From owner-freebsd-questions Thu Dec 16 10:46:59 1999 Delivered-To: freebsd-questions@freebsd.org Received: from gate.hsag.com (gate.hsag.com [209.180.144.14]) by hub.freebsd.org (Postfix) with SMTP id D1A2415090 for ; Thu, 16 Dec 1999 10:46:57 -0800 (PST) (envelope-from SWorthington@hsag.com) Received: (qmail 22475 invoked from network); 16 Dec 1999 18:32:03 -0000 Received: from unknown (HELO internal.hsag.com) (192.168.83.9) by 192.168.83.5 with SMTP; 16 Dec 1999 18:32:03 -0000 Received: from AZPRO-Message_Server by internal.hsag.com with Novell_GroupWise; Thu, 16 Dec 1999 11:49:02 -0700 Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.2.1 Date: Thu, 16 Dec 1999 11:48:37 -0700 From: "Scott Worthington" To: Subject: Re: CERT Advisory CA-99.15 Buffer Overflows in SSH and RSAREF2 Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG As of December 14, 1999, it looks like the port rsaref, found in /usr/ports/security/rsaref, has been fixed. It successfully builds now without the patch errors. Thanks goes out to the rsaref port maintainer. >>> "Scott Worthington" 12/14/99 09:51AM >>> ... My /usr/src are cvsup'ed every evening in addition to /usr/ports. 'make world' was performed Monday, Dec 13 and kernel is 3.4-RC. I have 'make deinstall' rsaref-2.0 and attempted to=20 'make reinstall' but I get this error: =3D=3D=3D> Patching for rsaref-2.0 =3D=3D=3D> Applying FreeBSD patches for rsaref-2.0 Ignoring previously applied (or reversed) patch. 1 out of 1 hunks ignored--saving rejects to rsaref.h.rej *** Error code 1 Stop. This error was generated after an initial 4 out of 4 hunks ignored and 'make reinstall' was performed again. The error can be generated on machines that had rsaref previously installed as well as machines that never had rsaref installed. Are the patches for /usr/ports/security/rsaref broken now? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message