===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata35.html,v
retrieving revision 1.46
retrieving revision 1.47
diff -c -r1.46 -r1.47
*** www/errata35.html	2014/03/28 03:04:30	1.46
--- www/errata35.html	2014/03/31 03:12:47	1.47
***************
*** 6,12 ****
  <meta name="description" content="the OpenBSD CD errata page">
  <meta name="keywords" content="openbsd,cd,errata">
  <meta name="distribution" content="global">
- <meta name="copyright" content="This document copyright 1997-2004 by OpenBSD.">
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
  </head>
  
--- 6,11 ----
***************
*** 65,77 ****
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5.tar.gz">
  You can also fetch a tar.gz file containing all the following patches</a>.
  This file is updated once a day.
  
! <p> The patches below are available in CVS via the
  <code>OPENBSD_3_5</code> <a href="stable.html">patch branch</a>.
- 
  <p>
  For more detailed information on how to install patches to OpenBSD, please
  consult the <a href="./faq/faq10.html#Patches">OpenBSD FAQ</a>.
  <hr>
  
  <a name="all"></a>
--- 64,79 ----
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5.tar.gz">
  You can also fetch a tar.gz file containing all the following patches</a>.
  This file is updated once a day.
+ <p>
  
! The patches below are available in CVS via the
  <code>OPENBSD_3_5</code> <a href="stable.html">patch branch</a>.
  <p>
+ 
  For more detailed information on how to install patches to OpenBSD, please
  consult the <a href="./faq/faq10.html#Patches">OpenBSD FAQ</a>.
+ <p>
+ 
  <hr>
  
  <a name="all"></a>
***************
*** 86,92 ****
  .
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/033_cvs4.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  
  <li><a name="tcp2"></a>
--- 88,94 ----
  .
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/033_cvs4.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  
  <li><a name="tcp2"></a>
***************
*** 96,102 ****
  timestamps.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/032_tcp2.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  
  <li><a name="telnet"></a>
--- 98,104 ----
  timestamps.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/032_tcp2.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  
  <li><a name="telnet"></a>
***************
*** 109,115 ****
  .
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/031_telnet.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  
  <li><a name="sack"></a>
--- 111,117 ----
  .
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/031_telnet.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  
  <li><a name="sack"></a>
***************
*** 120,126 ****
  invalid SACK options and cause a system crash.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/030_sack.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  
  
--- 122,128 ----
  invalid SACK options and cause a system crash.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/030_sack.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  
  
