Re: Upcoming FreeBSD Security Advisory

Dag-Erling Sm=C3=B8rgrav napsal/wrote, On 12/01/09 14:12:
> As to the second: yes, 6.1 is most likely affected.

Probably no.

The older algorithm used in 6.1 looks like
  -----------------
if (trusted) {
	variable =3D getenv(NAME);
         ....
  -----------------

The affected algorithm looks like:
  -----------------
if (!trusted) {
	unsetenv(NAME);
	...
};
variable =3D getenv(NAME);
  -----------------

As far as I know such change has been MFCed into 6.3, 6.4, 7.x but not=20
into 6.1. So 6.1 should not be affected by this bug (but remain=20
vulnerable to problem that triggered the change of old algorithm to new).=

					Dan

_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"