===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata22.html,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -r1.4 -r1.5
--- www/errata22.html	1998/04/23 16:53:10	1.4
+++ www/errata22.html	1998/05/03 09:13:32	1.5
@@ -26,6 +26,23 @@
 <a name=all></a>
 <li><h3><font color=#e00000>All architectures</font></h3>
 <ul>
+<a name=xterm-xaw></a>
+<li><font color=#009000><strong>SECURITY FIX</strong></font><br>
+As stated in CERT advisory VB-98.04, there are buffer
+overrun problems in <strong>xterm</strong>  
+related to the input-Method, preeditType, and *Keymap resources, and
+buffer overruns in the <strong>Xaw</strong>
+library related to the inputMethod and preeditType resources.  
+The xterm problem represents a security vulnerability for any platform 
+where xterm is installed setuid-root (as is the case for all OpenBSD
+platforms).  The Xaw problem represents a security vulnerability for
+any setuid-root program that uses the Xaw library (including xterm).
+<p>
+<a href="http://www.xfree86.org/">XFree86 3.3.2</a> patch 1 corrects 
+these problems.
+<a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.2/common/xterm-xaw.patch>
+Here's a version for the OpenBSD 2.2 tree</a>.
+<p>
 <a name=rmjob></a>
 <li><font color=#009000><strong>SECURITY FIX</strong></font><br>
 An exploitable buffer mismanagement exists in a subroutine used by
@@ -314,7 +331,7 @@
 
 <a href=orders.html><img src=back.gif border=0 alt=OpenBSD></a> 
 <a href=mailto:www@openbsd.org>www@openbsd.org</a>
-<br><small>$OpenBSD: errata22.html,v 1.4 1998/04/23 16:53:10 deraadt Exp $</small>
+<br><small>$OpenBSD: errata22.html,v 1.5 1998/05/03 09:13:32 matthieu Exp $</small>
 
 </body>
 </html>