===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v
retrieving revision 1.726
retrieving revision 1.727
diff -c -r1.726 -r1.727
*** www/plus.html	2001/02/19 17:24:07	1.726
--- www/plus.html	2001/02/23 17:33:02	1.727
***************
*** 48,53 ****
--- 48,60 ----
  <p>
  <h3><font color=#0000e0>We are working on OpenBSD-current.</font></h3><p>
  <ul>
+ <li><font color=#e00000><strong>SECURITY FIX: for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec</a>, handle AH packets with IP options more strictly.</strong></font><br>
+     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+ <li><font color=#e00000><strong>SECURITY FIX: on i386, check arguments to USER_LDT (not enabled by default) mappings.</strong></font><br>
+     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+ <li><font color=#e00000><strong>SECURITY FIX: update to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo</a>-1.6.3p6 which fixes a buffer overflow on very long argv components.</strong></font><br>
+     <a href="errata.html#sudo">A patch is available</a></strong></font>.<br>
+     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
  <li><a href="http://www.openssh.com/">OpenSSH</a> 2.5.1 released.<br>
      <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
  <li><a href="http://www.openssh.com/">OpenSSH</a> 2.5.0 released.<br>
***************
*** 432,438 ****
  <hr>
  <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: plus.html,v 1.726 2001/02/19 17:24:07 jason Exp $</small>
  
  </body>
  </html>
--- 439,445 ----
  <hr>
  <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: plus.html,v 1.727 2001/02/23 17:33:02 jason Exp $</small>
  
  </body>
  </html>