Subject: Re: telnetd core
To: Wojciech Puchar <wojtek@tensor.3miasto.net>
From: Bruno Saverio Delbono <Bruno.S.Delbono@wf0.com>
List: netbsd-users
Date: 12/30/2002 13:45:23
At 09:31 PM 12/30/2002 +0100, Wojciech Puchar wrote:
>/usr/libexec/telnetd:
>      $NetBSD: crt0.c,v 1.11 2000/06/14 22:52:49 cgd Exp $
>      $NetBSD: authenc.c,v 1.6.4.2 2001/07/29 04:12:51 jhawk Exp $
>      $NetBSD: global.c,v 1.7 1997/10/08 08:45:10 mrg Exp $
>      $NetBSD: slc.c,v 1.8 1998/08/10 02:57:24 perry Exp $
>      $NetBSD: state.c,v 1.11.12.3 2001/07/29 04:13:02 jhawk Exp $
>      $NetBSD: sys_term.c,v 1.18.4.3 2001/07/29 04:13:05 jhawk Exp $
>      $NetBSD: telnetd.c,v 1.20.4.2 2001/07/29 04:13:09 jhawk Exp $
--------------------------- ^^^^^^^^^^^^^^^^^^
You're fine.

Revision 1.20.4.2 / (download) - annotate - [select for diffs], Sun Jul 29 
04:13:09 2001 UTC (17 months ago) by jhawk
Branch: netbsd-1-5
CVS Tags: netbsd-1-5-PATCH003, netbsd-1-5-PATCH002
Changes since 1.20.4.1: +28 -34 lines
Diff to previous 1.20.4.1 (colored) to branchpoint 1.20 (colored) next main 
1.21 (colored)

Pull up revision 1.26 (requested by itojun):
Security-related fixups for telnet
Bound-check all "*nfrontp++" code.  From OpenBSD and Heimdal.
Complain if file descriptor goes above FD_SETSIZE.  From OpenBSD.

 >      $NetBSD: utility.c,v 1.13.4.3 2001/07/29 04:13:16 jhawk Exp $
----------------------------^^^^^^^^^^^^^^^^^^^

Revision <utility.c?rev=1.13.4.htm>1.13.4.3 / (download) - annotate - 
[select for diffs], Sun Jul 29 04:13:16 2001 UTC (17 months ago) by jhawk
Branch: <./utility.htm>netbsd-1-5
CVS Tags: <./utility.htm>netbsd-1-5-PATCH003, 
<./utility.htm>netbsd-1-5-PATCH002
Changes since 1.13.4.2: +177 -298 lines
Diff to previous 1.13.4.2 (colored) to branchpoint 1.13 (colored) next main 
1.14 (colored)

Pull up revision 1.18 via patch (requested by itojun):
   Security-related fixups for telnet
     Bound-check all "*nfrontp++" code.  From OpenBSD and Heimdal.
     Complain if file descriptor goes above FD_SETSIZE.  From OpenBSD.


You're fine.
-Bruno


----------------------------------------------------------------------
Our company accepts no liability for the content of this email, or for
the consequences of any actions taken on the basis of the information
provided, unless that information is subsequently confirmed in
writing. If you are not the intended recipient you are notified that
disclosing, copying, distributing or taking any action in reliance on
the contents of this information is strictly prohibited.
                        http://www.wf0.com
----------------------------------------------------------------------