Re: [Sshguard-users] [bug] sshguard vulnerable to log injection

[Peter B. <be...@an...>]

1.4rc5 is out.  I didn't build an sshguard-devel port, but maybe I should
and submit it to Mij.

/usr/ports/security/sshguard-devel --> cat distinfo 
MD5 (sshguard-1.4rc5.tar.bz2) = ff57d62bb8891fe06748bc7c3968ff37
SHA256 (sshguard-1.4rc5.tar.bz2) = d12565cb7344113ada38a21abf7875c24aa073e0fe728f1d7d3e61b1f041567b
SIZE (sshguard-1.4rc5.tar.bz2) = 153697

/usr/ports/security --> diff -u sshguard/Makefile sshguard-devel/Makefile
--- sshguard/Makefile   Sat Oct  4 18:36:11 2008
+++ sshguard-devel/Makefile     Tue Jul 21 19:05:36 2009
@@ -6,14 +6,15 @@
  #

  PORTNAME=      sshguard
-PORTVERSION=   1.3
+UNIQUENAME=  sshguard-devel
+PORTVERSION=   1.4rc5
  CATEGORIES=    security
  MASTER_SITES=  SF

  MAINTAINER=    mi...@bi...
  COMMENT?=      Protect hosts from brute force attacks against ssh and other services

-CONFLICTS?=    sshguard-ipfilter-1.* sshguard-ipfw-1.* sshguard-pf-1.*
+CONFLICTS?=    sshguard-ipfilter-1.* sshguard-ipfw-1.* sshguard-pf-1.* sshguard-devel-1.* sshguard-devel-pf-1.*

  PLIST_FILES=   sbin/sshguard

It still installs incorrectly as sshguard-1.4rc5 because I didn't take the
time to figure out how to make it install as sshguard-devel-1.4rc5, but
these two modifications make the sshguard port install 1.4rc5 nicely.

Beckman

On Tue, 4 Aug 2009, Jochem Oosterveen wrote:

> Hi Mij,
>
> On Aug 4, 2009, at 4:17 PM, Mij wrote:
>> what SSHGuard version are you using?
>
> The one currently in the FreeBSD ports tree:
>
> [jochem@melon ~]$ cat /usr/ports/security/sshguard/distinfo
> MD5 (sshguard-1.3.tar.bz2) = 0e4c82f3c3bfe0880cbb0cc43568f82c
> SHA256 (sshguard-1.3.tar.bz2) =
> 1ff0ea3349c67fdab8f8046eeae6a96046a752ae7458c2259cb31b78c2de08ac
> SIZE (sshguard-1.3.tar.bz2) = 140745
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Sshguard-users mailing list
> Ssh...@li...
> https://lists.sourceforge.net/lists/listinfo/sshguard-users
>

---------------------------------------------------------------------------
Peter Beckman                                                  Internet Guy
be...@an...                                 http://www.angryox.com/
---------------------------------------------------------------------------