Manually applying the Eggdrop security patch may 2009 - Revision history

Tykling at 02:35, 11 November 2010

2010-11-11T02:35:55Z

← Older revision		Revision as of 02:35, 11 November 2010
Line 1:		Line 1:
	[[category:eggdrop]]		[[category:eggdrop]]
	'''THIS INFORMATION IS OUTDATED SINCE THE PATCH HAS BEEN IN PORTS FOR AGES'''		'''THIS INFORMATION IS OUTDATED SINCE THE PATCH HAS BEEN IN PORTS FOR AGES''' --[[User:Tykling\|Tykling]] 02:35, 11 November 2010 (UTC)

	In may 2009 a rather serious [http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/68341 vulnerability] was found in the eggdrop irc bot program. I run a couple of eggdrops on FreeBSD installed from the ports tree, and at the time of writing, the day after the public disclosure of the vulnerability, the port in /usr/ports/irc/eggdrop has not yet been updated. Due to the sometimes malicious nature of IRC I was interested in getting this fixed as soon as possible, so I headed over to the [http://www.eggheads.org/downloads/ eggdrop download page] and downloaded the [http://www.eggheads.org/redirect.php?url=ftp://ftp.eggheads.org/pub/eggdrop/patches/official/1.6/eggdrop1.6.19%2Bctcpfix.patch.gz patch for 1.6.19].		In may 2009 a rather serious [http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/68341 vulnerability] was found in the eggdrop irc bot program. I run a couple of eggdrops on FreeBSD installed from the ports tree, and at the time of writing, the day after the public disclosure of the vulnerability, the port in /usr/ports/irc/eggdrop has not yet been updated. Due to the sometimes malicious nature of IRC I was interested in getting this fixed as soon as possible, so I headed over to the [http://www.eggheads.org/downloads/ eggdrop download page] and downloaded the [http://www.eggheads.org/redirect.php?url=ftp://ftp.eggheads.org/pub/eggdrop/patches/official/1.6/eggdrop1.6.19%2Bctcpfix.patch.gz patch for 1.6.19].

Tykling at 02:35, 11 November 2010

2010-11-11T02:35:36Z

← Older revision		Revision as of 02:35, 11 November 2010
Line 1:		Line 1:
	[[category:eggdrop]]		[[category:eggdrop]]
	'''THIS INFORMATION IS OUTDATED SINCE THE PATCH HAS BEEN IN PORTS FOR AGES'''		'''THIS INFORMATION IS OUTDATED SINCE THE PATCH HAS BEEN IN PORTS FOR AGES'''

	In may 2009 a rather serious [http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/68341 vulnerability] was found in the eggdrop irc bot program. I run a couple of eggdrops on FreeBSD installed from the ports tree, and at the time of writing, the day after the public disclosure of the vulnerability, the port in /usr/ports/irc/eggdrop has not yet been updated. Due to the sometimes malicious nature of IRC I was interested in getting this fixed as soon as possible, so I headed over to the [http://www.eggheads.org/downloads/ eggdrop download page] and downloaded the [http://www.eggheads.org/redirect.php?url=ftp://ftp.eggheads.org/pub/eggdrop/patches/official/1.6/eggdrop1.6.19%2Bctcpfix.patch.gz patch for 1.6.19].		In may 2009 a rather serious [http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/68341 vulnerability] was found in the eggdrop irc bot program. I run a couple of eggdrops on FreeBSD installed from the ports tree, and at the time of writing, the day after the public disclosure of the vulnerability, the port in /usr/ports/irc/eggdrop has not yet been updated. Due to the sometimes malicious nature of IRC I was interested in getting this fixed as soon as possible, so I headed over to the [http://www.eggheads.org/downloads/ eggdrop download page] and downloaded the [http://www.eggheads.org/redirect.php?url=ftp://ftp.eggheads.org/pub/eggdrop/patches/official/1.6/eggdrop1.6.19%2Bctcpfix.patch.gz patch for 1.6.19].

