Re: NetBSD Security Advisory 2014-006

["David Lord" <netbsd%lordynet.org@localhost>]

On 16 Jun 2014 at 18:53, Ray Phillips wrote:

> Since there aren't going to be binaries containing the latests fixes 
> to ssh on nyftp.netbsd.org for a while, would someone post step by 
> step instructions to get the updated source code, compile it and 
> replace the faulty pieces of NetBSD please?  The advisory just says 
> "Update src and rebuild and install." which is a bit too vague for me.
> 
> The machines I'm responsible for are running NetBSD/i386 6.1.4.  It 
> seems the latest vulnerabilites are serious enough that machines 
> shouldn't be left running with them, so I'd rather not wait until 
> 6.1.5 is released to repair them.
> 

Hi

I've been using sysutils/sysbuild + sysutils/sysbuild-user
from pkgsrc. The package is still broken but only requires
${SYSBUILD_BINDIR="/usr/pkg"} to point to /usr/pkg/bin.

I use the default incremental builds which are quite fast
after the first pass. Only downside for me is that each of
my /home/sysbuild/nbsd-ver_arch/ directories needs > 20G
disk space. It's probably possible to run multiple 
ver/arch from a single directory but my build pc with 
2G ram ground to a halt with all swap+memory used up.

  
David

> 
> Ray