Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 27 Feb 1998 21:36:55 +0100 (MET)
From:      Guido van Rooij <guido@gvr.org>
To:        dima@best.net
Cc:        dima@best.net, eivind@yes.no, jkh@time.cdrom.com, cschuber@uumail.gov.bc.ca, tqbf@secnet.com, freebsd-security@FreeBSD.ORG, security-officer@FreeBSD.ORG
Subject:   Re: OpenBSD Security Advisory: mmap() Problem
Message-ID:  <199802272036.VAA06582@gvr.gvr.org>
In-Reply-To: <199802272025.MAA16117@burka.rdy.com> from Dima Ruban at "Feb 27, 98 12:25:27 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
Dima Ruban wrote:
> Guido van Rooij writes:
> > > > It's a major bug on their part.  I can't see much we can do about it,
> > > > beyond notifying them that the change will take place, and helping
> > > > them distribute announcements.
> > > 
> > > I already did that.
> > > 
> > 
> > And what was their reaction?
> 
> They said, that new release is gonna be in a few months. However, I've
> suggested them to release a binary patch that will patch server binaries.
> I even sent them a program that patches v4.1/v3.1 AX servers.
> I haven't heard from them ever since. This was about 2 hours ago.
> 
> I certainly hope that they actually will release a patch before the next
> release. At least it sounded like they will.

Perhaps it would be a good thing if we send a pointer to a possible
binary patch when sending out our advisory.

-Guido

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199802272036.VAA06582>