Newsgroups: comp.os.linux.announce,comp.os.linux.development
From: gleasokr@refuge.Colorado.EDU (Kris Gleason)
Subject: Security Fix for getty_ps 2.0.7d
Message-ID: <ann-15357.769637231@cs.cornell.edu>
Date: Sun, 22 May 1994 20:07:32 GMT
Approved: linux-announce@tc.cornell.edu (Matt Welsh)

It _seemed_ percect (famous last words).  Oh well...

As many of you have pointed out to me, there is a serious security
hole in getty_ps.  I have included a patch below that fixes this 
hole.   If you have installed getty_ps 2.0.7d, apply this patch to
the source, and recompile your binaries.  Also, PLEASE BE SURE
TO DO A 'make clean' BEFORE RECOMPILING.  One of the dependencies
in the Makefile is not quite right.

I have also uploaded a new distribution to tsx-11 and sunsite
(getty_ps-2.0.7e) which has this security hole fixed.  Also added
to the 2.0.7e release is optional compliance with the FSSTND
standard (see the Makefile for more details).

Kris


begin 644 getty_ps-207d-d07dPL1.diff
M+2TM("XN+V=E='1Y7W!S+3(N,"XW9"]M86EN+F,)36]N($UA>2 Q-B R,#HU
M-3HU," Q.3DT"BLK*R!M86EN+F,)5&AU($UA>2 Q.2 R,3HR.3HS-R Q.3DT
M"D! ("TY,S<L-B K.3,W+#$Q($! "B )"0D);&]G97)R*")&:61O($-A;&P@
M1&5T96-T960B*3L*("-E;F1I9B O*B!&241/("HO"B )"0EC87-E(%-50T-%
M4U,Z"BL)"0D):68H8G5F6S!=(#T]("<M)RD@>PHK"0D)"0EP<FEN=&8H(EQN
M)RTG(&YO="!A;&QO=V5D(&%S(&9I<G-T(&-H87)A8W1E<B!O9B!L;V=I;B!N
M86UE7&XB*3L**PD)"0D)<VQE97 H-2D["BL)"0D)"6)R96%K.PHK"0D)"7T*
M( D)"0DH=F]I9"D@<VEG;F%L*%-)1T%,4DTL(%-)1U]$1DPI.PH@"0D)"2AV
1;VED*2!A;&%R;2@P*3L*( IL
 
end

--
Mail submissions for comp.os.linux.announce to: linux-announce@tc.cornell.edu
Be sure to include Keywords: and a short description of your software.
