Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Message-ID: <EF3C4DA34DEFD411AE6200A0C9F2A35819F9F7E2@uswaumsx06medge.med.ge.com>
From: "Menon, Girish (MED, WIPRO-GE MED)" <Girish DOT Menon AT med DOT ge DOT com>
Reply-To: cygwin AT cygwin DOT com
To: cygwin AT cygwin DOT com
Subject: RE: bufffer overflow in telnetd
Date: Mon, 14 Jul 2003 17:30:46 -0500
MIME-Version: 1.0
Content-Type: text/plain

Sorry for the really dumb question, but how to install this patch?
Upon unzipping this bz2 file, I got a bunch of files in <directory>/usr
and <directory>/etc. I checked the readme and saw that we need to run
the command iu-config from the usr/bin directory. What else do I need to
do to install the patch for telnet/ftp?


-----Original Message-----
From: Igor Pechtchanski [mailto:pechtcha AT cs DOT nyu DOT edu]
Sent: Tuesday, July 08, 2003 6:27 PM
To: Menon, Girish (MED, WIPRO-GE MED)
Cc: cygwin AT cygwin DOT com
Subject: RE: bufffer overflow in telnetd


<http://cygwin.com/ml/cygwin-announce/2003-07/msg00001.html>
<http://cygwin.com/ml/cygwin/2003-07/msg00370.html>
	Igor

On Tue, 8 Jul 2003, Menon, Girish (MED, WIPRO-GE MED) wrote:

> oops.. sorry for putting this on cygwin-patches too.
>
> Is the patch now available? I checked the cygwin website, but did not
> find any release recently.
>
> -----Original Message-----
> From: Corinna Vinschen [mailto:corinna-cygwin AT cygwin DOT com]
> Sent: Monday, July 07, 2003 3:47 PM
> To: cygwin AT cygwin DOT com
> Subject: Re: bufffer overflow in telnetd
>
> On Mon, Jul 07, 2003 at 02:28:01PM -0500, Menon, Girish (MED, WIPRO-GE
MED) wrote:
> > > Does anyone know whether a patch has been released for the
security
> > > hole CAN-2001-0554 about buffer overflow in telnetd (CA- 2001-21)?
> > > http://www.cert.org/advisories/CA-2001-21.html
>
> Not so far.  I've just uploaded a new release containing the
appropriate
> patch.  Should be on the mirrors in a few hours.
>
> Don't send postings like this to cygwin-patches.  That mailing list
> serves another purposes.  Please read http://cygwin.com/lists.html.
>
> Corinna

-- 
				http://cs.nyu.edu/~pechtcha/
      |\      _,,,---,,_		pechtcha AT cs DOT nyu DOT edu
ZZZzz /,`.-'`'    -.  ;-;;,_		igor AT watson DOT ibm DOT com
     |,4-  ) )-,_. ,\ (  `'-'		Igor Pechtchanski, Ph.D.
    '---''(_/--'  `-'\_) fL	a.k.a JaguaR-R-R-r-r-r-.-.-.  Meow!

"I have since come to realize that being between your mentor and his
route
to the bathroom is a major career booster."  -- Patrick Naughton

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/