diff options
author | Rong-En Fan <rafan@FreeBSD.org> | 2007-06-23 06:35:16 +0000 |
---|---|---|
committer | Rong-En Fan <rafan@FreeBSD.org> | 2007-06-23 06:35:16 +0000 |
commit | d7933bb2826c6c1dd73a2cca6d13f5af2361854c (patch) | |
tree | 118866f2aa119a9ff7eda89258baa32e7b94b7ee /security/denyhosts | |
parent | 643ca90bfd3064ff8069de9918899d7a46a6c2de (diff) | |
download | ports-d7933bb2826c6c1dd73a2cca6d13f5af2361854c.tar.gz ports-d7933bb2826c6c1dd73a2cca6d13f5af2361854c.zip |
- Fix a DoS issue
PR: ports/113942
Security: http://www.ossec.net/en/attacking-loganalysis.html#denyhosts
Submitted by: David Bestor <freebsd1 at indenial.com>
Approved by: Janos Mohacsi <mohacsi at niif.hu> (maintainer)
Notes
Notes:
svn path=/head/; revision=194109
Diffstat (limited to 'security/denyhosts')
-rw-r--r-- | security/denyhosts/Makefile | 1 | ||||
-rw-r--r-- | security/denyhosts/files/patch-DenyHosts_regex.py | 11 |
2 files changed, 12 insertions, 0 deletions
diff --git a/security/denyhosts/Makefile b/security/denyhosts/Makefile index 1c4e38473047..328840e3f1d3 100644 --- a/security/denyhosts/Makefile +++ b/security/denyhosts/Makefile @@ -7,6 +7,7 @@ PORTNAME= denyhosts PORTVERSION= 2.6 +PORTREVISION= 1 CATEGORIES= security MASTER_SITES= ${MASTER_SITE_SOURCEFORGE} MASTER_SITE_SUBDIR= ${PORTNAME} diff --git a/security/denyhosts/files/patch-DenyHosts_regex.py b/security/denyhosts/files/patch-DenyHosts_regex.py new file mode 100644 index 000000000000..4c56fb519112 --- /dev/null +++ b/security/denyhosts/files/patch-DenyHosts_regex.py @@ -0,0 +1,11 @@ +--- DenyHosts/regex.py.orig Sat Jun 23 14:32:34 2007 ++++ DenyHosts/regex.py Sat Jun 23 14:32:58 2007 +@@ -17,7 +17,7 @@ + + FAILED_ENTRY_REGEX4 = re.compile(r"""Authentication failure for (?P<user>.*) .*from (?P<host>.*)""") + +-FAILED_ENTRY_REGEX5 = re.compile(r"""User (?P<user>.*) .*from (?P<host>.*) not allowed because none of user's groups are listed in AllowGroups""") ++FAILED_ENTRY_REGEX5 = re.compile(r"""User (?P<user>.*) .*from (?P<host>.*) not allowed because none of user's groups are listed in AllowGroups$""") + + FAILED_ENTRY_REGEX6 = re.compile(r"""Did not receive identification string .*from (::ffff:)?(?P<host>\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})""") + |