=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/errata30.html,v retrieving revision 1.23 retrieving revision 1.24 diff -c -r1.23 -r1.24 *** www/errata30.html 2002/07/12 07:41:58 1.23 --- www/errata30.html 2002/07/30 13:42:54 1.24 *************** *** 49,54 **** --- 49,66 ----

All architectures

030: SECURITY FIX: July 30, 2002
+ Several remote buffer overflows can occur in the SSL2 server and SSL3 client of the ssl(8) library, as in the ASN.1 parser code in the crypto(3) library, all of them being potentially remotely exploitable. + A source code patch exists which remedies the problem. + +
029: SECURITY FIX: July 29, 2002
+ A buffer overflow can occur in the xdr_array(3) RPC code, leading to possible remote crash.
+ A source code patch exists which remedies the problem. + +
028: SECURITY FIX: July 29, 2002
+ A race condition exists in the pppd(8) daemon which may cause it to alter the file permissions of an arbitrary file.
+ A source code patch exists which remedies the problem.
027: RELIABILITY FIX: July 5, 2002
Receiving IKE payloads out of sequence can cause *************** *** 365,371 **** www@openbsd.org !
$OpenBSD: errata30.html,v 1.23 2002/07/12 07:41:58 jufi Exp $ --- 377,383 ---- www@openbsd.org !
$OpenBSD: errata30.html,v 1.24 2002/07/30 13:42:54 miod Exp $