diff options
| author | kris <kris@FreeBSD.org> | 2001-04-17 08:22:46 +0000 |
|---|---|---|
| committer | kris <kris@FreeBSD.org> | 2001-04-17 08:22:46 +0000 |
| commit | 605d14fc5d4b368e890cda296521bd2476335e4d (patch) | |
| tree | 286d4fe3efdc1e2c29e16be75c48f8afb01c84aa /comms | |
| parent | 07e62c9b80780424baaf7c27fe7452d8a7414385 (diff) | |
| download | FreeBSD-ports-605d14fc5d4b368e890cda296521bd2476335e4d.zip FreeBSD-ports-605d14fc5d4b368e890cda296521bd2476335e4d.tar.gz | |
Remove setuid root bit from hfaxd and fix a format string error which was
previously a security vulnerability
Reported by: Marcin Dawcewicz <miv@IIDEA.PL>
Obtained from: http://www.hylafax.org
Diffstat (limited to 'comms')
| -rw-r--r-- | comms/hylafax/Makefile | 2 | ||||
| -rw-r--r-- | comms/hylafax/files/patch-sec1 | 22 |
2 files changed, 23 insertions, 1 deletions
diff --git a/comms/hylafax/Makefile b/comms/hylafax/Makefile index abab993..1e4fa64 100644 --- a/comms/hylafax/Makefile +++ b/comms/hylafax/Makefile @@ -7,7 +7,7 @@ PORTNAME= hylafax PORTVERSION= 4.1.b2 -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= comms MASTER_SITES= ftp://ftp.hylafax.org/source/ DISTNAME= ${PORTNAME}-4.1beta2 diff --git a/comms/hylafax/files/patch-sec1 b/comms/hylafax/files/patch-sec1 new file mode 100644 index 0000000..11d37cd --- /dev/null +++ b/comms/hylafax/files/patch-sec1 @@ -0,0 +1,22 @@ +--- hfaxd/Makefile.in.orig Sat Apr 14 18:47:02 2001 ++++ hfaxd/Makefile.in Sat Apr 14 18:47:42 2001 +@@ -96,7 +96,7 @@ + incdepend: + + install: default +- ${INSTALL} -F ${LIBEXEC} -u root -m 4755 \ ++ ${INSTALL} -F ${LIBEXEC} -u root -m 755 \ + -idb ${PRODUCT}.sw.server -O hfaxd + ${INSTALL} -F ${LIBDATA} -m 644 -idb ${PRODUCT}.sw.server \ + -idb "config(noupdate)" -src ${SRCDIR}/hfaxd.conf -O hfaxd.conf +--- hfaxd/main.c++.orig Sat Apr 14 18:55:07 2001 ++++ hfaxd/main.c++ Sat Apr 14 18:53:04 2001 +@@ -237,7 +237,7 @@ + if (detach == -1) // no protocol options means -I + detach = false; + if (Sys::chdir(queueDir) < 0) +- fatal(queueDir | ": Can not change directory"); ++ fatal("Can not change directory to %s", (const char*)queueDir); + CheckSpoolingSetup(); + if (detach) + detachFromTTY(); |
