Bugtraq mailing list archives

Re: SunOS syslog() fix, finally...


From: lrr () cert org (Lawrence R. Rogers)
Date: Fri, 10 Nov 1995 08:23:41 -0500


        102903-01       Solaris 2.3 (requires 101318-75)
        102904-01       Solaris 2.4 (sparc) (requires 101945-34)
        102905-01       Solaris 2.4 (ix86) (requires 101946-29)

there did not seem to be any mentions about the need of recompiling
sendmail, etc in the README file, which was mentioned in the cERT
advisory. since it basically just patched the libc.a, I suppose no
other modification is needed?


Jake "Data" Luck               DANCE FOREVER                <jake () mtv com>
Technical Assistant of mtv.com and Control Strip Modules Archive Maintainer
-o--o-o-o--o----oo A journey of a thousand miles begins with a cash advance.



Under SunOS 4, sendmail 8.7.1 is linked statically using the supplied
Makefile.  For SunOS 5, it is a dynamic executable, again using the default
Makefile.  So, for SunOS 4 and SunOS 5 (if you compiled it statically), you
need to rebuild sendmail to get the latest syslog subroutine.  If you did
linked sendmail dynamically under SunOS 5, then loading the patches above will
suffice.

BTW - the following patches are available for SunOS 4.X.  Note that these are
the international and not domestic patches.

        100891-13 - SunOS 4.1.3
        101558-07 - SunOS 4.1.3_U1
        102545-03 - SunOS 4.1.4
--

                                        Larry Rogers
                                        Member of the Technical Staff
                                        CERT(sm) Coordination Center
                                        Software Engineering Institute
                                        Carnegie Mellon University
                                        Pittsburgh, PA  USA  15213-3890

Internet e-mail:  cert () cert org
        (monitored during business hours)
Telephone:  +1 412-268-7090
        (24-hour hotline
        CERT Coordination Center personnel answer
        8:30 a.m.- 5:00 p.m. EST(GMT-5)/EDT(GMT-4)
        on call for emergencies during other hours)


CERT is a service mark of Carnegie Mellon University.

The CERT Coordination Center is sponsored by the Advanced Research Projects
Agency (ARPA). The Software Engineering Institute is sponsored by the U.S.
Department of Defense.



Current thread: