===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.287
retrieving revision 1.288
diff -c -r1.287 -r1.288
*** www/security.html	2004/05/26 19:56:42	1.287
--- www/security.html	2004/05/30 19:49:08	1.288
***************
*** 58,64 ****
  <hr>
  
  <ul>
! <a name=goals></a>
  <li><h3><font color=#e00000>Goal</font></h3><p>
  
  OpenBSD believes in strong security.  Our aspiration is to be NUMBER
--- 58,64 ----
  <hr>
  
  <ul>
! <a name="goals"></a>
  <li><h3><font color=#e00000>Goal</font></h3><p>
  
  OpenBSD believes in strong security.  Our aspiration is to be NUMBER
***************
*** 70,76 ****
  cryptography</a>, we are able to take cryptographic approaches towards
  fixing security problems.<p>
  
! <a name=disclosure></a>
  <li><h3><font color=#e00000>Full Disclosure</font></h3><p>
  
  Like many readers of the
--- 70,76 ----
  cryptography</a>, we are able to take cryptographic approaches towards
  fixing security problems.<p>
  
! <a name="disclosure"></a>
  <li><h3><font color=#e00000>Full Disclosure</font></h3><p>
  
  Like many readers of the
***************
*** 87,93 ****
  turnaround is possible.  Thus we think that full disclosure helps the
  people who really care about security.<p>
  
! <a name=process></a>
  <li><h3><font color=#e00000>Audit Process</font></h3><p>
  
  Our security auditing team typically has between six and twelve
--- 87,93 ----
  turnaround is possible.  Thus we think that full disclosure helps the
  people who really care about security.<p>
  
! <a name="process"></a>
  <li><h3><font color=#e00000>Audit Process</font></h3><p>
  
  Our security auditing team typically has between six and twelve
***************
*** 130,136 ****
  managed such a success is the lpd advisory that Secure Networks put out.
  <p>
  
! <a name=newtech></a>
  <li><h3><font color=#e00000>New Technologies</font></h3><p>
  
  As we audit source code, we often invent new ways of solving problems.
--- 130,136 ----
  managed such a success is the lpd advisory that Secure Networks put out.
  <p>
  
! <a name="newtech"></a>
  <li><h3><font color=#e00000>New Technologies</font></h3><p>
  
  As we audit source code, we often invent new ways of solving problems.
***************
*** 190,196 ****
  The auditing process is not over yet, and as you can see we continue
  to find and fix new security flaws.<p>
  
! <a name=default></a>
  <li><h3><font color=#e00000>"Secure by Default"</font></h3><p>
  
  To ensure that novice users of OpenBSD do not need to become security
--- 190,196 ----
  The auditing process is not over yet, and as you can see we continue
  to find and fix new security flaws.<p>
  
! <a name="default"></a>
  <li><h3><font color=#e00000>"Secure by Default"</font></h3><p>
  
  To ensure that novice users of OpenBSD do not need to become security
***************
*** 206,212 ****
  by default, creating instantaneous security problems for their users
  within minutes after their first install.<p>
  
! <a name=crypto></a>
  <li><h3><font color=#e00000>Cryptography</font></h3><p>
  
  And of course, since the OpenBSD project is based in Canada, it is possible
--- 206,212 ----
  by default, creating instantaneous security problems for their users
  within minutes after their first install.<p>
  
! <a name="crypto"></a>
  <li><h3><font color=#e00000>Cryptography</font></h3><p>
  
  And of course, since the OpenBSD project is based in Canada, it is possible
***************
*** 216,222 ****
  <li><h3><font color=#e00000>Advisories</font></h3><p>
  
  <li>
! <a name=35></a>
  
  <h3><font color=#e00000>OpenBSD 3.5 Security Advisories</font></h3>
  These are the OpenBSD 3.5 advisories -- all these problems are solved 
--- 216,222 ----
  <li><h3><font color=#e00000>Advisories</font></h3><p>
  
  <li>
! <a name="35"></a>
  
  <h3><font color=#e00000>OpenBSD 3.5 Security Advisories</font></h3>
  These are the OpenBSD 3.5 advisories -- all these problems are solved 
***************
*** 227,250 ****
  <ul>
  <li><a href=errata.html#xdm> May 26, 2004:
  	xdm(1) ignores the requestPort resource and creates a 
!         listening socket regardless of the setting in xdm-config.
!         </a>.
  <li><a href=errata.html#cvs2> May 20, 2004:
  	A buffer overflow in the cvs(1) server has been found,
  	which can be used by CVS clients to execute arbitrary code on
! 	the server.</a>
  <li><a href=errata.html#procfs> May 13, 2004:
  	Integer overflow problems were found in procfs, allowing
! 	reading of arbitrary kernel memory.</a>
  <li><a href=errata.html#cvs> May 5, 2004:
  	Pathname validation problems have been found in cvs(1),
  	allowing clients and servers access to files outside the
! 	repository or local CVS tree.</a>
  </ul>
  
