===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.126
retrieving revision 1.127
diff -u -r1.126 -r1.127
--- www/security.html	2000/05/25 16:44:37	1.126
+++ www/security.html	2000/05/25 20:57:25	1.127
@@ -190,7 +190,10 @@
 
 <p>
 <ul>
-<li>No 2.7 security advisories yet.
+<li><a href=errata.html#ipf>May 25, 2000:
+	Improper use of ipf <i>keep-state</i> rules can result
+	in firewall rules being bypassed. (patch included)</a>
+	
 </ul>
 
 <p>
@@ -204,6 +207,9 @@
 
 <p>
 <ul>
+<li><a href=errata26.html#ipf>May 25, 2000:
+	Improper use of ipf <i>keep-state</i> rules can result
+	in firewall rules being bypassed. (patch included)</a>
 <li><a href=errata26.html#xlockmore>May 25, 2000: 
 	xlockmore has a bug which a localhost attacker can use to gain
 	access to the encrypted root password hash (which is normally
@@ -520,7 +526,7 @@
 <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
 <a href=mailto:www@openbsd.org>www@openbsd.org</a>
 <br>
-<small>$OpenBSD: security.html,v 1.126 2000/05/25 16:44:37 deraadt Exp $</small>
+<small>$OpenBSD: security.html,v 1.127 2000/05/25 20:57:25 kjell Exp $</small>
 
 </body>
 </html>