From owner-freebsd-ports@FreeBSD.ORG  Thu Sep 25 11:24:45 2008
Return-Path: <owner-freebsd-ports@FreeBSD.ORG>
Delivered-To: freebsd-ports@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 8AE8C1065687
	for <freebsd-ports@freebsd.org>; Thu, 25 Sep 2008 11:24:45 +0000 (UTC)
	(envelope-from spil.oss@googlemail.com)
Received: from an-out-0708.google.com (an-out-0708.google.com [209.85.132.244])
	by mx1.freebsd.org (Postfix) with ESMTP id 452578FC1D
	for <freebsd-ports@freebsd.org>; Thu, 25 Sep 2008 11:24:45 +0000 (UTC)
	(envelope-from spil.oss@googlemail.com)
Received: by an-out-0708.google.com with SMTP id b33so20446ana.13
	for <freebsd-ports@freebsd.org>; Thu, 25 Sep 2008 04:24:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=googlemail.com; s=gamma;
	h=domainkey-signature:received:received:message-id:date:from:reply-to
	:to:subject:mime-version:content-type:content-transfer-encoding
	:content-disposition;
	bh=wTqa0ZnnWAAFSwh1VS1QKEGPA4kHKQ2dJ6ptQNYqfdI=;
	b=ho+VNZyU0VvxztlytEFoT05Kcwx2//XF4wkrVzlaLMMtXSpIv0BoEngg8pPtHIpM1D
	F3fhx7JU64mIDykk9uvo7hMf/DFSIyxcjdEeXx9RVz0IOQyEdvN8+gV/2XLEbE/pMhHl
	YtHYn1ZgbXnhkr6LIPj4CdiW1oq/Jxb/yFrjA=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=googlemail.com; s=gamma;
	h=message-id:date:from:reply-to:to:subject:mime-version:content-type
	:content-transfer-encoding:content-disposition;
	b=ve3dnsuKm8G8oQfco8v8jlD2ZnNzuPEGZPjv3CBghSJO6OzPCQbyBuBf1KX8BS8hXV
	4FFmgDgCGML+mCH+A2/0u7QOMnGysUn2bwBiL0NTLPMkfx00ogkRD9uPRLdXJLFQb1M4
	pjt513KXG4cy3qlw/EIK2iV05krWNbNwejumw=
Received: by 10.100.41.9 with SMTP id o9mr6965461ano.84.1222340018927;
	Thu, 25 Sep 2008 03:53:38 -0700 (PDT)
Received: by 10.100.105.8 with HTTP; Thu, 25 Sep 2008 03:53:38 -0700 (PDT)
Message-ID: <5fbf03c20809250353w6ec8e896tda71653f5f633de6@mail.gmail.com>
Date: Thu, 25 Sep 2008 12:53:38 +0200
From: "Spil Oss" <spil.oss@googlemail.com>
To: freebsd-ports@freebsd.org, brix@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Cc: 
Subject: [irc/bitlbee] security and new version 1.2.3
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: spil.oss@gmail.com
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 25 Sep 2008 11:24:45 -0000

Hi all,

Changelog of bitlbee 1.2.2 to 1.2.3

Version 1.2.3 (released 2008-09-07) hilights:
    * Fixed a security issue similar to the previous account
overwrite/hijack bug.

My guess is that the port hasn't been updated due to the ports-freeze.
Should it be because there's a security fix?

The security issue isn't exploitable on my machine but I upgraded the
port anyway.

cd /usr/ports/distfiles
fetch http://get.bitlbee.org/src/bitlbee-1.2.3.tar.gz
cd /usr/ports/irc/bitlbee
sed -i .bak -e 's/1.2.2/1.2.3/' Makefile
make makesum
make && make deinstall && make reinstall
/usr/local/etc/rc.d/bitlbee restart

Since then running without any issues.

Kind regards,

Spil.