From owner-freebsd-security Tue Nov 19 10:16:39 1996 Return-Path: owner-security Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id KAA21660 for security-outgoing; Tue, 19 Nov 1996 10:16:39 -0800 (PST) Received: from passer.osg.gov.bc.ca (passer.osg.gov.bc.ca [142.32.110.29]) by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id KAA21653; Tue, 19 Nov 1996 10:16:36 -0800 (PST) Received: from localhost (15005@localhost [127.0.0.1]) by passer.osg.gov.bc.ca (8.8.3/8.6.10) with SMTP id KAA06551; Tue, 19 Nov 1996 10:16:19 -0800 (PST) From: Cy Schubert - ITSD Open Systems Group Message-Id: <199611191816.KAA06551@passer.osg.gov.bc.ca> X-Authentication-Warning: passer.osg.gov.bc.ca: 15005@localhost [127.0.0.1] didn't use HELO protocol Reply-to: cschuber@orca.gov.bc.ca X-Mailer: DXmail To: Paul Traina cc: cschuber@orca.gov.bc.ca, security-officer@freebsd.org, freebsd-security@freebsd.org Subject: Re: Futile rexecd holes In-reply-to: Your message of "Tue, 19 Nov 96 10:05:49 PST." <199611191805.KAA18076@precipice.shockwave.com> Date: Tue, 19 Nov 96 10:16:18 -0800 X-Mts: smtp Sender: owner-security@freebsd.org X-Loop: FreeBSD.org Precedence: bulk This is the first I've heard of a "service pack update." What is a "service pack update?" Is it similar in concept to Sun's SunSolve CDROM or IBM's PUT (Program Update Tape)? How does one get a "service pack update?" Regards, Phone: (250)389-3827 Cy Schubert OV/VM: BCSC02(CSCHUBER) Open Systems Support BITNET: CSCHUBER@BCSC02.BITNET ITSD Internet: cschuber@uumail.gov.bc.ca cschuber@bcsc02.gov.bc.ca "Quit spooling around, JES do it." > Thanks for the heads up, I've just made similar patches to -current and > requested their incorporation into both release branches. This fix will > not make 2.1.6, but will make the 2.1.6 "service pack update" (hah) and > 2.2. > > Since FreeBSD ships with rexecd disabled, I don't consider this a critical > issue, however we will cut an SA in the next week or so (if I ever have a > free moment again). > > Paul