===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata.html,v
retrieving revision 1.321
retrieving revision 1.322
diff -u -r1.321 -r1.322
--- www/errata.html	2001/04/10 16:05:48	1.321
+++ www/errata.html	2001/04/23 22:12:17	1.322
@@ -45,6 +45,16 @@
 <a name=all></a>
 <li><h3><font color=#e00000>All architectures</font></h3>
 <ul>
+<a name=ipf_frag></a>
+<li><font color=#009000><strong>027: SECURITY FIX: Apr 23, 2001</strong></font><br>
+IPF has a serious problem with fragment cacheing, the bug is triggered if you use the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipf&sektion=5">ipf(5)</a> syntax &quot;keep state&quot;.<br>
+<a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.8/common/027_ipf-frag.patch">A source code patch exists which remedies the problem.</a><br>
+<p>
+<a name=glob_limit></a>
+<li><font color=#009000><strong>026: SECURITY FIX: Apr 23, 2001</strong></font><br>
+<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=glob&sektion=3">ftpd(8)</a> has a potential DoS related to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=glob&sektion=3">glob(3)</a>. This patch introduces a GLOB_LIMIT, eliminating the DoS. You must have <a href="#glob">025_glob.patch</a> installed before installing this patch.<br>
+<a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.8/common/026_globlimit.patch">A source code patch exists which remedies the problem.</a><br>
+<p>
 <a name=glob></a>
 <li><font color=#009000><strong>025: SECURITY FIX: Apr 10, 2001</strong></font><br>
 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=glob&sektion=3">glob(3)</a> contains multiple buffer overflows. <br>
@@ -364,7 +374,7 @@
 
 <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
 <a href=mailto:www@openbsd.org>www@openbsd.org</a>
-<br><small>$OpenBSD: errata.html,v 1.321 2001/04/10 16:05:48 millert Exp $</small>
+<br><small>$OpenBSD: errata.html,v 1.322 2001/04/23 22:12:17 ericj Exp $</small>
 
 </body>
 </html>