===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata.html,v
retrieving revision 1.496
retrieving revision 1.497
diff -c -r1.496 -r1.497
*** www/errata.html	2004/05/30 23:36:48	1.496
--- www/errata.html	2004/05/31 17:23:05	1.497
***************
*** 59,71 ****
  <li><a name="kerberos"></a>
  <font color="#00900"><strong>009: SECURITY FIX: May 30,
  2004</strong></font><br>
! A flaw in the Kerberos V <A
! HREF="http://www.openbsd.org/cgi-bin/man.cgi?query=kdc">kdc(8)</a>
  server could result in the administrator of a Kerberos realm having
  the ability to impersonate any principal in any other realm which
  has established a cross-realm trust with their realm. The flaw is due to
  inadequate checking of the "transited" field in a Kerberos request. For
! more details see <A HREF="http://www.pdc.kth.se/heimdal/advisory/2004-04-01/">
  Heimdal's announcement</A>. 
  <br>
  <a
--- 59,71 ----
  <li><a name="kerberos"></a>
  <font color="#00900"><strong>009: SECURITY FIX: May 30,
  2004</strong></font><br>
! A flaw in the Kerberos V <a
! href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdc">kdc(8)</a>
  server could result in the administrator of a Kerberos realm having
  the ability to impersonate any principal in any other realm which
  has established a cross-realm trust with their realm. The flaw is due to
  inadequate checking of the "transited" field in a Kerberos request. For
! more details see <a href="http://www.pdc.kth.se/heimdal/advisory/2004-04-01/">
  Heimdal's announcement</A>. 
  <br>
  <a
***************
*** 77,83 ****
  2004</strong></font><br>
  With the introduction of IPv6 code in 
  <a
! href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&apropos=0&sektion=0&manpath=OpenBSD+Current&arch=i386&format=html">xdm(1)</a>,
  one test on the 'requestPort' resource was deleted by accident. This
  makes xdm create the chooser socket even if xdmcp is disabled in
  xdm-config, by setting requestPort to 0. See
--- 77,83 ----
  2004</strong></font><br>
  With the introduction of IPv6 code in 
  <a
! href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&amp;apropos=0&amp;sektion=0&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">xdm(1)</a>,
  one test on the 'requestPort' resource was deleted by accident. This
  makes xdm create the chooser socket even if xdmcp is disabled in
  xdm-config, by setting requestPort to 0. See
***************
*** 262,268 ****
  <hr>
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
! <br><small>$OpenBSD: errata.html,v 1.496 2004/05/30 23:36:48 beck Exp $</small>
  
  </body>
  </html>
--- 262,268 ----
  <hr>
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
! <br><small>$OpenBSD: errata.html,v 1.497 2004/05/31 17:23:05 saad Exp $</small>
  
  </body>
  </html>