===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata41.html,v
retrieving revision 1.56
retrieving revision 1.57
diff -u -r1.56 -r1.57
--- www/errata41.html	2017/03/28 04:04:52	1.56
+++ www/errata41.html	2017/03/28 06:41:18	1.57
@@ -83,7 +83,7 @@
 
 <ul>
 
-<li id="016_openssh2">
+<li id="p016_openssh2">
 <font color="#009000"><strong>016: SECURITY FIX: April 3, 2008</strong></font>
 &nbsp; <i>All architectures</i><br>
 Avoid possible hijacking of X11-forwarded connections with sshd(8)
@@ -93,7 +93,7 @@
 A source code patch exists which remedies this problem.</a>
 <p>
 
-<li id="015_openssh">
+<li id="p015_openssh">
 <font color="#009000"><strong>015: SECURITY FIX: March 30, 2008</strong></font>
 &nbsp; <i>All architectures</i><br>
 sshd(8) would execute ~/.ssh/rc even when a sshd_config(5) <em>ForceCommand</em>
@@ -104,7 +104,7 @@
 A source code patch exists which remedies this problem.</a>
 <p>
 
-<li id="014_ppp">
+<li id="p014_ppp">
 <font color="#009000"><strong>014: SECURITY FIX: March 7, 2008</strong></font>
 &nbsp; <i>All architectures</i><br>
 Buffer overflow in ppp command prompt parsing.<br>
@@ -112,7 +112,7 @@
 A source code patch exists which remedies this problem.</a>
 <p>
 
-<li id="013_tcprespond">
+<li id="p013_tcprespond">
 <font color="#009000"><strong>013: RELIABILITY FIX: February 22, 2008</strong></font>
 &nbsp; <i>All architectures</i><br>
 Incorrect assumptions in tcp_respond can lead to a kernel panic.<br>
@@ -120,7 +120,7 @@
 A source code patch exists which remedies this problem.</a>
 <p>
 
-<li id="012_xorg">
+<li id="p012_xorg">
 <font color="#009000"><strong>012: SECURITY FIX: February 8, 2008</strong></font>
 &nbsp; <i>All architectures</i><br>
 <strong>2nd revision, February 10, 2008</strong><br>
@@ -142,7 +142,7 @@
 A source code patch exists which remedies this problem.</a>
 <p>
 
-<li id="011_openssl">
+<li id="p011_openssl">
 <font color="#009000"><strong>011: SECURITY FIX: October 10, 2007</strong></font>
 &nbsp; <i>All architectures</i><br>
 The SSL_get_shared_ciphers() function in OpenSSL contains an off-by-one overflow.
@@ -151,7 +151,7 @@
 A source code patch exists which remedies this problem.</a>
 <p>
 
-<li id="010_dhcpd">
+<li id="p010_dhcpd">
 <font color="#009000"><strong>010: SECURITY FIX: October 8, 2007</strong></font>
 &nbsp; <i>All architectures</i><br>
 Malicious DHCP clients could cause dhcpd(8) to corrupt its stack<br>
@@ -162,7 +162,7 @@
 A source code patch exists which remedies this problem.</a>
 <p>
 
-<li id="009_file">
+<li id="p009_file">
 <font color="#009000"><strong>009: SECURITY FIX: July 9, 2007</strong></font>
 &nbsp; <i>All Architectures</i><br>
 Fix possible heap overflow in file(1), aka CVE-2007-1536.<br>
@@ -170,7 +170,7 @@
 A source code patch exists which remedies this problem.</a>
 <p>
 
-<li id="008_xorg">
+<li id="p008_xorg">
 <font color="#009000"><strong>008: STABILITY FIX: May 9, 2007</strong></font>
 &nbsp; <i>All Architectures</i><br>
 A malicious client can cause a division by zero.<br>
@@ -178,7 +178,7 @@
 A source code patch exists which remedies this problem.</a>
 <p>
 
-<li id="007_kroute">
+<li id="p007_kroute">
 <font color="#009000"><strong>007: RELIABILITY FIX: April 30, 2007</strong></font>
 &nbsp; <i>All architectures</i><br>
 Link state is not correctly tracked in ospfd and ripd.<br>
@@ -186,7 +186,7 @@
 A source code patch exists which remedies this problem.</a>
 <p>
 
-<li id="006_altivec">
+<li id="p006_altivec">
 <font color="#009000"><strong>006: STABILITY FIX: April 27, 2007</strong></font>
 &nbsp; <i>PowerPC</i><br>
 An unhandled AltiVec assist exception can cause a kernel panic.<br>
@@ -194,7 +194,7 @@
 A source code patch exists which remedies this problem.</a>
 <p>
 
-<li id="005_route6">
+<li id="p005_route6">
 <font color="#009000"><strong>005: SECURITY FIX: April 27, 2007</strong></font>
 &nbsp; <i>All architectures</i><br>
 IPv6 type 0 route headers can be used to mount a DoS attack against
@@ -204,7 +204,7 @@
 A source code patch exists which remedies this problem.</a>
 <p>
 
-<li id="004_xorg">
+<li id="p004_xorg">
 <font color="#009000"><strong>004: SECURITY FIX: April 27, 2007</strong></font>
 &nbsp; <i>All architectures</i><br>
 Multiple vulnerabilities have been discovered in X.Org.<br>
@@ -222,7 +222,7 @@
 A source code patch exists which remedies this problem.</a>
 <p>
 
-<li id="003_spamd">
+<li id="p003_spamd">
 <font color="#009000"><strong>003: RELIABILITY FIX: April 27, 2007</strong></font>
 &nbsp; <i>All architectures</i><br>
 Bugs found in the spamd sychronization mechanism could cause corrupted
@@ -231,7 +231,7 @@
 A source code patch exists which remedies this problem.</a>
 <p>
 
-<li id="002_splnet">
+<li id="p002_splnet">
 <font color="#009000"><strong>002: STABILITY FIX: April 27, 2007</strong></font>
 &nbsp; <i>All architectures</i><br>
 Incorrect spl level can lead to panics under heavy kqueue usage.<br>
@@ -239,12 +239,12 @@
 A source code patch exists which remedies this problem.</a>
 <p>
 
-<li id="001_mbuf">
+<li id="p001_mbuf">
 <font color="#009000"><strong>001: SECURITY FIX: April 27, 2007</strong></font>
 &nbsp; <i>All architectures</i><br>
 Incorrect mbuf handling for ICMP6 packets.<br>
 Using
-<a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a>
+<a href="http://man.openbsd.org/OpenBSD-4.1/pf.4">pf(4)</a>
 to avoid the problem packets is an effective workaround until the patch
 can be installed.<br>
 Use "block in inet6" in /etc/pf.conf