Subject: Re: Security Issues
To: None <current-users@netbsd.org>
From: None <itojun@iijlab.net>
List: current-users
Date: 08/01/2002 17:22:50
------- =_aaaaaaaaaa0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <23800.1028190164.1@itojun.org>

>On Thu, Aug 01, 2002 at 05:14:49PM +0900, itojun@iijlab.net wrote:
>> >I've seen last days three security advisories from FreeBSD (problems with 
>> >OpenSSL, pppd and rpc) but none from NetBSD. Is NetBSD unaffected by these 
>> >three bugs ?
>> 	yes for all, and advisories are under preparation.
>IMHO you meant to say NO, because we are affected by them.

	you are correct, we are affected for all 3 problems.

>But I didn't saw a commit for the pppd problem, so maybe we are only affected
>by the rpc and openssl one.

	you missed this one?

itojun


------- =_aaaaaaaaaa0
Content-Type: message/rfc822
Content-ID: <23800.1028190164.2@itojun.org>

	by coconut.itojun.org (Postfix) with SMTP id A78D14B24
	for <itojun@itojun.org>; Wed, 31 Jul 2002 23:59:48 +0900 (JST)
  by mail.netbsd.org with SMTP; 31 Jul 2002 14:59:12 -0000
	id A1398B004; Wed, 31 Jul 2002 17:59:11 +0300 (EEST)
From: Christos Zoulas <christos@netbsd.org>
Subject: CVS commit: basesrc/usr.sbin/pppd/pppd
To: source-changes@netbsd.org
Reply-To: christos@netbsd.org
Message-Id: <20020731145911.A1398B004@cvs.netbsd.org>
Date: Wed, 31 Jul 2002 17:59:11 +0300 (EEST)
Sender: source-changes-owner@netbsd.org


Module Name:	basesrc
Committed By:	christos
Date:		Wed Jul 31 14:59:11 UTC 2002

Modified Files:
	basesrc/usr.sbin/pppd/pppd: tty.c

Log Message:
don't try to chmod if fchmod fails when restoring the original tty modes.
It could cause a symlink race. Just report the fchmod failure. Reported
by itojun, found in FreeBSD.


To generate a diff of this commit:
cvs rdiff -r1.2 -r1.3 basesrc/usr.sbin/pppd/pppd/tty.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.


------- =_aaaaaaaaaa0--