===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata.html,v
retrieving revision 1.188
retrieving revision 1.189
diff -u -r1.188 -r1.189
--- www/errata.html	1999/08/05 08:14:55	1.188
+++ www/errata.html	1999/08/05 16:32:09	1.189
@@ -35,6 +35,14 @@
 <a name=all></a>
 <li><h3><font color=#e00000>All architectures</font></h3>
 <ul>
+<a name=ipsec_in_use></a>
+<li><font color=#009000><strong>RELIABILITY FIX</strong></font><br>
+Packets that should have been handled by IPsec may be transmitted
+as cleartext. PF_KEY SA expirations may leak kernel resources.
+<a
+ref=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.5/common/ipsec_in_use.patch>
+A source code patch exists which remedies this problem.</a>
+<p>
 <a name=rc></a>
 <li><font color=#009000><strong>SECURITY FIX</strong></font><br>
 In /etc/rc, use mktemp(1) for motd re-writing, and change the find(1)
@@ -182,7 +190,7 @@
 
 <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
 <a href=mailto:www@openbsd.org>www@openbsd.org</a>
-<br><small>$OpenBSD: errata.html,v 1.188 1999/08/05 08:14:55 deraadt Exp $</small>
+<br><small>$OpenBSD: errata.html,v 1.189 1999/08/05 16:32:09 deraadt Exp $</small>
 
 </body>
 </html>