Re: security risk: ktrace(2) in FreeBSD prior to -current.
From: Brett Glass (brett@lariat.org)
Date: 07/01/02
- Next message: Dmitry S. Rzhavin: "snort + vlans"
- Previous message: Brett Glass: "Re: SSH Patches"
- In reply to: David Pick: "Re: security risk: ktrace(2) in FreeBSD prior to -current."
- Next in thread: Lupe Christoph: "Re: security risk: ktrace(2) in FreeBSD prior to -current."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 01 Jul 2002 10:30:44 -0600 To: David Pick <d.m.pick@qmul.ac.uk>, security@FreeBSD.ORG From: Brett Glass <brett@lariat.org>
At 08:43 AM 7/1/2002, David Pick wrote:
>At least we can build a binary update "package"
>for the "ports" version using a simple "make package"; it's
>harder for the version integrated into the base.
You can make a binary updater using the currently available
port. Just do
cd /usr/ports/security/openssh-portable && make -DOPENSSH_OVERWRITE_BASE package
Beware, though, that you'll also want to install the latest
OpenSSL "engine". I believe that you can make this into
a binary package as well.
>Please note that I have *not* asked for a binary update.
>I don't want to get flamed the way Brett does...
...for asking something reasonable? ;-)
Seriously: Please do ask. If we do not have up-to-date binary
packages, a large percentage of the new installs of FreeBSD
(both network installs and those from CD-ROM) will be vulnerable
from the start, even though the holes have long been identified.
This is not only unethical but also terrible for FreeBSD's
reputation.
Already, the Apache/FreeBSD worm is making the rounds. Why
allow new installs to be vulnerable?
--Brett
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
- Next message: Dmitry S. Rzhavin: "snort + vlans"
- Previous message: Brett Glass: "Re: SSH Patches"
- In reply to: David Pick: "Re: security risk: ktrace(2) in FreeBSD prior to -current."
- Next in thread: Lupe Christoph: "Re: security risk: ktrace(2) in FreeBSD prior to -current."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
