===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata.html,v
retrieving revision 1.364
retrieving revision 1.365
diff -u -r1.364 -r1.365
--- www/errata.html	2001/12/11 05:45:50	1.364
+++ www/errata.html	2001/12/13 19:01:39	1.365
@@ -75,7 +75,7 @@
 <a name=sshd>
 <li><font color=#009000><strong>002: SECURITY FIX: November 12, 2001</strong></font><br>
 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>
-is being upgraded from OpenSSH 3.0 to OpenSSH 3.0.1 to fix a few problems:
+is being upgraded from OpenSSH 3.0 to OpenSSH 3.0.2 to fix a few problems:
 <p>
 <ul>
 <li>A security hole that may allow an attacker to partially authenticate
@@ -88,11 +88,15 @@
 also exists, but since this may cause daemon crashes, we are providing a
 patch as well.
 <p>
+<li>A vulnerability in environment passing in the <code>UseLogin</code>
+<i>sshd</i> option 
+<p>
 <li>Various other non-critical fixes.
 </ul>
 <p>
-Effectively an upgrade of OpenSSH 3.0 to OpenSSH 3.0.1,
-<a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/002_ssh.patch">a source code patch exists which remedies these problems</a>.
+Effectively an upgrade of OpenSSH 3.0 to OpenSSH 3.0.2,
+<a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/002_ssh2.patch">a source code patch exists which remedies these problems</a>.
+This is the second version of this patch.
 <p>
 <a name=hosts>
 <li><font color=#009000><strong>001: INSTALL ISSUE: November 12, 2001</strong></font><br>
@@ -221,7 +225,7 @@
 
 <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
 <a href=mailto:www@openbsd.org>www@openbsd.org</a>
-<br><small>$OpenBSD: errata.html,v 1.364 2001/12/11 05:45:50 jason Exp $</small>
+<br><small>$OpenBSD: errata.html,v 1.365 2001/12/13 19:01:39 jason Exp $</small>
 
 </body>
 </html>