Mon Jul 28 16:27:42 2008 UTC ()
- Make news/newsx build again after latest news/inn update.
- Apply a patch from Fedora (by Dominik 'Rathann' Mierzejewski) to fix
  CVE-2008-3252.

Bump package revision (security fix).


(cube)
diff -r1.4 -r1.5 pkgsrc/news/newsx/Makefile
diff -r1.3 -r1.4 pkgsrc/news/newsx/distinfo
diff -r0 -r1.1 pkgsrc/news/newsx/patches/patch-ac
cvs diff -r1.4 -r1.5 pkgsrc/news/newsx/Makefile (expand / switch to unified diff)

--- pkgsrc/news/newsx/Makefile 2008/06/20 01:09:32 1.4
+++ pkgsrc/news/newsx/Makefile 2008/07/28 16:27:42 1.5
@@ -1,24 +1,25 @@ @@ -1,24 +1,25 @@
1# $NetBSD: Makefile,v 1.4 2008/06/20 01:09:32 joerg Exp $ 1# $NetBSD: Makefile,v 1.5 2008/07/28 16:27:42 cube Exp $
2# 2#
3 3
4DISTNAME= newsx-1.6 4DISTNAME= newsx-1.6
5PKGREVISION= 1 5PKGREVISION= 2
6CATEGORIES= news 6CATEGORIES= news
7MASTER_SITES= ftp://ftp.kvaleberg.com/pub/ 7MASTER_SITES= ftp://ftp.kvaleberg.com/pub/
8 8
9MAINTAINER= cube@NetBSD.org 9MAINTAINER= cube@NetBSD.org
10HOMEPAGE= http://www.kvaleberg.com/newsx.html 10HOMEPAGE= http://www.kvaleberg.com/newsx.html
11COMMENT= NNTP news exchange program 11COMMENT= NNTP news exchange program
12 12
13PKG_DESTDIR_SUPPORT= user-destdir 13PKG_DESTDIR_SUPPORT= user-destdir
14 14
15GNU_CONFIGURE= YES 15GNU_CONFIGURE= YES
16 16
17.include "../../news/inn/Makefile.common" 17.include "../../news/inn/Makefile.common"
18CONFIGURE_ARGS+= --with-newshome=${INN_PREFIX}/lib 18CONFIGURE_ARGS+= --with-newshome=${INN_PREFIX}/lib
19CONFIGURE_ARGS+= --with-rnews=${INN_PREFIX}/bin/rnews 19CONFIGURE_ARGS+= --with-newsinclude=${PREFIX}/include/inn
20CONFIGURE_ARGS+= --with-inews=${INN_PREFIX}/bin/inews 20CONFIGURE_ARGS+= --with-rnews=${INN_PATHBIN}/rnews
 21CONFIGURE_ARGS+= --with-inews=${INN_PATHBIN}/inews
21CONFIGURE_ARGS+= --with-history-mode=indexed 22CONFIGURE_ARGS+= --with-history-mode=indexed
22 23
23.include "../../news/inn/buildlink3.mk" 24.include "../../news/inn/buildlink3.mk"
24.include "../../mk/bsd.pkg.mk" 25.include "../../mk/bsd.pkg.mk"
cvs diff -r1.3 -r1.4 pkgsrc/news/newsx/distinfo (expand / switch to unified diff)

--- pkgsrc/news/newsx/distinfo 2005/02/24 12:19:55 1.3
+++ pkgsrc/news/newsx/distinfo 2008/07/28 16:27:42 1.4
@@ -1,7 +1,8 @@ @@ -1,7 +1,8 @@
1$NetBSD: distinfo,v 1.3 2005/02/24 12:19:55 agc Exp $ 1$NetBSD: distinfo,v 1.4 2008/07/28 16:27:42 cube Exp $
2 2
3SHA1 (newsx-1.6.tar.gz) = e128e89ba161ceb4ab6d652d8c132ae3a33fbb20 3SHA1 (newsx-1.6.tar.gz) = e128e89ba161ceb4ab6d652d8c132ae3a33fbb20
4RMD160 (newsx-1.6.tar.gz) = e9d1785ad94510055ffcd5d3d15aeafbc16c4f46 4RMD160 (newsx-1.6.tar.gz) = e9d1785ad94510055ffcd5d3d15aeafbc16c4f46
5Size (newsx-1.6.tar.gz) = 302821 bytes 5Size (newsx-1.6.tar.gz) = 302821 bytes
6SHA1 (patch-aa) = b0996217c88e250ed38900ad1f706d16b9900550 6SHA1 (patch-aa) = b0996217c88e250ed38900ad1f706d16b9900550
7SHA1 (patch-ab) = d3ca5f2231f14b27ff4ee375c1b19b5c158b71be 7SHA1 (patch-ab) = d3ca5f2231f14b27ff4ee375c1b19b5c158b71be
 8SHA1 (patch-ac) = bc188323938a83c8d5bfeefe389fd6c6f3720c2f
File Added: pkgsrc/news/newsx/patches/patch-ac
$NetBSD: patch-ac,v 1.1 2008/07/28 16:27:42 cube Exp $

--- src/getarticle.c.orig	2003-01-21 10:47:25.000000000 +0100
+++ src/getarticle.c
@@ -143,12 +143,12 @@ read_article(long where,char *group)
     long len;
     long bytecount = 0L; /* BUG: */
 
-    line=linebuf;
-    line[MAX_HEADER_SIZE] = '\0'; /* better safe than sorry */
+    linebuf[MAX_HEADER_SIZE] = '\0'; /* better safe than sorry */
     path_line[0] = '\0';
 
     /* fetch the article, header and body */
     for (;;) {
+	line=linebuf;
 	if (!get_server_msg(line, MAX_HEADER_SIZE)) {
 	    /* timeout: simply give up */
 	    return 0;