www/errata.html - diff

Return to errata.html CVS log

Up to [local] / www

version 1.364, 2001/12/11 05:45:50

version 1.365, 2001/12/13 19:01:39

Line 75

<li>002: SECURITY FIX: November 12, 2001

is being upgraded from OpenSSH 3.0 to OpenSSH 3.0.1 to fix a few problems:

is being upgraded from OpenSSH 3.0 to OpenSSH 3.0.2 to fix a few problems:

<ul>

<li>A security hole that may allow an attacker to partially authenticate

Line 88

also exists, but since this may cause daemon crashes, we are providing a

patch as well.

<li>A vulnerability in environment passing in the <code>UseLogin</code>

sshd option

<li>Various other non-critical fixes.

</ul>

Effectively an upgrade of OpenSSH 3.0 to OpenSSH 3.0.1,

Effectively an upgrade of OpenSSH 3.0 to OpenSSH 3.0.2,

<a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/002_ssh.patch">a source code patch exists which remedies these problems</a>.

<a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/002_ssh2.patch">a source code patch exists which remedies these problems</a>.

This is the second version of this patch.

<li>001: INSTALL ISSUE: November 12, 2001