Re: FreeBSD Security Advisory FreeBSD-SA-05:01.telnet

From: Will Yardley (freebsd-security_at_veggiechinese.net)
Date: 03/28/05

  • Next message: Colin Percival: "Re: FreeBSD Security Advisory FreeBSD-SA-05:01.telnet" 
    Date: Mon, 28 Mar 2005 13:24:08 -0800
To: freebsd-security@freebsd.org

    On Mon, Mar 28, 2005 at 07:52:14PM +0000, FreeBSD Security Advisories wrote:

    [ Not sure else where to follow up to - I don't want to bug the security
    team directly about this, so just writing the list for now ]

    > b) Execute the following commands as root:
    >
    > # cd /usr/src
    > # patch < /path/to/patch

    On my home machine (5.3-RELEASE) this failed - I had to go to
    /usr/src/contrib/telnet/telnet for the patch to apply.

    > c) Rebuild the operating system as described in
    > <URL:http://www.freebsd.org/doc/handbook/makeworld.html>.

    Just curious... why is it necessary to rebuild the whole operating
    system? Normally, the security advisories just have you rebuild the
    program in question - wouldn't that have sufficed here?

    w

    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

  • Next message: Colin Percival: "Re: FreeBSD Security Advisory FreeBSD-SA-05:01.telnet"

    Relevant Pages

    • Risks Digest 24.91
      ... ACM FORUM ON RISKS TO THE PUBLIC IN COMPUTERS AND RELATED SYSTEMS ... Adi Shamir's bug attack ... Security company e-mail undercuts user education ...
      (comp.risks)
    • Exim 3.34 and lower.
      ... Its a good time to announce that 2xs security LTD. decided to ... GDB is free software, covered by the GNU General Public License, and you ... will research and fix this bug. ... > the end of the string, reading garbage, causing a segfault, whatever. ...
      (Vuln-Dev)
    • Re: [Lit.] Buffer overruns - LONG
      ... effects of security bugs on the intended functionof the ... then I agree that techniques for reducing the impact of a bug ... overrun bug (its hazard) depends on the intended function of the ...
      (sci.crypt)
    • [UNIX] Bugzilla Unauthorized Bug Modification And Information Disclosure Vulnerabilities
      ... Get your security news from a reliable source. ... unauthorized bug modifications possible by a third party. ... Private User Comments and Attachment Summaries Leak In XML Bug Export ... Private Metadata Changes For Attachments Information Leak ...
      (Securiteam)
    • Re: Security researchers organization
      ... > The Sardonix.org security auditing web site was designed to ... Sardonix provides: ... prevent last year's Chunked Encoding bug? ... -> this provides a reason for individual team members to share their ...
      (NT-Bugtraq)