  <p>
  <li>
! <a name=34></a>
  
  <h3><font color=#e00000>OpenBSD 3.4 Security Advisories</font></h3>
  These are the OpenBSD 3.4 advisories -- all these problems are solved 
--- 227,249 ----
  <ul>
  <li><a href=errata.html#xdm> May 26, 2004:
  	xdm(1) ignores the requestPort resource and creates a 
!         listening socket regardless of the setting in xdm-config</a>.
  <li><a href=errata.html#cvs2> May 20, 2004:
  	A buffer overflow in the cvs(1) server has been found,
  	which can be used by CVS clients to execute arbitrary code on
! 	the server</a>.
  <li><a href=errata.html#procfs> May 13, 2004:
  	Integer overflow problems were found in procfs, allowing
! 	reading of arbitrary kernel memory</a>.
  <li><a href=errata.html#cvs> May 5, 2004:
  	Pathname validation problems have been found in cvs(1),
  	allowing clients and servers access to files outside the
! 	repository or local CVS tree</a>.
  </ul>
  
  <p>
  <li>
! <a name="34"></a>
  
  <h3><font color=#e00000>OpenBSD 3.4 Security Advisories</font></h3>
  These are the OpenBSD 3.4 advisories -- all these problems are solved 
***************
*** 300,306 ****
  <br>
  
  <li>
! <a name=33></a>
  
  <h3><font color=#e00000>OpenBSD 3.3 Security Advisories</font></h3>
  These are the OpenBSD 3.3 advisories -- all these problems are solved 
--- 299,305 ----
  <br>
  
  <li>
! <a name="33"></a>
  
  <h3><font color=#e00000>OpenBSD 3.3 Security Advisories</font></h3>
  These are the OpenBSD 3.3 advisories -- all these problems are solved 
***************
*** 364,370 ****
  
  <p>
  <li>
! <a name=32></a>
  
  <h3><font color=#e00000>OpenBSD 3.2 Security Advisories</font></h3>
  These are the OpenBSD 3.2 advisories -- all these problems are solved 
--- 363,369 ----
  
  <p>
  <li>
! <a name="32"></a>
  
  <h3><font color=#e00000>OpenBSD 3.2 Security Advisories</font></h3>
  These are the OpenBSD 3.2 advisories -- all these problems are solved 
***************
*** 444,450 ****
  
  <p>
  <li>
! <a name=31></a>
  
  <h3><font color=#e00000>OpenBSD 3.1 Security Advisories</font></h3>
  These are the OpenBSD 3.1 advisories -- all these problems are solved 
--- 443,449 ----
  
  <p>
  <li>
! <a name="31"></a>
  
  <h3><font color=#e00000>OpenBSD 3.1 Security Advisories</font></h3>
  These are the OpenBSD 3.1 advisories -- all these problems are solved 
***************
*** 549,555 ****
  
  <p>
  <li>
! <a name=30></a>
  
  <h3><font color=#e00000>OpenBSD 3.0 Security Advisories</font></h3>
  These are the OpenBSD 3.0 advisories -- all these problems are solved 
--- 548,554 ----
  
  <p>
  <li>
! <a name="30"></a>
  
  <h3><font color=#e00000>OpenBSD 3.0 Security Advisories</font></h3>
  These are the OpenBSD 3.0 advisories -- all these problems are solved 
***************
*** 659,665 ****
  
  <p>
  <li>
! <a name=29></a>
  
  <h3><font color=#e00000>OpenBSD 2.9 Security Advisories</font></h3>
  These are the OpenBSD 2.9 advisories -- all these problems are solved 
--- 658,664 ----
  
  <p>
  <li>
! <a name="29"></a>
  
  <h3><font color=#e00000>OpenBSD 2.9 Security Advisories</font></h3>
  These are the OpenBSD 2.9 advisories -- all these problems are solved 
***************
*** 738,744 ****
  
  <p>
  <li>
! <a name=28></a>
  
  <h3><font color=#e00000>OpenBSD 2.8 Security Advisories</font></h3>
  These are the OpenBSD 2.8 advisories -- all these problems are solved 
--- 737,743 ----
  
  <p>
  <li>
! <a name="28"></a>
  
  <h3><font color=#e00000>OpenBSD 2.8 Security Advisories</font></h3>
  These are the OpenBSD 2.8 advisories -- all these problems are solved 
***************
*** 798,804 ****
  
  <p>
  <li>
! <a name=27></a>
  
  <h3><font color=#e00000>OpenBSD 2.7 Security Advisories</font></h3>
  These are the OpenBSD 2.7 advisories -- all these problems are solved 
--- 797,803 ----
  
  <p>
  <li>
! <a name="27"></a>
  
  <h3><font color=#e00000>OpenBSD 2.7 Security Advisories</font></h3>
  These are the OpenBSD 2.7 advisories -- all these problems are solved 
***************
*** 889,895 ****
  
  <p>
  <li>
! <a name=26></a>
  
  <h3><font color=#e00000>OpenBSD 2.6 Security Advisories</font></h3>
  These are the OpenBSD 2.6 advisories -- all these problems are solved 
--- 888,894 ----
  
