From owner-freebsd-security@FreeBSD.ORG Wed Apr 30 16:16:01 2008 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id BC8C81065677 for ; Wed, 30 Apr 2008 16:16:01 +0000 (UTC) (envelope-from lottamiata@yahoo.com) Received: from web83606.mail.sp1.yahoo.com (web83606.mail.sp1.yahoo.com [216.252.120.177]) by mx1.freebsd.org (Postfix) with SMTP id 82CF18FC18 for ; Wed, 30 Apr 2008 16:16:01 +0000 (UTC) (envelope-from lottamiata@yahoo.com) Received: (qmail 285 invoked by uid 60001); 30 Apr 2008 15:49:21 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type:Message-ID; b=QA+S023chZtaWuLijO+y7DKqnqXulqhi8tyojMThprufkIVr1p8tD0JVzvSrcDyogqkkdjwh/FE6cfsxkLkGwPJxHL1Tn36mIJjLRGDw4oiac58KErGPuWY++Ji+evC22iKSFO+2P5SDi1UOLrhqhIJG3pTIPVvbgkyDcJdhgW0=; X-YMail-OSG: ovowqPEVM1kJQaH1oJkO3VzL3KbWBn8xp5eYL4JNucN.LOUCvutZSPaatNru7baeOn4epGecXVrwq.ClaURvdu8dW_gpOfJM.YwiWA-- Received: from [67.187.175.170] by web83606.mail.sp1.yahoo.com via HTTP; Wed, 30 Apr 2008 08:49:21 PDT X-Mailer: YahooMailRC/902.40 YahooMailWebService/0.7.185 Date: Wed, 30 Apr 2008 08:49:21 -0700 (PDT) From: "Anthony J. Palik" To: freebsd-security@freebsd.org MIME-Version: 1.0 Message-ID: <682872.257.qm@web83606.mail.sp1.yahoo.com> X-Mailman-Approved-At: Wed, 30 Apr 2008 17:54:05 +0000 Content-Type: text/plain; charset=us-ascii X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: Anti-virus software for 7.0 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Apr 2008 16:16:01 -0000 Does anyone know where I can find anti-virus software for 7.0? I tried using Bitdefender's but it says it is not supported by 7.0 during installation. From owner-freebsd-security@FreeBSD.ORG Wed Apr 30 18:41:03 2008 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B31ED106564A for ; Wed, 30 Apr 2008 18:41:03 +0000 (UTC) (envelope-from rblayzor.bulk@inoc.net) Received: from mx0-b.inoc.net (mx0-b.inoc.net [64.246.130.28]) by mx1.freebsd.org (Postfix) with ESMTP id 3C4DC8FC1F for ; Wed, 30 Apr 2008 18:41:02 +0000 (UTC) (envelope-from rblayzor.bulk@inoc.net) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=inoc.net; h=Received:From:To:Subject:Date; b=2dDHfRlBDz+eByWD8JVHJAIap/9zsElg7ouaq6PFyB1/M/UreNnDlEf/d0Lj06sH+MQ7A9v9C2OhVIdyIileW8Os2eGHNtB9gRxJfzo3D+QZ7pUb+5YXrTkPnOM3NMDmkqEIrptCS9mbrEtBtMmLClnHGoDGSbAI2PyEZ530rpM=; Received: from void.ops.inoc.net (vanguard.noc.albyny.inoc.net [64.246.135.8]) by mx0-b.inoc.net (build v8.3.29) with ESMTP id 144189126-1941382 for multiple; Wed, 30 Apr 2008 18:20:53 +0000 (UTC) Message-Id: From: Robert Blayzor To: Anthony J. Palik In-Reply-To: <682872.257.qm@web83606.mail.sp1.yahoo.com> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v919.2) Date: Wed, 30 Apr 2008 14:20:53 -0400 References: <682872.257.qm@web83606.mail.sp1.yahoo.com> X-Mailer: Apple Mail (2.919.2) Cc: freebsd-security@freebsd.org Subject: Re: Anti-virus software for 7.0 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Apr 2008 18:41:03 -0000 On Apr 30, 2008, at 11:49 AM, Anthony J. Palik wrote: > Does anyone know where I can find anti-virus software for 7.0? I > tried using Bitdefender's but it says it is not supported by 7.0 > during installation. /usr/ports/security/clamav -- Robert Blayzor, BOFH INOC, LLC