From owner-doc-jp@jp.FreeBSD.org Sat Jan  5 11:29:18 2002
Received: (from daemon@localhost)
	by castle.jp.FreeBSD.org (8.11.6+3.4W/8.11.3) id g052TIQ48475;
	Sat, 5 Jan 2002 11:29:18 +0900 (JST)
	(envelope-from owner-doc-jp@jp.FreeBSD.org)
Received: from sekine00.ee.noda.sut.ac.jp (sekine00.ee.noda.sut.ac.jp [133.31.107.40])
	by castle.jp.FreeBSD.org (8.11.6+3.4W/8.11.3) with ESMTP/inet id g052THm48470
	for <doc-jp@jp.freebsd.org>; Sat, 5 Jan 2002 11:29:17 +0900 (JST)
	(envelope-from hrs@eos.ocn.ne.jp)
Received: from localhost (sekine01.ee.noda.sut.ac.jp [133.31.107.43])
	by sekine00.ee.noda.sut.ac.jp (8.12.1/3.6W-12/10/97) with ESMTP id g052TBRQ010164
	for <doc-jp@jp.freebsd.org>; Sat, 5 Jan 2002 11:29:11 +0900 (JST)
Date: Sat, 05 Jan 2002 11:28:34 +0900 (JST)
Message-Id: <20020105.112834.126821796.hrs@sekine00.ee.noda.sut.ac.jp>
To: doc-jp@jp.FreeBSD.org
From: Hiroki Sato <hrs@eos.ocn.ne.jp>
In-Reply-To: <200201050104.g0514Ds92963@freefall.freebsd.org>
References: <200201050104.g0514Ds92963@freefall.freebsd.org>
X-Mailer: Mew version 2.0 on Emacs 20.7 / Mule 4.0 (HANANOEN)
Mime-Version: 1.0
Content-Type: Multipart/Mixed;
 boundary="--Next_Part(Sat_Jan__5_11:28:34_2002_076)--"
Content-Transfer-Encoding: 7bit
Reply-To: doc-jp@jp.FreeBSD.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+011218
X-Sequence: doc-jp 8604
Subject: [doc-jp 8604] Re: FreeBSD Security Advisory FreeBSD-SA-02:01.pkg_add
Errors-To: owner-doc-jp@jp.FreeBSD.org
Sender: owner-doc-jp@jp.FreeBSD.org
X-Originator: hrs@eos.ocn.ne.jp

----Next_Part(Sat_Jan__5_11:28:34_2002_076)--
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit

$B:4F#!wEl5~M}2JBg3X$G$9!#(B

 02:01 $B$H(B 02:02 $B$G$9!#(B
 "package" $B$,$A$g$C$HIT<+A3$+$bCN$l$^$;$s!#(B

  # $B:#G/$NL\I8(B: $BL\;X$;(B 24 $B;~4V0JFb(B :-P

--
| $B:4F#(B $B9-@8!wEl5~M}2JBg3X(B <hrs@eos.ocn.ne.jp>
|                         <hrs@FreeBSD.org> (FreeBSD Project)

----Next_Part(Sat_Jan__5_11:28:34_2002_076)--
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit


FreeBSD $B%;%-%e%j%F%#4+9p(B $BF|K\8lHG(B
=============================================================================
FreeBSD-SA-02:01 (2002-01-04)
 * Directory permission vulnerability in pkg_add
=============================================================================

 $B$3$N%a!<%k$O(B, announce-jp $B$KN.$l$?(B

  Subject: FreeBSD Security Advisory FreeBSD-SA-02:01.pkg_add
  From: FreeBSD Security Advisories <security-advisories@FreeBSD.ORG>
  Date: Fri, 4 Jan 2002 17:04:13 -0800 (PST)
  Message-Id: <200201050104.g0514Ds92963@freefall.freebsd.org>
  X-Sequence: 

 $B$rF|K\8lLu$7$?$b$N$G$9(B. 

 $B86J8$O(B PGP $B=pL>$5$l$F$$$^$9$,(B, $B$3$NF|K\8lLu$O(B PGP $B=pL>$5$l$F$$$^$;$s(B. 
 $B=$@5%Q%C%AEy$NFbMF$,2~$6$s$5$l$F$$$J$$$3$H$r3NG'$9$k$?$a$K(B PGP $B=pL>$N(B
 $B%A%'%C%/$r9T$J$&$K$O(B, $B86J8$r;2>H$7$F$/$@$5$$(B. 

