===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/49.html,v
retrieving revision 1.28
retrieving revision 1.29
diff -u -r1.28 -r1.29
--- www/49.html	2011/04/25 17:06:55	1.28
+++ www/49.html	2011/04/25 17:44:07	1.29
@@ -149,7 +149,7 @@
     <li>Reworking of the MCLGETI livelock algorithm to improve
     forwarding and host performance under high network load.</li>
     <li>Added support for socket splicing.
-    <li>Added AES-GCM support for IPSec.
+    <li>Added AES-GCM support for IPsec.
     <li>Added automatic send and receive buffer scaling for TCP.
     <li>Added wpakey option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&amp;sektion=8">ifconfig(8)</a> replacing wpa-psk(8).
     <li>TCP acknowledgments are no longer delayed on the loopback interface.
@@ -164,6 +164,17 @@
     </ul>
 <p>
 
+<li>IPsec stack audit was performed resulting in:
+    <ul>
+    <li>Several potential security problems have been identified and fixed.
+    <li>ARC4 based PRNG code was audited and revamped.
+    <li>New explicit_bzero kernel function was introduced to prevent a compiler
+    from optimizing
+    <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bzero&amp;sektion=3">bzero</a>
+    calls away.
+    </ul>
+<p>
+
 <li>SCSI improvements:
     <ul>
     <li>Improved safety when detaching SCSI devices by waiting for
@@ -831,7 +842,7 @@
 alt="OpenBSD"></a>
 <a href="mailto:www@openbsd.org">www@openbsd.org</a>
 <br><small>
-$OpenBSD: 49.html,v 1.28 2011/04/25 17:06:55 mikeb Exp $
+$OpenBSD: 49.html,v 1.29 2011/04/25 17:44:07 mikeb Exp $
 </small>
 
 </body>