Re: Need to build some systems this week. Snapshots?
From: Brett Glass (brett_at_lariat.org)
Date: 08/28/03
- Previous message: Nate Lawson: "Re: Please test: USB floppies"
- In reply to: Colin Percival: "Re: Need to build some systems this week. Snapshots?"
- Next in thread: Colin Percival: "Re: Need to build some systems this week. Snapshots?"
- Reply: Colin Percival: "Re: Need to build some systems this week. Snapshots?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: Thu, 28 Aug 2003 13:54:08 -0600 To: Colin Percival <colin.percival@wadham.ox.ac.uk>, Colin Percival <colin.percival@wadham.ox.ac.uk>, stable@freebsd.org
At 12:16 PM 8/28/2003, Colin Percival wrote:
>At 12:01 28/08/2003 -0600, Brett Glass wrote:
>>Will this fix everything that needs to be recompiled to avoid the realpath()
>>bug?
>
> Yes, that's the whole point of FreeBSD Update. Read my paper, or come to BSDCon, for details; but rest assured that if you start with a binary install from the official FTP or ISO releases, and don't recompile any of the world locally, FreeBSD Update will update any binaries which are affected by modifications in the security branch.
That's great.
What does one do about packages and ports? It appears that the binary packages on the FreeBSD servers are never updated between releases... which means that if a bug is in a package or is compiled into a package (as with the realpath problem), the FreeBSD servers keep sending out exploitable copies of that package indefinitely. The situation with ports is a bit better, but how does one know which ones to recompile and reinstall? Does your update system handle this situation and/or warn about it?
--Brett
_______________________________________________
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org"
- Previous message: Nate Lawson: "Re: Please test: USB floppies"
- In reply to: Colin Percival: "Re: Need to build some systems this week. Snapshots?"
- Next in thread: Colin Percival: "Re: Need to build some systems this week. Snapshots?"
- Reply: Colin Percival: "Re: Need to build some systems this week. Snapshots?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|
|