 $BF|K\8lLu$*$h$S(B, $B%_%i!<%5%$%HMxMQ$N>\:Y$K$D$$$F$O(B, $BJ8Kv$N!V(BA. FreeBSD
 $B%;%-%e%j%F%#4+9p(B $BF|K\8lHG$K$D$$$F!W$r$4Mw$/$@$5$$(B.


                                     [$BK]Lu<T(B: $B:4F#(B $B9-@8(B <hrs@jp.FreeBSD.org>]
--($B$3$3$+$i(B)
=============================================================================
FreeBSD-SA-02:01                                            Security Advisory
                                                                FreeBSD, Inc.

$B%H%T%C%/(B:	pkg_add $B$K$*$1$k%G%#%l%/%H%j5v2DB0@-$K5/0x$9$k(B
                $B%;%-%e%j%F%#>e$N<eE@(B
                (Directory permission vulnerability in pkg_add)

$BJ,N`(B:		core
$B%b%8%e!<%k(B:	pkg_install
$B9pCNF|(B:		2002-01-04
$B%/%l%8%C%H(B:	The Anarcat <anarcat@anarcat.dyndns.org>
$B1F6AHO0O(B:	$B=$@5F|0JA0$N$9$Y$F$N%P!<%8%g%s$N(B FreeBSD
$B=$@5F|(B:		2001/11/22 17:40:36 UTC (4.4-STABLE, $BJLL>(B RELENG_4)
                2001/12/07 20:58:46 UTC (4.4-RELEASEp1, $BJLL>(B RELENG_4_4)
                2001/12/07 20:57:19 UTC (4.3-RELEASEp21, $BJLL>(B RELENG_4_3)
FreeBSD $B$K8GM-$+(B:	NO


I.   $BGX7J(B - Background

pkg_add is a utility program used to install software package
distributions on FreeBSD systems.

pkg_add $B$O(B, FreeBSD $B%7%9%F%`$K$*$$$F%=%U%H%&%'%"%Q%C%1!<%8$r(B
$B%$%s%9%H!<%k$9$k$?$a$KMQ$$$i$l$k%f!<%F%#%j%F%#%W%m%0%i%`$G$9(B.


II.  $BLdBj$N>\:Y(B - Problem Description

pkg_add extracts the contents of the package to a temporary directory,
then moves files from the temporary directory to their ultimate
destination on the system.  The temporary directory used in the
extraction was created with world-writable permissions, allowing
arbitrary users to examine the contents of the package as it was
being extracted.  This might allow users to attack world-writable
parts of the package during installation.

pkg_add $B$O(B package $B$NFbMF$r0l;~%G%#%l%/%H%j$KE83+$7(B, $B$=$7$F(B
$BE83+$5$l$?%U%!%$%k$r(B, $B$=$N0l;~%G%#%l%/%H%j$+$i%7%9%F%`>e$N(B
$B%$%s%9%H!<%k@h$K0\F0$7$^$9(B.  $B$3$NE83+=hM}$KMQ$$$i$l$k(B
$B0l;~%G%#%l%/%H%j$O:#$^$G(B, $BC/$b$,=q$-9~$_2DG=$J5v2DB0@-$G(B
$B:n@.$5$l$F$$$^$7$?(B.  $B$=$N$?$a(B, $B%f!<%6$J$iC/$G$b(B package $B$,(B
$BE83+$5$l$?;~$K$=$NFbMF$r8+$k$3$H$,2DG=$K$J$C$F$$$^$7$?(B.
$B$^$?$3$N$3$H$O(B, $B%$%s%9%H!<%k;~$K%f!<%6$+$i(B package $B$K(B
$B4^$^$l$F$$$kC/$b$,=q$-9~$_2DG=$J%U%!%$%k$r967b$9$k$3$H$,(B
$B2DG=$G$"$k$H$$$&4m81@-$,$"$j$^$9(B.


III. $B1F6AHO0O(B - Impact

A local attacker may be able to modify the package contents and
potentially elevate privileges or otherwise compromise the system.
There are no known exploits as of the date of this advisory.

