From owner-freebsd-security Fri Jul 27 11:39:12 2001 Delivered-To: freebsd-security@freebsd.org Received: from obsecurity.dyndns.org (adsl-64-169-104-149.dsl.lsan03.pacbell.net [64.169.104.149]) by hub.freebsd.org (Postfix) with ESMTP id 4FBFF37B403 for ; Fri, 27 Jul 2001 11:39:09 -0700 (PDT) (envelope-from kris@obsecurity.org) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id 4E9B266E94; Fri, 27 Jul 2001 11:39:08 -0700 (PDT) Date: Fri, 27 Jul 2001 11:39:08 -0700 From: Kris Kennaway To: Matthew Emmerton Cc: security@FreeBSD.ORG Subject: Re: problem with telnetd patch Message-ID: <20010727113907.B31276@xor.obsecurity.org> References: <005301c1168f$cc478c60$1200a8c0@gsicomp.on.ca> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="NMuMz9nt05w80d4+" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <005301c1168f$cc478c60$1200a8c0@gsicomp.on.ca>; from matt@gsicomp.on.ca on Fri, Jul 27, 2001 at 07:32:20AM -0400 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --NMuMz9nt05w80d4+ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Jul 27, 2001 at 07:32:20AM -0400, Matthew Emmerton wrote: > [ please cc, not on security- ] >=20 > Folks, >=20 > I just updated one of my client's machines to RELENG_4_3, and attempted to > update telnetd. >=20 > I used: >=20 > cd /usr/src/secure/libexec/telnetd > make depend && make all install >=20 > which failed, complaining of unresolved Kerberos symbols. >=20 > To fix the problem, I had to add ${LIBKRB} and ${LIBCOM_ERR} to the DPADD > line of the Makefile, and -lkrb and -lcom_err to the LDADD line of the > Makefile. >=20 > The machine that I was upgrading was a clean install of 4.3-REL from a few > months ago, no cvsup's of any source since then. Any ideas why I was > running into this problem? You had previously built the kerberosIV telnetd and it was picking up the copy of libtelnet.a which it bogusly installs into /usr/lib. This was overlooked in the initial advisory. Kris --NMuMz9nt05w80d4+ Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE7YbVKWry0BWjoQKURAqdcAKDD4UvH9r4g+s1dDjNxzx0n+Lo/dgCaAgF/ obiBq1vFapxI4NjMYplFO8k= =Ldkf -----END PGP SIGNATURE----- --NMuMz9nt05w80d4+-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message