===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.391
retrieving revision 1.392
diff -c -r1.391 -r1.392
*** www/security.html	2012/05/01 17:52:06	1.391
--- www/security.html	2012/05/01 17:56:54	1.392
***************
*** 350,356 ****
  <li><a href="errata47.html#003_openssl">April 14, 2010:
  	In TLS connections, certain incorrectly formatted records can
  	cause an OpenSSL client or server to crash due to a read
! 	attempt at NULL.</a>.
  </ul>
  
  <li>
--- 350,356 ----
  <li><a href="errata47.html#003_openssl">April 14, 2010:
  	In TLS connections, certain incorrectly formatted records can
  	cause an OpenSSL client or server to crash due to a read
! 	attempt at NULL.</a>
  </ul>
  
  <li>
***************
*** 366,378 ****
  <li><a href="errata46.html#010_openssl">April 14, 2010:
  	In TLS connections, certain incorrectly formatted records can
  	cause an OpenSSL client or server to crash due to a read
! 	attempt at NULL.</a>.
  <li><a href="errata46.html#006_openssl">March 12, 2010:
          OpenSSL is susceptible to a buffer overflow due to a failure
! 	to check for NULL returns from bn_wexpand function calls</a>.
  <li><a href="errata46.html#004_openssl">November 26, 2009:
          The SSL/TLS protocol is subject to man-in-the-middle attacks
!         related to renegotiation</a>.
  </ul>
  
  <li>
--- 366,378 ----
  <li><a href="errata46.html#010_openssl">April 14, 2010:
  	In TLS connections, certain incorrectly formatted records can
  	cause an OpenSSL client or server to crash due to a read
! 	attempt at NULL.</a>
  <li><a href="errata46.html#006_openssl">March 12, 2010:
          OpenSSL is susceptible to a buffer overflow due to a failure
! 	to check for NULL returns from bn_wexpand function calls.</a>
  <li><a href="errata46.html#004_openssl">November 26, 2009:
          The SSL/TLS protocol is subject to man-in-the-middle attacks
!         related to renegotiation.</a>
  </ul>
  
  <li>
***************
*** 388,400 ****
  <li><a href="errata45.html#016_openssl">April 14, 2010:
  	In TLS connections, certain incorrectly formatted records can
  	cause an OpenSSL client or server to crash due to a read
! 	attempt at NULL.</a>.
  <li><a href="errata45.html#012_openssl">March 12, 2010:
          OpenSSL is susceptible to a buffer overflow due to a failure
! 	to check for NULL returns from bn_wexpand function calls</a>.
  <li><a href="errata45.html#010_openssl">November 26, 2009:
          The SSL/TLS protocol is subject to man-in-the-middle attacks
!         related to renegotiation</a>.
  </ul>
  
  <li>
--- 388,400 ----
  <li><a href="errata45.html#016_openssl">April 14, 2010:
  	In TLS connections, certain incorrectly formatted records can
  	cause an OpenSSL client or server to crash due to a read
! 	attempt at NULL.</a>
  <li><a href="errata45.html#012_openssl">March 12, 2010:
          OpenSSL is susceptible to a buffer overflow due to a failure
! 	to check for NULL returns from bn_wexpand function calls.</a>
  <li><a href="errata45.html#010_openssl">November 26, 2009:
          The SSL/TLS protocol is subject to man-in-the-middle attacks
!         related to renegotiation.</a>
  </ul>
  
  <li>
***************
*** 1029,1035 ****
  	timing attacks.</a>
  <li><a href="errata32.html#lprm">March 5, 2003:
  	A buffer overflow in lprm(1) may allow an attacker to elevate
! 	privileges to user daemon.</a>.
  <li><a href="errata32.html#sendmail">March 3, 2003:
  	A buffer overflow in the envelope comments processing in
  	sendmail(8) may allow an attacker to gain root privileges.</a>
--- 1029,1035 ----
  	timing attacks.</a>
  <li><a href="errata32.html#lprm">March 5, 2003:
  	A buffer overflow in lprm(1) may allow an attacker to elevate
! 	privileges to user daemon.</a>
  <li><a href="errata32.html#sendmail">March 3, 2003:
  	A buffer overflow in the envelope comments processing in
  	sendmail(8) may allow an attacker to gain root privileges.</a>
***************
*** 1103,1109 ****
  <li><a href="errata31.html#cvs">January 20, 2003:
  	A double free exists in cvs(1) that could lead to privilege
  	escalation for cvs configurations where the cvs command is
! 	run as a privileged user</a>.
  <li><a href="errata31.html#named">November 14, 2002:
  	A buffer overflow exists in named(8) that could lead to a
  	remote crash or code execution as user named in a chroot jail.</a>
--- 1103,1109 ----
  <li><a href="errata31.html#cvs">January 20, 2003:
  	A double free exists in cvs(1) that could lead to privilege
  	escalation for cvs configurations where the cvs command is
! 	run as a privileged user.</a>
  <li><a href="errata31.html#named">November 14, 2002:
  	A buffer overflow exists in named(8) that could lead to a
  	remote crash or code execution as user named in a chroot jail.</a>
***************
*** 1818,1824 ****
  <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.391 2012/05/01 17:52:06 tobias Exp $</small>
  
  </body>
  </html>
--- 1818,1824 ----
  <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
  <br>
! <small>$OpenBSD: security.html,v 1.392 2012/05/01 17:56:54 tobias Exp $</small>
  
  </body>
  </html>