===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus28.html,v
retrieving revision 1.6
retrieving revision 1.7
diff -u -r1.6 -r1.7
--- www/plus28.html	2000/11/08 21:55:31	1.6
+++ www/plus28.html	2000/11/10 21:24:16	1.7
@@ -53,6 +53,9 @@
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>OpenSSH 2.3.0 released.<br>
     <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
+<li><font color=#e00000><strong>SECURITY FIX: Hostile servers can force OpenSSH clients to do agent or X11 forwarding.<br>
+    <a href=errata27.html#sshforwarding>A patch is available</a></strong></font>.<br>
+    <a href="stable.html"><font color=#00b000>[Applied to stable]</font></a>
 <li>Support Macronix 98727/98732 chips in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=4">dc(4)</a>.
 <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mkstemp&sektion=3">mkstemp(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a>.
 <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>, accept unknown options by default.
@@ -843,7 +846,7 @@
 <hr>
 <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
 <a href=mailto:www@openbsd.org>www@openbsd.org</a>
-<br><small>$OpenBSD: plus28.html,v 1.6 2000/11/08 21:55:31 jason Exp $</small>
+<br><small>$OpenBSD: plus28.html,v 1.7 2000/11/10 21:24:16 deraadt Exp $</small>
 
 </body>
 </html>