===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.197
retrieving revision 1.198
diff -u -r1.197 -r1.198
--- www/security.html	2002/03/07 21:47:48	1.197
+++ www/security.html	2002/03/08 20:05:52	1.198
@@ -193,6 +193,9 @@
 
 <p>
 <ul>
+<li><a href=errata.html#openssh>March 8, 2002:
+	An off-by-one check in OpenSSH's channel forwarding code
+	may allow a local user to gain super-user privileges.
 <li><a href=errata.html#ptrace>January 21, 2002:
 	A race condition between the ptrace(2) and execve(2) system calls
 	allows an attacker to modify the memory contents of suid/sgid
@@ -227,6 +230,13 @@
 
 <p>
 <ul>
+<li><a href=errata29.html#openssh>March 8, 2002:
+	An off-by-one check in OpenSSH's channel forwarding code
+	may allow a local user to gain super-user privileges.
+<li><a href=errata29.html#ptrace>January 21, 2002:
+	A race condition between the ptrace(2) and execve(2) system calls
+	allows an attacker to modify the memory contents of suid/sgid
+	processes which could lead to compromise of the super-user account.</a>
 <li><a href=errata29.html#sudo>January 17, 2002:
 	There is a security hole in sudo(8) that can be exploited
 	when the Postfix sendmail replacement is installed that may
@@ -760,7 +770,7 @@
 <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
 <a href=mailto:www@openbsd.org>www@openbsd.org</a>
 <br>
-<small>$OpenBSD: security.html,v 1.197 2002/03/07 21:47:48 jufi Exp $</small>
+<small>$OpenBSD: security.html,v 1.198 2002/03/08 20:05:52 millert Exp $</small>
 
 </body>
 </html>