===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.319
retrieving revision 1.320
diff -c -r1.319 -r1.320
*** www/security.html	2006/01/05 05:34:08	1.319
--- www/security.html	2006/02/12 10:25:39	1.320
***************
*** 231,236 ****
--- 231,241 ----
  
  <p>
  <ul>
+ <li><a href="errata.html#ssh">Feb 12, 2006:
+ 	Josh Bressers has reported a weakness in OpenSSH caused due to the
+ 	insecure use of the system(3) function in scp(1) when performing copy
+ 	operations using filenames that are supplied by the user from the
+ 	command line.</a>
  <li><a href="errata.html#fd">Jan 5, 2006:
  	Do not allow users to trick suid programs into re-opening files via
  	/dev/fd.</a>
***************
*** 249,254 ****
--- 254,264 ----
  
  <p>
  <ul>
+ <li><a href="errata37.html#ssh">Feb 12, 2006:
+ 	Josh Bressers has reported a weakness in OpenSSH caused due to the
+ 	insecure use of the system(3) function in scp(1) when performing copy
+ 	operations using filenames that are supplied by the user from the
+ 	command line.</a>
  <li><a href="errata37.html#fd">Jan 5, 2006:
  	Do not allow users to trick suid programs into re-opening files via
  	/dev/fd.</a>
***************
*** 1393,1399 ****
  <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.319 2006/01/05 05:34:08 brad Exp $</small>
  
  </body>
  </html>
--- 1403,1409 ----
  <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.320 2006/02/12 10:25:39 brad Exp $</small>
  
  </body>
  </html>