$B%m!<%+%k$N967b<T$O(B, package $B$NFbMF$rJQ99$9$k$3$H(B, $B$=$7$F(B
$B$=$l$rMxMQ$7$F$h$j9b$$8"8B$rF@$k$J$I(B, $B$=$N%7%9%F%`$KBP$9$k(B
$B6<0R$H$J$jF@$k2DG=@-$,$"$j$^$9(B.  $B$?$@$7(B, $B$3$N4+9p$,H/9T$5$l$?;~E@$G$O(B,
$B$3$N%;%-%e%j%F%#>e$N<eE@$r0-MQ$9$k6qBNE*$JJ}K!$O8+$D$+$C$F$$$^$;$s(B.


IV.  $B2sHrJ}K!(B - Workaround

1) Remove or discontinue use of the pkg_add binary until it has
been upgraded.
1) pkg_add $B%P%$%J%j$r%"%C%W%0%l!<%I$9$k$^$G(B, $B%P%$%J%j$r:o=|$9$k$+(B
   $B;HMQ$r95$($F$/$@$5$$(B.

2) When running pkg_add, create a secure temporary directory (such
as /var/tmp/inst) and secure the directory permissions (chmod 700
/var/tmp/inst).  Set the TMPDIR environment variable to this
directory before running pkg_add.

2) pkg_add $B$r<B9T$9$k;~$K(B, $B0BA4$J0l;~%G%#%l%/%H%j(B ($B$?$H$($P(B
   /var/tmp/inst) $B$r:n@.$7(B, $B%G%#%l%/%H%j$N5v2DB0@-$r0BA4$J$b$N(B
   (chmod 700 /var/tmp/inst) $B$K@_Dj$7$^$9(B.  $B$=$7$F(B pkg_add $B$r(B
   $B<B9T$9$kA0$K(B TMPDIR $B4D6-JQ?t$K$3$N%G%#%l%/%H%j$r@_Dj$7$F$/$@$5$$(B.


V.   $B2r7h:v(B - Solution

1) Upgrade your vulnerable FreeBSD system to 4.4-STABLE, or the
RELENG_4_4 or RELENG_4_3 security branches dated after the respective
correction dates.

1) $B<eE@$r;}$C$?(B FreeBSD $B%7%9%F%`$r(B, $B=$@5F|0J9_$N(B 4.4-STABLE, $B$"$k$$$O(B
   RELENG_4_4, RELENG_4_3 $B%;%-%e%j%F%#%V%i%s%A$K%"%C%W%0%l!<%I$7$^$9(B.

2) $B=$@5F|0JA0$N(B FreeBSD 4.x $B%7%9%F%`$N>l9g(B:

The following patch has been verified to apply to FreeBSD 4.3-RELEASE,
4.4-RELEASE, and 4-STABLE dated prior to the correction date.  This
patch may or may not apply to older, unsupported releases of FreeBSD.

$B<!$N=$@5%Q%C%A$O(B, FreeBSD 4.3-RELEASE, 4.4-RELEASE, $B=$@5F|0JA0$N(B 4-STABLE $B$K(B
$BBP$7$FE,MQ2DG=$J$3$H$,3NG'$5$l$F$$$k$b$N$G$9(B.  $B$=$l$h$j$b8E$$%j%j!<%9$d(B
$B%5%]!<%H$5$l$F$$$J$$(B FreeBSD $B%j%j!<%9$KBP$7$F$O(B, $B$3$l$i$N=$@5%Q%C%A$,(B
$B@5$7$/E,MQ$G$-$J$$2DG=@-$,$"$j$^$9(B.

Download the patch and the detached PGP signature from the following
locations, and verify the signature using your PGP utility.

$B=$@5%Q%C%A$H(B PGP $B=pL>$r<!$N>l=j$+$i%@%&%s%m!<%I$7$F(B,
PGP $B%f!<%F%#%j%F%#$r;H$C$F(B PGP $B=pL>$r3NG'$7$^$9(B.

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-02:01/pkg_add.patch
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-02:01/pkg_add.patch.asc

Execute the following commands as root:
$B$=$7$F(B root $B8"8B$G0J2<$N%3%^%s%I$r<B9T$7$^$9(B.

