===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata55.html,v
retrieving revision 1.26
retrieving revision 1.27
diff -u -r1.26 -r1.27
--- www/errata55.html	2014/11/17 19:55:00	1.26
+++ www/errata55.html	2014/11/17 19:58:52	1.27
@@ -220,17 +220,27 @@
 A source code patch exists which remedies this problem.</a>
 <p>
 
-<li><a name="013_pfctl"></a>
-<font color="#009000"><strong>013: SECURITY FIX: November 17, 2014</strong></font>
+<li><a name="014_pfctl"></a>
+<font color="#009000"><strong>014: RELIABILITY FIX: November 17, 2014</strong></font>
 &nbsp; <i>All architectures</i><br>
-PF rules of the form "pass from {192.0.2.1 2001:db8::1} to (pppoe0)" will
-apply an incorrect /32 mask to the dynamic IPv6 address, allowing access to
-a wide address range rather than the intended single host.
-As a workaround, list the IPv4 address last, i.e. "{2001:db8::1 192.0.2.1}".
+A PF rule using an IPv4 address
+followed by an IPv6 address and then a dynamic address, e.g. "pass
+from {192.0.2.1 2001:db8::1} to (pppoe0)", will have an incorrect /32
+mask applied to the dynamic address.
 <br>
-<a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.5/common/013_pfctl.patch.sig">
+<a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.5/common/014_pfctl.patch.sig">
 A source code patch exists which remedies this problem.</a>
 <p>
+
+<li><a name="015_asr"></a>
+<font color="#009000"><strong>015: RELIABILITY FIX: November 17, 2014</strong></font>
+&nbsp; <i>All architectures</i><br>
+Querying an invalid hostname with gethostbyname(3) could cause a NULL deref.
+<br>
+<a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.5/common/015_asr.patch.sig">
+A source code patch exists which remedies this problem.</a>
+<p>
+
 
 </ul>