===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.303
retrieving revision 1.304
diff -u -r1.303 -r1.304
--- www/security.html	2004/12/14 14:06:14	1.303
+++ www/security.html	2005/01/12 15:08:02	1.304
@@ -229,6 +229,10 @@
 
 <p>
 <ul>
+<li><a href="errata.html#httpd">Jan 12, 2005:
+        httpd(8)'s mod_include module fails to properly validate
+        the length of user supplied tag strings prior to copying
+        them to a local buffer, causing a buffer overflow.
 <li><a href="errata.html#pfkey">Dec 14, 2004:
         On systems running isakmpd(8) it is possible for a local
         user to cause kernel memory corruption and system panic by
@@ -246,6 +250,10 @@
 
 <p>
 <ul>
+<li><a href="errata35.html#httpd3">Jan 12, 2005:
+        httpd(8)'s mod_include module fails to properly validate
+        the length of user supplied tag strings prior to copying
+        them to a local buffer, causing a buffer overflow.
 <li><a href="errata35.html#pfkey">Dec 14, 2004:
         On systems running isakmpd(8) it is possible for a local
         user to cause kernel memory corruption and system panic by
@@ -1301,7 +1309,7 @@
 <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
 <a href="mailto:www@openbsd.org">www@openbsd.org</a>
 <br>
-<small>$OpenBSD: security.html,v 1.303 2004/12/14 14:06:14 markus Exp $</small>
+<small>$OpenBSD: security.html,v 1.304 2005/01/12 15:08:02 brad Exp $</small>
 
 </body>
 </html>