===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.303
retrieving revision 1.304
diff -c -r1.303 -r1.304
*** www/security.html	2004/12/14 14:06:14	1.303
--- www/security.html	2005/01/12 15:08:02	1.304
***************
*** 229,234 ****
--- 229,238 ----
  
  <p>
  <ul>
+ <li><a href="errata.html#httpd">Jan 12, 2005:
+         httpd(8)'s mod_include module fails to properly validate
+         the length of user supplied tag strings prior to copying
+         them to a local buffer, causing a buffer overflow.
  <li><a href="errata.html#pfkey">Dec 14, 2004:
          On systems running isakmpd(8) it is possible for a local
          user to cause kernel memory corruption and system panic by
***************
*** 246,251 ****
--- 250,259 ----
  
  <p>
  <ul>
+ <li><a href="errata35.html#httpd3">Jan 12, 2005:
+         httpd(8)'s mod_include module fails to properly validate
+         the length of user supplied tag strings prior to copying
+         them to a local buffer, causing a buffer overflow.
  <li><a href="errata35.html#pfkey">Dec 14, 2004:
          On systems running isakmpd(8) it is possible for a local
          user to cause kernel memory corruption and system panic by
***************
*** 1301,1307 ****
  <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.303 2004/12/14 14:06:14 markus Exp $</small>
  
  </body>
  </html>
--- 1309,1315 ----
  <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.304 2005/01/12 15:08:02 brad Exp $</small>
  
  </body>
  </html>