===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata.html,v
retrieving revision 1.236
retrieving revision 1.237
diff -c -r1.236 -r1.237
*** www/errata.html	2000/05/26 17:18:20	1.236
--- www/errata.html	2000/05/26 17:33:03	1.237
***************
*** 38,43 ****
--- 38,52 ----
  <li><h3><font color=#e00000>All architectures</font></h3>
  <ul>
  <a name=ef></a>
+ <li><font color=#009000><strong>003: SECURITY FIX: May 26, 2000</strong></font><br>
+ It is possible to bypass the <i>learning<i> flag on an interface if frames
+ go directly to the machine acting as a
+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge</a>.
+ <br>
+ <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/003_bridge.patch>
+ A source code patch exists which remedies this problem.</a>
+ <p>
+ <a name=ef></a>
  <li><font color=#009000><strong>002: DRIVER FIX: May 26, 2000</strong></font><br>
  The
  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ef&sektion=4">ef(4)</a>
***************
*** 131,137 ****
  
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: errata.html,v 1.236 2000/05/26 17:18:20 deraadt Exp $</small>
  
  </body>
  </html>
--- 140,146 ----
  
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: errata.html,v 1.237 2000/05/26 17:33:03 deraadt Exp $</small>
  
  </body>
  </html>