From 1f655ac0622d669c6ad2e711a7e264af8c1365ef Mon Sep 17 00:00:00 2001
From: cube <cube@pkgsrc.org>
Date: Mon, 28 Jul 2008 16:27:42 +0000
Subject: - Make news/newsx build again after latest news/inn update. - Apply a
 patch from Fedora (by Dominik 'Rathann' Mierzejewski) to fix   CVE-2008-3252.

Bump package revision (security fix).
---
 news/newsx/Makefile         |  9 +++++----
 news/newsx/distinfo         |  3 ++-
 news/newsx/patches/patch-ac | 19 +++++++++++++++++++
 3 files changed, 26 insertions(+), 5 deletions(-)
 create mode 100644 news/newsx/patches/patch-ac

(limited to 'news')

diff --git a/news/newsx/Makefile b/news/newsx/Makefile
index cb9f52425c6..b77211d286c 100644
--- a/news/newsx/Makefile
+++ b/news/newsx/Makefile
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.4 2008/06/20 01:09:32 joerg Exp $
+# $NetBSD: Makefile,v 1.5 2008/07/28 16:27:42 cube Exp $
 #
 
 DISTNAME=	newsx-1.6
-PKGREVISION=	1
+PKGREVISION=	2
 CATEGORIES=	news
 MASTER_SITES=	ftp://ftp.kvaleberg.com/pub/
 
@@ -16,8 +16,9 @@ GNU_CONFIGURE=		YES
 
 .include "../../news/inn/Makefile.common"
 CONFIGURE_ARGS+=	--with-newshome=${INN_PREFIX}/lib
-CONFIGURE_ARGS+=	--with-rnews=${INN_PREFIX}/bin/rnews
-CONFIGURE_ARGS+=	--with-inews=${INN_PREFIX}/bin/inews
+CONFIGURE_ARGS+=	--with-newsinclude=${PREFIX}/include/inn
+CONFIGURE_ARGS+=	--with-rnews=${INN_PATHBIN}/rnews
+CONFIGURE_ARGS+=	--with-inews=${INN_PATHBIN}/inews
 CONFIGURE_ARGS+=	--with-history-mode=indexed
 
 .include "../../news/inn/buildlink3.mk"
diff --git a/news/newsx/distinfo b/news/newsx/distinfo
index 4afe8420cc1..edba1ba23aa 100644
--- a/news/newsx/distinfo
+++ b/news/newsx/distinfo
@@ -1,7 +1,8 @@
-$NetBSD: distinfo,v 1.3 2005/02/24 12:19:55 agc Exp $
+$NetBSD: distinfo,v 1.4 2008/07/28 16:27:42 cube Exp $
 
 SHA1 (newsx-1.6.tar.gz) = e128e89ba161ceb4ab6d652d8c132ae3a33fbb20
 RMD160 (newsx-1.6.tar.gz) = e9d1785ad94510055ffcd5d3d15aeafbc16c4f46
 Size (newsx-1.6.tar.gz) = 302821 bytes
 SHA1 (patch-aa) = b0996217c88e250ed38900ad1f706d16b9900550
 SHA1 (patch-ab) = d3ca5f2231f14b27ff4ee375c1b19b5c158b71be
+SHA1 (patch-ac) = bc188323938a83c8d5bfeefe389fd6c6f3720c2f
diff --git a/news/newsx/patches/patch-ac b/news/newsx/patches/patch-ac
new file mode 100644
index 00000000000..e8aabcf861a
--- /dev/null
+++ b/news/newsx/patches/patch-ac
@@ -0,0 +1,19 @@
+$NetBSD: patch-ac,v 1.1 2008/07/28 16:27:42 cube Exp $
+
+--- src/getarticle.c.orig	2003-01-21 10:47:25.000000000 +0100
++++ src/getarticle.c
+@@ -143,12 +143,12 @@ read_article(long where,char *group)
+     long len;
+     long bytecount = 0L; /* BUG: */
+ 
+-    line=linebuf;
+-    line[MAX_HEADER_SIZE] = '\0'; /* better safe than sorry */
++    linebuf[MAX_HEADER_SIZE] = '\0'; /* better safe than sorry */
+     path_line[0] = '\0';
+ 
+     /* fetch the article, header and body */
+     for (;;) {
++	line=linebuf;
+ 	if (!get_server_msg(line, MAX_HEADER_SIZE)) {
+ 	    /* timeout: simply give up */
+ 	    return 0;
-- 
cgit v1.2.3