From owner-freebsd-ports-bugs@FreeBSD.ORG Fri Jul 28 02:00:31 2006 Return-Path: X-Original-To: freebsd-ports-bugs@hub.freebsd.org Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 03CE816A4DA for ; Fri, 28 Jul 2006 02:00:30 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7700C43D49 for ; Fri, 28 Jul 2006 02:00:30 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.4/8.13.4) with ESMTP id k6S20UAa004442 for ; Fri, 28 Jul 2006 02:00:30 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.4/8.13.4/Submit) id k6S20U8C004441; Fri, 28 Jul 2006 02:00:30 GMT (envelope-from gnats) Resent-Date: Fri, 28 Jul 2006 02:00:30 GMT Resent-Message-Id: <200607280200.k6S20U8C004441@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, David Thiel Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5F26E16A4DE for ; Fri, 28 Jul 2006 01:51:19 +0000 (UTC) (envelope-from lx@redundancy.redundancy.org) Received: from redundancy.redundancy.org (redundancy.redundancy.org [64.147.160.152]) by mx1.FreeBSD.org (Postfix) with SMTP id C7F7543D58 for ; Fri, 28 Jul 2006 01:51:18 +0000 (GMT) (envelope-from lx@redundancy.redundancy.org) Received: (qmail 2546 invoked by uid 1001); 28 Jul 2006 01:51:41 -0000 Message-Id: <20060728015141.2545.qmail@redundancy.redundancy.org> Date: 28 Jul 2006 01:51:41 -0000 From: David Thiel To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: Subject: ports/100952: Maintainer update: security/osiris 4.2.0_1 -> 4.2.1 X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: David Thiel List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Jul 2006 02:00:31 -0000 >Number: 100952 >Category: ports >Synopsis: Maintainer update: security/osiris 4.2.0_1 -> 4.2.1 >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: maintainer-update >Submitter-Id: current-users >Arrival-Date: Fri Jul 28 02:00:29 GMT 2006 >Closed-Date: >Last-Modified: >Originator: David Thiel >Release: FreeBSD 6.0-RELEASE i386 >Organization: >Environment: System: FreeBSD redundancy.redundancy.org 6.0-RELEASE FreeBSD 6.0-RELEASE #0: Thu Nov 3 09:36:13 UTC 2005 root@x64.samsco.home:/usr/obj/usr/src/sys/GENERIC i386 >Description: Updating the Osiris integrity checking system to 4.2.1. This version includes the format string exploit fixes that were also in the patch in 4.2.0_1. Also updating master site to the new official one. >How-To-Repeat: >Fix: diff -ruN osiris.old/Makefile osiris/Makefile --- osiris.old/Makefile Thu Jul 27 18:38:36 2006 +++ osiris/Makefile Thu Jul 27 18:39:16 2006 @@ -6,10 +6,9 @@ # PORTNAME= osiris -PORTVERSION= 4.2.0 -PORTREVISION= 1 +PORTVERSION= 4.2.1 CATEGORIES= security -MASTER_SITES= http://www.hostintegrity.com/osiris/data/ \ +MASTER_SITES= http://osiris.shmoo.com/data/ \ http://redundancy.redundancy.org/mirror/ MAINTAINER= lx@redundancy.redundancy.org diff -ruN osiris.old/distinfo osiris/distinfo --- osiris.old/distinfo Thu Jul 27 18:38:36 2006 +++ osiris/distinfo Thu Jul 27 18:39:43 2006 @@ -1,3 +1,3 @@ -MD5 (osiris-4.2.0.tar.gz) = ad30995660e506ee6d1d6460601f6107 -SHA256 (osiris-4.2.0.tar.gz) = 6c6d2be382450fc31e288dce397ed4b68f23907efb0782a8ed2a68780db0025d -SIZE (osiris-4.2.0.tar.gz) = 1922195 +MD5 (osiris-4.2.1.tar.gz) = 11445f7d8dec737f0be89357f5c5bcae +SHA256 (osiris-4.2.1.tar.gz) = 36e0c94b66b37cd8944c80163fe827a4fe53f32f10a0bcfc837de9cca42b1fc9 +SIZE (osiris-4.2.1.tar.gz) = 3849917 diff -ruN osiris.old/files/patch-logging osiris/files/patch-logging --- osiris.old/files/patch-logging Thu Jul 27 18:38:36 2006 +++ osiris/files/patch-logging Wed Dec 31 16:00:00 1969 @@ -1,66 +0,0 @@ ---- src/osirisd/logging.c -+++ src/osirisd/logging.c -@@ -93,7 +93,7 @@ - fprintf( stdout, "\n" ); - } - #else -- syslog( ( SYSLOG_FACILITY | LOG_ERR ), header ); -+ syslog( ( SYSLOG_FACILITY | LOG_ERR ), "%s", header ); - #endif - } - -@@ -147,7 +147,7 @@ - fprintf( stdout, "\n" ); - } - #else -- syslog( ( SYSLOG_FACILITY | LOG_INFO ), header ); -+ syslog( ( SYSLOG_FACILITY | LOG_INFO ), "%s", header ); - #endif - } - -@@ -201,7 +201,7 @@ - fprintf( stdout, "\n" ); - } - #else -- syslog( ( SYSLOG_FACILITY | LOG_WARNING ), header ); -+ syslog( ( SYSLOG_FACILITY | LOG_WARNING ), "%s", header ); - #endif - } - ---- src/osirismd/logging.c -+++ src/osirismd/logging.c -@@ -106,7 +106,7 @@ - fprintf( stdout, "\n" ); - } - #else -- syslog( ( syslog_facility | LOG_ERR ), header ); -+ syslog( ( syslog_facility | LOG_ERR ), "%s", header ); - #endif - } - -@@ -168,7 +168,7 @@ - fprintf( stdout, "\n" ); - } - #else -- syslog( ( syslog_facility | LOG_INFO ), header ); -+ syslog( ( syslog_facility | LOG_INFO ), "%s", header ); - #endif - } - -@@ -230,7 +230,7 @@ - fprintf( stdout, "\n" ); - } - #else -- syslog( ( syslog_facility | LOG_WARNING ), header ); -+ syslog( ( syslog_facility | LOG_WARNING ), "%s", header ); - #endif - } - -@@ -281,7 +281,7 @@ - NULL); /* no raw data */ - } - #else -- syslog( ( syslog_facility | LOG_INFO ), buffer ); -+ syslog( ( syslog_facility | LOG_INFO ), "%s", buffer ); - #endif - } >Release-Note: >Audit-Trail: >Unformatted: