===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata56.html,v
retrieving revision 1.39
retrieving revision 1.40
diff -u -r1.39 -r1.40
--- www/errata56.html	2015/08/11 22:00:08	1.39
+++ www/errata56.html	2015/10/02 02:26:38	1.40
@@ -429,6 +429,25 @@
 A source code patch exists which remedies this problem.</a>
 <p>
 
+<li id="031_smtpd">
+<font color="#009000"><strong>031: SECURITY FIX: October 1, 2015</strong></font>
+&nbsp; <i>All architectures</i><br>
+Fix multiple reliability and security issues in smtpd:<br>
+<ul>
+<li>local and remote users could make smtpd crash or stop serving requests.
+<li>a buffer overflow in the unprivileged, non-chrooted smtpd (lookup)
+    process could allow a local user to cause a crash or potentially
+    execute arbitrary code.
+<li>a use-after-free in the unprivileged, non-chrooted smtpd (lookup)
+    process could allow a remote attacker to cause a crash or potentially
+    execute arbitrary code.
+<li>hardlink and symlink attacks allowed a local user to unset chflags or
+    leak the first line of an arbitrary file.
+</ul>
+<a href="http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/031_smtpd.patch.sig">
+A source code patch exists which remedies this problem.</a>
+<p>
+
 </ul>
 
 <hr>