Bugtraq: Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995

[goetz () open ch (Goetz von Escher)]

On Sep 19,  4:33pm, Sten Gunterberg wrote:
> There's no patch yet, but Sun is apparently working on one. The Bug-IDs
> are 1219835 for Solaris 1.x (SunOS 4.x) and 1220257 for Solaris 2.x.
> Try to give those to local Sun support and see what happens :-)
Solaris 2.x ??? - I thought this is a BSD problem? Are you telling
me that *all* my Solaris boxes are vulnerable too?

Also local Sun support told me that the patch for Bug 1219835 has been
integrated into SunOS 4.1.4 and there probably won't be a patch for
older versions! Here's the bug info they sent me:

 Bug Id:     1219835
 Product:  sunos
 Category:  utility
 Subcategory:  other
 Release summary: 4.1.3, 4.1.4, 4.1.3_U1, 4.1
 Bug/Rfe:  bug
 State:  integrated

But now I'm really getting confused when I read the mail by Andy Cowley
who said:

On Sep 19,  4:17pm, andy () btc uwe ac uk wrote:
> > -  Is Sun working on a patch?
> yes."
>
> I have this problem logged with Sun. the latest (12:03 BST 19 Sept 95)
>  is that T (test?)
> patches are available to existing fault call owners. If the problem
> is severe for you persuade Sun to send them. They are :-
>
>
>         4.1.3_U1 domestic libc          = T101759-04
>         4.1.3_U1 international libc     = T101558-07
>         4.1.4 domestic libc             = T102544-03
>         4.1.4 international libc        = T102545-03
>
> These are betas and Sun will expect testing and a report.
So why would there be a test patch for SunOS 4.1.4 if it was fixed
in that release? I guess one of you guys is wrong.

-Goetz

--
Goetz von Escher                email:  Goetz.von-Escher () Open CH
Open Systems AG                 voice:  +41 (61) 262-0505
Petersplatz 12                  FAX:    +41 (61) 262-0510
CH-4051 Basel, Switzerland