# cd /usr/src
# patch -p < /path/to/patch
# cd /usr/src/usr.sbin/pkg_install
# make depend && make all install


VI.  $B=$@5$N>\:Y(B - Correction details

The following list contains the $FreeBSD$ revision numbers of each
file that was corrected in the FreeBSD source

$B<!$NI=$O(B, $B:#2s=$@5$5$l$?(B FreeBSD $B$N%=!<%9%U%!%$%k$N(B
$FreeBSD$ $B%j%S%8%g%sHV9f$G$9(B.

Path                                                             Revision
$B%Q%9L>(B                                                          $B%j%S%8%g%s(B
  Branch
  $B%V%i%s%A(B
- -------------------------------------------------------------------------
src/usr.sbin/pkg_install/lib/pen.c
  HEAD                                                               1.37
  RELENG_4                                                       1.31.2.6
  RELENG_4_4                                                 1.31.2.2.2.1
  RELENG_4_3                                                 1.31.2.1.2.1
- -------------------------------------------------------------------------


VII. $B;29M;qNA(B - References

<URL:http://www.FreeBSD.org/cgi/query-pr.cgi?pr=32172>

A.   FreeBSD $B%;%-%e%j%F%#4+9p(B $BF|K\8lHG$K$D$$$F(B

$BF|K\8lLu$O(B FreeBSD $BF|K\8l%I%-%e%a%s%F!<%7%g%s%W%m%8%'%/%H(B (doc-jp) $B$,(B
$B;29M$N$?$a$KDs6!$9$k$b$N$G$9(B.  $B2a5n$NF|K\8lHG%;%-%e%j%F%#4+9p$O(B

 http://www.FreeBSD.org/ja/security/

$B$K$^$H$a$i$l$F$$$^$9(B.  

$B$?$@$7(B, $BK]Lu<T$*$h$S(B doc-jp $B$O(B, $B$=$NFbMF$K$D$$$F$$$+$J$kJ]>Z$b(B
$B$$$?$7$^$;$s$N$G$4Cm0U$/$@$5$$(B.  $BF|K\8lLu$K$D$$$F$N$40U8+(B, $B$4MWK>(B,
$B$*Ld$$9g$o$;Ey$O(B doc-jp@jp.FreeBSD.org $B$^$G$*4j$$$7$^$9(B.

$B$3$N4+9p$NCf$G>R2p$5$l$F$$$k(B WWW $B%5%$%H(B http://www.FreeBSD.org/ $B$*$h$S(B
FTP $B%5%$%H(B ftp://ftp.FreeBSD.org/ $B$K$O(B, $BF|K\$N%_%i!<%5%$%H$,B8:_$7$^$9(B.
$B%M%C%H%o!<%/$N:.;($r4KOB$9$k$?$a(B, $B$^$:$O%_%i!<%5%$%H$NMxMQ$r(B
$B9MN8$9$k$h$&$*4j$$$7$^$9(B.

$BF|K\$N%_%i!<%5%$%H$rMxMQ$9$k$K$O(B,
http://www.FreeBSD.org/ $B$r(B http://www.jp.FreeBSD.org/www.freebsd.org/ $B$K(B,
ftp://ftp.FreeBSD.org/ $B$r(B ftp://ftp.jp.FreeBSD.org/ $B$K(B,
$B$=$l$>$lCV$-49$($F$/$@$5$$(B.

$BB>$NCO0h$r4^$`(B, $B%_%i!<%5%$%H$K4X$9$k>\:Y$O(B,

 http://www.FreeBSD.org/handbook/mirror.html ($B1QJ8(B)
 http://www.FreeBSD.org/ja/handbook/mirror.html ($BF|K\8lLu(B)

$B$K$^$H$a$i$l$F$$$^$9(B.

$hrs: announce-jp/FreeBSD-SA/02:01,v 1.2 2002/01/05 02:04:33 hrs Exp $

----Next_Part(Sat_Jan__5_11:28:34_2002_076)--
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit


FreeBSD $B%;%-%e%j%F%#4+9p(B $BF|K\8lHG(B
=============================================================================
FreeBSD-SA-02:02 (2002-01-04)
 * pw(8) race condition may allow disclosure of master.passwd
=============================================================================

 $B$3$N%a!<%k$O(B, announce-jp $B$KN.$l$?(B

  Subject: FreeBSD Security Advisory FreeBSD-SA-02:02.pw
  From: FreeBSD Security Advisories <security-advisories@FreeBSD.ORG>
  Date: Fri, 4 Jan 2002 17:04:21 -0800 (PST)
  Message-Id: <200201050104.g0514Lc93004@freefall.freebsd.org>
  X-Sequence: 

 $B$rF|K\8lLu$7$?$b$N$G$9(B. 

