[BACK]Return to errata.html CVS log [TXT][DIR] Up to [local] / www

Diff for /www/errata.html between version 1.270 and 1.271

version 1.270, 2000/10/03 22:56:03 version 1.271, 2000/10/06 19:59:42
Line 40 
Line 40 
 <a name=all></a>  <a name=all></a>
 <li><h3><font color=#e00000>All architectures</font></h3>  <li><h3><font color=#e00000>All architectures</font></h3>
 <ul>  <ul>
   <a name=curses></a>
   <li><font color=#009000><strong>027: SECURITY FIX: Oct 6, 2000</strong></font><br>
   libcurses permitted reading of $HOME/.termlib database files if used by
   a setuid or setgid application.
   <br>
   <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/026_talkd.patch>
   A source code patch exists which remedies this problem.</a>
   <p>
   <a name=talkd></a>
   <li><font color=#009000><strong>026: SECURITY FIX: Oct 6, 2000</strong></font><br>
   A format string vulnerability exists in talkd(8).  It is not clear
   yet what the impact is.
   <br>
   <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/026_talkd.patch>
   A source code patch exists which remedies this problem.</a>
   <p>
 <a name=pw_error></a>  <a name=pw_error></a>
 <li><font color=#009000><strong>025: SECURITY FIX: Oct 3, 2000</strong></font><br>  <li><font color=#009000><strong>025: SECURITY FIX: Oct 3, 2000</strong></font><br>
 A format string vulnerability exists in the pw_error(3) function.  This  A format string vulnerability exists in the pw_error(3) function.  This
Legend:
Removed from v.1.270  
changed lines
  Added in v.1.271