From owner-freebsd-security@FreeBSD.ORG Tue Aug 5 11:12:28 2003 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 19F7F37B409 for ; Tue, 5 Aug 2003 11:12:28 -0700 (PDT) Received: from pd4mo2so.prod.shaw.ca (shawidc-mo1.cg.shawcable.net [24.71.223.10]) by mx1.FreeBSD.org (Postfix) with ESMTP id EB96343FAF for ; Tue, 5 Aug 2003 11:12:26 -0700 (PDT) (envelope-from colin.percival@wadham.ox.ac.uk) Received: from pd4mr1so.prod.shaw.ca (pd4mr1so-qfe3.prod.shaw.ca [10.0.141.212]) by l-daemon (iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003)) freebsd-security@freebsd.org; Tue, 05 Aug 2003 12:08:15 -0600 (MDT) Received: from pn2ml8so.prod.shaw.ca (pn2ml8so-qfe0.prod.shaw.ca [10.0.121.152]) by l-daemon (iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003)) freebsd-security@freebsd.org; Tue, 05 Aug 2003 12:08:15 -0600 (MDT) Received: from piii600.wadham.ox.ac.uk (h24-87-233-42.vc.shawcable.net [24.87.233.42])2003)) freebsd-security@freebsd.org; Tue, 05 Aug 2003 12:08:15 -0600 (MDT) Date: Tue, 05 Aug 2003 11:07:05 -0700 From: Colin Percival In-reply-to: <69C7377D-C75D-11D7-9563-00039375B178@gizmopartners.com> X-Sender: cperciva@popserver.sfu.ca To: freebsd-security@freebsd.org Message-id: <5.0.2.1.1.20030805110111.02c9d4e8@popserver.sfu.ca> MIME-version: 1.0 X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Content-type: text/plain; charset=us-ascii; format=flowed Content-transfer-encoding: 7BIT References: <5.0.2.1.1.20030804044235.02bce1f0@popserver.sfu.ca> Subject: Re: FreeBSD Security Advisory FreeBSD-SA-03:08.realpath X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Aug 2003 18:12:28 -0000 At 10:56 05/08/2003 -0500, Chris Boyd wrote: >When I do the update on a 4.8-RELEASE box, should all the files noted be >replaced? On my two test machines, only /usr/libexec/sftp-server was >replaced. Both machines are running custom kernels, but I've never built >world or used the free-bsd update before on them. I was just about to send out an email asking if anyone had seen that -- I've seen (in the server logs) a few machines do that, and I have no idea why (most machines are updating properly). I'll take this to private email, but if anyone else has seen any behaviour from FreeBSD Update which looks odd, please contact me. Colin Percival