From owner-freebsd-security Tue Feb 4 07:51:34 1997 Return-Path: Received: (from root@localhost) by freefall.freebsd.org (8.8.5/8.8.5) id HAA22391 for security-outgoing; Tue, 4 Feb 1997 07:51:34 -0800 (PST) Received: from Mailbox.mcs.com (Mailbox.mcs.com [192.160.127.87]) by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id HAA22386 for ; Tue, 4 Feb 1997 07:51:32 -0800 (PST) Received: from Jupiter.Mcs.Net (Jupiter.mcs.net [192.160.127.88]) by Mailbox.mcs.com (8.8.5/8.8.2) with ESMTP id JAA16999; Tue, 4 Feb 1997 09:51:28 -0600 (CST) Received: (from karl@localhost) by Jupiter.Mcs.Net (8.8.5/8.8.2) id JAA18527; Tue, 4 Feb 1997 09:51:24 -0600 (CST) From: Karl Denninger Message-Id: <199702041551.JAA18527@Jupiter.Mcs.Net> Subject: Re: Question: 2.1.7? To: spork@super-g.com (spork) Date: Tue, 4 Feb 1997 09:51:23 -0600 (CST) Cc: danny@panda.hilink.com.au, jgreco@solaria.sol.net, security@FreeBSD.ORG In-Reply-To: from "spork" at Feb 4, 97 01:45:17 am X-Mailer: ELM [version 2.4 PL24] Content-Type: text Sender: owner-security@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk > > yes yes yes!!! Please Please Please!!! > > On Tue, 4 Feb 1997, Daniel O'Callaghan wrote: > > > > I have already suggested a 'security update package repository' to Jordan > > and Paul Traina. They like the idea. Still musing over the exact > > implementation though. But as soon as I get libc patches, I'll build > > packages for 2.1.0, 2.1.5 and 2.1.6 and make them available from > > somewhere, along with sendmail885. > > > > regards, > > > > Danny Warning! There are static-linked executables which are shipped SUID with most FreeBSD implementations. THESE MUST BE RECOMPILED ALSO! Make very, very sure you don't have any old SUID executables laying around. If you do, you're vulnerable even with a libc fix. -- -- Karl Denninger (karl@MCS.Net)| MCSNet - The Finest Internet Connectivity http://www.mcs.net/~karl | T1's from $600 monthly to FULL DS-3 Service | 99 Analog numbers, 77 ISDN, Web servers $75/mo Voice: [+1 312 803-MCS1 x219]| Email to "info@mcs.net" WWW: http://www.mcs.net/ Fax: [+1 773 248-9865] | 2 FULL DS-3 Internet links; 400Mbps B/W Internal