===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.146
retrieving revision 1.147
diff -u -r1.146 -r1.147
--- www/security.html	2000/10/06 19:59:43	1.146
+++ www/security.html	2000/10/06 20:26:06	1.147
@@ -191,8 +191,9 @@
 <p>
 <ul>
 <li><a href=errata.html#curses>Oct 6, 2000:
-	libcurses permitted reading of $HOME/.termlib database files
-	if used by a setuid or setgid application.
+	libcurses honored terminal descriptions in the $HOME/.terminfo
+	directory as well as in the TERMCAP environment variable for
+	setuid and setgid applications.
 	(patch included)</a>
 <li><a href=errata.html#talkd>Oct 6, 2000:
 	A format string vulnerability exists in talkd(8).
@@ -585,7 +586,7 @@
 <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
 <a href=mailto:www@openbsd.org>www@openbsd.org</a>
 <br>
-<small>$OpenBSD: security.html,v 1.146 2000/10/06 19:59:43 deraadt Exp $</small>
+<small>$OpenBSD: security.html,v 1.147 2000/10/06 20:26:06 millert Exp $</small>
 
 </body>
 </html>