From owner-freebsd-security@FreeBSD.ORG  Thu Sep 18 06:27:24 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id A768F16A4B3
	for <freebsd-security@freebsd.org>;
	Thu, 18 Sep 2003 06:27:24 -0700 (PDT)
Received: from bunrab.catwhisker.org
	(adsl-63-193-123-122.dsl.snfc21.pacbell.net [63.193.123.122])
	by mx1.FreeBSD.org (Postfix) with ESMTP id DB42843F85
	for <freebsd-security@freebsd.org>;
	Thu, 18 Sep 2003 06:27:21 -0700 (PDT)
	(envelope-from david@catwhisker.org)
Received: from bunrab.catwhisker.org (localhost [127.0.0.1])
	by bunrab.catwhisker.org (8.12.9/8.12.9) with ESMTP id h8IDRHnt017791;
	Thu, 18 Sep 2003 06:27:17 -0700 (PDT)
	(envelope-from david@bunrab.catwhisker.org)
Received: (from david@localhost)
	by bunrab.catwhisker.org (8.12.9/8.12.9/Submit) id h8IDRD5F017790;
	Thu, 18 Sep 2003 06:27:13 -0700 (PDT)
	(envelope-from david)
Date: Thu, 18 Sep 2003 06:27:13 -0700 (PDT)
From: David Wolfskill <david@catwhisker.org>
Message-Id: <200309181327.h8IDRD5F017790@bunrab.catwhisker.org>
To: berta@beco.hu, freebsd-security@freebsd.org
In-Reply-To: <009101c37dda$b7d97450$05e3a8c0@nt>
Subject: Re: FreeBSD Security Advisory FreeBSD-SA-03:12.openssh
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 18 Sep 2003 13:27:24 -0000

>From: "berta" <berta@beco.hu>
>To: <freebsd-security@freebsd.org>
>Date: Thu, 18 Sep 2003 13:48:02 +0200
>Subject: Re: FreeBSD Security Advisory FreeBSD-SA-03:12.openssh

>Is there a solution for the patch on freebsd boxes where
>I do not keep any sources eg. the /usr/src is empty?

Certainly.

My "production" FreeBSD boxes here at home do not have sources.

I build the software for them on a separate ("build") machine, then do
NFS installs.

As far as what is suitable for your environment, much depends on how you
installed on those machines, and how you designed your environment to
accomodate subsequent updates.

Peace,
david
-- 
David H. Wolfskill				david@catwhisker.org
If you want true virus-protection for your PC, install a non-Microsoft OS
on it.  Plausible candidates include FreeBSD, Linux, NetBSD, OpenBSD, and
Solaris (in alphabetical order).