===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata.html,v
retrieving revision 1.463
retrieving revision 1.464
diff -c -r1.463 -r1.464
*** www/errata.html	2003/11/04 16:01:21	1.463
--- www/errata.html	2003/11/10 04:36:49	1.464
***************
*** 59,65 ****
  <li><font color="#009000"><strong>005: RELIABILITY FIX: November 4, 2003</strong></font><br>
  It is possible for a local user to cause a system panic by executing a specially crafted binary with an invalid header.
  <br>
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/005_exec.patch">A source code patch exists which remedies the problem</a>.<br>
  <p>
  <a name=httpd></a>
  <li><font color="#009000"><strong>004: RELIABILITY FIX: November 1, 2003</strong></font><br>
--- 59,66 ----
  <li><font color="#009000"><strong>005: RELIABILITY FIX: November 4, 2003</strong></font><br>
  It is possible for a local user to cause a system panic by executing a specially crafted binary with an invalid header.
  <br>
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/005_exec.patch">
! A source code patch exists which remedies the problem</a>.<br>
  <p>
  <a name=httpd></a>
  <li><font color="#009000"><strong>004: RELIABILITY FIX: November 1, 2003</strong></font><br>
***************
*** 69,81 ****
  or potentially run arbitrary code as the user <tt>www</tt> (although it
  is believed that ProPolice will prevent code execution).
  <br>
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/004_httpd.patch">A source code patch exists which remedies the problem</a>.<br>
  <p>
  <a name=arp></a>
  <li><font color="#009000"><strong>003: RELIABILITY FIX: November 1, 2003</strong></font><br>
  It is possible for a local user to cause a system panic by flooding it with spoofed ARP
  requests.<br>
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/003_arp.patch">A source code patch exists which remedies the problem</a>.<br>
  <p>
  <a name=asn1></a>
  <li><font color="#009000"><strong>002: SECURITY FIX: November 1, 2003</strong></font><br>
--- 70,84 ----
  or potentially run arbitrary code as the user <tt>www</tt> (although it
  is believed that ProPolice will prevent code execution).
  <br>
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/004_httpd.patch">
! A source code patch exists which remedies the problem</a>.<br>
  <p>
  <a name=arp></a>
  <li><font color="#009000"><strong>003: RELIABILITY FIX: November 1, 2003</strong></font><br>
  It is possible for a local user to cause a system panic by flooding it with spoofed ARP
  requests.<br>
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/003_arp.patch">
! A source code patch exists which remedies the problem</a>.<br>
  <p>
  <a name=asn1></a>
  <li><font color="#009000"><strong>002: SECURITY FIX: November 1, 2003</strong></font><br>
***************
*** 83,89 ****
  attacker to mount a denial of service attack against applications linked with
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&amp;sektion=3">ssl(3)</a>.
  This does not affect OpenSSH.<br>
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/002_asn1.patch">A source code patch exists which remedies the problem</a>.<br>
  <p>
  <a name=cd_booklet></a>
  <li><font color="#009000"><strong>001: DOCUMENTATION FIX: November 1, 2003</strong></font><br>
--- 86,93 ----
  attacker to mount a denial of service attack against applications linked with
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&amp;sektion=3">ssl(3)</a>.
  This does not affect OpenSSH.<br>
! <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/002_asn1.patch">
! A source code patch exists which remedies the problem</a>.<br>
  <p>
  <a name=cd_booklet></a>
  <li><font color="#009000"><strong>001: DOCUMENTATION FIX: November 1, 2003</strong></font><br>
***************
*** 185,191 ****
  <hr>
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
! <br><small>$OpenBSD: errata.html,v 1.463 2003/11/04 16:01:21 brad Exp $</small>
  
  </body>
  </html>
--- 189,195 ----
  <hr>
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
! <br><small>$OpenBSD: errata.html,v 1.464 2003/11/10 04:36:49 nick Exp $</small>
  
  </body>
  </html>