FreeBSD Security Advisory FreeBSD-SA-05:01.telnet

[Dmitry Pryanishnikov]

Hello!

> Date:      Mon, 28 Mar 2005 23:39:30 +0200
> From:      Daniel Gerzo <danger at rulez.sk>
>> Just curious... why is it necessary to rebuild the whole operating
>> system? Normally, the security advisories just have you rebuild the
>> program in question - wouldn't that have sufficed here?
>
>  I think, this might be enought:
>
>  cd /usr/src/usr.bin/telnet ; make clean && make all install
>
>  but I don't exactly know, if this is really correct way how to do
>  it..

  This way is incorrect in two aspects. First, you'll have to compile libtelnet
first:

cd /usr/src/lib/libtelnet
make obj && make depend && make
cd /usr/src/usr.bin/telnet
make obj && make depend && make && make install

But second is that you'll get telnet w/o data encryption support, which isn't
what you want (unless you have NOCRYPT=true in your /etc/make.conf).
You can recompile telnet properly (in the typical case: no NOCRYPT and
no MAKE_KERBEROS[45] either) using the following commands:

cd /usr/src/secure/lib/libtelnet
make obj && make depend && make
cd /usr/src/secure/usr.bin/telnet
make obj && make depend && make && make install

However, I can overlook something more, so I'm giving no warranties at all...

Sincerely, Dmitry
-- 
Atlantis ISP, System Administrator
e-mail:  dmitry at atlantis.dp.ua
nic-hdl: LYNX-RIPE