Tykling at 02:35, 11 November 2010

2010-11-11T02:35:29Z

← Older revision		Revision as of 02:35, 11 November 2010
Line 1:		Line 1:
	[[category:eggdrop]]		[[category:eggdrop]]
			'''THIS INFORMATION IS OUTDATED SINCE THE PATCH HAS BEEN IN PORTS FOR AGES'''
	In may 2009 a rather serious [http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/68341 vulnerability] was found in the eggdrop irc bot program. I run a couple of eggdrops on FreeBSD installed from the ports tree, and at the time of writing, the day after the public disclosure of the vulnerability, the port in /usr/ports/irc/eggdrop has not yet been updated. Due to the sometimes malicious nature of IRC I was interested in getting this fixed as soon as possible, so I headed over to the [http://www.eggheads.org/downloads/ eggdrop download page] and downloaded the [http://www.eggheads.org/redirect.php?url=ftp://ftp.eggheads.org/pub/eggdrop/patches/official/1.6/eggdrop1.6.19%2Bctcpfix.patch.gz patch for 1.6.19].		In may 2009 a rather serious [http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/68341 vulnerability] was found in the eggdrop irc bot program. I run a couple of eggdrops on FreeBSD installed from the ports tree, and at the time of writing, the day after the public disclosure of the vulnerability, the port in /usr/ports/irc/eggdrop has not yet been updated. Due to the sometimes malicious nature of IRC I was interested in getting this fixed as soon as possible, so I headed over to the [http://www.eggheads.org/downloads/ eggdrop download page] and downloaded the [http://www.eggheads.org/redirect.php?url=ftp://ftp.eggheads.org/pub/eggdrop/patches/official/1.6/eggdrop1.6.19%2Bctcpfix.patch.gz patch for 1.6.19].

Tykling: Eggdrop port patch may 2009 moved to Manually applying the Eggdrop security patch may 2009

2009-05-16T11:15:23Z

Eggdrop port patch may 2009 moved to Manually applying the Eggdrop security patch may 2009

← Older revision	Revision as of 11:15, 16 May 2009
(No difference)

Tykling at 11:07, 16 May 2009

2009-05-16T11:07:36Z

← Older revision		Revision as of 11:07, 16 May 2009
Line 1:		Line 1:
			[[category:eggdrop]]
	In may 2009 a rather serious [http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/68341 vulnerability] was found in the eggdrop irc bot program. I run a couple of eggdrops on FreeBSD installed from the ports tree, and at the time of writing, the day after the public disclosure of the vulnerability, the port in /usr/ports/irc/eggdrop has not yet been updated. Due to the sometimes malicious nature of IRC I was interested in getting this fixed as soon as possible, so I headed over to the [http://www.eggheads.org/downloads/ eggdrop download page] and downloaded the [http://www.eggheads.org/redirect.php?url=ftp://ftp.eggheads.org/pub/eggdrop/patches/official/1.6/eggdrop1.6.19%2Bctcpfix.patch.gz patch for 1.6.19].		In may 2009 a rather serious [http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/68341 vulnerability] was found in the eggdrop irc bot program. I run a couple of eggdrops on FreeBSD installed from the ports tree, and at the time of writing, the day after the public disclosure of the vulnerability, the port in /usr/ports/irc/eggdrop has not yet been updated. Due to the sometimes malicious nature of IRC I was interested in getting this fixed as soon as possible, so I headed over to the [http://www.eggheads.org/downloads/ eggdrop download page] and downloaded the [http://www.eggheads.org/redirect.php?url=ftp://ftp.eggheads.org/pub/eggdrop/patches/official/1.6/eggdrop1.6.19%2Bctcpfix.patch.gz patch for 1.6.19].

