Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
proftpd remote hole
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
really
Guru
Guru


Joined: 27 Aug 2002
Posts: 430
Location: nowhere

PostPosted: Fri Sep 26, 2003 11:04 am    Post subject: proftpd remote hole Reply with quote

where is the glsa for proftpd hole?
http://xforce.iss.net/xforce/alerts/id/154

download the patched ftp://ftp.proftpd.org/distrib/source/ source :D
_________________
NoManNoProblem

Get lost before you get shot.
Back to top
View user's profile Send private message
SecMon
n00b
n00b


Joined: 01 Apr 2003
Posts: 12
Location: California

PostPosted: Sat Sep 27, 2003 12:25 am    Post subject: proftpd remote hole Reply with quote

The better question is why has the update been slow in release.

On Sep 11 the new patched version was released
On Sep 23 the security hole was brought to the public
On Sep 23 Daniel Ahlberg injected it into glsa

Here we are three days later and this has not been released.

I also think there should be some talk about adding a new
group of critical to emerge ...

emerge -p critical (just like world or system)

-- Keath
Back to top
View user's profile Send private message
Redeeman
l33t
l33t


Joined: 25 Sep 2003
Posts: 958
Location: Portugal

PostPosted: Sat Sep 27, 2003 12:50 am    Post subject: critical Reply with quote

yes, that was actually a pretty good idea, IMO, maybe the developers could make that ;-)


//Redeeman
Back to top
View user's profile Send private message
SecMon
n00b
n00b


Joined: 01 Apr 2003
Posts: 12
Location: California

PostPosted: Sat Sep 27, 2003 2:18 am    Post subject: Just upgrade......The waters fine...... Reply with quote

Ok, thanks to my buddy Jeff ( the guy who reads the mans, then rereads them again when they get updated) sent this along.

emerge {full path to ebuild}

That will bypass the mask and let you install it.
This is one solution to the problem, but read the FAQ at
https://forums.gentoo.org/viewtopic.php?t=33534

But also keep a lookout for the real update when it comes
maybe (if you are like me) cp off the one you did and diff them
later to see if anything major changed after it's released.

-- Keath
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum