Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 4 Feb 1997 09:51:23 -0600 (CST)
From:      Karl Denninger  <karl@Mcs.Net>
To:        spork@super-g.com (spork)
Cc:        danny@panda.hilink.com.au, jgreco@solaria.sol.net, security@FreeBSD.ORG
Subject:   Re: Question: 2.1.7?
Message-ID:  <199702041551.JAA18527@Jupiter.Mcs.Net>
In-Reply-To: <Pine.BSF.3.95.970204014442.24946A-100000@super-g.inch.com> from "spork" at Feb 4, 97 01:45:17 am

next in thread | previous in thread | raw e-mail | index | archive | help
> 
> yes yes yes!!! Please Please Please!!!
> 
> On Tue, 4 Feb 1997, Daniel O'Callaghan wrote:
> > 
> > I have already suggested a 'security update package repository' to Jordan 
> > and Paul Traina.  They like the idea.  Still musing over the exact 
> > implementation though.  But as soon as I get libc patches, I'll build 
> > packages for 2.1.0, 2.1.5 and 2.1.6 and make them available from 
> > somewhere, along with sendmail885.
> > 
> > regards,
> > 
> > Danny

Warning!

There are static-linked executables which are shipped SUID with most FreeBSD
implementations.  THESE MUST BE RECOMPILED ALSO!

Make very, very sure you don't have any old SUID executables laying around.
If you do, you're vulnerable even with a libc fix.

--
-- 
Karl Denninger (karl@MCS.Net)| MCSNet - The Finest Internet Connectivity
http://www.mcs.net/~karl     | T1's from $600 monthly to FULL DS-3 Service
			     | 99 Analog numbers, 77 ISDN, Web servers $75/mo
Voice: [+1 312 803-MCS1 x219]| Email to "info@mcs.net" WWW: http://www.mcs.net/
Fax:   [+1 773 248-9865]     | 2 FULL DS-3 Internet links; 400Mbps B/W Internal



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199702041551.JAA18527>