===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.320
retrieving revision 1.321
diff -c -r1.320 -r1.321
*** www/security.html	2006/02/12 10:25:39	1.320
--- www/security.html	2006/03/25 22:09:16	1.321
***************
*** 57,63 ****
  <a href="#35">3.5</a>,
  <a href="#36">3.6</a>,
  <a href="#37">3.7</a>,
! <a href="#38">3.8</a>.
  </td>
  </tr>
  </table>
--- 57,64 ----
  <a href="#35">3.5</a>,
  <a href="#36">3.6</a>,
  <a href="#37">3.7</a>,
! <a href="#38">3.8</a>,
! <a href="#39">3.9</a>.
  </td>
  </tr>
  </table>
***************
*** 222,227 ****
--- 223,243 ----
  <li><h3><font color="#e00000">Advisories</font></h3><p>
  
  <li>
+ <a name="39"></a>
+ 
+ <h3><font color="#e00000">OpenBSD 3.9 Security Advisories</font></h3>
+ These are the OpenBSD 3.9 advisories -- all these problems are solved
+ in <a href=anoncvs.html>OpenBSD current</a> and the
+ <a href=stable.html>patch branch</a>.
+ 
+ <p>
+ <ul>
+ <li><a href="errata.html#sendmail">Mar 25, 2006:
+ 	A race condition has been reported to exist in the handling by sendmail
+ 	of asynchronous signals.</a>
+ </ul>
+ 
+ <li>
  <a name="38"></a>
  
  <h3><font color="#e00000">OpenBSD 3.8 Security Advisories</font></h3>
***************
*** 231,245 ****
  
  <p>
  <ul>
! <li><a href="errata.html#ssh">Feb 12, 2006:
  	Josh Bressers has reported a weakness in OpenSSH caused due to the
  	insecure use of the system(3) function in scp(1) when performing copy
  	operations using filenames that are supplied by the user from the
  	command line.</a>
! <li><a href="errata.html#fd">Jan 5, 2006:
  	Do not allow users to trick suid programs into re-opening files via
  	/dev/fd.</a>
! <li><a href="errata.html#perl">Jan 5, 2006:
  	A buffer overflow has been found in the Perl interpreter with the
  	sprintf function which may be exploitable under certain conditions.</a>
  </ul>
--- 247,264 ----
  
  <p>
  <ul>
! <li><a href="errata38.html#sendmail">Mar 25, 2006:
! 	A race condition has been reported to exist in the handling by sendmail
! 	of asynchronous signals.</a>
! <li><a href="errata38.html#ssh">Feb 12, 2006:
  	Josh Bressers has reported a weakness in OpenSSH caused due to the
  	insecure use of the system(3) function in scp(1) when performing copy
  	operations using filenames that are supplied by the user from the
  	command line.</a>
! <li><a href="errata38.html#fd">Jan 5, 2006:
  	Do not allow users to trick suid programs into re-opening files via
  	/dev/fd.</a>
! <li><a href="errata38.html#perl">Jan 5, 2006:
  	A buffer overflow has been found in the Perl interpreter with the
  	sprintf function which may be exploitable under certain conditions.</a>
  </ul>
***************
*** 254,259 ****
--- 273,281 ----
  
  <p>
  <ul>
+ <li><a href="errata37.html#sendmail">Mar 25, 2006:
+ 	A race condition has been reported to exist in the handling by sendmail
+ 	of asynchronous signals.</a>
  <li><a href="errata37.html#ssh">Feb 12, 2006:
  	Josh Bressers has reported a weakness in OpenSSH caused due to the
  	insecure use of the system(3) function in scp(1) when performing copy
***************
*** 1403,1409 ****
  <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.320 2006/02/12 10:25:39 brad Exp $</small>
  
  </body>
  </html>
--- 1425,1431 ----
  <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.321 2006/03/25 22:09:16 brad Exp $</small>
  
  </body>
  </html>