===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.145
retrieving revision 1.146
diff -c -r1.145 -r1.146
*** www/security.html	2000/10/05 16:43:20	1.145
--- www/security.html	2000/10/06 19:59:43	1.146
***************
*** 190,195 ****
--- 190,202 ----
  
  <p>
  <ul>
+ <li><a href=errata.html#curses>Oct 6, 2000:
+ 	libcurses permitted reading of $HOME/.termlib database files
+ 	if used by a setuid or setgid application.
+ 	(patch included)</a>
+ <li><a href=errata.html#talkd>Oct 6, 2000:
+ 	A format string vulnerability exists in talkd(8).
+ 	(patch included)</a>
  <li><a href=errata.html#pw_error>Oct 3, 2000:
  	A format string vulnerability exists in the pw_error() function of the
  	libutil library, yielding localhost root through chpass(1).
***************
*** 578,584 ****
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.145 2000/10/05 16:43:20 aaron Exp $</small>
  
  </body>
  </html>
--- 585,591 ----
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.146 2000/10/06 19:59:43 deraadt Exp $</small>
  
  </body>
  </html>