 $B86J8$O(B PGP $B=pL>$5$l$F$$$^$9$,(B, $B$3$NF|K\8lLu$O(B PGP $B=pL>$5$l$F$$$^$;$s(B. 
 $B=$@5%Q%C%AEy$NFbMF$,2~$6$s$5$l$F$$$J$$$3$H$r3NG'$9$k$?$a$K(B PGP $B=pL>$N(B
 $B%A%'%C%/$r9T$J$&$K$O(B, $B86J8$r;2>H$7$F$/$@$5$$(B. 

 $BF|K\8lLu$*$h$S(B, $B%_%i!<%5%$%HMxMQ$N>\:Y$K$D$$$F$O(B, $BJ8Kv$N!V(BA. FreeBSD
 $B%;%-%e%j%F%#4+9p(B $BF|K\8lHG$K$D$$$F!W$r$4Mw$/$@$5$$(B.


                                     [$BK]Lu<T(B: $B:4F#(B $B9-@8(B <hrs@jp.FreeBSD.org>]
--($B$3$3$+$i(B)
=============================================================================
FreeBSD-SA-02:02                                            Security Advisory
                                                                FreeBSD, Inc.

$B%H%T%C%/(B:	pw(8) $B$N6%9g>uBV$K$h$k(B master.passwd $BO31L$N4m81@-(B
                (pw(8) race condition may allow disclosure of master.passwd)

$BJ,N`(B:		core
$B%b%8%e!<%k(B:	pw
$B9pCNF|(B:		2002-01-04
$B%/%l%8%C%H(B:	ryan beasley <ryanb@goddamnbastard.org>
$B1F6AHO0O(B:	4.5-RELEASE $B$h$jA0$N$9$Y$F$N%j%j!<%9(B
                $B=$@5F|0JA0$N(B 4.4-STABLE
$B=$@5F|(B:		2001-12-21 15:21:32 UTC (4.4-STABLE, $BJLL>(B RELENG_4)
                2001-12-21 15:22:55 UTC (4.4-RELEASEp1, $BJLL>(B RELENG_4_4)
                2001-12-21 15:23:04 UTC (4.3-RELEASEp21, $BJLL>(B RELENG_4_3)
FreeBSD $B$K8GM-$+(B:	YES


I.   $BGX7J(B - Background

The pw(8) utility is used to create, remove, modify, and display system
users and groups.

pw(8) $B$O(B, $B%7%9%F%`$N%f!<%6$H%0%k!<%W$r:n@.(B/$B:o=|(B/$BJQ99(B/$BI=<($9$k$?$a$K(B
$B;H$o$l$k%f!<%F%#%j%F%#$G$9(B.


II.  $BLdBj$N>\:Y(B - Problem Description

When creating, removing, or modifying system users, the pw utility
modifies the system password file `/etc/master.passwd'.  This file
contains the users' encrypted passwords and is normally only readable
by root.  During the modification, a temporary copy of the file is
created. However, this temporary file is mistakenly created with
permissions that allow it to be read by any user.

$B%7%9%F%`>e$N%f!<%6$r:n@.(B, $B:o=|(B, $BJQ99$9$k:](B, pw $B%f!<%F%#%j%F%#$O(B
$B%7%9%F%`%Q%9%o!<%I%U%!%$%k(B `/etc/master.passwd' $B$rJQ99$7$^$9(B.
$B$3$N%U%!%$%k$K$O0E9f2=$5$l$?%f!<%6%Q%9%o!<%I$,3JG<$5$l$F$*$j(B,
$BDL>o$O(B root $B$N$_$,FI$_=P$;$k$h$&$K$J$C$F$$$^$9(B.  pw $B$,$3$N%U%!%$%k$r(B
$BJQ99$7$F$$$k4V(B, $B0l;~E*$K%Q%9%o!<%I%U%!%$%k$N%3%T!<$,:n@.$5$l$k$N$G$9$,(B,
$B$3$N0l;~%U%!%$%k$OITE,@Z$J5v2DB0@-$G:n@.$5$l$F$*$j(B, $B$9$Y$F$N%f!<%6$+$i(B
$BFI$_=P$72DG=$K$J$C$F$$$^$9(B.


