Bugtraq mailing list archives

SGI security patches

From: dellwo () SPRUCE CHEM UPENN EDU (Martin J. Dellwo)
Date: Fri, 29 Aug 1997 10:23:08 -0400


FYI there is a patch for the login 'LOCKOUT' problem and
'login/scheme' security holes on the general patch site, which has not
been announced via SGI's security email list.  For Irix 5.3, patch
2216 and for Irix 6.2, patch 2181, release date 7/30/97(! a month
ago).

For 6.3, patch 2232 seems to have fixes for the 'login/scheme', 'df',
'eject', and 'at' buffer overrun problems plus LOCKOUT.  Same for
patch 2233 under 6.4.  No fix of 'pset' is mentioned

-M
--
Martin J. Dellwo   (215) 898-4886      dellwo () spruce chem upenn edu
Department of Chemistry, University of Pennsylvania
http://cherry.chem.upenn.edu/~dellwo/

Current thread:

Re: syslogd fun (erratum) Yuri Volobuev (Aug 28)
- Having fun with eggdrop bot Giuliano COCAINE (Aug 28)
  - Re: Having fun with eggdrop bot The Nolander (Aug 29)
    - Re: Having fun with eggdrop bot -*- Chotaire -*- (Aug 29)
    - DDB/securelevel Aleph One (Aug 30)
    - Re: DDB/securelevel Andrew Brown (Aug 30)
    - Mac TCP/IP Stack glitch. nomad () APOLLO TOMCO NET (Aug 31)
- Re: syslogd fun (erratum) Theo de Raadt (Aug 28)
- SGI security patches Martin J. Dellwo (Aug 29)
- Somewhat of a security hole in CVS Elliot Lee (Aug 29)
  - Re: Somewhat of a security hole in CVS Theo de Raadt (Aug 29)
  - Re: Somewhat of a security hole in CVS Marc Slemko (Aug 29)
  - rpm 2.4.6 (with /tmp fixes) Erik Troan (Aug 29)