Date: Fri, 09 Jan 2004 02:50:17 +0100 From: Matthias Andree <matthias.andree@gmx.de> To: FreeBSD-gnats-submit@FreeBSD.org Subject: ports/61105: [MAINTAINER] news/leafnode: SECURITY update to 1.9.48 Message-ID: <E1Aelmz-0001kI-D7@libertas.emma.line.org> Resent-Message-ID: <200401090200.i0920YBW004371@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 61105
>Category: ports
>Synopsis: [MAINTAINER] news/leafnode: SECURITY update to 1.9.48
>Confidential: no
>Severity: serious
>Priority: low
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: maintainer-update
>Submitter-Id: current-users
>Arrival-Date: Thu Jan 08 18:00:34 PST 2004
>Closed-Date:
>Last-Modified:
>Originator: Matthias Andree
>Release: FreeBSD 4.9-STABLE i386
>Organization:
>Environment:
System: FreeBSD libertas.emma.line.org 4.9-STABLE FreeBSD 4.9-STABLE #70: Sat Jan 3 13:14:20 CET
>Description:
- Update to 1.9.48, security fixes inside.
Upstream NEWS:
### SECURITY BUGFIX
- Fetchnews: when a. minlines=0 (default) and b. delaybody=0 (default) and
either c. no filterfile is configured (default) or a. and b. and d.
article_despite_filter=1 are configured, an article with missing mandatory
headers and without body can hang fetchnews and/or prevent the fetch of
further articles from the current group or server.
Reported by Toni Viemerö, SourceForge bug 873149.
This was a denial-of-service bug, not one that could lead to local or remote
privilege escalation.
### BUGFIX
- Fetchnews: log group name when articles are skipped that match the minlines,
maxlines, maxbytes or age filters, for more consistent logging.
### CHANGES
- Rebuilt with autoconf 2.59.
Generated with FreeBSD Port Tools 0.50
>How-To-Repeat:
>Fix:
--- leafnode-1.9.48.patch begins here ---
diff -ruN --exclude=CVS /usr/ports/news/leafnode/Makefile /root/ports/news/leafnode/Makefile
--- /usr/ports/news/leafnode/Makefile Wed Jan 7 15:56:30 2004
+++ /root/ports/news/leafnode/Makefile Fri Jan 9 02:34:01 2004
@@ -6,7 +6,7 @@
#
PORTNAME= leafnode
-PORTVERSION= 1.9.47
+PORTVERSION= 1.9.48
CATEGORIES= news
MASTER_SITES= ${MASTER_SITE_SOURCEFORGE:S/$/:sourceforge/} \
http://osdn.dl.sourceforge.net/sourceforge/${PORTNAME}/ \
diff -ruN --exclude=CVS /usr/ports/news/leafnode/distinfo /root/ports/news/leafnode/distinfo
--- /usr/ports/news/leafnode/distinfo Wed Jan 7 15:56:30 2004
+++ /root/ports/news/leafnode/distinfo Fri Jan 9 02:33:47 2004
@@ -1 +1 @@
-MD5 (leafnode-1.9.47.rel.tar.bz2) = 4c83fc265f34aa1a42dc90599101b4fe
+MD5 (leafnode-1.9.48.rel.tar.bz2) = 629f5d4cd8eb6c2140ac7b3684c3085a
--- leafnode-1.9.48.patch ends here ---
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?E1Aelmz-0001kI-D7>