===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/60.html,v
retrieving revision 1.65
retrieving revision 1.66
diff -c -r1.65 -r1.66
*** www/60.html	2016/08/17 16:45:41	1.65
--- www/60.html	2016/08/21 22:51:34	1.66
***************
*** 406,413 ****
          a new <tt>chown</tt> promise that allows pledged programs to set
          setugid attributes,
          a stricter enforcement of the <tt>recvfd</tt> promise and
!         <a href="man.openbsd.org/chroot.2">chroot(2)</a> is no longer allowed
!         for pledged programs.
      <li>a number of
          <a href="http://man.openbsd.org/pledge">pledge(2)</a>-related bugs
          (missing promises, unintended changes of behavior, crashes) were fixed,
--- 406,413 ----
          a new <tt>chown</tt> promise that allows pledged programs to set
          setugid attributes,
          a stricter enforcement of the <tt>recvfd</tt> promise and
!         <a href="http://man.openbsd.org/chroot.2">chroot(2)</a> is no longer
!         allowed for pledged programs.
      <li>a number of
          <a href="http://man.openbsd.org/pledge">pledge(2)</a>-related bugs
          (missing promises, unintended changes of behavior, crashes) were fixed,
***************
*** 497,503 ****
            and only included for legacy compatibility.
        <li><a href="http://man.openbsd.org/ssh.1">ssh(1)</a>,
            <a href="http://man.openbsd.org/sshd.8">sshd(8)</a>:
!           Improve ordering ordering of MAC verification for
            <i>Encrypt-then-MAC</i> (EtM) mode transport MAC algorithms to
            verify the MAC before decrypting any ciphertext.  This removes the
            possibility of timing differences leaking facts about the plaintext,
--- 497,503 ----
            and only included for legacy compatibility.
        <li><a href="http://man.openbsd.org/ssh.1">ssh(1)</a>,
            <a href="http://man.openbsd.org/sshd.8">sshd(8)</a>:
!           Improve ordering of MAC verification for
            <i>Encrypt-then-MAC</i> (EtM) mode transport MAC algorithms to
            verify the MAC before decrypting any ciphertext.  This removes the
            possibility of timing differences leaking facts about the plaintext,