Re: Is it necessary to recompile just to apply a security patch?

2008-08-03 Thread Zamri Besar
On Wed, Jul 30, 2008 at 5:25 AM, Ingo Schwarze [EMAIL PROTECTED] wrote: Hi skogzort, Nick Guenther wrote on Tue, Jul 29, 2008 at 01:05:52PM -0400: On Tue, Jul 29, 2008 at 11:41 AM, skogzort [EMAIL PROTECTED] wrote: I know nothing/very little about OpenBSD or UNIX. I have been tasked with

Re: Is it necessary to recompile just to apply a security patch?

2008-07-30 Thread Paul de Weerd
On Tue, Jul 29, 2008 at 10:57:19PM -0500, John Brooks wrote: | how about this: | | uname -a | | or this: | | head -1 /etc/motd For completeness' sake : [EMAIL PROTECTED] $ sysctl kern.version kern.version=OpenBSD 4.4-beta (GENERIC) #977: Mon Jul 14 20:20:57 MDT 2008 [EMAIL

Is it necessary to recompile just to apply a security patch?

2008-07-29 Thread skogzort
Is it necessary to recompile just to apply a security patch? Hello, I know nothing/very little about OpenBSD or UNIX. I have been tasked with updating our OpenBSD DNS server with a security fix (Vulnerability Note VU#800113- Multiple DNS implementations vulnerable to cache poisoning). In order

Re: Is it necessary to recompile just to apply a security patch?

2008-07-29 Thread Nick Guenther
On Tue, Jul 29, 2008 at 11:41 AM, skogzort [EMAIL PROTECTED] wrote: Is it necessary to recompile just to apply a security patch? Hello, I know nothing/very little about OpenBSD or UNIX. I have been tasked with updating our OpenBSD DNS server with a security fix (Vulnerability Note VU#800113-

Re: Is it necessary to recompile just to apply a security patch?

2008-07-29 Thread Heinrich Rebehn
skogzort wrote: Is it necessary to recompile just to apply a security patch? Hello, I know nothing/very little about OpenBSD or UNIX. I have been tasked with updating our OpenBSD DNS server with a security fix (Vulnerability Note VU#800113- Multiple DNS implementations vulnerable to cache

Re: Is it necessary to recompile just to apply a security patch?

2008-07-29 Thread Andreas Maus
On Tue, Jul 29, 2008 at 08:41:36AM -0700, skogzort wrote: Is it necessary to recompile just to apply a security patch? Of course! ;) In order to do this it appears that I have to download the source code re-compile the entire OS. Recompiling the OS seems to involve a lot of steps. Before I

Re: Is it necessary to recompile just to apply a security patch?

2008-07-29 Thread Zamri Besar
On Tue, Jul 29, 2008 at 11:41 PM, skogzort [EMAIL PROTECTED] wrote: Is it necessary to recompile just to apply a security patch? Hello, I know nothing/very little about OpenBSD or UNIX. I have been tasked with updating our OpenBSD DNS server with a security fix (Vulnerability Note

Re: Is it necessary to recompile just to apply a security patch?

2008-07-29 Thread Ingo Schwarze
Hi skogzort, Nick Guenther wrote on Tue, Jul 29, 2008 at 01:05:52PM -0400: On Tue, Jul 29, 2008 at 11:41 AM, skogzort [EMAIL PROTECTED] wrote: I know nothing/very little about OpenBSD or UNIX. I have been tasked with updating our OpenBSD DNS server with a security fix (Vulnerability Note

Re: Is it necessary to recompile just to apply a security patch?

2008-07-29 Thread Andrew Dalgleish
On Wed, Jul 30, 2008 at 7:25 AM, Ingo Schwarze [EMAIL PROTECTED] wrote: [snippage] Quite probably, your server might be terribly out of date. OpenBSD servers ought to be updated at least once a year. Please look at the first line of the output of dmesg(8). If the server has been up for a

Re: Is it necessary to recompile just to apply a security patch?

2008-07-29 Thread Joel Sing
On Wednesday 30 July 2008, Andrew Dalgleish wrote: On Wed, Jul 30, 2008 at 7:25 AM, Ingo Schwarze [EMAIL PROTECTED] wrote: [snippage] Quite probably, your server might be terribly out of date. OpenBSD servers ought to be updated at least once a year. Please look at the first line of the

Re: Is it necessary to recompile just to apply a security patch?

2008-07-29 Thread Nick Guenther
On Tue, Jul 29, 2008 at 5:25 PM, Ingo Schwarze [EMAIL PROTECTED] wrote: Nick wrote: OpenBSD is mostly designed as a monolithic kernel. Please stop spreading misleading advice. This has nothing to do with the kernel. (Hopefully, skogzort didn't start building kernels yet.) Sorry. I didn't

Re: Is it necessary to recompile just to apply a security patch?

2008-07-29 Thread John Brooks
how about this: uname -a or this: head -1 /etc/motd -- John Brooks [EMAIL PROTECTED] ... Please look at the first line of the output of dmesg(8). If the server has been up for a while, the circular buffer may have been over-written. Try: head -1 /var/run/dmesg.boot