===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.328
retrieving revision 1.329
diff -c -r1.328 -r1.329
*** www/security.html	2006/09/08 20:35:11	1.328
--- www/security.html	2006/09/09 03:04:22	1.329
***************
*** 232,237 ****
--- 232,241 ----
  
  <p>
  <ul>
+ <li><a href="errata.html#openssl">Sep 8, 2006:
+ 	Due to incorrect PKCS#1 v1.5 padding validation in OpenSSL, it is
+ 	possible for an attacker to construct an invalid signature which
+ 	OpenSSL would accept as a valid PKCS#1 v1.5 signature.</a>
  <li><a href="errata.html#bind">Sep 8, 2006:
  	Two Denial of Service issues have been found with BIND.</a>
  <li><a href="errata.html#sppp">Sep 2, 2006:
***************
*** 272,277 ****
--- 276,285 ----
  
  <p>
  <ul>
+ <li><a href="errata38.html#openssl">Sep 8, 2006:
+ 	Due to incorrect PKCS#1 v1.5 padding validation in OpenSSL, it is
+ 	possible for an attacker to construct an invalid signature which
+ 	OpenSSL would accept as a valid PKCS#1 v1.5 signature.</a>
  <li><a href="errata38.html#bind">Sep 8, 2006:
  	Two Denial of Service issues have been found with BIND.</a>
  <li><a href="errata38.html#sppp">Sep 2, 2006:
***************
*** 1479,1485 ****
  <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.328 2006/09/08 20:35:11 brad Exp $</small>
  
  </body>
  </html>
--- 1487,1493 ----
  <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.329 2006/09/09 03:04:22 brad Exp $</small>
  
  </body>
  </html>