From owner-freebsd-security Tue Jul 10 14: 5:21 2001 Delivered-To: freebsd-security@freebsd.org Received: from ldc.ro (ldc-gw.pub.ro [192.129.3.227]) by hub.freebsd.org (Postfix) with SMTP id BBBF637B408 for ; Tue, 10 Jul 2001 14:05:16 -0700 (PDT) (envelope-from razor@ldc.ro) Received: (qmail 638 invoked by uid 666); 10 Jul 2001 21:05:14 -0000 Date: Tue, 10 Jul 2001 23:47:07 +0300 From: Alex Popa To: FreeBSD Security Advisories Cc: security@freebsd.org Subject: Re: FreeBSD Security Advisory FreeBSD-SA-01: Message-ID: <20010710234707.A510@ldc.ro> References: <200107101402.f6AE2FK63559@freefall.freebsd.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <200107101402.f6AE2FK63559@freefall.freebsd.org>; from security-advisories@FreeBSD.org on Tue, Jul 10, 2001 at 07:02:15AM -0700 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Tue, Jul 10, 2001 at 07:02:15AM -0700, FreeBSD Security Advisories wrote: > V. Solution > > One of the following: > > 1) Upgrade your vulnerable FreeBSD system to 4.3-STABLE after the > correction date. Since the next point seems not to work (patch was not on FTP at the time of writing of my mail), is it safe to just cvsup to the latest -STABLE and recompile only the kernel? Or is there a need to rebuild the entire world? (come to think of it, how can I tell by myself, because /usr/src/UPDATING mentions nothing, for now) Is this going to be commited to RELENG_4_3_RELEASE (it does seem like a critical update to me)? > > 2) To patch your present system: download the relevant patch from the > below location, and execute the following commands as root: > > [FreeBSD 4.1, 4.2, and 4.3 base systems] > > This patch has been verified to apply to FreeBSD 4.1, 4.2, and 4.3 only. > It may or may not apply to older releases. > > # fetch ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-01:42/signal-4.3.patch > # fetch ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-01:42/signal-4.3.patch.asc > Thanks a lot Alex ------------+------------------------------------------ Alex Popa, | "Artificial Intelligence is razor@ldc.ro| no match for Natural Stupidity" ------------+------------------------------------------ "It took the computing power of three C-64s to fly to the Moon. It takes a 486 to run Windows 95. Something is wrong here." To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message