III. $B1F6AHO0O(B - Impact

A local attacker can read the temporary file created by pw(8) and
use the encrypted passwords to conduct an off-line dictionary attack.
A successful attack would result in the recovery of one or more
passwords.  Because the temporary file is short-lived (it is removed
almost immediately after creation), this can be difficult to exploit:
an attacker must `race' to read the file before it is removed.

$B%m!<%+%k$N967b<T$O(B pw(8) $B$N:n@.$9$k0l;~%U%!%$%k$rFI$_(B, $B3MF@$7$?(B
$B0E9f2=$5$l$?%Q%9%o!<%I$K%*%U%i%$%s<-=q967b$r2C$($k$3$H$,2DG=$G$9(B.
$B$3$N967b$K@.8y$9$k$H(B, 1 $B$D(B, $B$b$7$/$OJ#?t$N%Q%9%o!<%I$,I|85$G$-$^$9(B.
$B$?$@$70l;~%U%!%$%k$OC;;~4V$7$+B8:_$7$J$$(B ($B:n@.$N$[$\D>8e$K(B
$B:o=|$5$l$k(B) $B$?$a(B, $B<B:]$K$3$N<eE@$r0-MQ$9$k$3$H$O:$Fq$G$9(B.
$B$D$^$j967b<T$O(B, $B$3$N%U%!%$%k$,:o=|$5$l$kA0$K%U%!%$%k$r(B
$BFI$_=P$9$H$$$&6%9g>uBV$KBG$A>!$DI,MW$,$"$j$^$9(B.


IV.  $B2sHrJ}K!(B - Workaround

1) Do not use pw(8) to create, remove, or modify system users.

1) $B%7%9%F%`%f!<%6$N:n@.(B, $B:o=|(B, $BJQ99$K(B pw(8) $B$r;H$o$J$$$G$/$@$5$$(B.


V.   $B2r7h:v(B - Solution

$B<!$N$$$:$l$+$K=>$C$F$/$@$5$$(B.

1) Upgrade your vulnerable FreeBSD system to 4-STABLE (RELENG_4), the
4.4-RELEASE security-fix branch (RELENG_4_4), or the 4.3-RELEASE
security-fix branch (RELENG_4_3), dated after the correction date.

1) $B<eE@$r;}$C$?(B FreeBSD $B%7%9%F%`$r(B, $B$=$l$>$l=$@5F|0J9_$N(B
   4-STABLE, 4.4-RELEASE $B%;%-%e%j%F%#%V%i%s%A(B (RELENG_4_4),
   4.3-RELEASE $B%;%-%e%j%F%#%V%i%s%A(B (RELENG_4_3) $B$K%"%C%W%0%l!<%I$7$^$9(B.

2) $B=$@5F|0JA0$N(B FreeBSD 4.x $B%7%9%F%`$N>l9g(B:

The following patch has been verified to apply to FreeBSD 4.3-RELEASE,
4.4-RELEASE, and 4-STABLE dated prior to the correction date.  This
patch may or may not apply to older, unsupported releases of FreeBSD.

$B<!$N=$@5%Q%C%A$O(B, FreeBSD 4.3-RELEASE, 4.4-RELEASE, $B=$@5F|0JA0$N(B 4-STABLE $B$K(B
$BBP$7$FE,MQ2DG=$J$3$H$,3NG'$5$l$F$$$k$b$N$G$9(B.  $B$=$l$h$j$b8E$$%j%j!<%9$d(B
$B%5%]!<%H$5$l$F$$$J$$(B FreeBSD $B%j%j!<%9$KBP$7$F$O(B, $B$3$l$i$N=$@5%Q%C%A$,(B
$B@5$7$/E,MQ$G$-$J$$2DG=@-$,$"$j$^$9(B.

Download the patch and the detached PGP signature from the following
locations, and verify the signature using your PGP utility.

