[972] in linux-announce channel archive

home help back first fref pref prev next nref lref last post

Re: Final analysis of syslog threat under Linux

daemon@ATHENA.MIT.EDU (Jacob Langseth)
Thu Aug 31 12:02:48 1995

Date: Wed, 30 Aug 1995 16:53:07 -0400
To: ale@cc.gatech.edu
From: jacob@esisys.com (Jacob Langseth)
Cc: big-linux@netspace.org, bugtraq@crimelab.com, cert@cert.org,
        hjl@nynexst.com, torvalds@cs.Helsinki.FI,
        linux-announce@vger.rutgers.edu, linux-security@tarsier.cv.nrao.edu

important followup to the last post:
<=====================> SNIP <=====================>
"AC" == A Cox <anarchy@thunder.swansea.linux.org.uk> writes:

AC> 	This problem affects most Linux (and probably most unix systems)
AC> and should be acted on immediately. Simply switching to libc4.7.2
AC> will adequately protect almost all users. Note that libc4.7.2 has
AC> some bugs but libc4.7.4 appears more correct. Even though the built
AC> libc4.7.4 is in hjl's private area it should be made available by
AC> all ftp sites ASAP.

I have made a copy of libc-4.7.4 publicly available, for now, in:
ftp://linux.nrao.edu/pub/linux/security/libc-4.7.4/

This version is, as Alan states, not currently a public release; it's
only available in H.J. Lu's "hidden" GCC development area on
tsx-11.mit.edu (and its mirrors, of which linux.nrao.edu is one).
H.J. has given his OK for this "pseudo-release."

--Up.

-- 
Jeff Uphoff - systems/network admin.  |  juphoff@nrao.edu
National Radio Astronomy Observatory  |  jeff.uphoff@linux.org
Charlottesville, VA, USA              |  http://linux.nrao.edu/~juphoff/
<=====================> SNIP <=====================>

Musashi <dragon@cc.gatech.edu>
--
Jacob Langseth                               -=-finger for PGP key-=-
Enhanced Systems, Inc.                       email:  jacob@esisys.com
6961 PeachTree Ind Blvd                      voice:  (404) 662-1504 ext. 684
Norcross, GA  30092                          fax:    (404) 662-1537


home help back first fref pref prev next nref lref last post