***************
*** 133,139 ****
  timestamp option, an attacker can cause a system panic.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/027_rtt.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  
  <li><a name="httpd3"></a>
--- 135,141 ----
  timestamp option, an attacker can cause a system panic.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/027_rtt.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  
  <li><a name="httpd3"></a>
***************
*** 147,153 ****
  includes and making use of a malicious document.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/026_httpd3.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  
  <li><a name="getcwd"></a>
--- 149,155 ----
  includes and making use of a malicious document.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/026_httpd3.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  
  <li><a name="getcwd"></a>
***************
*** 158,164 ****
  to retrieve the current working directory if the path is very long.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/025_getcwd.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  
  <li><a name="pfkey"></a>
--- 160,166 ----
  to retrieve the current working directory if the path is very long.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/025_getcwd.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  
  <li><a name="pfkey"></a>
***************
*** 171,177 ****
  credentials on a socket.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/024_pfkey.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  <li><a name="lynx"></a>
  <font color="#009000"><strong>023: RELIABILITY FIX: November 10, 2004</strong></font><br>
--- 173,179 ----
  credentials on a socket.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/024_pfkey.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  <li><a name="lynx"></a>
  <font color="#009000"><strong>023: RELIABILITY FIX: November 10, 2004</strong></font><br>
***************
*** 184,190 ****
  to exhaust memory and then crash when parsing such pages.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/023_lynx.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  <li><a name="pppd"></a>
  <font color="#009000"><strong>022: RELIABILITY FIX: November 10, 2004</strong></font><br>
--- 186,192 ----
  to exhaust memory and then crash when parsing such pages.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/023_lynx.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  <li><a name="pppd"></a>
  <font color="#009000"><strong>022: RELIABILITY FIX: November 10, 2004</strong></font><br>
***************
*** 193,199 ****
  be used to deny service to other users.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/022_pppd.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  <li><a name="bind"></a>
  <font color="#009000"><strong>021: RELIABILITY FIX: November 10, 2004</strong></font><br>
--- 195,201 ----
  be used to deny service to other users.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/022_pppd.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  <li><a name="bind"></a>
  <font color="#009000"><strong>021: RELIABILITY FIX: November 10, 2004</strong></font><br>
***************
*** 202,208 ****
  thus slow DNS queries.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/021_bind.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  <li><a name="radius"></a>
  <font color="#009000"><strong>020: SECURITY FIX: September 20, 2004</strong></font><br>
--- 204,210 ----
  thus slow DNS queries.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/021_bind.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  <li><a name="radius"></a>
  <font color="#009000"><strong>020: SECURITY FIX: September 20, 2004</strong></font><br>
***************
*** 213,219 ****
  attacker.  Note that OpenBSD does not ship with radius authentication enabled.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/020_radius.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  <li><a name="xpm"></a>
  <font color="#009000"><strong>019: SECURITY FIX: September 16, 2004</strong></font><br>
--- 215,221 ----
  attacker.  Note that OpenBSD does not ship with radius authentication enabled.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/020_radius.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  <li><a name="xpm"></a>
  <font color="#009000"><strong>019: SECURITY FIX: September 16, 2004</strong></font><br>
***************
*** 226,232 ****
  an application that handles XPM images, if they could escape ProPolice.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/019_xpm.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  <li><a name="httpd2"></a>
  <font color="#009000"><strong>018: SECURITY FIX: September 10, 2004</strong></font><br>
--- 228,234 ----
  an application that handles XPM images, if they could escape ProPolice.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/019_xpm.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  <li><a name="httpd2"></a>
  <font color="#009000"><strong>018: SECURITY FIX: September 10, 2004</strong></font><br>
***************
*** 237,243 ****
  dbm file.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/018_httpd2.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  <li><a name="libz"></a>
  <font color="#009000"><strong>017: RELIABILITY FIX: August 29, 2004</strong></font><br>
