From owner-freebsd-security  Mon Jan 14 14:49:20 2002
Delivered-To: freebsd-security@freebsd.org
Received: from libertad.univalle.edu.co (libertad.univalle.edu.co [200.68.158.11])
	by hub.freebsd.org (Postfix) with ESMTP id 7063337B404
	for <freebsd-security@FreeBSD.ORG>; Mon, 14 Jan 2002 14:49:09 -0800 (PST)
Received: from libertad.univalle.edu.co (buliwyf@localhost.univalle.edu.co [127.0.0.1])
	by libertad.univalle.edu.co (8.12.1/8.12.1) with ESMTP id g0EMuqLB093528
	for <freebsd-security@FreeBSD.ORG>; Mon, 14 Jan 2002 17:56:52 -0500 (COT)
Received: from localhost (buliwyf@localhost)
	by libertad.univalle.edu.co (8.12.1/8.12.1/Submit) with ESMTP id g0EMupXc093525
	for <freebsd-security@FreeBSD.ORG>; Mon, 14 Jan 2002 17:56:51 -0500 (COT)
Date: Mon, 14 Jan 2002 17:56:51 -0500 (COT)
From: Buliwyf McGraw <buliwyf@libertad.univalle.edu.co>
To: freebsd-security@FreeBSD.ORG
Subject: gets() is unsafe
Message-ID: <Pine.BSF.4.43.0201141750380.93171-100000@libertad.univalle.edu.co>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


 Hi... i was installing several applications (php,xmms,etc) on my
 FreeBSD 4.4 server and i got the next message a lot of times when
 i was compiling:

/usr/lib/compat/libc.so.3: warning: mktemp() possibly used unsafely;
consider using mkstemp()
/usr/lib/compat/libc.so.3: warning: tmpnam() possibly used unsafely;
consider using mkstemp()
/usr/lib/compat/libc.so.3: warning: this program uses gets(), which is
unsafe.
/usr/lib/compat/libc.so.3: WARNING!  setkey(3) not present in the system!
/usr/lib/compat/libc.so.3: WARNING!  des_setkey(3) not present in the
system!
/usr/lib/compat/libc.so.3: WARNING!  encrypt(3) not present in the system!
/usr/lib/compat/libc.so.3: WARNING!  des_cipher(3) not present in the
system!
/usr/lib/compat/libc.so.3: warning: this program uses f_prealloc(), which
is not recommended.

 I want to fix this... what i can do?
 Thanks for any help.

=======================================================================
 Buliwyf McGraw
 Administrador del Servidor Libertad
 Centro de Servicios de Informacion
 Universidad del Valle
=======================================================================


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message