From owner-freebsd-security Thu Jan 24 20:43:59 2002 Delivered-To: freebsd-security@freebsd.org Received: from radix.cryptio.net (radix.cryptio.net [199.181.107.213]) by hub.freebsd.org (Postfix) with ESMTP id B589A37B416 for ; Thu, 24 Jan 2002 20:43:56 -0800 (PST) Received: (from emechler@localhost) by radix.cryptio.net (8.11.6/8.11.6) id g0P4hnC19463; Thu, 24 Jan 2002 20:43:49 -0800 (PST) (envelope-from emechler) Date: Thu, 24 Jan 2002 20:43:49 -0800 From: Erick Mechler To: Robert Myers Cc: freebsd-security@FreeBSD.ORG Subject: Re: FreeBSD Security Advisory FreeBSD-SA-02:08.exec Message-ID: <20020124204349.B19034@techometer.net> References: <200201242153.g0OLrSn75456@freefall.freebsd.org> <002901c1a55a$1bfe60e0$0501a8c0@ccridernote> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5.1i In-Reply-To: <002901c1a55a$1bfe60e0$0501a8c0@ccridernote>; from Robert Myers on Thu, Jan 24, 2002 at 11:38:16PM -0500 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org :: This advisory seems to indicate a problem with 4.2-RELEASE. :: :: Can anyone shed any light on whether or not this is the case, and what if :: any action I could take for a 4.2-RELEASE system? The answer to your first question is right in the advisory: Affects: All released versions of FreeBSD 4.x prior to 4.5-RELEASE. FreeBSD 4.4-STABLE prior to the correction date. That would include 4.2-RELEASE. The answer to your second question can be found on the FreeBSD website. According to http://www.freebsd.org/security/#adv, your version of FreeBSD isn't supported by the Security Team anymore so you should probably upgrade. However, that's not to say that you can't find someone else who is willing to backport the patch for you. Cheers - Erick To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message