From owner-freebsd-security@FreeBSD.ORG Thu Aug 7 07:49:06 2003 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9558F37B401 for ; Thu, 7 Aug 2003 07:49:06 -0700 (PDT) Received: from lakemtao08.cox.net (lakemtao08.cox.net [68.1.17.113]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8298543FAF for ; Thu, 7 Aug 2003 07:49:05 -0700 (PDT) (envelope-from freebsd@critesclan.com) Received: from helaman ([68.107.163.57]) by lakemtao08.cox.net (InterMail vM.5.01.04.05 201-253-122-122-105-20011231) with SMTP id <20030807144905.NAYN7627.lakemtao08.cox.net@helaman> for ; Thu, 7 Aug 2003 10:49:05 -0400 From: To: "Freebsd-Security@Freebsd. Org" Date: Thu, 7 Aug 2003 09:49:42 -0500 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="windows-1251" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0) X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Importance: Normal In-Reply-To: <20030807125705.GO358@straylight.oblivion.bg> Subject: versions and up-to-date... X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: freebsd@critesclan.com List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Aug 2003 14:49:06 -0000 This is not really a security related issue, but since we're talking about releases and such, it kind of ties in. I do a CVSup every week, using the "tag=." method. It is my assumption that I am getting the latest-and-greatest version, so I'm on the bleeding edge of the 5.X system. Is that correct? Further, I assume that as soon as any security patch is available, I will get it as well, since I'm keeping up-to-date with the latest-and-greatest. So are my two assumptions correct? Thanks muchly... Lee -----Original Message----- From: owner-freebsd-security@freebsd.org [mailto:owner-freebsd-security@freebsd.org]On Behalf Of Peter Pentchev Sent: Thursday, 07 August 2003 07:57 To: Francisco Reyes Cc: Jacques A. Vidrine; FreeBSD Security List Subject: Re: Checking realpath file up to date On Thu, Aug 07, 2003 at 08:50:56AM -0400, Francisco Reyes wrote: > On Wed, 6 Aug 2003, Jacques A. Vidrine wrote: > > > Sounds like you cvsup'd RELENG_4, not RELENG_4_8. > > > I went back to the handbook to read the difference between these two. > If I understand correct RELENG_4 is basically the latest of the 4.X > branch. The RELENG_# are basically only security patches for a particular > 4.# release. Do I understand it correctly? If you meant RELENG_4_# where you said RELENG_#, then yes, this is correct. The RELENG_4 branch was not affected, since shortly after FreeBSD 4.8-RELEASE was out, a new version of realpath(3) was imported into the tree, and it did not have this problem. Thus, if you have a reasonably recent -STABLE (you seem to, since you mention realpath.c rev. 1.9.2.2), there's nothing to fear - not for this problem, at least. G'luck, Peter -- Peter Pentchev roam@ringlet.net roam@sbnd.net roam@FreeBSD.org PGP key: http://people.FreeBSD.org/~roam/roam.key.asc Key fingerprint FDBA FD79 C26F 3C51 C95E DF9E ED18 B68D 1619 4553 I am the meaning of this sentence.