===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v
retrieving revision 1.777
retrieving revision 1.778
diff -u -r1.777 -r1.778
--- www/plus.html	2001/06/10 17:56:29	1.777
+++ www/plus.html	2001/06/16 02:40:15	1.778
@@ -49,6 +49,10 @@
 <p>
 <h3><font color=#0000e0>We are working on OpenBSD-current.</font></h3><p>
 <ul>
+<li><font color=#e00000><strong>SECURITY FIX: avoid race in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=execve&sektion=2">execve(2)</a> when checking flags for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ptrace&sektion=2">ptrace(2)</a>.</strong></font><br>
+    <a href=errata.html#kernexec>A source code patch is available</a>.<br>
+    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+<li>...
 <li><font color=#e00000><strong>RELIABILITY FIX: use correct <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=db&sektion=3">db(3)</a> pointers in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pwd_mkdb&sektion=8">pwd_mkdb(8)</a>, and don't star out empty passwords</strong></font><br>
     <a href=errata.html#pwd_mkdb>A source code patch is available</a>.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
@@ -227,7 +231,7 @@
 <hr>
 <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a> 
 <a href="mailto:www@openbsd.org">www@openbsd.org</a>
-<br><small>$OpenBSD: plus.html,v 1.777 2001/06/10 17:56:29 horacio Exp $</small>
+<br><small>$OpenBSD: plus.html,v 1.778 2001/06/16 02:40:15 jason Exp $</small>
 
 </body>
 </html>