From owner-freebsd-security@FreeBSD.ORG Mon Aug 4 02:36:20 2003 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1B1DC37B401 for ; Mon, 4 Aug 2003 02:36:20 -0700 (PDT) Received: from pd6mo3so.prod.shaw.ca (shawidc-mo1.cg.shawcable.net [24.71.223.10]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2080F43F75 for ; Mon, 4 Aug 2003 02:36:19 -0700 (PDT) (envelope-from colin.percival@wadham.ox.ac.uk) Received: from pd5mr3so.prod.shaw.ca (pd5mr3so-qfe3.prod.shaw.ca [10.0.141.144]) by l-daemon (iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003)) with ESMTP id <0HJ300JJC8I82Z@l-daemon> for security@freebsd.org; Mon, 04 Aug 2003 03:18:08 -0600 (MDT) Received: from pn2ml7so.prod.shaw.ca (pn2ml7so-qfe0.prod.shaw.ca [10.0.121.151]) by l-daemon (iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003)) with ESMTP id <0HJ300FZP8I8OS@l-daemon> for security@freebsd.org; Mon, 04 Aug 2003 03:18:08 -0600 (MDT) Received: from piii600.wadham.ox.ac.uk (h24-87-233-42.vc.shawcable.net [24.87.233.42]) by l-daemon (iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003)) with ESMTP id <0HJ300J408I7HC@l-daemon> for security@freebsd.org; Mon, 04 Aug 2003 03:18:08 -0600 (MDT) Date: Mon, 04 Aug 2003 02:17:57 -0700 From: Colin Percival In-reply-to: <200308041010.52904.lists@chrishowells.co.uk> X-Sender: cperciva@popserver.sfu.ca To: Chris Howells , security@freebsd.org Message-id: <5.0.2.1.1.20030804021401.02bce1f0@popserver.sfu.ca> MIME-version: 1.0 X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Content-type: text/plain; charset=us-ascii; format=flowed Content-transfer-encoding: 7BIT References: <5.0.2.1.1.20030804004417.02bcc920@popserver.sfu.ca> <5.0.2.1.1.20030804004417.02bcc920@popserver.sfu.ca> Subject: Re: FreeBSD Security Advisory FreeBSD-SA-03:08.realpath X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Aug 2003 09:36:20 -0000 At 10:10 04/08/2003 +0100, Chris Howells wrote: >On Monday 04 August 2003 08:54, Colin Percival wrote: > > Affected applications which were statically linked to the vulnerable > > code would still need to be recompiled. > >I'm just trying to work out which applications on my system are statically >linked or not. I'm sure someone else can offer better s >su-2.05b# ldd `which nfsd` >ldd: /sbin/nfsd: not a dynamic executable > >I running a server with stuff like nfs, samba, dhcpd, bind etc, and I'll CVSup >and rebuild the bast system and kernel, but so far I've only been using >binary packages... need to start using ports some time I suppose.