Date: Wed, 29 Aug 2001 13:39:37 -0700 From: Kris Kennaway <kris@obsecurity.org> To: David C Mudie <mudie@digitaldeck.com> Cc: freebsd-questions@FreeBSD.ORG, security-officer@FreeBSD.org Subject: Re: FreeBSD Security Advisory FreeBSD-SA-01:57.sendmail Message-ID: <20010829133937.E75228@xor.obsecurity.org> In-Reply-To: <200108291653.f7TGr9D81068@digitaldeck.com>; from mudie@digitaldeck.com on Wed, Aug 29, 2001 at 09:53:09AM -0700 References: <200108272144.f7RLivL71152@freefall.freebsd.org> <200108291653.f7TGr9D81068@digitaldeck.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--OROCMA9jn6tkzFBc Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Aug 29, 2001 at 09:53:09AM -0700, David C Mudie wrote: >=20 > FreeBSD Security Advisories writes: > >=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D > >FreeBSD-SA-01:57 Security Advi= sory > >Topic: sendmail contains local root vulnerability > >... > > > >VI. Correction details > >The following is the sendmail $Id$ revision number of the file that > >was corrected for the supported branches of FreeBSD. The $Id$ > >revision number of the installed source can be examined using the > >ident(1) command. > > > > Revision Path > > 8.20.22.4 src/contrib/sendmail/src/trace.c > > >=20 > I am tracking RELENG_4_3 with anonynmous cvsup. After update, I see > # ls -alg /usr/src/contrib/sendmail/src/trace.c > -rw-r--r-- 1 root wheel 2025 Aug 28 14:40 /usr/src/contrib/sendmai= l/src/trace.c >=20 > # ident /usr/src/contrib/sendmail/src/trace.c > /usr/src/contrib/sendmail/src/trace.c: > $Id: trace.c,v 8.20.22.2 2000/09/17 17:04:27 gshapiro Exp $ >=20 > WebCVS shows that trace.c has been changed recently, but > the ident number has not. Am I missing something, or is the advisory inc= orrect? Not incorrect, but incomplete. Version 8.20.22.4 wasn't imported to RELENG_4_3, only the patch referenced in the advisory was applied, which didn't change the vendor version number. Kris --OROCMA9jn6tkzFBc Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE7jVMIWry0BWjoQKURAgN4AJ9lj0Ip1aNE4VVl49seUxuocw4p0wCgtHmO ddTTLhiGLyUPS8EFOgErWp8= =eR3x -----END PGP SIGNATURE----- --OROCMA9jn6tkzFBc-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010829133937.E75228>