From owner-freebsd-security  Mon Nov 20 21:48: 7 2000
Delivered-To: freebsd-security@freebsd.org
Received: from citusc17.usc.edu (citusc17.usc.edu [128.125.38.177])
	by hub.freebsd.org (Postfix) with ESMTP
	id 19A5037B4D7; Mon, 20 Nov 2000 21:48:01 -0800 (PST)
Received: (from kris@localhost)
	by citusc17.usc.edu (8.11.1/8.11.1) id eAL5msi92942;
	Mon, 20 Nov 2000 21:48:54 -0800 (PST)
	(envelope-from kris)
Date: Mon, 20 Nov 2000 21:48:53 -0800
From: Kris Kennaway <kris@freebsd.org>
To: Igor Roshchin <str@giganda.komkon.org>
Cc: security-officer@freebsd.org, security@freebsd.org
Subject: Re: FreeBSD Security Advisory: FreeBSD-SA-00:76.tcsh-csh
Message-ID: <20001120214853.B92862@citusc17.usc.edu>
References: <200011210306.WAA74232@giganda.komkon.org>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="bp/iNruPH9dso1Pn"
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <200011210306.WAA74232@giganda.komkon.org>; from str@giganda.komkon.org on Mon, Nov 20, 2000 at 10:06:45PM -0500
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


--bp/iNruPH9dso1Pn
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Nov 20, 2000 at 10:06:45PM -0500, Igor Roshchin wrote:

> In 3-stable (on ftp.freebsd.org) I find:
> -rw-r--r--  1 569  207  257477 Nov 18 15:16 ../All/tcsh-6.09.03.tgz
>=20
> Is it an updated version, or not ?
> The date is close, but the number is different,
> although the package has a date stamp when the problem was known
> (and fixed in some parts of the system)

No, this is the old, unfixed version. The version number must match or
exceed the version number given in the advisory.

> So, it is not completely clear if the packages are updated yet, or not.
> ( I hope I didn't miss the phrase that the packages might not be ready yet
> this time)

You didn't - I forgot to put it in this time. The new package will
probably be ready in a day or two, you can compile it from the port in
the meantime.

Kris

--bp/iNruPH9dso1Pn
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (FreeBSD)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAjoaDMUACgkQWry0BWjoQKX1swCfeYRQCo9jm53Js3ZEt02Rq+9V
r3oAoLg50ZdW3Tn2WMdnEuTvK0SnBwVn
=eLRi
-----END PGP SIGNATURE-----

--bp/iNruPH9dso1Pn--


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message