=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v retrieving revision 1.337 retrieving revision 1.338 diff -c -r1.337 -r1.338 *** www/security.html 2006/11/20 01:35:19 1.337 --- www/security.html 2007/01/03 21:14:39 1.338 *************** *** 9,15 **** ! --- 9,15 ---- ! *************** *** 233,238 **** --- 233,241 ----

Jan 3, 2007: + Insufficient validation in vga(4) may allow an attacker to gain + root privileges on some i386 systems.
Nov 19, 2006: ld.so(1) fails to properly sanitize the environment.
Nov 4, 2006: *************** *** 256,261 **** --- 259,267 ----
+
+ OpenBSD 3.8 and earlier releases are not supported anymore. The following + paragraphs only list advisories issued while they were maintained; these + releases are likely to be affected by the advisories for more recent releases. +
+
*************** *** 369,380 **** sprintf function which may be exploitable under certain conditions.

- OpenBSD 3.7 and earlier releases are not supported anymore. The following - paragraphs only list advisories issued while they were maintained; these - releases are likely to be affected by the advisories for more recent releases. -
-

--- 381,386 ---- *************** *** 1535,1541 ****

www@openbsd.org
! $OpenBSD: security.html,v 1.337 2006/11/20 01:35:19 deraadt Exp $ --- 1541,1547 ----

www@openbsd.org
! $OpenBSD: security.html,v 1.338 2007/01/03 21:14:39 miod Exp $