--- 239,245 ----
  dbm file.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/018_httpd2.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  <li><a name="libz"></a>
  <font color="#009000"><strong>017: RELIABILITY FIX: August 29, 2004</strong></font><br>
***************
*** 247,253 ****
  .
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/017_libz.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  <li><a name="bridge"></a>
  <font color="#009000"><strong>016: RELIABILITY FIX: August 26, 2004</strong></font><br>
--- 249,255 ----
  .
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/017_libz.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  <li><a name="bridge"></a>
  <font color="#009000"><strong>016: RELIABILITY FIX: August 26, 2004</strong></font><br>
***************
*** 258,264 ****
  with IPsec processing enabled can be crashed remotely by a single ICMP echo traversing the bridge.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/016_bridge.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  <li><a name="icmp"></a>
  <font color="#009000"><strong>015: RELIABILITY FIX: August 25, 2004</strong></font><br>
--- 260,266 ----
  with IPsec processing enabled can be crashed remotely by a single ICMP echo traversing the bridge.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/016_bridge.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  <li><a name="icmp"></a>
  <font color="#009000"><strong>015: RELIABILITY FIX: August 25, 2004</strong></font><br>
***************
*** 268,274 ****
  <a href="http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html">http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html</a>
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/015_icmp.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  <li><a name="rnd"></a>
  <font color="#009000"><strong>014: RELIABILITY FIX: July 25, 2004</strong></font><br>
--- 270,276 ----
  <a href="http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html">http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html</a>
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/015_icmp.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  <li><a name="rnd"></a>
  <font color="#009000"><strong>014: RELIABILITY FIX: July 25, 2004</strong></font><br>
***************
*** 277,283 ****
  manifested itself as a FPU related crash on boot up.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/014_rnd.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  <li><a name="httpd"></a>
  <font color="#009000"><strong>013: SECURITY FIX: June 12, 2004</strong></font><br>
--- 279,285 ----
  manifested itself as a FPU related crash on boot up.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/014_rnd.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  <li><a name="httpd"></a>
  <font color="#009000"><strong>013: SECURITY FIX: June 12, 2004</strong></font><br>
***************
*** 290,296 ****
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0492">CAN-2004-0492</a>.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/013_httpd.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  <li><a name="isakmpd"></a>
  <font color="#009000"><strong>012: SECURITY FIX: June 10, 2004</strong></font><br>
--- 292,298 ----
  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0492">CAN-2004-0492</a>.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/013_httpd.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  <li><a name="isakmpd"></a>
  <font color="#009000"><strong>012: SECURITY FIX: June 10, 2004</strong></font><br>
***************
*** 302,308 ****
  tunnels at will.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/012_isakmpd.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  <li><a name="cvs3"></a>
  <font color="#009000"><strong>011: SECURITY FIX: June 9, 2004</strong></font><br>
--- 304,310 ----
  tunnels at will.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/012_isakmpd.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  <li><a name="cvs3"></a>
  <font color="#009000"><strong>011: SECURITY FIX: June 9, 2004</strong></font><br>
***************
*** 312,318 ****
  code with the same privileges as the CVS server program.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/011_cvs3.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  <li><a name="fifofs"></a>
  <font color="#009000"><strong>010: RELIABILITY FIX: June 9, 2004</strong></font><br>
--- 314,320 ----
  code with the same privileges as the CVS server program.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/011_cvs3.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  <li><a name="fifofs"></a>
  <font color="#009000"><strong>010: RELIABILITY FIX: June 9, 2004</strong></font><br>
***************
*** 322,334 ****
  mail server which could go into an infinite loop and consume all CPU.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/010_fifofs.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  <li><a name="kerberos"></a>
! <font color="#00900"><strong>009: SECURITY FIX: May 30,
! 2004</strong></font><br>
! A flaw in the Kerberos V <a
! href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdc">kdc(8)</a>
  server could result in the administrator of a Kerberos realm having
  the ability to impersonate any principal in any other realm which
