===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.200
retrieving revision 1.201
diff -c -r1.200 -r1.201
*** www/security.html	2002/03/14 05:38:54	1.200
--- www/security.html	2002/03/19 22:06:26	1.201
***************
*** 193,198 ****
--- 193,204 ----
  
  <p>
  <ul>
+ <li><a href=errata.html#approval>March 19, 2002:
+ 	Under certain conditions, on systems using YP with netgroups in
+ 	the password database, it is possible for the rexecd(8) and rshd(8)
+ 	daemons to execute a shell from a password database entry for a
+ 	different user. Similarly, atrun(8) may change to the wrong
+ 	home directory when running jobs.</a>
  <li><a href=errata.html#zlib>March 13, 2002:
  	A potential double free() exists in the zlib library;
  	this is not exploitable on OpenBSD.
***************
*** 780,786 ****
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.200 2002/03/14 05:38:54 millert Exp $</small>
  
  </body>
  </html>
--- 786,792 ----
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.201 2002/03/19 22:06:26 millert Exp $</small>
  
  </body>
  </html>