===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.233
retrieving revision 1.234
diff -c -r1.233 -r1.234
*** www/security.html	2003/01/30 22:02:17	1.233
--- www/security.html	2003/02/23 00:20:51	1.234
***************
*** 196,201 ****
--- 196,206 ----
  
  <p>
  <ul>
+ <li><a href=errata.html#ssl>February 22, 2003:
+ 	In ssl(8) an information leak can occur via timing by performing
+ 	a MAC computation even if incorrect block cipher padding has 
+ 	been found, this is a countermeasure. Also, check for negative
+ 	sizes, in allocation routines.</a>
  <li><a href=errata.html#cvs>January 20, 2003:
  	A double free exists in cvs(1) that could lead to privilege
  	escalation for cvs configurations where the cvs command is
***************
*** 989,995 ****
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.233 2003/01/30 22:02:17 margarida Exp $</small>
  
  </body>
  </html>
--- 994,1000 ----
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.234 2003/02/23 00:20:51 margarida Exp $</small>
  
  </body>
  </html>