  <p>
  <li>
! <a name="26"></a>
  
  <h3><font color=#e00000>OpenBSD 2.6 Security Advisories</font></h3>
  These are the OpenBSD 2.6 advisories -- all these problems are solved 
***************
*** 938,944 ****
  
  <p>
  <li>
! <a name=25></a>
  
  <h3><font color=#e00000>OpenBSD 2.5 Security Advisories</font></h3>
  These are the OpenBSD 2.5 advisories -- all these problems are solved 
--- 937,943 ----
  
  <p>
  <li>
! <a name="25"></a>
  
  <h3><font color=#e00000>OpenBSD 2.5 Security Advisories</font></h3>
  These are the OpenBSD 2.5 advisories -- all these problems are solved 
***************
*** 973,979 ****
  
  <p>
  <li>
! <a name=24></a>
  
  <h3><font color=#e00000>OpenBSD 2.4 Security Advisories</font></h3>
  These are the OpenBSD 2.4 advisories -- all these problems are solved 
--- 972,978 ----
  
  <p>
  <li>
! <a name="24"></a>
  
  <h3><font color=#e00000>OpenBSD 2.4 Security Advisories</font></h3>
  These are the OpenBSD 2.4 advisories -- all these problems are solved 
***************
*** 1018,1024 ****
  
  <p>
  <li>
! <a name=23></a>
  
  <h3><font color=#e00000>OpenBSD 2.3 Security Advisories</font></h3>
  These are the OpenBSD 2.3 advisories -- all these problems are solved 
--- 1017,1023 ----
  
  <p>
  <li>
! <a name="23"></a>
  
  <h3><font color=#e00000>OpenBSD 2.3 Security Advisories</font></h3>
  These are the OpenBSD 2.3 advisories -- all these problems are solved 
***************
*** 1054,1060 ****
  
  <p>
  <li>
! <a name=22></a>
  
  <h3><font color=#e00000>OpenBSD 2.2 Security Advisories</font></h3>
  These are the OpenBSD 2.2 advisories.  All these problems are solved
--- 1053,1059 ----
  
  <p>
  <li>
! <a name="22"></a>
  
  <h3><font color=#e00000>OpenBSD 2.2 Security Advisories</font></h3>
  These are the OpenBSD 2.2 advisories.  All these problems are solved
***************
*** 1089,1095 ****
  
  <p>
  <li>
! <a name=21></a>
  
  <h3><font color=#e00000>OpenBSD 2.1 Security Advisories</font></h3>
  These are the OpenBSD 2.1 advisories.  All these problems are solved
--- 1088,1094 ----
  
  <p>
  <li>
! <a name="21"></a>
  
  <h3><font color=#e00000>OpenBSD 2.1 Security Advisories</font></h3>
  These are the OpenBSD 2.1 advisories.  All these problems are solved
***************
*** 1111,1117 ****
  
  <p>
  <li>
! <a name=20></a>
  
  <h3><font color=#e00000>OpenBSD 2.0 Security Advisories</font></h3>
  These are the OpenBSD 2.0 advisories.  All these problems are solved
--- 1110,1116 ----
  
  <p>
  <li>
! <a name="20"></a>
  
  <h3><font color=#e00000>OpenBSD 2.0 Security Advisories</font></h3>
  These are the OpenBSD 2.0 advisories.  All these problems are solved
***************
*** 1131,1137 ****
  </dl>
  <p>
  
! <a name=watching></a>
  <li><h3><font color=#e00000>Watching our Changes</font></h3><p>
  
  Since we take a proactive stance with security, we are continually
--- 1130,1136 ----
  </dl>
  <p>
  
! <a name="watching"></a>
  <li><h3><font color=#e00000>Watching our Changes</font></h3><p>
  
  Since we take a proactive stance with security, we are continually
***************
*** 1175,1181 ****
  </ul>
  
  <p>
! <a name=reporting></a>
  <li><h3><font color=#e00000>Reporting problems</font></h3><p>
  
  <p> If you find a new security problem, you can mail it to
--- 1174,1180 ----
  </ul>
  
  <p>
! <a name="reporting"></a>
  <li><h3><font color=#e00000>Reporting problems</font></h3><p>
  
  <p> If you find a new security problem, you can mail it to
***************
*** 1185,1191 ****
  urgent, since it is inconvenient) use this <a href="advisories/pgpkey.txt">pgp key</a>.
  
  <p>
! <a name=papers></a>
  <li><h3><font color=#e00000>Further Reading</font></h3><p>
  
  A number of papers have been written by OpenBSD team members, about security
--- 1184,1190 ----
  urgent, since it is inconvenient) use this <a href="advisories/pgpkey.txt">pgp key</a>.
  
  <p>
! <a name="papers"></a>
  <li><h3><font color=#e00000>Further Reading</font></h3><p>
  
  A number of papers have been written by OpenBSD team members, about security
***************
*** 1237,1243 ****
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.287 2004/05/26 19:56:42 matthieu Exp $</small>
  
  </body>
  </html>
--- 1236,1242 ----
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.288 2004/05/30 19:49:08 matthieu Exp $</small>
  
  </body>
  </html>