From owner-freebsd-security@FreeBSD.ORG Sat Dec 24 11:22:50 2011 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B6BBE1065673 for ; Sat, 24 Dec 2011 11:22:50 +0000 (UTC) (envelope-from delphij@gmail.com) Received: from mail-tul01m020-f182.google.com (mail-tul01m020-f182.google.com [209.85.214.182]) by mx1.freebsd.org (Postfix) with ESMTP id 7ED188FC08 for ; Sat, 24 Dec 2011 11:22:50 +0000 (UTC) Received: by obbwd18 with SMTP id wd18so8607876obb.13 for ; Sat, 24 Dec 2011 03:22:49 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=8cvCZJ4eDZilVIVWSbaSEq6xG2vgAQyG56cmAUQIxNs=; b=mtg2tsqWNWU1/OIn6jOiNl69nbVH/VpizUtrdor85/cttARIjBNxFbE4Wexx1Vq91o EGjR23xL6C1zH1nnVZSPogizWnYdAec5FUvvfA+vcDXqzTJQDE0e/AA+xWLxTGhLM0RV +D1wlbWIm07P3RqNnYLT5/JNv+WvbbUfQsXx0= MIME-Version: 1.0 Received: by 10.182.15.104 with SMTP id w8mr15896068obc.20.1324725768503; Sat, 24 Dec 2011 03:22:48 -0800 (PST) Received: by 10.182.67.163 with HTTP; Sat, 24 Dec 2011 03:22:48 -0800 (PST) In-Reply-To: <201112240019.RAA24110@lariat.net> References: <201112231536.pBNFacgx078849@freefall.freebsd.org> <201112240019.RAA24110@lariat.net> Date: Sat, 24 Dec 2011 03:22:48 -0800 Message-ID: From: Xin LI To: Brett Glass Content-Type: text/plain; charset=UTF-8 Cc: freebsd-security@freebsd.org Subject: Re: [FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-11:07.chroot X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 24 Dec 2011 11:22:50 -0000 On Fri, Dec 23, 2011 at 4:19 PM, Brett Glass wrote: > What ports, etc. must one recompile after applying this patch? It appears to > modify libc. proftpd has to be rebuilt with a new patch which is currently available from portsnap. pureftpd and vsftpd are safe as far as I have tested. Cheers, -- Xin LI https://www.delphij.net/ FreeBSD - The Power to Serve! Live free or die