===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.334
retrieving revision 1.335
diff -c -r1.334 -r1.335
*** www/security.html	2006/11/04 03:02:28	1.334
--- www/security.html	2006/11/04 21:28:18	1.335
***************
*** 233,244 ****
  
  <p>
  <ul>
! <li><a href="errata.html#systrace">Oct 7, 2006:
  	Fix for an integer overflow in systrace(4)'s STRIOCREPLACE support,
  	found by Chris Evans.</a>
! <li><a href="errata.html#openssl">Oct 7, 2006:
  	Several problems have been found in OpenSSL.</a>
! <li><a href="errata.html#httpd">Oct 7, 2006:
  	httpd(8) does not sanitize the Expect header from an HTTP request
  	when it is reflected back in an error message, which might allow
  	cross-site scripting (XSS) style attacks.</a>
--- 233,244 ----
  
  <p>
  <ul>
! <li><a href="errata.html#systrace">Nov 4, 2006:
  	Fix for an integer overflow in systrace(4)'s STRIOCREPLACE support,
  	found by Chris Evans.</a>
! <li><a href="errata.html#openssl">Nov 4, 2006:
  	Several problems have been found in OpenSSL.</a>
! <li><a href="errata.html#httpd">Nov 4, 2006:
  	httpd(8) does not sanitize the Expect header from an HTTP request
  	when it is reflected back in an error message, which might allow
  	cross-site scripting (XSS) style attacks.</a>
***************
*** 1531,1537 ****
  <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.334 2006/11/04 03:02:28 brad Exp $</small>
  
  </body>
  </html>
--- 1531,1537 ----
  <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.335 2006/11/04 21:28:18 deraadt Exp $</small>
  
  </body>
  </html>