Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 14 Sep 1997 23:35:47 +0200 (CEST)
From:      Stefan `Sec` Zehl <sec@42.org>
To:        FreeBSD-gnats-submit@FreeBSD.ORG
Subject:   ports/4540: Ssh-port not up to date.
Message-ID:  <199709142135.XAA17330@matrix.42.org>
Resent-Message-ID: <199709142140.OAA01763@hub.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         4540
>Category:       ports
>Synopsis:       Ssh-port not up to date.
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    freebsd-ports
>State:          open
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Sun Sep 14 14:40:00 PDT 1997
>Last-Modified:
>Originator:     Stefan `Sec` Zehl
>Organization:
>Release:        FreeBSD 2.2-STABLE i386
>Environment:

'bout half a week old '2.2-STABLE'

FreeBSD matrix 2.2-STABLE FreeBSD 2.2-STABLE #0: Sat Sep 13 01:27:40 CEST 1997     sec@quit:/usr/src/sys/compile/MATRIX  i386

>Description:

ssh-1.2.20 has security bug with its port forwarding. ssh-1.2.21 fixes that.
the attached patch brings the ssh port up to date.

>How-To-Repeat:

read bugtraq :)

>Fix:
	
apply the patch ? :)

diff -bur /usr/ports/security/ssh/Makefile ssh.new/Makefile
--- /usr/ports/security/ssh/Makefile	Fri Jul 18 07:04:17 1997
+++ ssh.new/Makefile	Sun Sep 14 22:43:12 1997
@@ -1,5 +1,5 @@
 # New ports collection makefile for:	ssh
-# Version required:     1.2.20
+# Version required:     1.2.21
 # Date created:		30 Jul 1995
 # Whom:			torstenb@FreeBSD.ORG
 #
@@ -9,7 +9,7 @@
 # USE_PERL, USE_TCPWRAP
 #
 
-DISTNAME=       ssh-1.2.20
+DISTNAME=       ssh-1.2.21
 CATEGORIES=	security net
 MASTER_SITES=   ftp://ftp.funet.fi/pub/unix/security/login/ssh/
 
diff -bur /usr/ports/security/ssh/files/md5 ssh.new/files/md5
--- /usr/ports/security/ssh/files/md5	Fri Apr 25 07:01:03 1997
+++ ssh.new/files/md5	Sun Sep 14 23:32:21 1997
@@ -1,2 +1,2 @@
-MD5 (ssh-1.2.20.tar.gz) = 11d88175e5d6d9d59bea0a70330bcab4
+MD5 (ssh-1.2.21.tar.gz) = 881f612cd3598b5370545ab2ad808795
 MD5 (rsaref2.tar.gz) = 0b474c97bf1f1c0d27e5a95f1239c08d
diff -bur /usr/ports/security/ssh/patches/patch-ac ssh.new/patches/patch-ac
--- /usr/ports/security/ssh/patches/patch-ac	Fri Apr 25 07:01:04 1997
+++ ssh.new/patches/patch-ac	Sun Sep 14 22:46:48 1997
@@ -109,7 +109,7 @@
   	-mv $(install_prefix)$(bindir)/ssh $(install_prefix)$(bindir)/ssh.old
   	-chmod 755 $(install_prefix)$(bindir)/ssh.old
 ***************
-*** 551,577 ****
+*** 595,609 ****
   
   clean:
   	-rm -f *.o gmon.out *core $(PROGRAMS) rfc-pg
@@ -123,21 +123,9 @@
 ! 	cd $(GMPDIR); $(MAKE) distclean
 ! 	cd $(ZLIBDIR); $(MAKE) distclean
   
-  dist:
-  	-rm -rf $(DISTNAME)
-  	-mkdir $(DISTNAME)
-  	cp $(DISTFILES) $(DISTNAME)
-  	for i in $(DISTSRCS); do cp $(srcdir)/$$i $(DISTNAME); done
-! 	(cd $(GMPDIR); make dist)
-! 	gzip -cd $(GMPDIR)/$(GMPDIR).tar.gz | (cd $(DISTNAME); tar pxf - )
-  #	tar cf - $(RSAREFDIR) | (cd $(DISTNAME); tar xf -)
-  #	cd $(DISTNAME)/$(RSAREFSRCDIR); rm -f *.o *.a
-! 	(cd  $(srcdir); tar pcf - $(ZLIBDIR) )| (cd $(DISTNAME); tar pxf -)
-! 	cd $(DISTNAME)/$(ZLIBDIR); rm -f *.o *.a; rm -rf CVS
-  	tar pcf $(DISTNAME).tar $(DISTNAME)
-  	-rm -f $(DISTNAME).tar.gz
-  	gzip $(DISTNAME).tar
---- 557,583 ----
+  dist: dist-free
+  
+--- 595,609 ----
   
   clean:
   	-rm -f *.o gmon.out *core $(PROGRAMS) rfc-pg
@@ -151,10 +139,25 @@
 ! #       cd $(GMPDIR); $(MAKE) distclean
 ! #       cd $(ZLIBDIR); $(MAKE) distclean
   
-  dist:
-  	-rm -rf $(DISTNAME)
-  	-mkdir $(DISTNAME)
-  	cp $(DISTFILES) $(DISTNAME)
+  dist: dist-free
+  
+***************
+*** 634,645 ****
+  #
+  #endif F_SECURE_COMMERCIAL
+  	for i in $(DISTSRCS); do cp $(srcdir)/$$i $(DISTNAME); done
+! 	(cd $(GMPDIR); make dist)
+! 	gzip -cd $(GMPDIR)/$(GMPDIR).tar.gz | (cd $(DISTNAME); tar pxf - )
+  #	tar cf - $(RSAREFDIR) | (cd $(DISTNAME); tar xf -)
+  #	cd $(DISTNAME)/$(RSAREFSRCDIR); rm -f *.o *.a
+! 	(cd  $(srcdir); tar pcf - $(ZLIBDIR) )| (cd $(DISTNAME); tar pxf -)
+! 	cd $(DISTNAME)/$(ZLIBDIR); rm -f *.o *.a; rm -rf CVS
+  
+  dist-free-make-tar:
+  	tar pcf $(DISTNAME).tar $(DISTNAME)
+--- 634,645 ----
+  #
+  #endif F_SECURE_COMMERCIAL
   	for i in $(DISTSRCS); do cp $(srcdir)/$$i $(DISTNAME); done
 ! #       (cd $(GMPDIR); make dist)
 ! #       gzip -cd $(GMPDIR)/$(GMPDIR).tar.gz | (cd $(DISTNAME); tar pxf - )
@@ -162,9 +165,9 @@
   #	cd $(DISTNAME)/$(RSAREFSRCDIR); rm -f *.o *.a
 ! #       (cd  $(srcdir); tar pcf - $(ZLIBDIR) )| (cd $(DISTNAME); tar pxf -)
 ! #       cd $(DISTNAME)/$(ZLIBDIR); rm -f *.o *.a; rm -rf CVS
+  
+  dist-free-make-tar:
   	tar pcf $(DISTNAME).tar $(DISTNAME)
-  	-rm -f $(DISTNAME).tar.gz
-  	gzip $(DISTNAME).tar
 ***************
 *** 583,589 ****
   	 (echo "s/\.$$old_version\"/.$$new_version\"/g"; echo w; echo q) | ed $(srcdir)/version.h >/dev/null
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199709142135.XAA17330>