diff options
| author | Kris Kennaway <kris@FreeBSD.org> | 2000-10-30 01:35:21 +0000 |
|---|---|---|
| committer | Kris Kennaway <kris@FreeBSD.org> | 2000-10-30 01:35:21 +0000 |
| commit | ca5f083e1f70b982ecaef2161a9a02bc5f18ccfc (patch) | |
| tree | 691ebc47adb0020eb41952d759a76abcf62c94f0 /hebrew | |
| parent | Update MASTER_SITES and add NO_LATEST_LINK=yes to facilitate use of KDE2. (diff) | |
Add a patch to address the known remote buffer overflow, from
Mike Silbersack <silby@silby.com>. Add a build- and install-time
warning about the probable existence of further remote security
problems, and remove FORBIDDEN.
Submitted by: Mike Silbersack <silby@silby.com>
Notes
Notes:
svn path=/head/; revision=34434
Diffstat (limited to 'hebrew')
| -rw-r--r-- | hebrew/pine/Makefile | 7 | ||||
| -rw-r--r-- | hebrew/pine/pkg-install | 9 |
2 files changed, 14 insertions, 2 deletions
diff --git a/hebrew/pine/Makefile b/hebrew/pine/Makefile index 13f11af8c62e..6f9a870d9295 100644 --- a/hebrew/pine/Makefile +++ b/hebrew/pine/Makefile @@ -12,10 +12,13 @@ DISTNAME= pine4.21_heb2.09 MAINTAINER?= nadav@cs.technion.ac.il -FORBIDDEN= "Remotely exploitable buffer overflows." - MAN1= pine.1 pico.1 pilot.1 +pre-fetch: +.if !defined(BATCH) && !defined(PACKAGE_BUILDING) + ${SH} pkg-install +.endif + post-patch: for i in ${WRKSRC}/doc/pine.1 \ ${WRKSRC}/pine/init.c \ diff --git a/hebrew/pine/pkg-install b/hebrew/pine/pkg-install new file mode 100644 index 000000000000..b8e5db1ea6ee --- /dev/null +++ b/hebrew/pine/pkg-install @@ -0,0 +1,9 @@ +#!/bin/sh + +if [ "$2" = "POST-INSTALL" -o -n "${PACKAGE_BUILDING}" ]; then + exit 0 +fi + +/usr/bin/dialog --yesno "SECURITY NOTE: The pine software has had several remote vulnerabilities discovered in the past, which allowed remote attackers to execute arbitrary code as you on your local system, by the action of sending a specially-prepared email. All such KNOWN problems have been fixed, but the pine code is written in a very insecure style and the FreeBSD Security Officer believes there are likely to be other undiscovered vulnerabilities. Do you wish to proceed with the installation of pine anyway?" 12 70 || /usr/bin/false + + |