===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.208
retrieving revision 1.209
diff -u -r1.208 -r1.209
--- www/security.html	2002/05/08 23:02:53	1.208
+++ www/security.html	2002/05/22 22:32:29	1.209
@@ -194,6 +194,13 @@
 
 <p>
 <ul>
+<li><a href=errata.html#sshbsdauth>May 22, 2002:
+        Under certain conditions, on systems using YP with netgroups
+        in the password database, it is possible that sshd(8) does
+        ACL checks for the requested user name but uses the password
+        database entry of a different user for authentication.  This
+        means that denied users might authenticate successfully
+        while permitted users could be locked out.</a>
 <li><a href=errata.html#fdalloc2>May 8, 2002:
 	A race condition exists that could defeat the kernel's
 	protection of fd slots 0-2 for setuid processes.</a>
@@ -839,7 +846,7 @@
 <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
 <a href=mailto:www@openbsd.org>www@openbsd.org</a>
 <br>
-<small>$OpenBSD: security.html,v 1.208 2002/05/08 23:02:53 millert Exp $</small>
+<small>$OpenBSD: security.html,v 1.209 2002/05/22 22:32:29 markus Exp $</small>
 
 </body>
 </html>