Date: Sat, 21 Aug 2004 17:32:29 +0300 From: Andrey Slusar <anray@inet.ua> To: FreeBSD-gnats-submit@FreeBSD.org Subject: ports/70773: [MAINTAINER] news/fidogate-ds: security fix Message-ID: <E1ByWuz-00012a-1x@santinel.home.ua> Resent-Message-ID: <200408211440.i7LEe9uF037687@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 70773
>Category: ports
>Synopsis: [MAINTAINER] news/fidogate-ds: security fix
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: maintainer-update
>Submitter-Id: current-users
>Arrival-Date: Sat Aug 21 14:40:09 GMT 2004
>Closed-Date:
>Last-Modified:
>Originator: Andrey Slusar
>Release: FreeBSD 6.0-CURRENT i386
>Organization:
Santinel
>Environment:
System: FreeBSD santinel.home.ua 6.0-CURRENT FreeBSD 6.0-CURRENT #0: Sat Aug 21 12:48:37 EEST 2004 anray@santinel.home.ua:/usr/obj/usr/src/sys/ANRAY i386
>Description:
- Fix security risk for setuid news programs
>How-To-Repeat:
>Fix:
--- fidogate-ds.diff begins here ---
diff -ruN /usr/ports/news/fidogate-ds/Makefile fidogate-ds/Makefile
--- /usr/ports/news/fidogate-ds/Makefile Sun Aug 8 02:17:00 2004
+++ fidogate-ds/Makefile Sat Aug 21 17:26:41 2004
@@ -6,6 +6,7 @@
PORTNAME= fidogate
PORTVERSION= 5.1.1
+PORTREVISION= 1
CATEGORIES= news mail
MASTER_SITES= ${MASTER_SITE_SOURCEFORGE}
MASTER_SITE_SUBDIR= rusfidogate
diff -ruN /usr/ports/news/fidogate-ds/files/patch-log.c fidogate-ds/files/patch-log.c
--- /usr/ports/news/fidogate-ds/files/patch-log.c Thu Jan 1 03:00:00 1970
+++ fidogate-ds/files/patch-log.c Sat Aug 21 17:21:52 2004
@@ -0,0 +1,12 @@
+--- src/common/log.c.old Sat Aug 21 17:21:16 2004
++++ src/common/log.c Sat Aug 21 17:21:24 2004
+@@ -276,9 +276,4 @@
+ char *p;
+
+ BUF_COPY(logprog, name);
+-
+- if( (p = getenv("LOGFILE")) )
+- log_file(p);
+- if( (p = getenv("FIDOGATE_LOGFILE")) )
+- log_file(p);
+ }
--- fidogate-ds.diff ends here ---
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?E1ByWuz-00012a-1x>