[424] in Release_7.7_team
SYSLOG patch for Solaris.
daemon@ATHENA.MIT.EDU (Bill Cattey)
Thu Feb 1 16:56:07 1996
Date: Thu, 1 Feb 1996 16:54:17 -0500 (EST)
From: Bill Cattey <wdc@MIT.EDU>
To: miki@MIT.EDU, release-team@MIT.EDU, jweiss@MIT.EDU, mhbraun@MIT.EDU
Cc: Martha.Rykala@eng.sun.com
Owing to the brain dead way in which Sun chose to organize information
about patches, I did not find out until today that the CRITICAL syslog
security hole has had a fix since November 2,1995.
In fairness, it was mentioned in the 17 Nov 95 issue of SunSolve Early
Notifier, and I did check in with Miki on it then. But I am VERY UPSET
that the notifications I set in their database proved antagonistic to my
learning this information. The thing to learn from this is that the
online notification is NOT to be trusted and is NOT definitive, but that
the Early Notifier IS definitive and SHOULD be trusted.
The patch ID is 102903-01
It requires revision 75 of jumbo kernel patch 101318
Jonathon considers this an important patch and would like to see it in
the next solaris 2.3 release we do.
For solaris 2.4 the patch ID is 102904-01 which requires patch 101945-34
For SunOS 4.1.3 the patch ID is 100891-13
For SunOS 4.1.3_UI the patch ID is 101558-07
For SunOS 4.1.4 the patch ID is 102545-03