rblayzor@inoc.net http://www.inoc.net/~rblayzor/ Mac OS X. Because making Unix user-friendly is easier than debugging Windows. From owner-freebsd-security@FreeBSD.ORG Wed Apr 30 18:52:48 2008 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 00548106566B for ; Wed, 30 Apr 2008 18:52:47 +0000 (UTC) (envelope-from wxs@atarininja.org) Received: from syn.atarininja.org (syn.csh.rit.edu [129.21.60.158]) by mx1.freebsd.org (Postfix) with ESMTP id CB77D8FC12 for ; Wed, 30 Apr 2008 18:52:47 +0000 (UTC) (envelope-from wxs@atarininja.org) Received: by syn.atarininja.org (Postfix, from userid 1001) id 24C715C5C; Wed, 30 Apr 2008 14:39:50 -0400 (EDT) Date: Wed, 30 Apr 2008 14:39:50 -0400 From: Wesley Shields To: "Anthony J. Palik" Message-ID: <20080430183950.GH55116@atarininja.org> References: <682872.257.qm@web83606.mail.sp1.yahoo.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <682872.257.qm@web83606.mail.sp1.yahoo.com> User-Agent: Mutt/1.5.17 (2007-11-01) Cc: freebsd-security@freebsd.org Subject: Re: Anti-virus software for 7.0 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Apr 2008 18:52:48 -0000 On Wed, Apr 30, 2008 at 08:49:21AM -0700, Anthony J. Palik wrote: > Does anyone know where I can find anti-virus software for 7.0? I > tried using Bitdefender's but it says it is not supported by 7.0 > during installation. security/clamav and security/clamav-devel are two that come to mind. -- WXS From owner-freebsd-security@FreeBSD.ORG Wed Apr 30 19:49:08 2008 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 318EE106566C for ; Wed, 30 Apr 2008 19:49:08 +0000 (UTC) (envelope-from fabian@wenks.ch) Received: from batman.home4u.ch (6to4.home4u.ch [IPv6:2002:d908:d3e2::1]) by mx1.freebsd.org (Postfix) with ESMTP id A98808FC0C for ; Wed, 30 Apr 2008 19:49:07 +0000 (UTC) (envelope-from fabian@wenks.ch) Received: from flashback.wenks.ch (flashback.wenks.ch [62.2.85.181]) (authenticated bits=0) by batman.home4u.ch (8.13.1/8.13.1) with ESMTP id m3UJn3PO071052 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Wed, 30 Apr 2008 21:49:05 +0200 (CEST) (envelope-from fabian@wenks.ch) Message-ID: <4818CD2A.6070001@wenks.ch> Date: Wed, 30 Apr 2008 21:48:58 +0200 From: Fabian Wenk User-Agent: Thunderbird 2.0.0.12 (Macintosh/20080213) MIME-Version: 1.0 To: freebsd-security@freebsd.org References: <682872.257.qm@web83606.mail.sp1.yahoo.com> In-Reply-To: <682872.257.qm@web83606.mail.sp1.yahoo.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: by amavisd-new Subject: Re: Anti-virus software for 7.0 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Apr 2008 19:49:08 -0000 Hello Anthony On 30.04.08 17:49, Anthony J. Palik wrote: > Does anyone know where I can find anti-virus software for 7.0? > I tried using Bitdefender's but it says it is not supported by > 7.0 during installation. Did you try with installed misc/compat6x from the Ports? I did use some legacy binary only software which was built for FreeBSD 4.x on 5.x and 6.x systems with the corresponding Ports. Eventually you also need the 32-bit libraries, if the software itself is not built for 64-bit. See /usr/src/tools/lib32/README for more informations. Depending on how the software will be integrated