===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v
retrieving revision 1.661
retrieving revision 1.662
diff -u -r1.661 -r1.662
--- www/plus.html	2000/10/06 19:59:43	1.661
+++ www/plus.html	2000/10/18 21:08:21	1.662
@@ -48,6 +48,9 @@
 <h3><font color=#0000e0>OpenBSD 2.7 released (June 15, 2000).<p>
 We are working on OpenBSD-current.</font></h3><p>
 <ul>
+<li><font color=#e00000><strong>SECURITY FIX: Apache mod_rewrite and 
+mod_vhost_alias modules could expose files on server if used.<br>
+    <a href=errata.html#httpd>A patch is available</a></strong></font>.<br>
 <li><font color=#e00000><strong>SECURITY FIX: Ignore $HOME/.termlib in curses for setuid/setgid executables.<br>
     <a href=errata.html#curses>A patch is available</a></strong></font>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
@@ -614,7 +617,7 @@
 <hr>
 <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
 <a href=mailto:www@openbsd.org>www@openbsd.org</a>
-<br><small>$OpenBSD: plus.html,v 1.661 2000/10/06 19:59:43 deraadt Exp $</small>
+<br><small>$OpenBSD: plus.html,v 1.662 2000/10/18 21:08:21 beck Exp $</small>
 
 </body>
 </html>