  has established a cross-realm trust with their realm. The flaw is due to
--- 324,335 ----
  mail server which could go into an infinite loop and consume all CPU.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/010_fifofs.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  <li><a name="kerberos"></a>
! <font color="#00900"><strong>009: SECURITY FIX: May 30, 2004</strong></font><br>
! A flaw in the Kerberos V
! <ahref="http://www.openbsd.org/cgi-bin/man.cgi?query=kdc">kdc(8)</a>
  server could result in the administrator of a Kerberos realm having
  the ability to impersonate any principal in any other realm which
  has established a cross-realm trust with their realm. The flaw is due to
***************
*** 336,364 ****
  more details see <a href="http://www.pdc.kth.se/heimdal/advisory/2004-04-01/">
  Heimdal's announcement</a>.
  <br>
! <a
! href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/009_kerberos.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  <li><a name="xdm"></a>
! <font color="#00900"><strong>008: SECURITY FIX: May 26,
! 2004</strong></font><br>
  With the introduction of IPv6 code in
! <a
! href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&amp;apropos=0&amp;sektion=0&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">xdm(1)</a>,
  one test on the 'requestPort' resource was deleted by accident. This
  makes xdm create the chooser socket even if xdmcp is disabled in
  xdm-config, by setting requestPort to 0. See
  <a href="http://bugs.xfree86.org/show_bug.cgi?id=1376">XFree86
  bugzilla</a> for details.
  <br>
! <a
! href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/008_xdm.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  <li><a name="cvs2"></a>
! <font color="#009000"><strong>007: SECURITY FIX: May 20,
! 2004</strong></font><br>
  A heap overflow in the
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&amp;apropos=0&amp;sektion=1&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">cvs(1)</a>
  server has been discovered that can be exploited by clients sending
--- 337,360 ----
  more details see <a href="http://www.pdc.kth.se/heimdal/advisory/2004-04-01/">
  Heimdal's announcement</a>.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/009_kerberos.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  <li><a name="xdm"></a>
! <font color="#00900"><strong>008: SECURITY FIX: May 26, 2004</strong></font><br>
  With the introduction of IPv6 code in
! <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&amp;apropos=0&amp;sektion=0&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">xdm(1)</a>,
  one test on the 'requestPort' resource was deleted by accident. This
  makes xdm create the chooser socket even if xdmcp is disabled in
  xdm-config, by setting requestPort to 0. See
  <a href="http://bugs.xfree86.org/show_bug.cgi?id=1376">XFree86
  bugzilla</a> for details.
  <br>
! <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/008_xdm.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  <li><a name="cvs2"></a>
! <font color="#009000"><strong>007: SECURITY FIX: May 20, 2004</strong></font><br>
  A heap overflow in the
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&amp;apropos=0&amp;sektion=1&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">cvs(1)</a>
  server has been discovered that can be exploited by clients sending
***************
*** 366,392 ****
  with the same privileges as the CVS server program.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/007_cvs2.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  <li><a name="procfs"></a>
! <font color="#009000"><strong>006: SECURITY FIX: May 13,
! 2004</strong></font><br>
  Check for integer overflow in procfs.  Use of procfs is not recommended.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/006_procfs.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  <li><a name="tcp"></a>
! <font color="#009000"><strong>005: RELIABILITY FIX: May 6,
! 2004</strong></font><br>
  Reply to in-window SYN with a rate-limited ACK.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/005_tcp.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  <li><a name="scsi"></a>
! <font color="#009000"><strong>004: RELIABILITY FIX: May 5,
! 2004</strong></font><br>
  Restore the ability to negotiate tags/wide/sync with some SCSI controllers ( i.e.
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=siop&amp;apropos=0&amp;sektion=4&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">siop(4)</a>,
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=trm&amp;apropos=0&amp;sektion=4&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">trm(4)</a>,
--- 362,385 ----
  with the same privileges as the CVS server program.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/007_cvs2.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  <li><a name="procfs"></a>
! <font color="#009000"><strong>006: SECURITY FIX: May 13, 2004</strong></font><br>
  Check for integer overflow in procfs.  Use of procfs is not recommended.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/006_procfs.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  <li><a name="tcp"></a>
! <font color="#009000"><strong>005: RELIABILITY FIX: May 6, 2004</strong></font><br>
