From owner-freebsd-security Fri Nov 15 9:24:22 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id ED00B37B432 for ; Fri, 15 Nov 2002 09:24:14 -0800 (PST) Received: from gw.nectar.cc (gw.nectar.cc [208.42.49.153]) by mx1.FreeBSD.org (Postfix) with ESMTP id 610D943E77 for ; Fri, 15 Nov 2002 09:24:14 -0800 (PST) (envelope-from nectar@nectar.cc) Received: from madman.nectar.cc (madman.nectar.cc [10.0.1.111]) by gw.nectar.cc (Postfix) with ESMTP id EABB195; Fri, 15 Nov 2002 11:24:13 -0600 (CST) Received: by madman.nectar.cc (Postfix, from userid 1001) id F13D0137BDD; Fri, 15 Nov 2002 11:24:12 -0600 (CST) Date: Fri, 15 Nov 2002 11:24:12 -0600 From: "Jacques A. Vidrine" To: takanyon Cc: security@FreeBSD.ORG Subject: Re: ANNOUNCE: FreeBSD Security Advisory FreeBSD-SA-02:41.smrsh Message-ID: <20021115172412.GI66445@madman.nectar.cc> References: <20021115132158.939E.TAK@big.or.jp> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20021115132158.939E.TAK@big.or.jp> X-Url: http://www.celabo.org/ User-Agent: Mutt/1.5.1i-ja.1 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Fri, Nov 15, 2002 at 01:27:48PM +0900, takanyon wrote: > > > > -----BEGIN PGP SIGNED MESSAGE----- > > > > ============================================================================= > > FreeBSD-SA-02:41.smrsh Security Advisory > > The FreeBSD Project > > > b) Execute the following commands as root: > > > > # cd /usr/src > > # patch < /path/to/patch > > # cd /usr/src/usr.sbin/sendmail > > # make depend && make && make install > > Now, isn't smrsh installed? I know :-( The advisory on the FTP server has the correct instructions (or will... it may not have been mirrored from ftp-master yet). The correct patch instructions are: ------ 2) To patch your present system: The following patch has been verified to apply to FreeBSD 4.4, FreeBSD 4.5, and FreeBSD 4.6 systems. a) Download the relevant patch from the location below, and verify the detached PGP signature using your PGP utility. [For FreeBSD 4.6 systems] # fetch ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-02:41/smrsh.patch # fetch ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-02:41/smrsh.patch.asc [For FreeBSD 4.3, 4.4, and 4.5 systems] # fetch ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-02:41/smrsh2.patch # fetch ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-02:41/smrsh2.patch.asc b) Execute the following commands as root: # cd /usr/src # patch < /path/to/patch [The following two steps apply only to FreeBSD 4.6 systems.] # cd /usr/src/lib/libsm # make depend && make # cd /usr/src/lib/libsmutil # make depend && make # cd /usr/src/libexec/smrsh # make depend && make && make install ------ Cheers, -- Jacques A. Vidrine http://www.celabo.org/ NTT/Verio SME . FreeBSD UNIX . Heimdal Kerberos jvidrine@verio.net . nectar@FreeBSD.org . nectar@kth.se To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message