Tykling at 17:45, 15 May 2009

2009-05-15T17:45:44Z

← Older revision		Revision as of 17:45, 15 May 2009
Line 92:		Line 92:
	</pre>		</pre>

	=== A ~~new~~ patch ===		=== A patch to the patch ===
	I'm not quite sure how, but I came up with this slightly altered patch, a patch to the patch if you will, that made it both apply correctly, and compile correctly. Start over and edit eggdrop1.6.19+ctcpfix.patch and in line 32 change:		I'm not quite sure how, but I came up with this slightly altered patch, a patch to the patch if you will, that made it both apply correctly, and compile correctly. Start over and edit eggdrop1.6.19+ctcpfix.patch and in line 32 change:
	<pre>		<pre>

Tykling: /* A new patch */

2009-05-15T17:45:06Z

A new patch

← Older revision		Revision as of 17:45, 15 May 2009
Line 103:		Line 103:
	</pre>		</pre>

	Apply the patch (to a fresh set of sources, ie. run ''make clean && make extract''~~, and~~ run make again~~, and~~ it should compile correctly. Run ''make install'' to install and when starting the eggdrop you should see '''eggdrop v1.6.19+ctcpfix''' instead of just '''eggdrop v1.6.19''' in the output of ''.status'' in the console.		Apply the patch (to a fresh set of sources, ie:
			* run ''make clean && make extract''
			* apply the edited patch
			* run make again

			And it should compile correctly. Run ''make install'' to install and when starting the eggdrop you should see '''eggdrop v1.6.19+ctcpfix''' instead of just '''eggdrop v1.6.19''' in the output of ''.status'' in the console.

	--[[User:Tykling\|Tykling]] 17:39, 15 May 2009 (UTC)		--[[User:Tykling\|Tykling]] 17:39, 15 May 2009 (UTC)

Tykling: /* A new patch */

2009-05-15T17:44:09Z

A new patch

← Older revision		Revision as of 17:44, 15 May 2009
Line 103:		Line 103:
	</pre>		</pre>

	Apply the patch, and run make again, and it should compile correctly.		Apply the patch (to a fresh set of sources, ie. run ''make clean && make extract'', and run make again, and it should compile correctly. Run ''make install'' to install and when starting the eggdrop you should see '''eggdrop v1.6.19+ctcpfix''' instead of just '''eggdrop v1.6.19''' in the output of ''.status'' in the console.

	--[[User:Tykling\|Tykling]] 17:39, 15 May 2009 (UTC)		--[[User:Tykling\|Tykling]] 17:39, 15 May 2009 (UTC)

Tykling: /* Ready to compile */

2009-05-15T17:41:41Z

Ready to compile

← Older revision		Revision as of 17:41, 15 May 2009
Line 77:		Line 77:

	=== Ready to compile ===		=== Ready to compile ===
	After applying the patch you are ready to compile the patched eggdrop, however something is not right because when running ''make'' the following happens:		After applying the patch you are ready to compile the patched eggdrop, however something is not right because when running ''make'' the following happens (for me, at least):
	<pre>		<pre>
	[tykling@doobie /usr/ports/irc/eggdrop]$ sudo make		[tykling@doobie /usr/ports/irc/eggdrop]$ sudo make

Tykling: /* Apply the patch */

2009-05-15T17:41:19Z

Apply the patch

← Older revision		Revision as of 17:41, 15 May 2009
Line 45:		Line 45:

	=== Apply the patch ===		=== Apply the patch ===
	To apply the patch, go to the work/eggdrop1.6.19/ dir and run the following:		To apply the patch, go to the work/eggdrop1.6.19/ dir and run the following. But before you do, '''you may need to edit the patch. If it fails to build later, see the next step.'''

	<pre>		<pre>
	[tykling@doobie /usr/ports/irc/eggdrop/work/eggdrop1.6.19]$ sudo patch -p1 < ~/eggdrop1.6.19+ctcpfix.patch		[tykling@doobie /usr/ports/irc/eggdrop/work/eggdrop1.6.19]$ sudo patch -p1 < ~/eggdrop1.6.19+ctcpfix.patch