$B=$@5%Q%C%A$H(B PGP $B=pL>$r<!$N>l=j$+$i%@%&%s%m!<%I$7$F(B,
PGP $B%f!<%F%#%j%F%#$r;H$C$F(B PGP $B=pL>$r3NG'$7$^$9(B.

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-02:02/pw.patch
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-02:02/pw.patch.asc

Execute the following commands as root:
$B$=$7$F(B root $B8"8B$G0J2<$N%3%^%s%I$r<B9T$7$^$9(B.

# cd /usr/src
# patch < /path/to/patch
# cd /usr/src/usr.sbin/pw
# make depend && make all install

VI.  $B=$@5$N>\:Y(B - Correction details

The following list contains the $FreeBSD$ revision numbers of each
file that was corrected in the FreeBSD source
$B<!$NI=$O(B, $B:#2s=$@5$5$l$?(B FreeBSD $B$N%=!<%9%U%!%$%k$N(B
$FreeBSD$ $B%j%S%8%g%sHV9f$G$9(B.

Path                                                             Revision
$B%Q%9L>(B                                                          $B%j%S%8%g%s(B
  Branch
  $B%V%i%s%A(B
- -------------------------------------------------------------------------
src/usr.sbin/pw/pwupd.c
  HEAD (CURRENT)                                                     1.18
  RELENG_4 (4-STABLE)                                            1.12.2.4
  RELENG_4_4 (4.4-RELEASE security branch)                   1.12.2.3.4.1
  RELENG_4_3 (4.3-RELEASE security branch)                   1.12.2.3.2.1
- -------------------------------------------------------------------------


A.   FreeBSD $B%;%-%e%j%F%#4+9p(B $BF|K\8lHG$K$D$$$F(B

$BF|K\8lLu$O(B FreeBSD $BF|K\8l%I%-%e%a%s%F!<%7%g%s%W%m%8%'%/%H(B (doc-jp) $B$,(B
$B;29M$N$?$a$KDs6!$9$k$b$N$G$9(B.  $B2a5n$NF|K\8lHG%;%-%e%j%F%#4+9p$O(B

 http://www.FreeBSD.org/ja/security/

$B$K$^$H$a$i$l$F$$$^$9(B.  

$B$?$@$7(B, $BK]Lu<T$*$h$S(B doc-jp $B$O(B, $B$=$NFbMF$K$D$$$F$$$+$J$kJ]>Z$b(B
$B$$$?$7$^$;$s$N$G$4Cm0U$/$@$5$$(B.  $BF|K\8lLu$K$D$$$F$N$40U8+(B, $B$4MWK>(B,
$B$*Ld$$9g$o$;Ey$O(B doc-jp@jp.FreeBSD.org $B$^$G$*4j$$$7$^$9(B.

$B$3$N4+9p$NCf$G>R2p$5$l$F$$$k(B WWW $B%5%$%H(B http://www.FreeBSD.org/ $B$*$h$S(B
FTP $B%5%$%H(B ftp://ftp.FreeBSD.org/ $B$K$O(B, $BF|K\$N%_%i!<%5%$%H$,B8:_$7$^$9(B.
$B%M%C%H%o!<%/$N:.;($r4KOB$9$k$?$a(B, $B$^$:$O%_%i!<%5%$%H$NMxMQ$r(B
$B9MN8$9$k$h$&$*4j$$$7$^$9(B.

$BF|K\$N%_%i!<%5%$%H$rMxMQ$9$k$K$O(B,
http://www.FreeBSD.org/ $B$r(B http://www.jp.FreeBSD.org/www.freebsd.org/ $B$K(B,
ftp://ftp.FreeBSD.org/ $B$r(B ftp://ftp.jp.FreeBSD.org/ $B$K(B,
$B$=$l$>$lCV$-49$($F$/$@$5$$(B.

$BB>$NCO0h$r4^$`(B, $B%_%i!<%5%$%H$K4X$9$k>\:Y$O(B,

 http://www.FreeBSD.org/handbook/mirror.html ($B1QJ8(B)
 http://www.FreeBSD.org/ja/handbook/mirror.html ($BF|K\8lLu(B)

$B$K$^$H$a$i$l$F$$$^$9(B.

$hrs: announce-jp/FreeBSD-SA/02:02,v 1.2 2002/01/05 02:22:11 hrs Exp $

----Next_Part(Sat_Jan__5_11:28:34_2002_076)----
