Re: FreeBSD Security Advisory FreeBSD-SA-04:01.mksnap_ffs

From: Colin Percival (colin.percival_at_wadham.ox.ac.uk)
Date: 01/30/04

  • Next message: Jacques A. Vidrine: "Re: FreeBSD Security Advisory FreeBSD-SA-04:01.mksnap_ffs" 
    Date: Fri, 30 Jan 2004 16:21:11 +0000
To: security@freebsd.org

    At 16:07 30/01/2004, FreeBSD Security Advisories wrote:
    >=============================================================================
    >FreeBSD-SA-04:01.mksnap_ffs Security Advisory
    >
    >V. Solution
    >Do one of the following:
    >
    >1) Upgrade your vulnerable system to the RELENG_5_1 or RELENG_5_2
    >security branch dated after the correction date.
    >
    >2) To patch your present system [...]

       As usual, there is a third option here: I'm building binary
    security updates and distributing them via the FreeBSD Update
    port (security/freebsd-update in the ports tree). For systems
    running an official RELEASE plus security patches, this provides
    an easier update method than building from source. To use these
    updates:

    1) Install FreeBSD Update and copy the sample configuration file
    into place:

    # cd /usr/ports/security/freebsd-update && make install clean
    # cp /usr/local/etc/freebsd-update.conf.sample
    /usr/local/etc/freebsd-update.conf

    2) Fetch and install updates:

    # /usr/local/sbin/freebsd-update fetch
    # /usr/local/sbin/freebsd-update install

       For more details see http://www.daemonology.net/freebsd-update/ .

       Note that this is something I'm providing personally; it is
    in no way endorsed by the Security Officer or the Project as
    a whole.

    Colin Percival

    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

  • Next message: Jacques A. Vidrine: "Re: FreeBSD Security Advisory FreeBSD-SA-04:01.mksnap_ffs"

    Relevant Pages

    • Re: SP3 problems ~ with IE7 ??? or not
      ... Are you referring to software associated with a free McAfee online scan or an installed McAfee application such as McAfee Security Center, McAfee VirusScan, or McAfee Internet Security? ... via Add/Remove Programs (make sure Show Updates box is checked at top ... Go to http://windowsupdate.microsoft.com and install any Critical ...
      (microsoft.public.windowsxp.general)
    • RE: SuS updates
      ... Windows Updates, but they are not downloading or installing the updates. ... there are updates available for download or for install. ... reboot, but will not be able to postpone the reboot. ... prospectus based upon the core principle concepts of security. ...
      (Focus-Microsoft)
    • Re: FreeBSD Security Survey
      ... It's hard to make a good case for automatic updates when manual ... I have three machines, all on different hardware ... Being a broke college student I don't think that's something I'd ever do to install updates on my boxes. ... I still say it would be best for all to ahve something in FreeBSD similar to Slackware where yuo just use wget or smoething to grab a patch .tgz file and use upgradepkg to install it without having to do this. ...
      (FreeBSD-Security)
    • RE: Re: FreeBSD Security Survey
      ... Should something like automatic security updates not be a goal? ... not every administrator updates their ... many FreeBSD versions will not be maintained for long periods ...
      (freebsd-stable)
    • RE: Re: FreeBSD Security Survey
      ... Should something like automatic security updates not be a goal? ... not every administrator updates their ... many FreeBSD versions will not be maintained for long periods ...
      (FreeBSD-Security)