===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.202
retrieving revision 1.203
diff -u -r1.202 -r1.203
--- www/security.html	2002/04/11 18:39:22	1.202
+++ www/security.html	2002/04/16 18:33:08	1.203
@@ -184,6 +184,21 @@
 <dl>
 
 <li>
+<a name=31></a>
+
+<h3><font color=#e00000>OpenBSD 3.1 Security Advisories</font></h3>
+These are the OpenBSD 3.1 advisories -- all these problems are solved 
+in <a href=anoncvs.html>OpenBSD current</a> and the
+<a href=stable.html>patch branch</a>.
+
+<p>
+<ul>
+<li>None yet.
+</ul>
+
+<p>
+
+<li>
 <a name=30></a>
 
 <h3><font color=#e00000>OpenBSD 3.0 Security Advisories</font></h3>
@@ -193,43 +208,43 @@
 
 <p>
 <ul>
-<li><a href=errata.html#mail>April 11, 2002:
+<li><a href=errata30.html#mail>April 11, 2002:
 	The mail(1) was interpreting tilde escapes even when invoked
 	in non-interactive mode.  As mail(1) is called as root from cron,
 	this can lead to a local root compromise.</a>
-<li><a href=errata.html#approval>March 19, 2002:
+<li><a href=errata30.html#approval>March 19, 2002:
 	Under certain conditions, on systems using YP with netgroups in
 	the password database, it is possible for the rexecd(8) and rshd(8)
 	daemons to execute a shell from a password database entry for a
 	different user. Similarly, atrun(8) may change to the wrong
 	home directory when running jobs.</a>
-<li><a href=errata.html#zlib>March 13, 2002:
+<li><a href=errata30.html#zlib>March 13, 2002:
 	A potential double free() exists in the zlib library;
 	this is not exploitable on OpenBSD.
 	The kernel also contains a copy of zlib; it is not
 	currently known if the kernel zlib is exploitable.</a>
-<li><a href=errata.html#openssh>March 8, 2002:
+<li><a href=errata30.html#openssh>March 8, 2002:
 	An off-by-one check in OpenSSH's channel forwarding code
 	may allow a local user to gain super-user privileges.</a>
-<li><a href=errata.html#ptrace>January 21, 2002:
+<li><a href=errata30.html#ptrace>January 21, 2002:
 	A race condition between the ptrace(2) and execve(2) system calls
 	allows an attacker to modify the memory contents of suid/sgid
 	processes which could lead to compromise of the super-user account.</a>
-<li><a href=errata.html#sudo>January 17, 2002:
+<li><a href=errata30.html#sudo>January 17, 2002:
 	There is a security hole in sudo(8) that can be exploited
 	when the Postfix sendmail replacement is installed that may
 	allow an attacker on the local host to gain root privileges.</a>
-<li><a href=errata.html#lpd>November 28, 2001:
+<li><a href=errata30.html#lpd>November 28, 2001:
 	An attacker can trick a machine running the lpd daemon into
 	creating new files in the root directory from a machine with
 	remote line printer access.</a>
-<li><a href=errata.html#vi.recover>November 13, 2001:
+<li><a href=errata30.html#vi.recover>November 13, 2001:
 	The vi.recover script can be abused in such a way as
 	to cause arbitrary zero-length files to be removed.</a>
-<li><a href=errata.html#pf>November 13, 2001:
+<li><a href=errata30.html#pf>November 13, 2001:
 	pf(4) was incapable of dealing with certain ipv6 icmp packets,
 	resulting in a crash.</a>
-<li><a href=errata.html#sshd>November 12, 2001:
+<li><a href=errata30.html#sshd>November 12, 2001:
 	A security hole that may allow an attacker to partially authenticate
 	if -- and only if -- the administrator has enabled KerberosV.</a>
 </ul>
@@ -794,7 +809,7 @@
 <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
 <a href=mailto:www@openbsd.org>www@openbsd.org</a>
 <br>
-<small>$OpenBSD: security.html,v 1.202 2002/04/11 18:39:22 millert Exp $</small>
+<small>$OpenBSD: security.html,v 1.203 2002/04/16 18:33:08 deraadt Exp $</small>
 
 </body>
 </html>