Subject: Re: CVS commit: pkgsrc [root exploit on wu-ftpd]
To: None <security@netbsd.org, source-changes@netbsd.org>
From: Greg A. Woods <woods@weird.com>
List: source-changes
Date: 07/09/2000 13:03:39
[ On Saturday, July 8, 2000 at 15:59:03 (-0400), Johnny C. Lam wrote: ]
> Subject: Re: CVS commit: pkgsrc [root exploit on wu-ftpd]
>
> Rene Hexel <rh@netbsd.org> writes:
> > Log Message:
> > Update wu-ftpd to 2.6.1
> >
> > Changes to 2.6.0 include:
> > o Fix security leaks that could result in a root shell compromise.
>
> Shouldn't there be some security advisory noting this for pkgsrc users?
Especially given that NetBSD was not mentioned in the initial CERT
advisory of this issue.
--
Greg A. Woods
+1 416 218-0098 VE3TCP <gwoods@acm.org> <robohack!woods>
Planix, Inc. <woods@planix.com>; Secrets of the Weird <woods@weird.com>