into the system, eg. doing virus check on every file access, then it may not work. bye Fabian From owner-freebsd-security@FreeBSD.ORG Wed Apr 30 22:00:16 2008 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 330BF10656B8 for ; Wed, 30 Apr 2008 22:00:15 +0000 (UTC) (envelope-from derek@computinginnovations.com) Received: from betty.computinginnovations.com (mail.computinginnovations.com [64.81.227.250]) by mx1.freebsd.org (Postfix) with ESMTP id 3AAD78FC39 for ; Wed, 30 Apr 2008 22:00:15 +0000 (UTC) (envelope-from derek@computinginnovations.com) Received: from p28.computinginnovations.com (dhcp-10-20-30-100.computinginnovations.com [10.20.30.100]) (authenticated bits=0) by betty.computinginnovations.com (8.14.2/8.14.2) with ESMTP id m3ULxxRF058543; Wed, 30 Apr 2008 17:00:00 -0500 (CDT) (envelope-from derek@computinginnovations.com) Message-Id: <6.0.0.22.2.20080430170120.0255f648@mail.computinginnovations.com> X-Sender: derek@mail.computinginnovations.com X-Mailer: QUALCOMM Windows Eudora Version 6.0.0.22 Date: Wed, 30 Apr 2008 17:01:43 -0500 To: "Anthony J. Palik" , freebsd-security@freebsd.org From: Derek Ragona In-Reply-To: <682872.257.qm@web83606.mail.sp1.yahoo.com> References: <682872.257.qm@web83606.mail.sp1.yahoo.com> Mime-Version: 1.0 X-Antivirus: avast! (VPS 080430-1, 04/30/2008), Outbound message X-Antivirus-Status: Clean X-Virus-Scanned: ClamAV 0.93/6806/Wed Apr 16 15:50:16 2008 on betty.computinginnovations.com X-Virus-Status: Clean X-ComputingInnovations-MailScanner-Information: Please contact the ISP for more information X-MailScanner-ID: m3ULxxRF058543 X-ComputingInnovations-MailScanner: Found to be clean X-ComputingInnovations-MailScanner-From: derek@computinginnovations.com X-Spam-Status: No Content-Type: text/plain; charset="us-ascii"; format=flowed X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: Subject: Re: Anti-virus software for 7.0 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Apr 2008 22:00:16 -0000 At 10:49 AM 4/30/2008, Anthony J. Palik wrote: >Does anyone know where I can find anti-virus software for 7.0? I tried >using Bitdefender's but it says it is not supported by 7.0 during installation. I use clamav in the ports. -Derek -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From owner-freebsd-security@FreeBSD.ORG Thu May 1 08:55:50 2008 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1E9591065676 for ; Thu, 1 May 2008 08:55:50 +0000 (UTC) (envelope-from gunther.mayer@googlemail.com) Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.184]) by mx1.freebsd.org (Postfix) with ESMTP id A2AE68FC1C for ; Thu, 1 May 2008 08:55:49 +0000 (UTC) (envelope-from gunther.mayer@googlemail.com) Received: by nf-out-0910.google.com with SMTP id h3so422607nfh.33 for ; Thu, 01 May 2008 01:55:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:user-agent:mime-version:to:subject:content-type:content-transfer-encoding:from; bh=M8YUZdg0Hki4oPt/RnSqWSjcoWPIlnOU4QUTRTosLnk=; b=iSZYHguMQ3FokYidIMduTXbYGcm+xzYqf5nhY03SQxTCLzM2Kl1pYTJTnNZ82oYTvEyFZKNBa6LGZgJTMol8Q9ehrAqVkuxnbAWIXUEYWTsZ6IDQuTlbU/8kBoAuDPj4QnJx2rufoE459NGKiaXkbP4M3ZslsLzIAxgUjLC6wlk= DomainKey-Signature: