===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.201
retrieving revision 1.202
diff -c -r1.201 -r1.202
*** www/security.html	2002/03/19 22:06:26	1.201
--- www/security.html	2002/04/11 18:39:22	1.202
***************
*** 193,198 ****
--- 193,202 ----
  
  <p>
  <ul>
+ <li><a href=errata.html#mail>April 11, 2002:
+ 	The mail(1) was interpreting tilde escapes even when invoked
+ 	in non-interactive mode.  As mail(1) is called as root from cron,
+ 	this can lead to a local root compromise.</a>
  <li><a href=errata.html#approval>March 19, 2002:
  	Under certain conditions, on systems using YP with netgroups in
  	the password database, it is possible for the rexecd(8) and rshd(8)
***************
*** 241,246 ****
--- 245,254 ----
  
  <p>
  <ul>
+ <li><a href=errata29.html#mail>April 11, 2002:
+ 	The mail(1) was interpreting tilde escapes even when invoked
+ 	in non-interactive mode.  As mail(1) is called as root from cron,
+ 	this can lead to a local root compromise.</a>
  <li><a href=errata29.html#zlib>March 13, 2002:
  	A potential double free() exists in the zlib library;
  	this is not exploitable on OpenBSD.
***************
*** 786,792 ****
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.201 2002/03/19 22:06:26 millert Exp $</small>
  
  </body>
  </html>
--- 794,800 ----
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.202 2002/04/11 18:39:22 millert Exp $</small>
  
  </body>
  </html>