I didn't see anything about this on the list, but I thought that everyone
would like to know about this new security patch from Digital. It's
available here:
ftp://ftp.service.digital.com/public/osf/*
PRODUCT: DEC OSF/1 Version 2.0 - 3.2C
COMPONENT: Security
SOURCE: Digital Equipment Corporation
Software Security Response Team
ECO INFORMATION:
ECO Kit Name: SSRT0359_OSF1032C
ECO Kits Superseded by This ECO Kit: None
ECO Kit Approximate Size: 36208640 Bytes
System Reboot Necessary: Yes
ECO KIT SUMMARY:
An ECO kit exists for DEC OSF/1 Versions 2.0 - 3.2C. This kit addresses the
following problems:
A potential security vulnerability has been identified with
DEC OSF/1 V2.0 through 3.2C syslog internal buffering. This potential
vulnerability may allow authorized users to gain unauthorized
privileges. This kit, containing new binaries that corrects this problem.
[deletia]
--
John P. Speno, speno_at_swarthmore.edu, Swarthmore College Computing Center
"There is no wisdom greater than kindness."
Received on Fri Dec 01 1995 - 17:33:35 NZDT