===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.328
retrieving revision 1.329
diff -u -r1.328 -r1.329
--- www/security.html	2006/09/08 20:35:11	1.328
+++ www/security.html	2006/09/09 03:04:22	1.329
@@ -232,6 +232,10 @@
 
 <p>
 <ul>
+<li><a href="errata.html#openssl">Sep 8, 2006:
+	Due to incorrect PKCS#1 v1.5 padding validation in OpenSSL, it is
+	possible for an attacker to construct an invalid signature which
+	OpenSSL would accept as a valid PKCS#1 v1.5 signature.</a>
 <li><a href="errata.html#bind">Sep 8, 2006:
 	Two Denial of Service issues have been found with BIND.</a>
 <li><a href="errata.html#sppp">Sep 2, 2006:
@@ -272,6 +276,10 @@
 
 <p>
 <ul>
+<li><a href="errata38.html#openssl">Sep 8, 2006:
+	Due to incorrect PKCS#1 v1.5 padding validation in OpenSSL, it is
+	possible for an attacker to construct an invalid signature which
+	OpenSSL would accept as a valid PKCS#1 v1.5 signature.</a>
 <li><a href="errata38.html#bind">Sep 8, 2006:
 	Two Denial of Service issues have been found with BIND.</a>
 <li><a href="errata38.html#sppp">Sep 2, 2006:
@@ -1479,7 +1487,7 @@
 <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
 <a href="mailto:www@openbsd.org">www@openbsd.org</a>
 <br>
-<small>$OpenBSD: security.html,v 1.328 2006/09/08 20:35:11 brad Exp $</small>
+<small>$OpenBSD: security.html,v 1.329 2006/09/09 03:04:22 brad Exp $</small>
 
 </body>
 </html>