Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 26 Oct 2004 09:14:03 +0800 (CST)
From:      Yen-Ming Lee <leeym@FreeBSD.org>
To:        FreeBSD-gnats-submit@FreeBSD.org
Cc:        enigmatyc@laposte.net
Subject:   ports/73143: [PATCH] shells/rssh: update to 2.2.2
Message-ID:  <20041026011403.CB2BA3E9FA2@utopia.leeym.com>
Resent-Message-ID: <200410260120.i9Q1KQ8b013249@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         73143
>Category:       ports
>Synopsis:       [PATCH] shells/rssh: update to 2.2.2
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          update
>Submitter-Id:   current-users
>Arrival-Date:   Tue Oct 26 01:20:26 GMT 2004
>Closed-Date:
>Last-Modified:
>Originator:     Yen-Ming Lee
>Release:        FreeBSD 5.3-STABLE i386
>Organization:
FreeBSD Taiwan
>Environment:
System: FreeBSD utopia.leeym.com 5.3-STABLE FreeBSD 5.3-STABLE #0: Mon Oct 25 01:17:22 CST 2004
>Description:

There is a string format vulnerability in rssh-2.2.1
http://www.pizzashack.org/rssh/security.shtml

- update to 2.2.2
- use REINPLACE_CMD instead of the patch file
- correct the knob for RDIST

Removed file(s):
- files/patch-Makefile.in

Port maintainer (enigmatyc@laposte.net) is cc'd.

Generated with FreeBSD Port Tools 0.63
>How-To-Repeat:
>Fix:

--- rssh-2.2.2.patch begins here ---
Index: Makefile
===================================================================
RCS file: /home/pcvs/ports/shells/rssh/Makefile,v
retrieving revision 1.3
diff -u -u -r1.3 Makefile
--- Makefile	21 Sep 2004 20:37:17 -0000	1.3
+++ Makefile	26 Oct 2004 01:10:56 -0000
@@ -6,7 +6,7 @@
 #
 
 PORTNAME=	rssh
-PORTVERSION=	2.2.1
+PORTVERSION=	2.2.2
 CATEGORIES=	shells security
 MASTER_SITES=	${MASTER_SITE_SOURCEFORGE}
 MASTER_SITE_SUBDIR=	${PORTNAME}
@@ -15,6 +15,7 @@
 COMMENT=	A Restricted Secure SHell only for sftp or/and scp
 
 GNU_CONFIGURE=	yes
+USE_REINPLACE=	yes
 
 MAN1=		rssh.1
 MAN5=		rssh.conf.5
@@ -34,9 +35,13 @@
 CONFIGURE_ARGS+=--with-rsync=${LOCALBASE}/bin/rsync
 .endif
 
-.if defined(WITH_RSYNC)
+.if defined(WITH_RDIST)
 RUN_DEPENDS+=	${LOCALBASE}/bin/rdist6:${PORTSDIR}/net/rdist6
 CONFIGURE_ARGS+=--with-rdist=${LOCALBASE}/bin/rdist6
 .endif
+
+post-patch:
+	${REINPLACE_CMD} -E -e 's,(\$$\(DESTDIR\)\$$\(sysconfdir\)/\$$\$$f),\1.dist,g' \
+		${WRKSRC}/Makefile.in
 
 .include <bsd.port.post.mk>
Index: distinfo
===================================================================
RCS file: /home/pcvs/ports/shells/rssh/distinfo,v
retrieving revision 1.2
diff -u -u -r1.2 distinfo
--- distinfo	21 Sep 2004 20:37:17 -0000	1.2
+++ distinfo	26 Oct 2004 01:10:56 -0000
@@ -1,2 +1,2 @@
-MD5 (rssh-2.2.1.tar.gz) = 2d427ee7f4ea46b075fa0ab3f39b4089
-SIZE (rssh-2.2.1.tar.gz) = 95552
+MD5 (rssh-2.2.2.tar.gz) = 351440cc3909214bae6f2ad2d57a4419
+SIZE (rssh-2.2.2.tar.gz) = 105255
Index: files/patch-Makefile.in
===================================================================
RCS file: files/patch-Makefile.in
diff -N files/patch-Makefile.in
--- files/patch-Makefile.in	21 May 2004 13:37:24 -0000	1.1
+++ /dev/null	1 Jan 1970 00:00:00 -0000
@@ -1,13 +0,0 @@
---- Makefile.in.orig	Sun Jul 20 19:27:29 2003
-+++ Makefile.in	Fri May 21 15:23:01 2004
-@@ -357,8 +357,8 @@
- 	@list='$(dist_sysconf_DATA)'; for p in $$list; do \
- 	  if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \
- 	  f="`echo $$p | sed -e 's|^.*/||'`"; \
--	  echo " $(dist_sysconfDATA_INSTALL) $$d$$p $(DESTDIR)$(sysconfdir)/$$f"; \
--	  $(dist_sysconfDATA_INSTALL) $$d$$p $(DESTDIR)$(sysconfdir)/$$f; \
-+	  echo " $(dist_sysconfDATA_INSTALL) $$d$$p $(DESTDIR)$(sysconfdir)/$$f.dist"; \
-+	  $(dist_sysconfDATA_INSTALL) $$d$$p $(DESTDIR)$(sysconfdir)/$$f.dist; \
- 	done
- 
- uninstall-dist_sysconfDATA:
--- rssh-2.2.2.patch ends here ---

>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20041026011403.CB2BA3E9FA2>