===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.292
retrieving revision 1.293
diff -c -r1.292 -r1.293
*** www/security.html	2004/06/11 03:48:57	1.292
--- www/security.html	2004/06/12 23:43:14	1.293
***************
*** 225,255 ****
  
  <p>
  <ul>
  <li><a href=errata.html#isakmpd> Jun 10, 2004:
  	isakmpd(8) still has issues with unauthorized SA deletion,
! 	an attacker can delete IPsec tunnels at will.</a>.
  <li><a href=errata.html#cvs3> Jun 9, 2004:
  	Multiple remote vulnerabilities have been found in the cvs(1)
  	server which can be used by CVS clients to crash or execute
! 	arbitrary code on the server</a>.
  <li><a href=errata.html#kerberos> May 30, 2004:
  	kdc(8) performs inadequate checking of request fields, leading
  	to the possibility of principal impersonation from other
  	Kerberos realms if they	are trusted with a cross-realm trust.</a>
  <li><a href=errata.html#xdm> May 26, 2004:
  	xdm(1) ignores the requestPort resource and creates a 
!         listening socket regardless of the setting in xdm-config</a>.
  <li><a href=errata.html#cvs2> May 20, 2004:
  	A buffer overflow in the cvs(1) server has been found,
  	which can be used by CVS clients to execute arbitrary code on
! 	the server</a>.
  <li><a href=errata.html#procfs> May 13, 2004:
  	Integer overflow problems were found in procfs, allowing
! 	reading of arbitrary kernel memory</a>.
  <li><a href=errata.html#cvs> May 5, 2004:
  	Pathname validation problems have been found in cvs(1),
  	allowing clients and servers access to files outside the
! 	repository or local CVS tree</a>.
  </ul>
  
  <p>
--- 225,257 ----
  
  <p>
  <ul>
+ <li><a href=errata.html#httpd> Jun 12, 2004:
+ 	Multiple vulnerabilites have been found in httpd(8) / mod_ssl.</a>
  <li><a href=errata.html#isakmpd> Jun 10, 2004:
  	isakmpd(8) still has issues with unauthorized SA deletion,
! 	an attacker can delete IPsec tunnels at will.</a>
  <li><a href=errata.html#cvs3> Jun 9, 2004:
  	Multiple remote vulnerabilities have been found in the cvs(1)
  	server which can be used by CVS clients to crash or execute
! 	arbitrary code on the server.</a>
  <li><a href=errata.html#kerberos> May 30, 2004:
  	kdc(8) performs inadequate checking of request fields, leading
  	to the possibility of principal impersonation from other
  	Kerberos realms if they	are trusted with a cross-realm trust.</a>
  <li><a href=errata.html#xdm> May 26, 2004:
  	xdm(1) ignores the requestPort resource and creates a 
!         listening socket regardless of the setting in xdm-config.</a>
  <li><a href=errata.html#cvs2> May 20, 2004:
  	A buffer overflow in the cvs(1) server has been found,
  	which can be used by CVS clients to execute arbitrary code on
! 	the server.</a>
  <li><a href=errata.html#procfs> May 13, 2004:
  	Integer overflow problems were found in procfs, allowing
! 	reading of arbitrary kernel memory.</a>
  <li><a href=errata.html#cvs> May 5, 2004:
  	Pathname validation problems have been found in cvs(1),
  	allowing clients and servers access to files outside the
! 	repository or local CVS tree.</a>
  </ul>
  
  <p>
***************
*** 263,275 ****
  
  <p>
  <ul>
  <li><a href=errata34.html#isakmpd3> Jun 10, 2004:
          isakmpd(8) still has issues with unauthorized SA deletion,
!         an attacker can delete IPsec tunnels at will.</a>.
  <li><a href=errata34.html#cvs3> Jun 9, 2004:
  	Multiple remote vulnerabilities have been found in the cvs(1)
  	server which can be used by CVS clients to crash or execute
! 	arbitrary code on the server</a>.
  <li><a href=errata34.html#kerberos> May 30, 2004:
  	kdc(8) performs inadequate checking of request fields, leading
  	to the possibility of principal impersonation from other
--- 265,279 ----
  
  <p>
  <ul>
+ <li><a href=errata34.html#httpd3> Jun 12, 2004:
+         Multiple vulnerabilites have been found in httpd(8) / mod_ssl.</a>
  <li><a href=errata34.html#isakmpd3> Jun 10, 2004:
          isakmpd(8) still has issues with unauthorized SA deletion,
!         an attacker can delete IPsec tunnels at will.</a>
  <li><a href=errata34.html#cvs3> Jun 9, 2004:
  	Multiple remote vulnerabilities have been found in the cvs(1)
  	server which can be used by CVS clients to crash or execute
! 	arbitrary code on the server.</a>
  <li><a href=errata34.html#kerberos> May 30, 2004:
  	kdc(8) performs inadequate checking of request fields, leading
  	to the possibility of principal impersonation from other
***************
*** 1258,1264 ****
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.292 2004/06/11 03:48:57 brad Exp $</small>
  
  </body>
  </html>
--- 1262,1268 ----
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.293 2004/06/12 23:43:14 brad Exp $</small>
  
  </body>
  </html>