From anray@inet.ua  Sat Aug 21 14:32:35 2004
Return-Path: <anray@inet.ua>
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 2DC9316A4CE
	for <FreeBSD-gnats-submit@freebsd.org>; Sat, 21 Aug 2004 14:32:35 +0000 (GMT)
Received: from mail-kv.alkar.net (mail-kv.alkar.net [195.248.176.165])
	by mx1.FreeBSD.org (Postfix) with ESMTP id DFDF243D1F
	for <FreeBSD-gnats-submit@freebsd.org>; Sat, 21 Aug 2004 14:32:34 +0000 (GMT)
	(envelope-from anray@inet.ua)
Received: from [212.86.247.235] (helo=santinel.home.ua)
	by mail-kv.alkar.net with esmtp (Exim 4.34 (FreeBSD))
	id 1ByWv3-000MDQ-GU
	for FreeBSD-gnats-submit@freebsd.org; Sat, 21 Aug 2004 17:32:34 +0300
Received: from anray by santinel.home.ua with local (Exim 4.41; FreeBSD)
	id 1ByWuz-00012a-1x
	for <FreeBSD-gnats-submit@freebsd.org>; Sat, 21 Aug 2004 17:32:29 +0300
Message-Id: <E1ByWuz-00012a-1x@santinel.home.ua>
Date: Sat, 21 Aug 2004 17:32:29 +0300
From: Andrey Slusar <anray@inet.ua>
Reply-To: Andrey Slusar <anray@inet.ua>
To: FreeBSD-gnats-submit@freebsd.org
Subject: [MAINTAINER] news/fidogate-ds: security fix
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         70773
>Category:       ports
>Synopsis:       [MAINTAINER] news/fidogate-ds: security fix
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    krion
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          maintainer-update
>Submitter-Id:   current-users
>Arrival-Date:   Sat Aug 21 14:40:09 GMT 2004
>Closed-Date:    Sat Aug 21 15:04:04 GMT 2004
>Last-Modified:  Sat Aug 21 15:04:04 GMT 2004
>Originator:     Andrey Slusar
>Release:        FreeBSD 6.0-CURRENT i386
>Organization:
Santinel
>Environment:
System: FreeBSD santinel.home.ua 6.0-CURRENT FreeBSD 6.0-CURRENT #0: Sat Aug 21 12:48:37 EEST 2004 anray@santinel.home.ua:/usr/obj/usr/src/sys/ANRAY i386
>Description:
	- Fix security risk for setuid news programs
>How-To-Repeat:
>Fix:

--- fidogate-ds.diff begins here ---
diff -ruN /usr/ports/news/fidogate-ds/Makefile fidogate-ds/Makefile
--- /usr/ports/news/fidogate-ds/Makefile	Sun Aug  8 02:17:00 2004
+++ fidogate-ds/Makefile	Sat Aug 21 17:26:41 2004
@@ -6,6 +6,7 @@
 
 PORTNAME=		fidogate
 PORTVERSION=		5.1.1
+PORTREVISION=		1
 CATEGORIES=		news mail
 MASTER_SITES=		${MASTER_SITE_SOURCEFORGE}
 MASTER_SITE_SUBDIR=	rusfidogate
diff -ruN /usr/ports/news/fidogate-ds/files/patch-log.c fidogate-ds/files/patch-log.c
--- /usr/ports/news/fidogate-ds/files/patch-log.c	Thu Jan  1 03:00:00 1970
+++ fidogate-ds/files/patch-log.c	Sat Aug 21 17:21:52 2004
@@ -0,0 +1,12 @@
+--- src/common/log.c.old	Sat Aug 21 17:21:16 2004
++++ src/common/log.c	Sat Aug 21 17:21:24 2004
+@@ -276,9 +276,4 @@
+     char *p;
+     
+     BUF_COPY(logprog, name);
+-
+-    if( (p = getenv("LOGFILE")) )
+-       log_file(p);
+-    if( (p = getenv("FIDOGATE_LOGFILE")) )
+-       log_file(p);
+ }
--- fidogate-ds.diff ends here ---


>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-ports-bugs->krion 
Responsible-Changed-By: krion 
Responsible-Changed-When: Sat Aug 21 14:55:20 GMT 2004 
Responsible-Changed-Why:  
Grab. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=70773 
State-Changed-From-To: open->closed 
State-Changed-By: krion 
State-Changed-When: Sat Aug 21 15:03:59 GMT 2004 
State-Changed-Why:  
Committed, thanks! 

http://www.freebsd.org/cgi/query-pr.cgi?pr=70773 
>Unformatted:
