===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v
retrieving revision 1.660
retrieving revision 1.661
diff -c -r1.660 -r1.661
*** www/plus.html	2000/09/19 17:13:10	1.660
--- www/plus.html	2000/10/06 19:59:43	1.661
***************
*** 48,53 ****
--- 48,60 ----
  <h3><font color=#0000e0>OpenBSD 2.7 released (June 15, 2000).<p>
  We are working on OpenBSD-current.</font></h3><p>
  <ul>
+ <li><font color=#e00000><strong>SECURITY FIX: Ignore $HOME/.termlib in curses for setuid/setgid executables.<br>
+     <a href=errata.html#curses>A patch is available</a></strong></font>.<br>
+     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+ <li><font color=#e00000><strong>SECURITY FIX: talkd(8) format string vulnerability.<br>
+     <a href=errata.html#talkd>A patch is available</a></strong></font>.<br>
+     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+ <li>... many lines missing
  <li>Some more fixes to the games!
  <li>Various fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=clcs&sektion=4">clcs(4)</a> PCI audio driver.
  <li><font color=#e00000><strong>RELIABILITY FIX: Drop dubious ESP/AH packets without crashing.<br>
***************
*** 607,613 ****
  <hr>
  <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: plus.html,v 1.660 2000/09/19 17:13:10 deraadt Exp $</small>
  
  </body>
  </html>
--- 614,620 ----
  <hr>
  <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: plus.html,v 1.661 2000/10/06 19:59:43 deraadt Exp $</small>
  
  </body>
  </html>