===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v
retrieving revision 1.828
retrieving revision 1.829
diff -u -r1.828 -r1.829
--- www/plus.html	2002/06/18 01:44:05	1.828
+++ www/plus.html	2002/06/19 19:03:10	1.829
@@ -56,6 +56,11 @@
 <h3><font color=#0000e0>We are working on OpenBSD-current.</font></h3><p>
 The following list sums up (almost) all the changes made up to May 24th.
 <ul>
+<li><font color=#e00000><strong>SECURITY FIX: A buffer overflow can
+occur during the interpretation of chunked encoding in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a>, leading to possible remote crash.</strong></font><br>
+    <a href="errata.html#httpd">A source code patch is available</a>.<br>
+    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+<li>...
 <li>Support mixed IPv4/IPv6 address lists in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>.
 <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keysign">ssh-keysign(8)</a>.
 <li>Remove obsolete <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dm&sektion=8&manpath=OpenBSD+3.0">dm(8)</a>.
@@ -224,7 +229,7 @@
 <hr>
 <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a> 
 <a href="mailto:www@openbsd.org">www@openbsd.org</a>
-<br><small>$OpenBSD: plus.html,v 1.828 2002/06/18 01:44:05 jsyn Exp $</small>
+<br><small>$OpenBSD: plus.html,v 1.829 2002/06/19 19:03:10 miod Exp $</small>
 
 </body>
 </html>