From owner-freebsd-questions Sun Jul 15 20: 7:16 2001 Delivered-To: freebsd-questions@freebsd.org Received: from wantadilla.lemis.com (wantadilla.lemis.com [192.109.197.80]) by hub.freebsd.org (Postfix) with ESMTP id C67AC37B405 for ; Sun, 15 Jul 2001 20:07:04 -0700 (PDT) (envelope-from grog@lemis.com) Received: by wantadilla.lemis.com (Postfix, from userid 1004) id D925D6ACBC; Mon, 16 Jul 2001 12:36:47 +0930 (CST) Date: Mon, 16 Jul 2001 12:36:47 +0930 From: Greg Lehey To: Metal Head Cc: freebsd-questions@FreeBSD.org Subject: Re: FreeBSD Security hole found Message-ID: <20010716123647.K24152@wantadilla.lemis.com> References: <20010716022553.8987.qmail@bsdmail.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010716022553.8987.qmail@bsdmail.org>; from high@bsdmail.org on Mon, Jul 16, 2001 at 10:25:53AM +0800 Organization: The FreeBSD Project Phone: +61-8-8388-8286 Fax: +61-8-8388-8725 Mobile: +61-418-838-708 WWW-Home-Page: http://www.FreeBSD.org/ X-PGP-Fingerprint: 6B 7B C3 8C 61 CD 54 AF 13 24 52 F8 6D A4 95 EF Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG [Format recovered--see http://www.lemis.com/email/email-format.html] Lines are uncomfortably long. On Monday, 16 July 2001 at 10:25:53 +0800, Metal Head wrote: > Hello, > > Please read this. I found it while surfing around. Please tell > me what you think. Thanks! > > http://www.astalavista.com/advisories/freebsd/071101_localroot.shtml I think the bottom line is the bottom line: Workaround/Soltution: As far as I know patches for this problem are commited for both -current and -stable. Greg -- When replying to this message, please copy the original recipients. If you don't, I may ignore the reply. For more information, see http://www.lemis.com/questions.html See complete headers for address and phone numbers To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message