From owner-freebsd-stable@FreeBSD.ORG Tue Sep 16 12:36:26 2003 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E1C0916A4B3 for ; Tue, 16 Sep 2003 12:36:26 -0700 (PDT) Received: from shaft.techsupport.co.uk (shaft.techsupport.co.uk [212.250.77.214]) by mx1.FreeBSD.org (Postfix) with ESMTP id EE95E43FBD for ; Tue, 16 Sep 2003 12:36:25 -0700 (PDT) (envelope-from setantae@submonkey.net) Received: from pc3-cdif2-5-cust222.cdif.cable.ntl.com ([81.101.152.222] helo=shrike.submonkey.net ident=mailnull) by shaft.techsupport.co.uk with esmtp (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.22) id 19zLcb-000CHe-TZ; Tue, 16 Sep 2003 20:36:22 +0100 Received: from setantae by shrike.submonkey.net with local (Exim 4.22) id 19zLcY-000ENz-PM; Tue, 16 Sep 2003 20:36:18 +0100 Date: Tue, 16 Sep 2003 20:36:18 +0100 From: Ceri Davies To: Kris Kennaway Message-ID: <20030916193618.GC53304@submonkey.net> Mail-Followup-To: Ceri Davies , Kris Kennaway , Craig Boston , stable@freebsd.org References: <20030916171436.GA12867@ei.bzerk.org> <200309161416.17241.craig@meoqu.gank.org> <20030916192659.GA11518@rot13.obsecurity.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="xesSdrSSBC0PokLI" Content-Disposition: inline In-Reply-To: <20030916192659.GA11518@rot13.obsecurity.org> X-PGP: finger ceri@FreeBSD.org User-Agent: Mutt/1.5.4i Sender: Ceri Davies cc: stable@freebsd.org Subject: Re: Release Engineering Status Report X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Sep 2003 19:36:27 -0000 --xesSdrSSBC0PokLI Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Sep 16, 2003 at 12:26:59PM -0700, Kris Kennaway wrote: > On Tue, Sep 16, 2003 at 02:16:17PM -0500, Craig Boston wrote: > > On Tuesday 16 September 2003 12:14 pm, Ruben de Groot wrote: > > > Fortunately, there's allready a patch in the source tree: > > > > > > http://www.freebsd.org/cgi/cvsweb.cgi/src/crypto/openssh/buffer.c.dif= f?r1=3D1 > > >.1.1.6&r2=3D1.1.1.7&f=3Dh > >=20 > > Yes, fortunately the patch is there. I noticed however that in the ver= sion=20 > > committed to the RELENG_4_8 branch, RCSID wasn't changed, so it's not= =20 > > possible to use ident to tell if your libssh needs to be patched or not= (both=20 > > old and new say 1.16)... Was that an oversight or should I be using so= me=20 > > other method to determine if I'm running a vulnerable version or not? >=20 > Err, the RCS ID is updated automatically upon CVS checkin..is that > really what you mean? I think so. In RELENG_4 at least, there is no $FreeBSD$ tag in that file. Ceri --=20 User: DO YOU ACCEPT JESUS CHRIST AS YOUR PERSONAL LORD AND SAVIOR? Iniaes: Sure, I can accept all forms of payment. -- www.chatterboxchallenge.com --xesSdrSSBC0PokLI Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (FreeBSD) iD8DBQE/Z2YyocfcwTS3JF8RAuDLAKCeTAq0Q10O/2EoUBUG0AfXAevoeACgs0dP 8CsLI1/SqyEgwxaNLqyDRa0= =fHq/ -----END PGP SIGNATURE----- --xesSdrSSBC0PokLI--