From owner-freebsd-questions  Wed Aug 29  9:53:13 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from digitaldeck.com (gateway.digitaldeck.com [64.124.75.119])
	by hub.freebsd.org (Postfix) with ESMTP id 38E4237B407
	for <freebsd-questions@FreeBSD.ORG>; Wed, 29 Aug 2001 09:53:09 -0700 (PDT)
	(envelope-from mudie@digitaldeck.com)
Received: from digitaldeck.com (localhost.digitaldeck.com [127.0.0.1])
	by digitaldeck.com (8.11.3/8.9.3) with ESMTP id f7TGr9D81068
	for <freebsd-questions@FreeBSD.ORG>; Wed, 29 Aug 2001 09:53:09 -0700 (PDT)
	(envelope-from mudie@digitaldeck.com)
Message-Id: <200108291653.f7TGr9D81068@digitaldeck.com>
To: freebsd-questions@FreeBSD.ORG
Subject: Re: FreeBSD Security Advisory FreeBSD-SA-01:57.sendmail 
In-reply-to: Your message of "Mon, 27 Aug 2001 14:44:57 PDT."
             <200108272144.f7RLivL71152@freefall.freebsd.org> 
Reply-To: mudie@digitaldeck.com
X-URL: http://www.digitaldeck.com
Date: Wed, 29 Aug 2001 09:53:09 -0700
From: David C Mudie <mudie@digitaldeck.com>
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG


FreeBSD Security Advisories writes:
>=============================================================================
>FreeBSD-SA-01:57                                           Security Advisory
>Topic:          sendmail contains local root vulnerability
>...
>
>VI.   Correction details
>The following is the sendmail $Id$ revision number of the file that
>was corrected for the supported branches of FreeBSD.  The $Id$
>revision number of the installed source can be examined using the
>ident(1) command.
>
>  Revision   Path
>  8.20.22.4  src/contrib/sendmail/src/trace.c
>

I am tracking RELENG_4_3 with anonynmous cvsup.  After update, I see
    # ls -alg /usr/src/contrib/sendmail/src/trace.c
    -rw-r--r--  1 root  wheel  2025 Aug 28 14:40 /usr/src/contrib/sendmail/src/trace.c

    # ident /usr/src/contrib/sendmail/src/trace.c
    /usr/src/contrib/sendmail/src/trace.c:
	 $Id: trace.c,v 8.20.22.2 2000/09/17 17:04:27 gshapiro Exp $

WebCVS shows that trace.c has been changed recently, but
the ident number has not.  Am I missing something, or is the advisory incorrect?

David


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message