===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata22.html,v
retrieving revision 1.4
retrieving revision 1.5
diff -c -r1.4 -r1.5
*** www/errata22.html	1998/04/23 16:53:10	1.4
--- www/errata22.html	1998/05/03 09:13:32	1.5
***************
*** 26,31 ****
--- 26,48 ----
  <a name=all></a>
  <li><h3><font color=#e00000>All architectures</font></h3>
  <ul>
+ <a name=xterm-xaw></a>
+ <li><font color=#009000><strong>SECURITY FIX</strong></font><br>
+ As stated in CERT advisory VB-98.04, there are buffer
+ overrun problems in <strong>xterm</strong>  
+ related to the input-Method, preeditType, and *Keymap resources, and
+ buffer overruns in the <strong>Xaw</strong>
+ library related to the inputMethod and preeditType resources.  
+ The xterm problem represents a security vulnerability for any platform 
+ where xterm is installed setuid-root (as is the case for all OpenBSD
+ platforms).  The Xaw problem represents a security vulnerability for
+ any setuid-root program that uses the Xaw library (including xterm).
+ <p>
+ <a href="http://www.xfree86.org/">XFree86 3.3.2</a> patch 1 corrects 
+ these problems.
+ <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.2/common/xterm-xaw.patch>
+ Here's a version for the OpenBSD 2.2 tree</a>.
+ <p>
  <a name=rmjob></a>
  <li><font color=#009000><strong>SECURITY FIX</strong></font><br>
  An exploitable buffer mismanagement exists in a subroutine used by
***************
*** 314,320 ****
  
  <a href=orders.html><img src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: errata22.html,v 1.4 1998/04/23 16:53:10 deraadt Exp $</small>
  
  </body>
  </html>
--- 331,337 ----
  
  <a href=orders.html><img src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: errata22.html,v 1.5 1998/05/03 09:13:32 matthieu Exp $</small>
  
  </body>
  </html>