===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.319
retrieving revision 1.320
diff -u -r1.319 -r1.320
--- www/security.html	2006/01/05 05:34:08	1.319
+++ www/security.html	2006/02/12 10:25:39	1.320
@@ -231,6 +231,11 @@
 
 <p>
 <ul>
+<li><a href="errata.html#ssh">Feb 12, 2006:
+	Josh Bressers has reported a weakness in OpenSSH caused due to the
+	insecure use of the system(3) function in scp(1) when performing copy
+	operations using filenames that are supplied by the user from the
+	command line.</a>
 <li><a href="errata.html#fd">Jan 5, 2006:
 	Do not allow users to trick suid programs into re-opening files via
 	/dev/fd.</a>
@@ -249,6 +254,11 @@
 
 <p>
 <ul>
+<li><a href="errata37.html#ssh">Feb 12, 2006:
+	Josh Bressers has reported a weakness in OpenSSH caused due to the
+	insecure use of the system(3) function in scp(1) when performing copy
+	operations using filenames that are supplied by the user from the
+	command line.</a>
 <li><a href="errata37.html#fd">Jan 5, 2006:
 	Do not allow users to trick suid programs into re-opening files via
 	/dev/fd.</a>
@@ -1393,7 +1403,7 @@
 <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
 <a href="mailto:www@openbsd.org">www@openbsd.org</a>
 <br>
-<small>$OpenBSD: security.html,v 1.319 2006/01/05 05:34:08 brad Exp $</small>
+<small>$OpenBSD: security.html,v 1.320 2006/02/12 10:25:39 brad Exp $</small>
 
 </body>
 </html>