===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.288
retrieving revision 1.289
diff -u -r1.288 -r1.289
--- www/security.html	2004/05/30 19:49:08	1.288
+++ www/security.html	2004/05/30 22:40:51	1.289
@@ -225,6 +225,10 @@
 
 <p>
 <ul>
+<li><a href=errata.html#kerberos> May 30, 2004:
+	kdc(8) performs inadequate checking of request fields, leading
+	to the possibility of principal impersonation from other
+	Kerberos realms if they	are trusted with a cross-realm trust.</a>
 <li><a href=errata.html#xdm> May 26, 2004:
 	xdm(1) ignores the requestPort resource and creates a 
         listening socket regardless of the setting in xdm-config</a>.
@@ -252,6 +256,10 @@
 
 <p>
 <ul>
+<li><a href=errata34.html#kerberos> May 30, 2004:
+	kdc(8) performs inadequate checking of request fields, leading
+	to the possibility of principal impersonation from other
+	Kerberos realms if they	are trusted with a cross-realm trust.</a>
 <li><a href=errata34.html#cvs2> May 20, 2004:
 	A buffer overflow in the cvs(1) server has been found,
 	which can be used by CVS clients to execute arbitrary code on
@@ -1236,7 +1244,7 @@
 <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
 <a href=mailto:www@openbsd.org>www@openbsd.org</a>
 <br>
-<small>$OpenBSD: security.html,v 1.288 2004/05/30 19:49:08 matthieu Exp $</small>
+<small>$OpenBSD: security.html,v 1.289 2004/05/30 22:40:51 beck Exp $</small>
 
 </body>
 </html>