===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.228
retrieving revision 1.229
diff -u -r1.228 -r1.229
--- www/security.html	2002/11/05 15:30:43	1.228
+++ www/security.html	2002/11/06 23:37:17	1.229
@@ -196,6 +196,9 @@
 
 <p>
 <ul>
+<li><a href=errata.html#smrsh>November 6, 2002:
+	An attacker can bypass smrsh(8)'s restrictions and execute
+	arbitrary commands with the privileges of his own account.</a>
 <li><a href=errata.html#kadmin>October 21, 2002:
 	A buffer overflow can occur in the kadmind(8) daemon, leading
 	to possible remote crash or exploit.</a>
@@ -213,6 +216,12 @@
 
 <p>
 <ul>
+<li><a href=errata31.html#kernresource>November 6, 2002:
+	Incorrect argument checking in the getitimer(2) system call
+	may allow an attacker to crash the system.</a>
+<li><a href=errata31.html#smrsh>November 6, 2002:
+	An attacker can bypass smrsh(8)'s restrictions and execute
+	arbitrary commands with the privileges of his own account.</a>
 <li><a href=errata31.html#kadmin>October 21, 2002:
 	A buffer overflow can occur in the kadmind(8) daemon, leading
 	to possible remote crash or exploit.</a>
@@ -282,6 +291,12 @@
 
 <p>
 <ul>
+<li><a href=errata30.html#kernresource>November 6, 2002:
+	Incorrect argument checking in the getitimer(2) system call
+	may allow an attacker to crash the system.</a>
+<li><a href=errata30.html#smrsh>November 6, 2002:
+	An attacker can bypass smrsh(8)'s restrictions and execute
+	arbitrary commands with the privileges of his own account.</a>
 <li><a href=errata30.html#kadmin>October 21, 2002:
 	A buffer overflow can occur in the kadmind(8) daemon, leading
 	to possible remote crash or exploit.</a>
@@ -950,7 +965,7 @@
 <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
 <a href=mailto:www@openbsd.org>www@openbsd.org</a>
 <br>
-<small>$OpenBSD: security.html,v 1.228 2002/11/05 15:30:43 miod Exp $</small>
+<small>$OpenBSD: security.html,v 1.229 2002/11/06 23:37:17 miod Exp $</small>
 
 </body>
 </html>