===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata33.html,v
retrieving revision 1.8
retrieving revision 1.9
diff -u -r1.8 -r1.9
--- www/errata33.html 2003/11/21 16:55:16 1.8
+++ www/errata33.html 2004/01/16 00:53:26 1.9
@@ -55,6 +55,17 @@
All architectures
+
+- 014: SECURITY FIX: January 15, 2004
+Several message handling flaws in
+isakmpd(8)
+have been reported by Thomas Walpuski. These allow an attacker to delete arbitrary SAs. The patch also
+includes a reliability fix for a filedescriptor leak that causes problems when a crypto card is
+installed.
+
+
+A source code patch exists which remedies these problems.
+
-
013: RELIABILITY FIX: November 20, 2003
An improper bounds check makes it possible for a local user to cause a crash
@@ -253,7 +264,7 @@
www@openbsd.org
-
$OpenBSD: errata33.html,v 1.8 2003/11/21 16:55:16 henning Exp $
+
$OpenBSD: errata33.html,v 1.9 2004/01/16 00:53:26 brad Exp $