ports/72590 [PATCH] net/tramp: update to new version(fix security hole)

[Andrey Slusar]

The following reply was made to PR ports/72590; it has been noted by GNATS.

From: Andrey Slusar <anray at inet.ua>
To: FreeBSD-gnats-submit at freebsd.org
Cc:  
Subject: ports/72590 [PATCH] net/tramp: update to new version(fix security hole)
Date: Wed, 13 Oct 2004 02:46:58 +0300

 >Submitter-Id:	current-users
 >Originator:	Andrey Slusar
 >Organization:	Santinel
 >Confidential:	no 
 >Synopsis:	ports/72590 [PATCH] net/tramp: update to new version(fix security hole)
 >Severity:	serious
 >Priority:	medium
 >Category:	ports
 >Class:		update
 >Release:	FreeBSD 5.3-BETA7 i386
 >Environment:
 System: FreeBSD santinel.home.ua 5.3-BETA7 FreeBSD 5.3-BETA7 #0: Wed Oct 6 01:13:10 EEST 2004 anray at santinel.home.ua:/usr/obj/usr/src/sys/ANRAY i386
 >Description:
 	Update to version 2.0.45:
 	- tramp's implementation `tramp-perl-decode' results in scrambled
 	  remote files.
 	- Permissions of autosaved remote files are 0644 (security hole).
 >How-To-Repeat:
 	
 >Fix:
 
 --- tramp.diff begins here ---
 diff -ru /usr/ports/net/tramp/Makefile tramp/Makefile
 --- /usr/ports/net/tramp/Makefile	Tue Oct 12 07:12:19 2004
 +++ tramp/Makefile	Wed Oct 13 02:31:46 2004
 @@ -6,7 +6,7 @@
  #
  
  PORTNAME=	tramp
 -PORTVERSION=	2.0.44
 +PORTVERSION=	2.0.45
  CATEGORIES=	net elisp
  MASTER_SITES=	${MASTER_SITE_SAVANNAH}
  MASTER_SITE_SUBDIR=	${PORTNAME}
 diff -ru /usr/ports/net/tramp/distinfo tramp/distinfo
 --- /usr/ports/net/tramp/distinfo	Tue Oct 12 07:12:19 2004
 +++ tramp/distinfo	Wed Oct 13 02:33:33 2004
 @@ -1,2 +1,2 @@
 -MD5 (tramp-2.0.44.tar.gz) = c011ae12c22f6967714c8b7ceef58b9f
 -SIZE (tramp-2.0.44.tar.gz) = 288405
 +MD5 (tramp-2.0.45.tar.gz) = 01f100a175c8d4bc6ed89857058d8730
 +SIZE (tramp-2.0.45.tar.gz) = 289785
 diff -ru /usr/ports/net/tramp/pkg-plist tramp/pkg-plist
 --- /usr/ports/net/tramp/pkg-plist	Sat Jun 12 07:31:19 2004
 +++ tramp/pkg-plist	Wed Oct 13 02:31:36 2004
 @@ -8,8 +8,8 @@
  %%EMACS20_ONLY%%%%TRAMP_LISPDIR%%/run-at-time.elc
  %%EMACS20_ONLY%%%%TRAMP_LISPDIR%%/uudecode.el
  %%EMACS20_ONLY%%%%TRAMP_LISPDIR%%/uudecode.elc
 -%%TRAMP_LISPDIR%%/password.el
 -%%TRAMP_LISPDIR%%/password.elc
 +%%EMACS20_ONLY%%%%TRAMP_LISPDIR%%/password.el
 +%%EMACS20_ONLY%%%%TRAMP_LISPDIR%%/password.elc
  %%TRAMP_LISPDIR%%/tramp-ftp.el
  %%TRAMP_LISPDIR%%/tramp-ftp.elc
  %%TRAMP_LISPDIR%%/tramp-smb.el
 --- tramp.diff ends here ---