www/errata.html - diff

Return to errata.html CVS log

Up to [local] / www

version 1.428, 2003/02/23 00:14:38

version 1.429, 2003/02/23 20:21:41

Line 57

<li>007: SECURITY FIX: February 22, 2003

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=8">ssl(8)</a> an information leak can occur via timing by performing a MAC computation

even if incorrrect block cipher padding has been found, this is a countermeasure. Also, check for negative sizes in memory allocation routines.

even if incorrrect block cipher padding has been found, this is a

countermeasure. Also, check for negative sizes in memory allocation routines.

source code patch exists which fixes these two issues</a>.

Line 69

Line 70

user running cvs. This is only an issue when the cvs command is

being run on a user's behalf as a different user. This means that,

in most cases, the issue only exists for cvs configurations that use

the pserver client/server connection method.

the pserver client/server connection method.

source code patch exists which remedies the problem</a>.