===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.233
retrieving revision 1.234
diff -u -r1.233 -r1.234
--- www/security.html	2003/01/30 22:02:17	1.233
+++ www/security.html	2003/02/23 00:20:51	1.234
@@ -196,6 +196,11 @@
 
 <p>
 <ul>
+<li><a href=errata.html#ssl>February 22, 2003:
+	In ssl(8) an information leak can occur via timing by performing
+	a MAC computation even if incorrect block cipher padding has 
+	been found, this is a countermeasure. Also, check for negative
+	sizes, in allocation routines.</a>
 <li><a href=errata.html#cvs>January 20, 2003:
 	A double free exists in cvs(1) that could lead to privilege
 	escalation for cvs configurations where the cvs command is
@@ -989,7 +994,7 @@
 <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
 <a href=mailto:www@openbsd.org>www@openbsd.org</a>
 <br>
-<small>$OpenBSD: security.html,v 1.233 2003/01/30 22:02:17 margarida Exp $</small>
+<small>$OpenBSD: security.html,v 1.234 2003/02/23 00:20:51 margarida Exp $</small>
 
 </body>
 </html>