===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata27.html,v
retrieving revision 1.3
retrieving revision 1.4
diff -u -r1.3 -r1.4
--- www/errata27.html	2000/11/10 21:02:13	1.3
+++ www/errata27.html	2000/11/10 21:24:15	1.4
@@ -46,8 +46,15 @@
 <a name=all></a>
 <li><h3><font color=#e00000>All architectures</font></h3>
 <ul>
-<a name=zsconsole> </a>
-<li><font color=#009000><strong>002: IMPLEMENTATION FIX: Nov 10, 2000</strong></font><br>
+<a name=sshforwarding> </a>
+<li><font color=#009000><strong>036: SECURITY FIX: Nov 10, 2000</strong></font><br>
+Hostile servers can force OpenSSH clients to do agent or X11 forwarding.
+This problem is fixed as of OpenSSH 2.3.0.<br>
+<a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/036_sshforwarding.patch>
+A source code patch exists which remedies this problem.</a>
+<p>
+<a name=sshskey> </a>
+<li><font color=#009000><strong>035: IMPLEMENTATION FIX: Nov 10, 2000</strong></font><br>
 In ssh(1), skey support for SSH1 protocol was broken.  Some people might consider
 that kind of important.<br>
 <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/035_sshskey.patch>
@@ -364,7 +371,7 @@
 <li><h3><font color=#e00000>sparc</font></h3>
 <ul>
 <a name=zsconsole> </a>
-<li><font color=#009000><strong>033: RELIABILITY FIX: Nov 10, 2000</strong></font><br>
+<li><font color=#009000><strong>034: RELIABILITY FIX: Nov 10, 2000</strong></font><br>
 When running a sparc with a serial console, certain types of interrupts would
 cause great grief.<br>
 <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/sparc/034_zsconsole.patch>
@@ -466,7 +473,7 @@
 
 <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
 <a href=mailto:www@openbsd.org>www@openbsd.org</a>
-<br><small>$OpenBSD: errata27.html,v 1.3 2000/11/10 21:02:13 deraadt Exp $</small>
+<br><small>$OpenBSD: errata27.html,v 1.4 2000/11/10 21:24:15 deraadt Exp $</small>
 
 </body>
 </html>