=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v retrieving revision 1.337 retrieving revision 1.338 diff -u -r1.337 -r1.338 --- www/security.html 2006/11/20 01:35:19 1.337 +++ www/security.html 2007/01/03 21:14:39 1.338 @@ -9,7 +9,7 @@ - + @@ -233,6 +233,9 @@

Jan 3, 2007: + Insufficient validation in vga(4) may allow an attacker to gain + root privileges on some i386 systems.
Nov 19, 2006: ld.so(1) fails to properly sanitize the environment.
Nov 4, 2006: @@ -256,6 +259,9 @@
+
+OpenBSD 3.8 and earlier releases are not supported anymore. The following +paragraphs only list advisories issued while they were maintained; these +releases are likely to be affected by the advisories for more recent releases. +
+
@@ -369,12 +381,6 @@ sprintf function which may be exploitable under certain conditions.

-OpenBSD 3.7 and earlier releases are not supported anymore. The following -paragraphs only list advisories issued while they were maintained; these -releases are likely to be affected by the advisories for more recent releases. -
-

@@ -1535,7 +1541,7 @@

www@openbsd.org
-$OpenBSD: security.html,v 1.337 2006/11/20 01:35:19 deraadt Exp $ +$OpenBSD: security.html,v 1.338 2007/01/03 21:14:39 miod Exp $