001: INSTALL ISSUE: November 12, 2001
+A small bug in the installation script causes the /etc/hosts file to
+be incorrectly formed.
+The resulting file contains a line which reads like:
+
+ #.#.#.# hostname. hostname
+
+
+This line should actually read something like:
+
+ #.#.#.# hostname.domainname.com hostname
+
+
+To correct this problem, simply edit the file and insert the domainname in
+the required place.
+
+
+002: SECURITY FIX: November 12, 2001
+sshd(8)
+is being upgraded from OpenSSH 3.0 to OpenSSH 3.0.1 to fix a few problems:
+
+
+- A security hole that may allow an attacker to partially authenticate
+if -- and only if -- the administrator has enabled KerberosV.
+
+By default, OpenSSH KerberosV support only becomes active after KerberosV
+has been properly configured.
+
+
- An excessive memory clearing bug (which we believe to be unexploitable)
+also exists, but since this may cause daemon crashes, we are providing a
+patch as well.
+
+
- Various other non-critical fixes.
+Effectively an upgrade of OpenSSH 3.0 to OpenSSH 3.0.1,
+a source code patch exists which remedies these problems.
+
+
www@openbsd.org
-