Date: Sat, 23 Jan 2010 02:23:46 +0000 (GMT) From: moggie@elasticmind.net To: FreeBSD-gnats-submit@FreeBSD.org Subject: ports/143098: [maintainer-update|patch] irc/ircd-ratbox-devel: Security vuln / bugfix release Message-ID: <20100123022346.38D4526D28B@mail.elasticmind.net> Resent-Message-ID: <201001230230.o0N2U5HF069983@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 143098 >Category: ports >Synopsis: [maintainer-update|patch] irc/ircd-ratbox-devel: Security vuln / bugfix release >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: maintainer-update >Submitter-Id: current-users >Arrival-Date: Sat Jan 23 02:30:04 UTC 2010 >Closed-Date: >Last-Modified: >Originator: moggie >Release: FreeBSD 7.2-RELEASE-p5 amd64 >Organization: >Environment: System: FreeBSD 7.2-RELEASE-p5 FreeBSD 7.2-RELEASE-p5 #0: Thu Dec 3 18:59:41 GMT 2009 amd64 >Description: Updates ircd-ratbox-devel port to ircd-ratbox-3.0.5. Contains a number of bug fixes, including a help module fix which resolves a minor potential vuln: o Fix a bug with reading help files. o Add debugging in for dealing with a k-line removal bug. o Fix /rehash temp d-lines and /rehash bans so they actually do something with d-lines. o Compute the number of file descriptors passed correctly on FreeBSD/amd64 (and probably others). o Check for compiler support for various warning flags and add them. o Add -fno-strict-aliasing as this is now needed for gcc 4.4. o GNUTLS code now picks up new keys/certificates on rehash. >How-To-Repeat: >Fix: --- ircd-ratbox-devel-3.0.5.diff begins here --- diff -ruN ircd-ratbox-devel.orig/Makefile ircd-ratbox-devel/Makefile --- ircd-ratbox-devel.orig/Makefile 2010-01-22 21:46:11.000000000 +0000 +++ ircd-ratbox-devel/Makefile 2010-01-22 21:49:18.000000000 +0000 @@ -7,8 +7,8 @@ # ex: ts=8 PORTNAME= ircd-ratbox -PORTVERSION= 3.0.4 -PORTREVISION= 2 +PORTVERSION= 3.0.5 +#PORTREVISION= 2 CATEGORIES= irc ipv6 MASTER_SITES= ftp://ftp.ircd-ratbox.org/pub/ircd-ratbox/testing/ \ ftp://ftp.demon.co.uk/pub/mirrors/ircd-ratbox/testing/ \ diff -ruN ircd-ratbox-devel.orig/distinfo ircd-ratbox-devel/distinfo --- ircd-ratbox-devel.orig/distinfo 2010-01-22 21:46:11.000000000 +0000 +++ ircd-ratbox-devel/distinfo 2010-01-22 21:49:43.000000000 +0000 @@ -1,3 +1,3 @@ -MD5 (ircd-ratbox-3.0.4.tar.bz2) = 6e2377a3bb9c016a1a15b0bb2965f6e1 -SHA256 (ircd-ratbox-3.0.4.tar.bz2) = e45444b5e8956faf1f43e509844fba7da539b4f97422c34d0d97345a4745e385 -SIZE (ircd-ratbox-3.0.4.tar.bz2) = 1979817 +MD5 (ircd-ratbox-3.0.5.tar.bz2) = 896230a3750e521507607ab9af732e24 +SHA256 (ircd-ratbox-3.0.5.tar.bz2) = 2f91c44db491180c396eccf72d0e7bd9cba366703157c9a63429d8845453d292 +SIZE (ircd-ratbox-3.0.5.tar.bz2) = 1977347 diff -ruN ircd-ratbox-devel.orig/files/patch-libratbox_src_commio.c ircd-ratbox-devel/files/patch-libratbox_src_commio.c --- ircd-ratbox-devel.orig/files/patch-libratbox_src_commio.c 2010-01-22 21:46:11.000000000 +0000 +++ ircd-ratbox-devel/files/patch-libratbox_src_commio.c 1970-01-01 01:00:00.000000000 +0100 @@ -1,11 +0,0 @@ ---- ./libratbox/src/commio.c.orig 2009-07-11 18:37:37.000000000 +0100 -+++ ./libratbox/src/commio.c 2009-07-11 18:37:55.000000000 +0100 -@@ -2156,7 +2156,7 @@ - if(msg.msg_controllen > 0 && msg.msg_control != NULL - && (cmsg = CMSG_FIRSTHDR(&msg)) != NULL) - { -- rfds = (msg.msg_controllen - sizeof(struct cmsghdr)) / sizeof(int); -+ rfds = ((unsigned char *)cmsg + cmsg->cmsg_len - CMSG_DATA(cmsg)) / sizeof(int); - - for(x = 0; x < nfds && x < rfds; x++) - { diff -ruN ircd-ratbox-devel.orig/files/pkg-message.in ircd-ratbox-devel/files/pkg-message.in --- ircd-ratbox-devel.orig/files/pkg-message.in 2010-01-22 21:46:11.000000000 +0000 +++ ircd-ratbox-devel/files/pkg-message.in 2010-01-22 22:20:40.000000000 +0000 @@ -23,9 +23,5 @@ %%PREFIX%%/bin/bantool -u -Note that the ssl_only_channel compile option has been removed, and -should be added as a configuration setting (use_sslonly) in the -ircd.conf file in order to activate the +S channel mode. - Be sure to check out 'ratbox-services' if you need a services package. ------------------------------------------------------------------------ --- ircd-ratbox-devel-3.0.5.diff ends here --- >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20100123022346.38D4526D28B>