===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.338
retrieving revision 1.339
diff -c -r1.338 -r1.339
*** www/security.html	2007/01/03 21:14:39	1.338
--- www/security.html	2007/03/06 01:58:05	1.339
***************
*** 233,249 ****
  
  <p>
  <ul>
! <li><a href="errata.html#agp">Jan 3, 2007:
  	Insufficient validation in vga(4) may allow an attacker to gain
  	root privileges on some i386 systems.</a>
! <li><a href="errata.html#ldso">Nov 19, 2006:
  	ld.so(1) fails to properly sanitize the environment.</a>
! <li><a href="errata.html#systrace">Nov 4, 2006:
  	Fix for an integer overflow in systrace(4)'s STRIOCREPLACE support,
  	found by Chris Evans.</a>
! <li><a href="errata.html#openssl">Nov 4, 2006:
  	Several problems have been found in OpenSSL.</a>
! <li><a href="errata.html#httpd">Nov 4, 2006:
  	httpd(8) does not sanitize the Expect header from an HTTP request
  	when it is reflected back in an error message, which might allow
  	cross-site scripting (XSS) style attacks.</a>
--- 233,249 ----
  
  <p>
  <ul>
! <li><a href="errata40.html#agp">Jan 3, 2007:
  	Insufficient validation in vga(4) may allow an attacker to gain
  	root privileges on some i386 systems.</a>
! <li><a href="errata40.html#ldso">Nov 19, 2006:
  	ld.so(1) fails to properly sanitize the environment.</a>
! <li><a href="errata40.html#systrace">Nov 4, 2006:
  	Fix for an integer overflow in systrace(4)'s STRIOCREPLACE support,
  	found by Chris Evans.</a>
! <li><a href="errata40.html#openssl">Nov 4, 2006:
  	Several problems have been found in OpenSSL.</a>
! <li><a href="errata40.html#httpd">Nov 4, 2006:
  	httpd(8) does not sanitize the Expect header from an HTTP request
  	when it is reflected back in an error message, which might allow
  	cross-site scripting (XSS) style attacks.</a>
***************
*** 1541,1547 ****
  <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.338 2007/01/03 21:14:39 miod Exp $</small>
  
  </body>
  </html>
--- 1541,1547 ----
  <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.339 2007/03/06 01:58:05 deraadt Exp $</small>
  
  </body>
  </html>