FreeBSD Security Advisory FreeBSD-SA-05:01.telnet

[Jacques Vidrine]

On 3/28/05 3:40 PM, Simon L. Nielsen wrote:
> Indeed, looks like the FreeBSD 5 patch is an "old" version since that
> should have been fixed.  I just CC'ed nectar so this can be fixed
> ASAP.

Oops, sorry folks.  I've re-uploaded the patch to the master FTP server, 
and it should propagate to others soon.

> Due to multiple telnet versions (especially in FreeBSD 4) it was
> judged that including more specific build instructions for all the
> possible combinations of telnet and build options gave to high a risk
> for errors possibly resulting in users not actually getting telnet
> rebuild correctly.

That's right.  For 5.x, it is fairly straightforward:

    # cd /usr/src
    # patch < /path/to/patch
    # cd /usr/src/lib/libtelnet
    # make obj && make depend && make
    # cd /usr/src/usr.bin/telnet
    # make obj && make depend && make && make install

But 4.x has no less than four possible telnet clients that might be 
installed depending upon local settings of NOCRYPT, MAKE_KERBEROS4, 
MAKE_KERBEROS5, and probably others :-/

Cheers,
-- 
Jacques A Vidrine / NTT/Verio
nectar at celabo.org / jvidrine at verio.net / nectar at FreeBSD.org