From owner-freebsd-security@FreeBSD.ORG  Mon Aug  4 01:50:34 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id BF6D937B401
	for <security@freebsd.org>; Mon,  4 Aug 2003 01:50:34 -0700 (PDT)
Received: from mailhost.rz.uni-karlsruhe.de (mailhost.rz.uni-karlsruhe.de
	[129.13.64.98])	by mx1.FreeBSD.org (Postfix) with ESMTP id 9F90843F85
	for <security@freebsd.org>; Mon,  4 Aug 2003 01:50:33 -0700 (PDT)
	(envelope-from cmt@rz.uni-karlsruhe.de)
Received: from rz-ewok.rz.uni-karlsruhe.de
	(postfix@rz-ewok.rz.uni-karlsruhe.de [129.13.80.10])
	by mailhost.rz.uni-karlsruhe.de with esmtp (Exim 3.36 #1)
	id 19jb2z-0006tk-00 for security@freebsd.org;
	Mon, 04 Aug 2003 10:50:29 +0200
Received: by rz-ewok.rz.uni-karlsruhe.de (Postfix, from userid 1005)
	id 5E4482C17E; Mon,  4 Aug 2003 10:50:19 +0200 (CEST)
Date: Mon, 4 Aug 2003 10:50:19 +0200
From: Christoph Moench-Tegeder <cmt@rz.uni-karlsruhe.de>
To: security@freebsd.org
Message-ID: <20030804085018.GA24017@rz-ewok.rz.uni-karlsruhe.de>
References: <200308040004.h7404VVL030671@freefall.freebsd.org>
	<3F2E1B42.8BDE2215@grosbein.pp.ru>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-15
Content-Disposition: inline
In-Reply-To: <3F2E1B42.8BDE2215@grosbein.pp.ru>
User-Agent: Mutt/1.4.1i
X-PGP-Key: RSA/2048 0xB816EBBD
X-PGP-Fingerprint: 89 2E 6D 05 95 B8 D7 1F 7C 1D C3 1E 95 A0 9B 5D
X-GPG: supported
Subject: Re: FreeBSD Security Advisory FreeBSD-SA-03:08.realpath
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Aug 2003 08:50:35 -0000

## Eugene Grosbein (eugen@grosbein.pp.ru):

> > Topic:          Single byte buffer overflow in realpath(3)
> Hi! I do not see fix for RELENG_4 not in this advisory nor in the Repo.
> Please MFC to RELENG_4 too.

: Affects:        All releases of FreeBSD up to and including 4.8-RELEASE
:                 and 5.0-RELEASE
:                 FreeBSD 4-STABLE prior to May 22 17:11:44 2003 UTC
                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

I guess rev. 1.9.2.1 of realpath.c fixed the problem more or less
by accident.

Regards,
Christoph

-- 
Antivirus-software is protection for people against yesterdays threats.         
Antivirus-software is protection for moronic users against themselves.          
Antivirus-software is crap. I say we kill the users and be done with it.
  -- kh@telecomplus.dk