===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.201
retrieving revision 1.202
diff -u -r1.201 -r1.202
--- www/security.html	2002/03/19 22:06:26	1.201
+++ www/security.html	2002/04/11 18:39:22	1.202
@@ -193,6 +193,10 @@
 
 <p>
 <ul>
+<li><a href=errata.html#mail>April 11, 2002:
+	The mail(1) was interpreting tilde escapes even when invoked
+	in non-interactive mode.  As mail(1) is called as root from cron,
+	this can lead to a local root compromise.</a>
 <li><a href=errata.html#approval>March 19, 2002:
 	Under certain conditions, on systems using YP with netgroups in
 	the password database, it is possible for the rexecd(8) and rshd(8)
@@ -241,6 +245,10 @@
 
 <p>
 <ul>
+<li><a href=errata29.html#mail>April 11, 2002:
+	The mail(1) was interpreting tilde escapes even when invoked
+	in non-interactive mode.  As mail(1) is called as root from cron,
+	this can lead to a local root compromise.</a>
 <li><a href=errata29.html#zlib>March 13, 2002:
 	A potential double free() exists in the zlib library;
 	this is not exploitable on OpenBSD.
@@ -786,7 +794,7 @@
 <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
 <a href=mailto:www@openbsd.org>www@openbsd.org</a>
 <br>
-<small>$OpenBSD: security.html,v 1.201 2002/03/19 22:06:26 millert Exp $</small>
+<small>$OpenBSD: security.html,v 1.202 2002/04/11 18:39:22 millert Exp $</small>
 
 </body>
 </html>