pkgsrc/mail/fetchmail, branch pkgsrc_2008Q1[no description]https://git.osdyson.ru/mirror/pkgsrc/atom?h=pkgsrc_2008Q12008-06-19T16:45:15ZPullup ticket 2431 - requested by obache2008-06-19T16:45:15Zghenghen2008-06-19T16:45:15Zurn:sha1:496f387c29829860a717054c15a7984d9743b864
security fix for fetchmail
- pkgsrc/mail/fetchmail/Makefile 1.167
- pkgsrc/mail/fetchmail/distinfo 1.39
- pkgsrc/mail/fetchmail/patches/patch-ab 1.18
Module Name: pkgsrc
Committed By: obache
Date: Thu Jun 19 11:29:49 UTC 2008
Modified Files:
pkgsrc/mail/fetchmail: Makefile distinfo
Added Files:
pkgsrc/mail/fetchmail/patches: patch-ab
Log Message:
Add patch for CVE-2008-2711.
Taken from http://fetchmail.berlios.de/fetchmail-SA-2008-01.txt
Bump PKGREVISION.
Per the process outlined in revbump(1), perform a recursive revbump2008-01-18T05:06:18Ztnntnn2008-01-18T05:06:18Zurn:sha1:1c8e24b168b5909ecc586bdbb660570b490d92ef
on packages that are affected by the switch from the openssl 0.9.7
branch to the 0.9.8 branch. ok jlam@
Added support for installation to DESTDIR.2008-01-05T20:50:00Zheinzheinz2008-01-05T20:50:00Zurn:sha1:0eb8839d72cb0eb1fe00bf58584d31035ddfdd86Remove "inet6" option. The "configure" script doesn't recognize2007-11-07T08:57:10Ztrontron2007-11-07T08:57:10Zurn:sha1:e822792de58366a828032a882498825c21ad9ce0
"--enable-inet6" or "--disble-inet6 anymore and decides automatically
whether to enable IPv6 support.
Pointed out by Matthias Andree in private e-mail.
Add fix for security vulnerability reported in CVE-2007-4565.2007-09-23T12:48:46Ztrontron2007-09-23T12:48:46Zurn:sha1:a989003b963a6476da12503e2bac5e79f1d949bd
Bump package revision.
Update "fetchmail" and "fetchmailconf" packages to version 6.3.8.2007-04-14T22:14:29Ztrontron2007-04-14T22:14:29Zurn:sha1:85e76b2657ff82b4ea83016ef0f7dc4bb8c5f9cf
Changes since version 6.3.6:
- Make the APOP challenge parser more distrustful and have it reject
challenges that do not conform to RFC-822 msg-id format, in the hope
to make mounting man-in-the-middle attacks (MITM) against APOP a bit
more difficult. (CVE-2007-1558)
- Fix pluralization of oversized-message warning mails.
- Fix manual page: --sslcheck -> --sslcertck, and do not set trailing
"recommended:" in bold.
- Repoll immediately if a protocol error happens during the authentication
attempt after a failed opportunistic TLS upgrade.
- Fix rendering of the "24 - 26, 28, 29" paragraph in the exit codes
section.
- If SOCKS support was compiled in, add 'socks' to the feature_options
Python list emitted in --configdump.
- Do not crash with a null pointer dereference when opening the BSMTP file
fails. Improve error checking and reporting.
- Make BSMTP output actually work, it would persistently fail with SOCKET
error after writing the first header.
- Fix KPOP.
- Fix repoll when server disconnects after opportunistic TLS failed for
POP3.
Use documented trick to disable Python detection instead of patching2007-01-17T19:18:01Ztrontron2007-01-17T19:18:01Zurn:sha1:d2ada92adbc9b5bb4b4ce3b8b119ee2d66af0556
"Makefile.in". Hint provided by Matthias Andree in private e-mail.
Add second Berlios download site to MASTER_SITES. The main one gets2007-01-17T17:36:51Zsalosalo2007-01-17T17:36:51Zurn:sha1:e5f59176bb52a0accd0f14bf6a8fd44dc3131b8e
overloaded from time to time.. (e.g., now).
Update "fetchmail" and "fetchmailconf" packages to version 6.3.6.2007-01-17T14:29:11Ztrontron2007-01-17T14:29:11Zurn:sha1:5a436e63174e874d4b2d3454f7da6c45be68b741
The list of changes since version 6.2.5.5 is too large to mention here.
The new version provides a fix for the vulnerability reported in the
fetchmail-SA-2006-02.txt advisory.
Strip ${PKGLOCALEDIR} from PLISTs of packages that already obey2006-04-17T07:07:11Zjlamjlam2006-04-17T07:07:11Zurn:sha1:1ae3d1ba51febfd65eabae7f192d4b643e252ba2
PKGLOCALEDIR and which install their locale files directly under
${PREFIX}/${PKGLOCALEDIR} and sort the PLIST file entries. From now
on, pkgsrc/mk/plist/plist-locale.awk will automatically handle
transforming the PLIST to refer to the correct locale directory.