Re: buffer overflow in the DNS resolver

[Woodchuck <djv@bedford.net>]

On Thu, 27 Jun 2002 wojtek@ifirma.pl wrote:

> Todd,
>
> >> Would you be kind enough to post instructions on how to cope with the
> fact
> >> that:
>
> >> "(...)programs that are linked statically will not pick up the
> >> change unless they are rebuilt.  This includes the contents of /bin
> >> and /sbin."
>
> >You will have to rebuild static binaries--that's all there
> >is to it.
>
> This is what I understood.
>
> What I don't know is which are those and how to rebuild them.
>
> I guess I will need to use http://www.openbsd.org/faq/upgrade-minifaq.html
> and upgrade 3.1 to 3.1.

Naw, take it easy :-)

>
> I cc'd this to misc, maybe somebody will have some insight on this.

THe entire contents of /bin, and with some few exceptions, of /sbin.
(Might as well rebuild /sbin).  There may be some static-linked binaries
elsewhere.  You can hunt for them with file(1).  Offhand, I can't
find any static in /usr/bin, /usr/sbin or /usr/libexec, which pretty
much exhausts the "usual places".

I assume that after building and installing libc, per the 007-patch,
the same general procedure will redo the /bin and /sbin directories.
(It has worked for me without incident on 3.1-stable).

Namely,

cd /usr/src/bin
make obj cleandir depend
make &&  make install

Dave
--
        In each of us, there burns a soul of a woodchuck.
        In every generation a few are chosen to prove it.