similar to: SA-03:12: sshd stops to answer queries after applying the patch

Hello freebsd-security, Apologize if it's offtopic, but: The message digest checksum for bpft4 from ports/net/bpft does not matchs the one printed on the sources page at http://www.freebsd.org/cgi/pds.cgi?ports/net/bpft My digests are 3810114b068f438cc7e8e0b1af745953 from top 6 links. Only last ftp://rusunix.org/pub/FreeBSD/distfiles/bpft4-latest.tgz gave the right cheksum -

Hello security, This output I've received from conventional cron daily job: [...] gw.nbh.ru kernel log messages: > Limiting closed port RST response from 201 to 200 packets per second [...] where fxp0 is an external interface. What could involve such a messages? In /var/log/messages the above strings was prepended by string: Feb 10 13:24:29 gw /kernel: ipfw: limit 100 reached on entry

Hello freebsd-security! What is the best way to authenticate remote ssh users transparantly without typing the kinit and kdestroy commands? Using pam_krb5 works satisfactorily for local logins but makes it crooked for remote ssh ones. The comp.protocols.kerberos and comp.security.ssh newsgroups and the pam-krb5-users maillist confirm this assertion. As far as I understood that using kerberized

I administer a remote server and want to apply some of the security patches. (I assume this is the best way to go since I can't go into single-user mode to use CVsup). I have a couple of questions. First, I have installed one of the pgp ports to verify the patches. When I run it, I get this message: > File 'buffer46.patch.asc' has signature, but with no text. > Text is

My machine got hacked a few days ago through the samba bug. I reinstalled everything cvsuped src-all, and ran chkrootkit. No more LKM but still... Can anyone please advise ? bash-2.05b# chkrootkit | grep INFECTED Checking `chfn'... INFECTED Checking `chsh'... INFECTED Checking `date'... INFECTED Checking `ls'... INFECTED Checking `ps'... INFECTED -- Jay -------------- next

It has been a couple months since I tried compiling from source. I just CVSuped a fresh set of files before building. Here is the error message. ./signal_i386.c: In function `set_vm86_pend': ./signal_i386.c:793: `VIP_MASK' undeclared (first use in this function) ./signal_i386.c:793: (Each undeclared identifier is reported only once ./signal_i386.c:793: for each function it appears

does anybody have the same problem as I have : (running CURRENT, but the problem occurs on STABLE too) latest portupgrade, ports cvsuped today. fully reproductible with any package... am i missing something ? i hope yes... portinstall -PP teTeX ---> Checking the availability of the latest package of 'print/teTeX' ---> Fetching the package(s) for 'teTeX-2.0.2_2'

Hi guys, I just cvsuped my box to latest stable, as well as did upgrade of almost all the ports. I cant get XFree86-4-Clients running. The build fails here: /usr/ports/x11/XFree86-4-clients/work/xc/programs/xcursorgen rm -f xcursorgen cc -o xcursorgen -O -pipe -ansi -Dasm=__asm -Wall -Wpointer-arith -Wundef -L/usr/ports/x11/XFree86-4-clients/work/xc/exports/lib xcursorgen.o -lXcursor -lXrender

Hello, I'm using *virt-sparsify* for compressing image file [ash2] jenkins@b-imagebuilder-worker-r13h17-prod:~/workspace/imagebuilder/packer/output$ virt-sparsify --compress /data/home/jenkins/workspace/imagebuilder/packer/output/packer-vm.qcow2 /data/home/jenkins/workspace/imagebuilder/packer/output/packer-vm.qcow2.sparsified Input disk virtual size = 41943040000 bytes (39.1G) Create

Hi Illia, With Nouveau : xrandr: Failed to get size of gamma for output default Screen 0: minimum 1024 x 768, current 1024 x 768, maximum 1024 x 768 default connected 1024x768+0+0 0mm x 0mm 1024x768 76.0* With the Nvidia Driver : xrandr: Failed to get size of gamma for output default Screen 0: minimum 640 x 480, current 1280 x 1024, maximum 1280 x 1024 default connected

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:07.sendmail Security Advisory The FreeBSD Project Topic: a second sendmail header parsing buffer overflow Category: contrib Module:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:12 Security Advisory FreeBSD, Inc. Topic: OpenSSH buffer management error Category: core, ports Module: openssh, ports_openssh,

Hi, give me some tips please, first of all, first screen: ============================================= *** The directory specified for the temporary root environment, /var/tmp/temproot, exists. This can be a security risk if untrusted users have access to the system. Use 'd' to delete the old /var/tmp/temproot and continue Use 't' to select a new temporary root

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:12 Security Advisory FreeBSD, Inc. Topic: OpenSSH buffer management error Category: core, ports Module: openssh, ports_openssh,

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:12 Security Advisory FreeBSD, Inc. Topic: OpenSSH buffer management error Category: core, ports Module: openssh, ports_openssh,

OK, an official OpenSSH advisory was released, see here: <URL: http://www.mindrot.org/pipermail/openssh-unix-announce/2003-September/000063.html > The fix is currently in FreeBSD -CURRENT and -STABLE. It will be applied to the security branches as well today. Attached are patches: buffer46.patch -- For FreeBSD 4.6-RELEASE and later buffer45.patch -- For FreeBSD 4.5-RELEASE and

Yes. I attached the logs. (There is several error messages.) Le 28/10/2014 21:43, Ilia Mirkin a écrit : > Output name 'default' is not the name of an output nouveau can produce > (or nvidia for that matter, afaik). This is the vesa driver or... > something. Can you supply xorg log + dmesg? > > On Tue, Oct 28, 2014 at 4:40 PM, Victor Lefèvre <victorlefevre at free.fr>

Hello, freebsd-security. I'm trying to build 4.8-RELEASE-p7 to distribute it trought my clients. What am I doing: #cd /usr/share/examples/cvsup #cvsup standard-supfile (after I've done necessary changes) #cd /usr/src #make buildworld Thus, I have /usr/obj "populated with the output of ``make buildworld''" as it described in man 7 release. Then, I have read

Greets, I haven't been following the wine list; I just use wine to play Starcraft. I've been playing Starcraft perfectly for some years, and every couple of months I 'cvs update' with the wine sources. I cvsuped right now, and this has broken Starcraft. One slightly annoying thing is that the wine executable no longer takes the '-display' command line option, but at

Hiho, I just stumbled across the problem with the unresolved __stderrp symbol. I've read the existing threads to that, as well as UPDATING. However, there are some differences, between the reported problems and my problem: 1. the unresolved symbol is not complained about in libm, but in libtk83.so from the tk-8.3.5_1 port. 2. I _did_ install all the compatibility libs for 3.x, I even