===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.260
retrieving revision 1.261
diff -c -r1.260 -r1.261
*** www/security.html	2003/10/05 22:14:49	1.260
--- www/security.html	2003/10/24 22:12:41	1.261
***************
*** 49,55 ****
  <a href="#30">3.0</a>,
  <a href="#31">3.1</a>,
  <a href="#32">3.2</a>,
! <a href="#33">3.3</a>.
  </td>
  </tr>
  </table>
--- 49,56 ----
  <a href="#30">3.0</a>,
  <a href="#31">3.1</a>,
  <a href="#32">3.2</a>,
! <a href="#33">3.3</a>,
! <a href="#34">3.4</a>.
  </td>
  </tr>
  </table>
***************
*** 188,193 ****
--- 189,208 ----
  <dl>
  
  <li>
+ <a name=34></a>
+ 
+ <h3><font color=#e00000>OpenBSD 3.4 Security Advisories</font></h3>
+ These are the OpenBSD 3.4 advisories -- all these problems are solved 
+ in <a href=anoncvs.html>OpenBSD current</a> and the
+ <a href=stable.html>patch branch</a>.
+ 
+ <p>
+ <ul>
+ <li>None yet.
+ </ul>
+ 
+ <p>
+ <li>
  <a name=33></a>
  
  <h3><font color=#e00000>OpenBSD 3.3 Security Advisories</font></h3>
***************
*** 197,222 ****
  
  <p>
  <ul>
! <li><a href=errata.html#asn1>October 1, 2003:
  	The use of certain ASN.1 encodings or malformed public keys may
  	allow an attacker to mount a denial of service attack against
  	applications linked with ssl(3).</a>
! <li><a href=errata.html#pfnorm>September 24, 2003:
  	Access of freed memory in pf(4) could be used to 
  	remotely panic a machine using scrub rules.</a>
! <li><a href=errata.html#sendmail>September 17, 2003:
  	A buffer overflow in the address parsing in
  	sendmail(8) may allow an attacker to gain root privileges.</a>
! <li><a href=errata.html#sshbuffer>September 16, 2003:
  	OpenSSH versions prior to 3.7 contains a buffer management error
  	that is potentially exploitable.</a>
! <li><a href=errata.html#sysvsem>September 10, 2003:
  	Root may be able to reduce the security level by taking advantage of
  	an integer overflow when the semaphore limits are made very large.</a>
! <li><a href=errata.html#semget>August 20, 2003:
  	An improper bounds check in the kernel may allow a local user
  	to panic the kernel.</a>
! <li><a href=errata.html#realpath>August 4, 2003:
  	An off-by-one error exists in the C library function realpath(3)
  	may allow an attacker to gain escalated privileges.</a>
  </ul>
--- 212,237 ----
  
  <p>
  <ul>
! <li><a href=errata33.html#asn1>October 1, 2003:
  	The use of certain ASN.1 encodings or malformed public keys may
  	allow an attacker to mount a denial of service attack against
  	applications linked with ssl(3).</a>
! <li><a href=errata33.html#pfnorm>September 24, 2003:
  	Access of freed memory in pf(4) could be used to 
  	remotely panic a machine using scrub rules.</a>
! <li><a href=errata33.html#sendmail>September 17, 2003:
  	A buffer overflow in the address parsing in
  	sendmail(8) may allow an attacker to gain root privileges.</a>
! <li><a href=errata33.html#sshbuffer>September 16, 2003:
  	OpenSSH versions prior to 3.7 contains a buffer management error
  	that is potentially exploitable.</a>
! <li><a href=errata33.html#sysvsem>September 10, 2003:
  	Root may be able to reduce the security level by taking advantage of
  	an integer overflow when the semaphore limits are made very large.</a>
! <li><a href=errata33.html#semget>August 20, 2003:
  	An improper bounds check in the kernel may allow a local user
  	to panic the kernel.</a>
! <li><a href=errata33.html#realpath>August 4, 2003:
  	An off-by-one error exists in the C library function realpath(3)
  	may allow an attacker to gain escalated privileges.</a>
  </ul>
***************
*** 1106,1112 ****
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.260 2003/10/05 22:14:49 margarida Exp $</small>
  
  </body>
  </html>
--- 1121,1127 ----
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.261 2003/10/24 22:12:41 david Exp $</small>
  
  </body>
  </html>