===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.223
retrieving revision 1.224
diff -u -r1.223 -r1.224
--- www/security.html	2002/10/07 21:00:05	1.223
+++ www/security.html	2002/10/17 08:38:57	1.224
@@ -35,6 +35,7 @@
 <p>
 </td>
 <td valign="top">
+<a href="#32">For 3.2 security advisories</a>.<br>
 <a href="#31">For 3.1 security advisories</a>.<br>
 <a href="#30">For 3.0 security advisories</a>.<br>
 <a href="#29">For 2.9 security advisories</a>.<br>
@@ -185,6 +186,17 @@
 <dl>
 
 <li>
+<a name=32></a>
+
+<h3><font color=#e00000>OpenBSD 3.2 Security Advisories</font></h3>
+These are the OpenBSD 3.2 advisories -- all these problems are solved 
+in <a href=anoncvs.html>OpenBSD current</a> and the
+<a href=stable.html>patch branch</a>.
+
+<p>
+<ul>
+</ul>
+
 <a name=31></a>
 
 <h3><font color=#e00000>OpenBSD 3.1 Security Advisories</font></h3>
@@ -194,54 +206,54 @@
 
 <p>
 <ul>
-<li><a href=errata.html#kerntime>October 2, 2002:
+<li><a href=errata31.html#kerntime>October 2, 2002:
 	Incorrect argument checking in the setitimer(2) system call
 	may allow an attacker to write to kernel memory.</a>
-<li><a href=errata.html#scarg>August 11, 2002:
+<li><a href=errata31.html#scarg>August 11, 2002:
 	An insufficient boundary check in the select system call
 	allows an attacker to overwrite kernel memory and execute arbitrary code
 	in kernel context.</a>
-<li><a href=errata.html#ssl>July 30, 2002:
+<li><a href=errata31.html#ssl>July 30, 2002:
 	Several remote buffer overflows can occur in the SSL2 server and SSL3
 	client of the ssl(8) library, as in the ASN.1 parser code in the
 	crypto(3) library, all of them being potentially remotely
 	exploitable.</a>
-<li><a href=errata.html#xdr>July 29, 2002:
+<li><a href=errata31.html#xdr>July 29, 2002:
 	A buffer overflow can occur in the xdr_array(3) RPC code, leading to
 	possible remote crash.</a>
-<li><a href=errata.html#pppd>July 29, 2002:
+<li><a href=errata31.html#pppd>July 29, 2002:
 	A race condition exists in the pppd(8) daemon which may cause it to
 	alter the file permissions of an arbitrary file.</a>
-<li><a href=errata.html#isakmpd>July 5, 2002:
+<li><a href=errata31.html#isakmpd>July 5, 2002:
 	Receiving IKE payloads out of sequence can cause isakmpd(8) to
 	crash.</a>
-<li><a href=errata.html#ktrace>June 27, 2002:
+<li><a href=errata31.html#ktrace>June 27, 2002:
 	The kernel would let any user ktrace set[ug]id processes.</a>
-<li><a href=errata.html#modssl>June 26, 2002:
+<li><a href=errata31.html#modssl>June 26, 2002:
 	A buffer overflow can occur in the .htaccess parsing code in
 	mod_ssl httpd module, leading to possible remote crash or exploit.</a>
-<li><a href=errata.html#resolver>June 25, 2002:
+<li><a href=errata31.html#resolver>June 25, 2002:
 	A potential buffer overflow in the DNS resolver has been found.</a>
-<li><a href=errata.html#sshd>June 24, 2002:
+<li><a href=errata31.html#sshd>June 24, 2002:
 	All versions of OpenSSH's sshd between 2.3.1 and 3.3 contain an
 	input validation error that can result in an integer overflow and
 	privilege escalation.</a>
-<li><a href=errata.html#httpd>June 19, 2002:
+<li><a href=errata31.html#httpd>June 19, 2002:
 	A buffer overflow can occur during the interpretation of chunked
 	encoding in httpd(8), leading to possible remote crash.</a>
-<li><a href=errata.html#sshbsdauth>May 22, 2002:
+<li><a href=errata31.html#sshbsdauth>May 22, 2002:
         Under certain conditions, on systems using YP with netgroups
         in the password database, it is possible that sshd(8) does
         ACL checks for the requested user name but uses the password
         database entry of a different user for authentication.  This
         means that denied users might authenticate successfully
         while permitted users could be locked out.</a>
-<li><a href=errata.html#fdalloc2>May 8, 2002:
+<li><a href=errata31.html#fdalloc2>May 8, 2002:
 	A race condition exists that could defeat the kernel's
 	protection of fd slots 0-2 for setuid processes.</a>
-<li><a href=errata.html#sudo>April 25, 2002:
+<li><a href=errata31.html#sudo>April 25, 2002:
 	A bug in sudo may allow an attacker to corrupt the heap.</a>
-<li><a href=errata.html#sshafs>April 22, 2002:
+<li><a href=errata31.html#sshafs>April 22, 2002:
         A local user can gain super-user privileges due to a buffer
         overflow in sshd(8) if AFS has been configured on the system
         or if KerberosTgtPassing or AFSTokenPassing has been enabled
@@ -925,7 +937,7 @@
 <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
 <a href=mailto:www@openbsd.org>www@openbsd.org</a>
 <br>
-<small>$OpenBSD: security.html,v 1.223 2002/10/07 21:00:05 miod Exp $</small>
+<small>$OpenBSD: security.html,v 1.224 2002/10/17 08:38:57 deraadt Exp $</small>
 
 </body>
 </html>