From owner-freebsd-bugs  Mon Dec 16 10:53:05 1996
Return-Path: <owner-bugs>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.4/8.8.4) id KAA24234
          for bugs-outgoing; Mon, 16 Dec 1996 10:53:05 -0800 (PST)
Received: from scanner.worldgate.com (scanner.worldgate.com [198.161.84.3])
          by freefall.freebsd.org (8.8.4/8.8.4) with ESMTP id KAA24214;
          Mon, 16 Dec 1996 10:53:01 -0800 (PST)
Received: from znep.com (uucp@localhost) by scanner.worldgate.com (8.7.5/8.7.3) with UUCP id LAA19143; Mon, 16 Dec 1996 11:52:33 -0700 (MST)
Received: from localhost (marcs@localhost) by alive.ampr.ab.ca (8.7.5/8.7.3) with SMTP id LAA09039; Mon, 16 Dec 1996 11:21:08 -0700 (MST)
Date: Mon, 16 Dec 1996 11:21:08 -0700 (MST)
From: Marc Slemko <marcs@znep.com>
X-Sender: marcs@alive.ampr.ab.ca
To: Peter Radcliffe <pir@pir.net>
cc: freebsd-bugs@freebsd.org, freebsd-security@freebsd.org
Subject: Re: crontab security hole
In-Reply-To: <199612161534.PAA15934@pir.net>
Message-ID: <Pine.BSF.3.95.961216111558.9006A-100000@alive.ampr.ab.ca>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-bugs@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

Sorry.  Delete lines 36 and 37 of the patch.  That is delete the
middle two lines from the below section:

	*** crontab.c   1996/04/09 21:23:11     1.3.4.1
	--- crontab.c   1996/12/15 20:37:59     1.3.4.2
	***************
	*** 17,23 ****
	***************
	*** 167,173 ****

I manually removed the RCS $Id$ part of the patch and left an extra
two lines in.

On Mon, 16 Dec 1996, Peter Radcliffe wrote:

> > It was fixed in -stable the other day by pst.  The patch, pulled
> > from the CVS tree, follows.
> 
> yes, but trying to apply that patch to this 2.1.5 box
> gives me:
> --------------------------
> Patching file crontab/crontab.c using Plan A...
> patch: **** unexpected end of hunk at line 38
> --------------------------
> 
> Peter.
>