a=rsa-sha1; c=nofws; d=googlemail.com; s=gamma; h=message-id:date:user-agent:mime-version:to:subject:content-type:content-transfer-encoding:from; b=FuUXVNcL229vzaeCidygGbj7uh8+jaTW5RDGwjqCzv1k1okaYKfpjzJkPAlkn/HqMjFi14vigf5XXtR0lhVDTXxsrM3/iD3dihEa59yDeMeS2lLCX9GWepskG4NB4n5zH5Z5t408KKZdcOJ9JUFLxskU7w9RnSMkhL20JY92uA4= Received: by 10.210.124.8 with SMTP id w8mr1620117ebc.108.1209630470058; Thu, 01 May 2008 01:27:50 -0700 (PDT) Received: from ?172.25.0.155? ( [41.245.156.120]) by mx.google.com with ESMTPS id c4sm19535497nfi.13.2008.05.01.01.27.47 (version=TLSv1/SSLv3 cipher=RC4-MD5); Thu, 01 May 2008 01:27:49 -0700 (PDT) Message-ID: <48197EDD.7030308@gmail.com> Date: Thu, 01 May 2008 10:27:09 +0200 User-Agent: Thunderbird 2.0.0.12 (X11/20080227) MIME-Version: 1.0 To: freebsd-security@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit From: Gunther Mayer X-Mailman-Approved-At: Thu, 01 May 2008 11:21:35 +0000 Subject: validity of php 5.2.1 vulnerability X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 May 2008 08:55:50 -0000 Hi there, Some days ago there was an integer overflow vulnerability posted for php 5.2.1 and earlier (http://www.freebsd.org/ports/portaudit/f6377f08-12a7-11dd-bab7-0016179b2dd5.html). I immediately upgraded my php to 5.2.1_1 but portaudit still complains that the vulnerability still exists: [root@myserver ~]# portaudit -a Affected package: php5-5.2.5_1 Type of problem: php -- integer overflow vulnerability. Reference: 1 problem(s) in your installed packages found. You are advised to update or deinstall the affected package(s) immediately. However, I cannot upgrade any further as 5.2.5_1 *is* the version that was supposed to fix this: [root@myserver ~]# portupgrade -nv php5 ---> Session started at: Thu, 01 May 2008 10:19:33 +0200 ** No need to upgrade 'php5-5.2.5_1' (>= php5-5.2.5_1). (specify -f to force) ---> ** Upgrade tasks 1: 0 done, 1 ignored, 0 skipped and 0 failed ---> Listing the results (+:done / -:ignored / *:skipped / !:failed) - lang/php5 (php5-5.2.5_1) ---> Packages processed: 0 done, 1 ignored, 0 skipped and 0 failed ---> Session ended at: Thu, 01 May 2008 10:19:36 +0200 (consumed 00:00:02) Looking closer at the information given in the above URL the vulnerability specifies that all "php5 >0" is affected, which to me means that all php5 versions until all eternity will be marked vulnerable, not only those <= 5.2.1. Can somebody please fix the CVE or tell me what I'm doing wrong? I don't want to get into the habit of ignoring portaudit reports as that's clearly *bad* practise. Gunther From owner-freebsd-security@FreeBSD.ORG Thu May 1 18:09:38 2008 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 933191065671 for ; Thu, 1 May 2008 18:09:38 +0000 (UTC) (envelope-from robert@ml.erje.net) Received: from smtpout-2.iphouse.net (smtpout-2.iphouse.net [216.250.188.191]) by mx1.freebsd.org (Postfix) with ESMTP id 60BA78FC20 for ; Thu, 1 May 2008 18:09:38 +0000 (UTC) (envelope-from robert@ml.erje.net) Received: from smtpout-2.iphouse.net (localhost [127.0.0.1]) by outbound-clamsmtpd.iphouse.net (Postfix) with ESMTP id 2D43C2AC533; Thu, 1 May 2008 12:55:11 -0500 (CDT) Received: from ziemel.erje.net (erje.net [80.126.62.176]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by