  Reply to in-window SYN with a rate-limited ACK.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/005_tcp.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  <li><a name="scsi"></a>
! <font color="#009000"><strong>004: RELIABILITY FIX: May 5, 2004</strong></font><br>
  Restore the ability to negotiate tags/wide/sync with some SCSI controllers ( i.e.
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=siop&amp;apropos=0&amp;sektion=4&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">siop(4)</a>,
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=trm&amp;apropos=0&amp;sektion=4&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">trm(4)</a>,
***************
*** 394,414 ****
  ).
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/004_scsi.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  <li><a name="gdt"></a>
! <font color="#009000"><strong>003: RELIABILITY FIX: May 5,
! 2004</strong></font><br>
  Under load "recent model"
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gdt&amp;apropos=0&amp;sektion=4&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">gdt(4)</a>
  controllers will lock up.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/003_gdt.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  <li><a name="cvs"></a>
! <font color="#009000"><strong>002: SECURITY FIX: May 5,
! 2004</strong></font><br>
  Pathname validation problems have been found in
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&amp;apropos=0&amp;sektion=1&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">cvs(1)</a>,
  allowing malicious clients to create files outside the repository, allowing
--- 387,405 ----
  ).
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/004_scsi.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  <li><a name="gdt"></a>
! <font color="#009000"><strong>003: RELIABILITY FIX: May 5, 2004</strong></font><br>
  Under load "recent model"
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gdt&amp;apropos=0&amp;sektion=4&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">gdt(4)</a>
  controllers will lock up.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/003_gdt.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  <li><a name="cvs"></a>
! <font color="#009000"><strong>002: SECURITY FIX: May 5, 2004</strong></font><br>
  Pathname validation problems have been found in
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&amp;apropos=0&amp;sektion=1&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">cvs(1)</a>,
  allowing malicious clients to create files outside the repository, allowing
***************
*** 417,423 ****
  repository.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/002_cvs.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  </ul>
  <p>
--- 408,414 ----
  repository.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/002_cvs.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  </ul>
  <p>
***************
*** 431,446 ****
  functions to prevent their misuse.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/i386/028_locore.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  </ul>
  <p>
- <a name="alpha"></a>
- <h3><font color="#e00000">alpha</font></h3>
- <ul>
- <li>No problems identified yet.
- </ul>
- <p>
  <a name="amd64"></a>
  <h3><font color="#e00000">amd64</font></h3>
  <ul>
--- 422,431 ----
  functions to prevent their misuse.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/i386/028_locore.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  </ul>
  <p>
  <a name="amd64"></a>
  <h3><font color="#e00000">amd64</font></h3>
  <ul>
***************
*** 451,508 ****
  functions to prevent their misuse.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/amd64/029_copy.patch">
! A source code patch exists which remedies this problem</a>.<br>
  <p>
  </ul>
  <p>
- <a name="cats"></a>
- <h3><font color="#e00000">cats</font></h3>
- <ul>
- <li>No problems identified yet.
- </ul>
- <p>
- <a name="mac68k"></a>
- <h3><font color="#e00000">mac68k</font></h3>
- <ul>
- <li>No problems identified yet.
- </ul>
- <p>
- <a name="sparc"></a>
- <h3><font color="#e00000">sparc</font></h3>
- <ul>
- <li>No problems identified yet.
- </ul>
- <p>
- <a name="sparc64"></a>
- <h3><font color="#e00000">sparc64</font></h3>
- <ul>
- <li>No problems identified yet.
- </ul>
- <p>
- <a name="hppa"></a>
- <h3><font color="#e00000">hppa</font></h3>
- <ul>
- <li>No problems identified yet.
- </ul>
- <p>
- <a name="hp300"></a>
- <h3><font color="#e00000">hp300</font></h3>
- <ul>
- <li>No problems identified yet.
- </ul>
- <p>
- <a name="mvme68k"></a>
- <h3><font color="#e00000">mvme68k</font></h3>
- <ul>
- <li>No problems identified yet.
- </ul>
- <p>
- <a name="mvme88k"></a>
- <h3><font color="#e00000">mvme88k</font></h3>
- <ul>
- <li>No problems identified yet.
- </ul>
- <p>
  <a name="macppc"></a>
  <h3><font color="#e00000">macppc</font></h3>
  <ul>
--- 436,445 ----
  functions to prevent their misuse.
  <br>
  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.5/amd64/029_copy.patch">
! A source code patch exists which remedies this problem.</a>
  <p>
  </ul>
  <p>
  <a name="macppc"></a>
  <h3><font color="#e00000">macppc</font></h3>
  <ul>
***************
*** 514,523 ****
  <p>
  </ul>
  <p>
- <a name="vax"></a>
- <h3><font color="#e00000">vax</font></h3>
- <ul>
- <li>No problems identified yet.
  
  </ul>
  
--- 451,456 ----