$Id: openbsd-sux5.txt,v 1.1 2004/05/21 15:25:28 simonb Exp $ and #5 in our ongoing serious of OpenBSD sucks... ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/021_cvs2.patch Note: Apply by doing: cd /usr/src patch -p0 < 021_cvs2.patch And then rebuild and install cvs: cd gnu/usr.bin/cvs make -f Makefile.bsd-wrapper obj make -f Makefile.bsd-wrapper make -f Makefile.bsd-wrapper install .......... *GREAT* Schoolboy errors here, and this is supposed to be a security patch. So, the source is patched, but nowhere does it say : make -f Makefile.bsd-wrapper cleandir Now, `make' is supposed to be clever enough to realise what source files have changed and update those only, but would you really want to trust it ??? For the sake of a few more CPU cycles, i'd rather have to do a make cleandir than risk having some .o file thrown in that was still vulnerable to this issue. /me awaits GobblesBSD S.