smtpout-2.iphouse.net (Postfix) with ESMTP id D61BD2AC532; Thu, 1 May 2008 12:55:10 -0500 (CDT) Received: from ismet.erje.net (ismet.erje.net [IPv6:2001:888:1f33::8e45:5e]) by ziemel.erje.net (PostFix 2.5.0) with ESMTP id 2C493CA091F; Thu, 1 May 2008 19:54:38 +0200 (CEST) Received: (from robert@localhost) by ismet.erje.net (8.14.2/8.14.2/Submit) id m41Hsb9v035329; Thu, 1 May 2008 19:54:37 +0200 (CEST) (envelope-from robert@ml.erje.net) X-Authentication-Warning: ismet.erje.net: robert set sender to robert@ml.erje.net using -f Date: Thu, 1 May 2008 19:54:37 +0200 From: Robert Joosten To: "Anthony J. Palik" Message-ID: <20080501175436.GB806@iphouse.com> References: <682872.257.qm@web83606.mail.sp1.yahoo.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <682872.257.qm@web83606.mail.sp1.yahoo.com> User-Agent: Mutt/1.5.17 (2007-11-01) X-ziemel.erje.net-MailScanner: Ok, found to be clean X-Spam-Status: No X-Virus-Scanned: ClamAV using ClamSMTP Cc: freebsd-security@freebsd.org Subject: Re: Anti-virus software for 7.0 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 May 2008 18:09:38 -0000 Hi, > Does anyone know where I can find anti-virus software for 7.0? I tried > using Bitdefender's but it says it is not supported by 7.0 during > installation. I installed bitdefender v7.60428 some time ago. I today upgraded that specific box to releng_7_0 and bitdefender runs fine. You say 'installing'. I downloaded a tarball and unpacked that to /opt/bitdefender . Iirc I grabbed a evaluation version from their site. Hth. Cheers, Robert From owner-freebsd-security@FreeBSD.ORG Sat May 3 13:08:22 2008 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A5984106566C for ; Sat, 3 May 2008 13:08:22 +0000 (UTC) (envelope-from infofarmer@FreeBSD.org) Received: from heka.cenkes.org (heka.cenkes.org [208.79.80.110]) by mx1.freebsd.org (Postfix) with ESMTP id 8FEEE8FC0A for ; Sat, 3 May 2008 13:08:22 +0000 (UTC) (envelope-from infofarmer@FreeBSD.org) Received: from amilo.cenkes.org (ppp85-140-149-58.pppoe.mtu-net.ru [85.140.149.58]) (Authenticated sender: sat) by heka.cenkes.org (Postfix) with ESMTPSA id 54344242F8DB; Sat, 3 May 2008 16:51:18 +0400 (MSD) Date: Sat, 3 May 2008 16:51:14 +0400 From: Andrew Pantyukhin To: Gunther Mayer Message-ID: <20080503125112.GF92161@amilo.cenkes.org> References: <48197EDD.7030308@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <48197EDD.7030308@gmail.com> X-OS: FreeBSD 8.0-CURRENT amd64 User-Agent: Mutt/1.5.17 (2007-11-01) Cc: freebsd-security@freebsd.org Subject: Re: validity of php 5.2.1 vulnerability X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: infofarmer@FreeBSD.org List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 May 2008 13:08:22 -0000 On Thu, May 01, 2008 at 10:27:09AM +0200, Gunther Mayer wrote: > Hi there, > > Some days ago there was an integer overflow vulnerability posted for php > 5.2.1 and earlier You mean 5.2.5. 5.2.5_1 fixed a different kind of problem. 5.2.6 has just been committed; update your ports tree, please. Yes, there was a time window between the advisory and the commit, when you could do nothing but wait (or get the relevant patch from the PHP project). We're sorry to have kept you waiting.