! is being upgraded from OpenSSH 3.0 to OpenSSH 3.0.1 to fix a few problems:
  <p>
  <ul>
  <li>A security hole that may allow an attacker to partially authenticate
--- 75,81 ----
  <a name=sshd>
  <li><font color=#009000><strong>002: SECURITY FIX: November 12, 2001</strong></font><br>
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>
! is being upgraded from OpenSSH 3.0 to OpenSSH 3.0.2 to fix a few problems:
  <p>
  <ul>
  <li>A security hole that may allow an attacker to partially authenticate
***************
*** 88,98 ****
  also exists, but since this may cause daemon crashes, we are providing a
  patch as well.
  <p>
  <li>Various other non-critical fixes.
  </ul>
  <p>
! Effectively an upgrade of OpenSSH 3.0 to OpenSSH 3.0.1,
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/002_ssh.patch">a source code patch exists which remedies these problems</a>.
  <p>
  <a name=hosts>
  <li><font color=#009000><strong>001: INSTALL ISSUE: November 12, 2001</strong></font><br>
--- 88,102 ----
  also exists, but since this may cause daemon crashes, we are providing a
  patch as well.
  <p>
+ <li>A vulnerability in environment passing in the <code>UseLogin</code>
+ <i>sshd</i> option 
+ <p>
  <li>Various other non-critical fixes.
  </ul>
  <p>
! Effectively an upgrade of OpenSSH 3.0 to OpenSSH 3.0.2,
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/002_ssh2.patch">a source code patch exists which remedies these problems</a>.
! This is the second version of this patch.
  <p>
  <a name=hosts>
  <li><font color=#009000><strong>001: INSTALL ISSUE: November 12, 2001</strong></font><br>
***************
*** 221,227 ****
  
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: errata.html,v 1.364 2001/12/11 05:45:50 jason Exp $</small>
  
  </body>
  </html>
--- 225,231 ----
  
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: errata.html,v 1.365 2001/12/13 19:01:39 jason Exp $</small>
  
  </body>
  </html>