Date: Tue, 7 May 2002 19:26:07 -0700 (PDT) From: Mark Russell <ports@mark.net.au> To: freebsd-gnats-submit@FreeBSD.org Subject: ports/37847: Security Update as per Netwinsite recomendation Message-ID: <200205080226.g482Q7Wk096603@nwww.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 37847
>Category: ports
>Synopsis: Security Update as per Netwinsite recomendation
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-ports
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Tue May 07 19:30:01 PDT 2002
>Closed-Date:
>Last-Modified:
>Originator: Mark Russell
>Release: 4.5-STABLE
>Organization:
Independent Service Providers
>Environment:
FreeBSD juana 4.5-STABLE FreeBSD 4.5-STABLE #1: Wed Apr 17 11:42:50 EST 2002 mark@juana:/usr/src/sys/compile/JUANA i386
>Description:
From mail sent from the Authors:-
Hi, we have identified a security fault in dnews and strongly recommend people
upgrade to version 5.5h2 available now for most systems:
http://netwinsite.com/dnews/download2.htm
Please also add settings like this to your dnews.conf to further limit
any possible remote access to your system, lets assume your local ip
addresses are 10.0.0.* then you would use:
tellnews_pass_mask 10.0.0.*,127.0.0.1
dmgrsvc_access 10.0.0.*,127.0.0.1
>How-To-Repeat:
Install Dnews
>Fix:
diff -u dnews/Makefile dnews.old/Makefile
--- dnews/Makefile Wed May 8 12:14:35 2002
+++ dnews.old/Makefile Wed May 8 12:10:59 2002
@@ -6,10 +6,10 @@
#
PORTNAME= dnews
-PORTVERSION= 5.5h2
+PORTVERSION= 5.5b3
CATEGORIES= news
MASTER_SITES= ftp://ftp.netwinsite.com/pub/dnews/
-DISTNAME= dnews55h2_freebsd4
+DISTNAME= dnews55b3_freebsd4
EXTRACT_SUFX= .tar.Z
MAINTAINER= ports@FreeBSD.org
diff -u dnews/distinfo dnews.old/distinfo
--- dnews/distinfo Wed May 8 12:13:29 2002
+++ dnews.old/distinfo Wed May 8 12:10:59 2002
@@ -1 +1 @@
-MD5 (dnews55h2_freebsd4.tar.Z) = 4bc3071b301c595b7705de6a6eac3ca3
+MD5 (dnews55b3_freebsd4.tar.Z) = db920671feb3434a12fc5543f9c64042
>Release-Note:
>Audit-Trail:
>Unformatted:
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200205080226.g482Q7Wk096603>