LinuxSA Mailing list archives

  From: Alan Kennington <akenning@dog.topology.org>
  To  : LinuxSA <linuxsa@linuxsa.org.au>
  Date: Mon, 27 Nov 2000 14:18:52 +1030

a bevy of security announcements!!

All those people who say that whenever a security
announcement comes out, you have to immediately fix
all your systems will have a bit of work to do this week.

Take a look at Sunday's list of security announcements at
http://linuxtoday.com/


OpenSSH prior to 2.3.0 is no good:
http://linuxtoday.com/news_story.php3?ltsn=2000-11-26-019-20-SC

Netscape up to 4.75 is no good:
http://linuxtoday.com/news_story.php3?ltsn=2000-11-26-018-20-SC

Ghostscript is no good:
http://linuxtoday.com/news_story.php3?ltsn=2000-11-26-015-20-SC

tcsh is no good:
http://linuxtoday.com/news_story.php3?ltsn=2000-11-26-011-20-SC

Redhat modutils is no good:
http://linuxtoday.com/news_story.php3?ltsn=2000-11-26-010-20-SC-RH

Ethereal is no good:
http://linuxtoday.com/news_story.php3?ltsn=2000-11-26-009-20-SC

mc is no good:
http://linuxtoday.com/news_story.php3?ltsn=2000-11-26-008-20-SC-DB


Alright, now be truthful, how many of you are going to install new
versions of all this stuff this week?
Remember that if you get hacked for any of these vulnerabilities
in the next 6 months, sympathy from you fellow user is "ausgeschlossen",
as the Germans say - i.e. not very likely.

Okay, time to start re-installing, everybody!
Too bad the link to the real world is down a few Gbits/sec
at the moment, isn't it....

Cheers, and happy re-installing,
Alan Kennington.

-------------------------------------------------------
PS. Please send all flames to /dev/null.
PPS. /dev/null has a bug in it, by the way.
Try this:

#include <stdio.h>
#include <errno.h>
#include <sys/fcntl.h>
 
main() {
    char buf[1];
    int fd = open("/dev/null", O_RDWR);
    int i;
    for (i = 1; i <= 10; ++i) {
        int ret = write(fd, buf, 429496729 * i);
        if (ret < 0) {
            fprintf(stderr, "i = %d, errno = %d\n", i, errno);
            perror("write");
            }
        }
    }

I get this:

i = 6, errno = 0
write: Success
i = 7, errno = 0
write: Success
i = 8, errno = 0
write: Success
i = 9, errno = 0
write: Success
i = 10, errno = 6
write: Device not configured 

But maybe this is POSIX conformant!?

-- 
LinuxSA WWW: http://www.linuxsa.org.au/  IRC: #linuxsa on irc.linux.org.au
To unsubscribe from the LinuxSA list:
  mail linuxsa-request@linuxsa.org.au with "unsubscribe" as the subject