Date: Tue, 8 Jun 2004 12:26:36 -0700 From: "Kyle Mott" <kyle@xraided.net> To: "'Colin Percival'" <colin.percival@wadham.ox.ac.uk> Cc: freebsd-security@freebsd.org Subject: RE: FreeBSD Security Advisory FreeBSD-SA-04:12.jailroute Message-ID: <000801c44d8e$83e982f0$1414a8c0@kyle> In-Reply-To: <6.1.0.6.1.20040608105255.02e78ba0@popserver.sfu.ca>
next in thread | previous in thread | raw e-mail | index | archive | help
If we are running RELENG_4, will we still receive the fix? I ask because it says to upgrade to 4.10-RELEASE, RELENG_4_8, or RELENG_4_9. Am I misunderstanding the RELENG tags? -Kyle Mott > -----Original Message----- > From: owner-freebsd-security@freebsd.org [mailto:owner-freebsd- > security@freebsd.org] On Behalf Of Colin Percival > Sent: Tuesday, June 08, 2004 3:19 AM > To: freebsd-security@freebsd.org > Subject: Re: FreeBSD Security Advisory FreeBSD-SA-04:12.jailroute > > At 22:06 07/06/2004, FreeBSD Security Advisories wrote: > >FreeBSD-SA-04:12.jailroute Security > Advisory > >Affects: All FreeBSD 4.x releases prior to 4.10-RELEASE > > As a few people have noted, this should read "FreeBSD 4.8 and 4.9"; this > bug > never existed in earlier versions of FreeBSD. > That said, FreeBSD 4.7 and earlier are no longer officially supported, > and it > is highly recommended that people upgrade to a newer version, since there > have > been recent security advisories concerning issues to which earlier > releases are > still vulnerable. > > >V. Solution > > >Do one of the following: > > > >1) Upgrade your vulnerable system to 4.10-RELEASE, or to the RELENG_4_8 > >or RELENG_4_9 security branch dated after the correction date. > > > >OR > > > >2) Patch your present system: > > or, as usual, > > 3) If you are running an affected release, you can use FreeBSD Update: > # cd /usr/ports/security/freebsd-update && make all install > # cp /usr/local/etc/freebsd-update.conf.sample /usr/local/etc/freebsd- > update.conf > # /usr/local/sbin/freebsd-update fetch > # /usr/local/sbin/freebsd-update install > > For more details, see http://www.daemonology.net/freebsd-update/ . > > Note that this is something I'm providing personally; it is in no way > endorsed by the Security Officer or the Project as a whole. > > Colin Percival > > > _______________________________________________ > freebsd-security@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to "freebsd-security- > unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000801c44d8e$83e982f0$1414a8c0>