Skip site navigation (1)Skip section navigation (2)
Date:      Wed,  1 Sep 1999 16:58:11 +0900 (JST)
From:      issei@jp.FreeBSD.org
To:        FreeBSD-gnats-submit@freebsd.org
Subject:   ports/13515: Update port: security/ssh2  (fix security bug)
Message-ID:  <19990901075811.234FA1F4B@tole.issei.org>

next in thread | raw e-mail | index | archive | help

>Number:         13515
>Category:       ports
>Synopsis:       Update port : security/ssh2  (fix security bug)
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    freebsd-ports
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Wed Sep  1 01:00:00 PDT 1999
>Closed-Date:
>Last-Modified:
>Originator:     Issei Suzuki
>Release:        FreeBSD 3.2-STABLE i386
>Organization:
Individual
>Environment:

	OS:          FreeBSD 3.2-STABLE (Jun 1999)
	bsd.port.mk: $Id: bsd.port.mk,v 1.306 1999/03/08 07:23:10 asami Exp $


>Description:

	Patch for problem with tty ownership with chflags and chown in BSD 4.4
	variants. Fixes a security bug in tty allocation. 

>How-To-Repeat:

	

>Fix:
	
	Apply the following patch to ports-current.


diff -urN ssh2.old/Makefile ssh2/Makefile
--- ssh2.old/Makefile	Wed Sep  1 16:34:30 1999
+++ ssh2/Makefile	Wed Sep  1 16:43:09 1999
@@ -14,6 +14,10 @@
 		ftp://sunsite.unc.edu/pub/packages/security/ssh/ \
 		ftp://ftp.kyoto.wide.ad.jp/pub/security/ssh/
 
+PATCH_SITES=	http://www.ssh.fi/sshprotocols2/patches/
+PATCHFILES=	patch-${DISTNAME}-bsd.tty.chown
+PATCH_DIST_STRIP= -p1
+
 MAINTAINER=	issei@jp.FreeBSD.org
 
 RESTRICTED=	"Crypto; export-controlled"
diff -urN ssh2.old/files/md5 ssh2/files/md5
--- ssh2.old/files/md5	Wed Sep  1 16:34:30 1999
+++ ssh2/files/md5	Wed Sep  1 16:44:50 1999
@@ -1 +1,2 @@
 MD5 (ssh-2.0.13.tar.gz) = 1853aba4c7c9c501545c9e56a71fa9c3
+MD5 (patch-ssh-2.0.13-bsd.tty.chown) = 544cff13eff9d3fc54a5c65754726ee9

>Release-Note:
>Audit-Trail:
>Unformatted:


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19990901075811.234FA1F4B>