===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata.html,v
retrieving revision 1.98
retrieving revision 1.99
diff -c -r1.98 -r1.99
*** www/errata.html	1998/04/30 08:13:22	1.98
--- www/errata.html	1998/05/03 08:37:53	1.99
***************
*** 27,34 ****
  <a name=all></a>
  <li><h3><font color=#e00000>All architectures</font></h3>
  <ul>
! <li>No problems identified yet.
  <p>
  </ul>
  <a name=i386></a>
  <li><h3><font color=#e00000>i386</font></h3>
--- 27,49 ----
  <a name=all></a>
  <li><h3><font color=#e00000>All architectures</font></h3>
  <ul>
! <a name=xterm-xaw></a>
! <li><font color=#009000><strong>SECURITY FIX</strong></font><br>
! As stated in CERT advisory VB-98.04, there are buffer
! overrun problems in <strong>xterm</strong>  
! related to the input-Method, preeditType, and *Keymap resources, and
! buffer overruns in the <strong>Xaw</strong>
! library related to the inputMethod and preeditType resources.  
! The xterm problem represents a security vulnerability for any platform 
! where xterm is installed setuid-root (as is the case for all OpenBSD
! platforms).  The Xaw problem represents a security vulnerability for
! any setuid-root program that uses the Xaw library (including xterm).
  <p>
+ <a href="http://www.xfree86.org/">XFree86 3.3.2</a> patch 1 corrects 
+ these problems.
+ <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.3/common/xterm-xaw.patch>
+ Here's a version for the OpenBSD 2.3 tree</a>.
+ <p>
  </ul>
  <a name=i386></a>
  <li><h3><font color=#e00000>i386</font></h3>
***************
*** 114,120 ****
  <hr>
  <a href=orders.html><img src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: errata.html,v 1.98 1998/04/30 08:13:22 deraadt Exp $</small>
  
  </body>
  </html>
--- 129,135 ----
  <hr>
  <a href=orders.html><img src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: errata.html,v 1.99 1998/05/03 08:37:53 matthieu Exp $</small>
  
  </body>
  </html>