===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.124
retrieving revision 1.125
diff -u -r1.124 -r1.125
--- www/security.html	2000/05/23 20:58:20	1.124
+++ www/security.html	2000/05/25 07:39:27	1.125
@@ -204,13 +204,21 @@
 
 <p>
 <ul>
+<li><a href=errata.html#procfs>May 25, 2000: 
+	xlockmore has a bug which a localhost attacker can use to gain
+	access to the encrypted root password hash (which is normally
+	encoded using blowfish (see
+	<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypt&sektion=3">
+	crypt(3)</a>)
+	(patch included).</a>
 <li><a href=errata.html#procfs>Jan 20, 2000: 
 	Systems running with procfs enabled and mounted are
 	vulnerable to a very tricky exploit.  procfs is not
 	mounted by default.
 	(patch included).</a>
 <li><a href=errata.html#ifmedia>Nov 9, 1999: 
-	Any user could change interface media configurations
+	Any user could change interface media configurations, resulting in
+	a localhost denial of service attack.
 	(patch included).</a>
 <li><a href=errata.html#sslUSA>Dec 2, 1999:
 	A buffer overflow in the RSAREF code included in the
@@ -512,7 +520,7 @@
 <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
 <a href=mailto:www@openbsd.org>www@openbsd.org</a>
 <br>
-<small>$OpenBSD: security.html,v 1.124 2000/05/23 20:58:20 deraadt Exp $</small>
+<small>$OpenBSD: security.html,v 1.125 2000/05/25 07:39:27 deraadt Exp $</small>
 
 </body>
 </html>