Subject: Re: Security Issues
To: None <current-users@netbsd.org>
From: None <itojun@iijlab.net>
List: current-users
Date: 08/01/2002 17:22:50
------- =_aaaaaaaaaa0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <23800.1028190164.1@itojun.org>
>On Thu, Aug 01, 2002 at 05:14:49PM +0900, itojun@iijlab.net wrote:
>> >I've seen last days three security advisories from FreeBSD (problems with
>> >OpenSSL, pppd and rpc) but none from NetBSD. Is NetBSD unaffected by these
>> >three bugs ?
>> yes for all, and advisories are under preparation.
>IMHO you meant to say NO, because we are affected by them.
you are correct, we are affected for all 3 problems.
>But I didn't saw a commit for the pppd problem, so maybe we are only affected
>by the rpc and openssl one.
you missed this one?
itojun
------- =_aaaaaaaaaa0
Content-Type: message/rfc822
Content-ID: <23800.1028190164.2@itojun.org>
by coconut.itojun.org (Postfix) with SMTP id A78D14B24
for <itojun@itojun.org>; Wed, 31 Jul 2002 23:59:48 +0900 (JST)
by mail.netbsd.org with SMTP; 31 Jul 2002 14:59:12 -0000
id A1398B004; Wed, 31 Jul 2002 17:59:11 +0300 (EEST)
From: Christos Zoulas <christos@netbsd.org>
Subject: CVS commit: basesrc/usr.sbin/pppd/pppd
To: source-changes@netbsd.org
Reply-To: christos@netbsd.org
Message-Id: <20020731145911.A1398B004@cvs.netbsd.org>
Date: Wed, 31 Jul 2002 17:59:11 +0300 (EEST)
Sender: source-changes-owner@netbsd.org
Module Name: basesrc
Committed By: christos
Date: Wed Jul 31 14:59:11 UTC 2002
Modified Files:
basesrc/usr.sbin/pppd/pppd: tty.c
Log Message:
don't try to chmod if fchmod fails when restoring the original tty modes.
It could cause a symlink race. Just report the fchmod failure. Reported
by itojun, found in FreeBSD.
To generate a diff of this commit:
cvs rdiff -r1.2 -r1.3 basesrc/usr.sbin/pppd/pppd/tty.c
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
------- =_aaaaaaaaaa0--