Patching SSH

[Matthew Seaman]

On Wed, Sep 17, 2003 at 04:01:40PM -0800, Jon Reynolds wrote:
> I have SSH installed with the base install of 4.7. I downloaded the
> patch and followed the directions: cd /usr/src - patch < /path/to/patch.
> when I issue that command it asks me which file I would like to patch I
> type in buffer.c and it tells me this file cannot be found. What file do
> I need to patch if not buffer.c?

If that is an otherwise unpatched 4.7-RELEASE system, then there are
more security patches to apply than just the latest fun'n'games with
openssh.

The simplest way to get a fully patched source tree is to use cvsup(1)
with a sup-file like this (should be substantially the same as
/usr/share/examples/cvsup/standard-supfile):

    *default host=cvsup7.us.FreeBSD.org
    *default base=/usr
    *default prefix=/usr
    *default release=cvs tag=RELENG_4_7
    *default delete use-rel-suffix
    *default compress
    
    src-all

Then either do a complete build,install world+kernel or just rebuild
the selected parts of the source tree as intructed in the security
advisories.

	Cheers,

	Matthew


-- 
Dr Matthew J Seaman MA, D.Phil.                       26 The Paddocks
                                                      Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey         Marlow
Tel: +44 1628 476614                                  Bucks., SL7 1TH UK
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20030918/a18ea73b/attachment.bin