163555 – [PATCH] irc/bitchx is out of date and BitchX 1.2 does not compile (fix included)

no flags

Old obsolete, insecure version. 

The current version of BitchX, released in 2004, have security problems allowing remote IRC servers to execute arbitrary code on the client's machine (CVE-2007-3360, CVE-2007-4584).

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-3360
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-4584

BitchX 1.2 is release ready per developers (caf) and should be added to the ports tree. It is stable. However, in order for it to compile on BitchX 9 the configure file must be patched.

I would also like to become the maintainer of the BitchX port.

Fix: 

Change the configure file in the BitchX1.2 source.

lines changed in configure file: 12668 and 13936

diff:

# diff configure.old configure.new
12668c12668
<             system="MP-RAS-`$AWK '{print $3}' /etc/.relid'`"
---
>             system="MP-RAS-$AWK {print $3} /etc/.relid"
13936c13936
<             system="MP-RAS-`$AWK '{print $3}' /etc/.relid'`"
---
>             system="MP-RAS-$AWK {print $3} /etc/.relid"
How-To-Repeat: run the following commands:

0) Be running FreeBSD9.0-RC3 system.
1) svn co https://bitchx.svn.sourceforge.net/svnroot/bitchx/trunk bitchx-trunk
2) cd bitchx-trunk
3) ./configure

Receive error about unterminated quoted strings.