===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.371
retrieving revision 1.372
diff -u -r1.371 -r1.372
--- www/security.html	2009/01/30 22:25:57	1.371
+++ www/security.html	2009/02/22 22:09:38	1.372
@@ -239,6 +239,10 @@
 
 <p>
 <ul>
+<li><a href="errata44.html#011_sudo">February 22, 2009:
+	sudo(8) may allow a user listed in sudoers to run a command
+	as a different user than their access rule specifies when a Unix
+	group is used in the RunAs portion of the rule.</a>
 <li><a href="errata44.html#008_bind">January 15, 2009:
 	named(8) suffered from a similar logic error that may allow
 	bypass of DSA DNSSEC signature validation.</a>
@@ -261,6 +265,10 @@
 
 <p>
 <ul>
+<li><a href="errata43.html#011_sudo">February 22, 2009:
+	sudo(8) may allow a user listed in sudoers to run a command
+	as a different user than their access rule specifies when a Unix
+	group is used in the RunAs portion of the rule.</a>
 <li><a href="errata43.html#008_bind">January 15, 2009:
 	named(8) suffered from a similar logic error that may allow
 	bypass of DSA DNSSEC signature validation.</a>
@@ -1689,7 +1697,7 @@
 <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
 <a href="mailto:www@openbsd.org">www@openbsd.org</a>
 <br>
-<small>$OpenBSD: security.html,v 1.371 2009/01/30 22:25:57 sthen Exp $</small>
+<small>$OpenBSD: security.html,v 1.372 2009/02/22 22:09:38 millert Exp $</small>
 
 </body>
 </html>