*BSD News Article 29526


Return to BSD News archive

Path: sserve!newshost.anu.edu.au!munnari.oz.au!ihnp4.ucsd.edu!agate!agate!usenet
From: csgr@alpha.ru.ac.za (Geoff Rehmet)
Newsgroups: comp.os.386bsd.announce
Subject: [FreeBSD] Security hole in unencumbered securedist
Followup-To: poster
Date: 15 Apr 1994 01:59:30 -0700
Organization: Rhodes University, Grahamstown, South Africa
Lines: 21
Sender: cgd@agate.berkeley.edu
Approved: 386bsd-announce-request@agate.berkeley.edu
Message-ID: <C5IKDA.9qy@hippo.ru.ac.za>
Reply-To: csgr@alpha.ru.ac.za
NNTP-Posting-Host: agate.berkeley.edu

This is a warning to all who have ftp'd the unencumbered
securedist for FreeBSD from braae.ru.ac.za before 0900 UTC
on April 14 1994, that there was a security hole in this code.

(I will release the exact details later, but would first like
to give affected sites the opportunity to upgrade.)

New source and binaries can be obtained from braae.ru.ac.za

I regret any inconvenience which has been caused by this problem.


Geoff
--
 Geoff Rehmet, Computer Science Department,   | ____   _ o         /\
 Rhodes University,  South Africa             |___  _-\_<,        / /\/\
   email : csgr@cs.ru.ac.za                   |    (*)/'(*)    /\/ /  \ \
         : geoff@neptune.ru.ac.za             |
--
Please send submissions for comp.os.386bsd.announce to:
					386bsd-announce@agate.berkeley.edu