Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 08 Jun 2004 11:18:34 +0100
From:      Colin Percival <colin.percival@wadham.ox.ac.uk>
To:        freebsd-security@freebsd.org
Subject:   Re: FreeBSD Security Advisory FreeBSD-SA-04:12.jailroute
Message-ID:  <6.1.0.6.1.20040608105255.02e78ba0@popserver.sfu.ca>
In-Reply-To: <20040607210614.112DF33C75@dwp.des.no>
References:  <20040607210614.112DF33C75@dwp.des.no>

next in thread | previous in thread | raw e-mail | index | archive | help
At 22:06 07/06/2004, FreeBSD Security Advisories wrote:
>FreeBSD-SA-04:12.jailroute                                  Security Advisory
>Affects:        All FreeBSD 4.x releases prior to 4.10-RELEASE

  As a few people have noted, this should read "FreeBSD 4.8 and 4.9"; this bug
never existed in earlier versions of FreeBSD.
  That said, FreeBSD 4.7 and earlier are no longer officially supported, and it
is highly recommended that people upgrade to a newer version, since there have
been recent security advisories concerning issues to which earlier releases are
still vulnerable.

>V.   Solution

>Do one of the following:
>
>1) Upgrade your vulnerable system to 4.10-RELEASE, or to the RELENG_4_8
>or RELENG_4_9 security branch dated after the correction date.
>
>OR
>
>2) Patch your present system:

or, as usual,

3) If you are running an affected release, you can use FreeBSD Update:
# cd /usr/ports/security/freebsd-update && make all install
# cp /usr/local/etc/freebsd-update.conf.sample /usr/local/etc/freebsd-update.conf
# /usr/local/sbin/freebsd-update fetch
# /usr/local/sbin/freebsd-update install

For more details, see http://www.daemonology.net/freebsd-update/ .

  Note that this is something I'm providing personally; it is in no way
endorsed by the Security Officer or the Project as a whole.

Colin Percival




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6.1.0.6.1.20040608105255.02e78ba0>