===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.184
retrieving revision 1.185
diff -c -r1.184 -r1.185
*** www/security.html	2001/09/12 13:52:39	1.184
--- www/security.html	2001/10/22 22:09:54	1.185
***************
*** 192,220 ****
  
  <p>
  <ul>
! <li><a href=errata.html#uucp>September 11, 2001:
  	A security hole exists in uuxqt(8) that may allow an
  	attacker to gain root privileges.</a>
! <li><a href=errata.html#lpd>August 29, 2001:
  	A security hole exists in lpd(8) that may allow an
  	attacker to gain root privileges if lpd is running.</a>
! <li><a href=errata.html#sendmail2>August 21, 2001:
  	A security hole exists in sendmail(8) that may allow an
  	attacker on the local host to gain root privileges.</a>
! <li><a href=errata.html#nfs>July 30, 2001:
  	A kernel buffer overflow in the NFS code can be used to execute
  	arbitrary code by users with mount privileges (only root by
  	default).</a>
! <li><a href=errata.html#kernexec>June 15, 2001:
  	A race condition in the kernel can lead to local root compromise.</a>
! <li><a href=errata.html#sshcookie>June 12, 2001:
          sshd(8) allows users to delete arbitrary files named "cookies"
          if X11 forwarding is enabled. X11 forwarding is disabled
          by default.</a>
! <li><a href=errata.html#fts>May 30, 2001:
          Programs using the fts routines can be tricked into changing
          into the wrong directory.</a>
! <li><a href=errata.html#sendmail>May 29, 2001:
  	Sendmail signal handlers contain unsafe code,
  	leading to numerous race conditions.</a>
  </ul>
--- 192,220 ----
  
  <p>
  <ul>
! <li><a href=errata29.html#uucp>September 11, 2001:
  	A security hole exists in uuxqt(8) that may allow an
  	attacker to gain root privileges.</a>
! <li><a href=errata29.html#lpd>August 29, 2001:
  	A security hole exists in lpd(8) that may allow an
  	attacker to gain root privileges if lpd is running.</a>
! <li><a href=errata29.html#sendmail2>August 21, 2001:
  	A security hole exists in sendmail(8) that may allow an
  	attacker on the local host to gain root privileges.</a>
! <li><a href=errata29.html#nfs>July 30, 2001:
  	A kernel buffer overflow in the NFS code can be used to execute
  	arbitrary code by users with mount privileges (only root by
  	default).</a>
! <li><a href=errata29.html#kernexec>June 15, 2001:
  	A race condition in the kernel can lead to local root compromise.</a>
! <li><a href=errata29.html#sshcookie>June 12, 2001:
          sshd(8) allows users to delete arbitrary files named "cookies"
          if X11 forwarding is enabled. X11 forwarding is disabled
          by default.</a>
! <li><a href=errata29.html#fts>May 30, 2001:
          Programs using the fts routines can be tricked into changing
          into the wrong directory.</a>
! <li><a href=errata29.html#sendmail>May 29, 2001:
  	Sendmail signal handlers contain unsafe code,
  	leading to numerous race conditions.</a>
  </ul>
***************
*** 711,717 ****
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.184 2001/09/12 13:52:39 millert Exp $</small>
  
  </body>
  </html>
--- 711,717 ----
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.185 2001/10/22 22:09:54 deraadt Exp $</small>
  
  </body>
  </html>