Re: [Sshguard-users] [bug] sshguard vulnerable to log injection

[Mij <mi...@bi...>]

On Aug 4, 2009, at 21:08 , Peter Beckman wrote:

> 1.4rc5 is out.  I didn't build an sshguard-devel port, but maybe I  
> should
> and submit it to Mij.

You're welcome to submit your work directly to the FreeBSD project.
Maintaining a well-made FreeBSD port is a pain in the a55 which I prefer
not to extend any further on my side.

Ideally the -devel port should reflect the master, that is, you should  
break
it down as sshguard + the three port variants for the different firewall
backends. Consider copying as much as possible from the current ports
for stable.


> /usr/ports/security/sshguard-devel --> cat distinfo
> MD5 (sshguard-1.4rc5.tar.bz2) = ff57d62bb8891fe06748bc7c3968ff37
> SHA256 (sshguard-1.4rc5.tar.bz2) =  
> d12565cb7344113ada38a21abf7875c24aa073e0fe728f1d7d3e61b1f041567b
> SIZE (sshguard-1.4rc5.tar.bz2) = 153697
>
> /usr/ports/security --> diff -u sshguard/Makefile sshguard-devel/ 
> Makefile
> --- sshguard/Makefile   Sat Oct  4 18:36:11 2008
> +++ sshguard-devel/Makefile     Tue Jul 21 19:05:36 2009
> @@ -6,14 +6,15 @@
>  #
>
>  PORTNAME=      sshguard
> -PORTVERSION=   1.3
> +UNIQUENAME=  sshguard-devel
> +PORTVERSION=   1.4rc5
>  CATEGORIES=    security
>  MASTER_SITES=  SF
>
>  MAINTAINER=    mi...@bi...
>  COMMENT?=      Protect hosts from brute force attacks against ssh  
> and other services
>
> -CONFLICTS?=    sshguard-ipfilter-1.* sshguard-ipfw-1.* sshguard- 
> pf-1.*
> +CONFLICTS?=    sshguard-ipfilter-1.* sshguard-ipfw-1.* sshguard- 
> pf-1.* sshguard-devel-1.* sshguard-devel-pf-1.*
>
>  PLIST_FILES=   sbin/sshguard
>
> It still installs incorrectly as sshguard-1.4rc5 because I didn't  
> take the
> time to figure out how to make it install as sshguard-devel-1.4rc5,  
> but
> these two modifications make the sshguard port install 1.4rc5 nicely.
>
> Beckman
>
> On Tue, 4 Aug 2009, Jochem Oosterveen wrote:
>
>> Hi Mij,
>>
>> On Aug 4, 2009, at 4:17 PM, Mij wrote:
>>> what SSHGuard version are you using?
>>
>> The one currently in the FreeBSD ports tree:
>>
>> [jochem@melon ~]$ cat /usr/ports/security/sshguard/distinfo
>> MD5 (sshguard-1.3.tar.bz2) = 0e4c82f3c3bfe0880cbb0cc43568f82c
>> SHA256 (sshguard-1.3.tar.bz2) =
>> 1ff0ea3349c67fdab8f8046eeae6a96046a752ae7458c2259cb31b78c2de08ac
>> SIZE (sshguard-1.3.tar.bz2) = 140745
>>
>> ------------------------------------------------------------------------------
>> Let Crystal Reports handle the reporting - Free Crystal Reports  
>> 2008 30-Day
>> trial. Simplify your report design, integration and deployment -  
>> and focus on
>> what you do best, core application coding. Discover what's new with
>> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
>> _______________________________________________
>> Sshguard-users mailing list
>> Ssh...@li...
>> https://lists.sourceforge.net/lists/listinfo/sshguard-users
>>
>
> ---------------------------------------------------------------------------
> Peter Beckman                                                   
> Internet Guy
> be...@an...                                 http://www.angryox.com/
> ---------------------------------------------------------------------------
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008  
> 30-Day
> trial. Simplify your report design, integration and deployment - and  
> focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Sshguard-users mailing list
> Ssh...@li...
> https://lists.sourceforge.net/lists/listinfo/sshguard-users