Examples of using Binary Updates
$ uname -spr
NetBSD 1.5.2 i386
$ sh binary-update.NetBSD-1.5.2-i386-SA2001-018-lpd
This is a binary update for NetBSD-1.5.2-i386-SA2001-018-lpd.
NetBSD Security Advisory 2001-018
Remote Buffer Overflow Vulnerability in BSD Line Printer Daemon
http://msgs.securepoint.com/cgi-bin/get/bugtraq0108/259.html
usage: binary-update [-ifrvlw]
-i install (extract archive)
-r reverse changes
-l list files in archive
-w why? (reference information)
Another example:
# sh binary-update.NetBSD-1.5.2-i386-SA2002-004-ssh -w -l
This is a binary update for NetBSD-1.5.2-i386-SA2002-004-ssh.
NetBSD Security Advisory 2002-004
local and remote root exploit - Off-by-one error in openssh session
http://www.pine.nl/advisories/pine-cert-20020301.html
listing files in archive file:
usr/bin/slogin
usr/bin/ssh
usr/sbin/sshd
Another example
www:~$ sudo sh ./binary-update.NetBSD-1.6-i386-cvs-20030120 -i
Backing up files ...
Made backup directory ./usr/bin/.binary-update/pre-NetBSD-1.6-i386-cvs-20030120
Now extracting new files to /
Install finished.
www:~$ ls -l /usr/bin/cvs
-r-xr-xr-x 1 root wheel 494284 Jan 23 19:23 /usr/bin/cvs
Logging
$ cat /var/log/binary-updates
NetBSD-1.5.2-i386-SA2001-018-lpd Installed Wed Mar 20 21:26:28 EST 2002
NetBSD-1.5.2-i386-SA2002-006-libc Installed Tue Jul 16 18:04:06 EDT 2002
NetBSD-1.5.2-i386-SA2002-006-libc Reversed Tue Jul 16 18:05:14 EDT 2002
NetBSD-1.5.2-i386-SA2002-006-libc Installed Tue Jul 16 18:05:47 EDT 2002
NetBSD-1.5.2-i386-openssl-20020730 Installed Tue Jul 30 16:19:44 EDT 2002
NetBSD-1.5.2-i386-openssl-20020730 Reversed Tue Jul 30 17:02:42 EDT 2002
NetBSD-1.5.2-i386-openssl-20020730 Installed Tue Jul 30 17:19:28 EDT 2002
...
NetBSD-1.6-i386-SA2002-027-ftpd Reversed Tue Nov 19 11:43:34 PST 2002 NetBSD 1.6 i386
NetBSD-1.6-i386-SA2002-027-ftpd Installed Tue Nov 19 11:43:37 PST 2002 NetBSD 1.6 i386
NetBSD-1.6-i386-SA2002-028-libc Installed Tue Nov 19 13:52:32 PST 2002 NetBSD 1.6 i386
NetBSD-1.6-i386-cvs-20030120 Installed Thu Jan 23 23:30:16 PST 2003 NetBSD 1.6 i386
|