HEADS UP! Watch out for security on your machines and exploits!

[Peter Pentchev]

On Thu, Dec 04, 2003 at 01:37:20PM +0100, Lukas Ertl wrote:
> On Wed, 3 Dec 2003, Peter Wemm wrote:
> 
> > Please take EXTRA care to watch your mirrors for 'funny stuff' and make damn
> > sure that you're fully up todate with patches.
> >
> > Being a cvsup*/ftp*/etc mirror means that you're going to be scanned and
> > probed.  Especially now.
> 
> (I'm cc'ing ports@ on this.)
> 
> Since the gentoo hack was obviously made through a vunerable version of
> rsync, I ask if it's possible to update the rsync port to the new version.

I sent a patch to update rsync to 2.5.7 to Oliver Eikemeier, the port
maintainer, earlier today.

G'luck,
Peter

-- 
Peter Pentchev	roam at ringlet.net    roam at sbnd.net    roam at FreeBSD.org
PGP key:	http://people.FreeBSD.org/~roam/roam.key.asc
Key fingerprint	FDBA FD79 C26F 3C51 C95E  DF9E ED18 B68D 1619 4553
I am the thought you are now thinking.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-hubs/attachments/20031204/d5e4f2ed/attachment.bin