From owner-freebsd-security Mon Jul 30 18:24:18 2001 Delivered-To: freebsd-security@freebsd.org Received: from obsecurity.dyndns.org (adsl-63-207-60-69.dsl.lsan03.pacbell.net [63.207.60.69]) by hub.freebsd.org (Postfix) with ESMTP id 9707137B401 for ; Mon, 30 Jul 2001 18:24:14 -0700 (PDT) (envelope-from kris@obsecurity.org) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id 96F0166B39; Mon, 30 Jul 2001 18:24:13 -0700 (PDT) Date: Mon, 30 Jul 2001 18:24:13 -0700 From: Kris Kennaway To: Vladimir Cc: Chris , freebsd-security@FreeBSD.ORG Subject: Re: FreeBSD Security Advisory FreeBSD-SA-01:51.openssl Message-ID: <20010730182412.B62969@xor.obsecurity.org> References: <3B66047A.9853EC9A@redshells.net> <20010730221722.L68357-100000@vl7.net> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="tsOsTdHNUZQcU9Ye" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010730221722.L68357-100000@vl7.net>; from fox@vl7.net on Mon, Jul 30, 2001 at 10:24:03PM -0300 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --tsOsTdHNUZQcU9Ye Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Jul 30, 2001 at 10:24:03PM -0300, Vladimir wrote: > Hi, Chris! >=20 > You have just to change your password after update, but before you have to > login :( >=20 > I logged in to the system by "open" host in my ".rhosts". "password" > problem did not touched users that has made after any updates in > "login.conf". >=20 > I think better solution, make "passwd" after update!! I'm at a loss as to how you guys are seeing this. Did you try and apply the patch to something in lib/libcrypt instead? That could certainly mess up your ability to log in to the system, although I'm surprised any of the patch hunks would have actually compiled. Kris --tsOsTdHNUZQcU9Ye Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE7Zgi8Wry0BWjoQKURAk9rAKDu2YUZARD3S8n7c0xjhngwG9dZIgCbBlhl lQl51k5OKcvIF3jxdvDFY6M= =NQ+z -----END PGP SIGNATURE----- --tsOsTdHNUZQcU9Ye-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message