[no description] https://git.osdyson.ru/mirror/pkgsrc/atom?h=pkgsrc_2008Q2 2008-09-05T11:55:45Z 2008-09-05T11:55:45Z ghen ghen 2008-09-05T11:55:45Z urn:sha1:1c5a31da81d3569b757d0e2e18e0bf27ea62a1de security update for postfix - pkgsrc/mail/postfix/Makefile 1.219, 1.220 - pkgsrc/mail/postfix/distinfo 1.119 - pkgsrc/mail/postfix/patches/patch-aa 1.21 - pkgsrc/mail/postfix/patches/patch-ag 1.25 - pkgsrc/mail/postfix/patches/patch-ai 1.22 - pkgsrc/mail/postfix-current/Makefile 1.100, 1.101 - pkgsrc/mail/postfix-current/distinfo 1.46 - pkgsrc/mail/postfix-current/patches/patch-aa 1.19 - pkgsrc/mail/postfix-current/patches/patch-ag 1.17 - pkgsrc/mail/postfix-current/patches/patch-ai 1.20 Module Name: pkgsrc Committed By: ghen Date: Fri Aug 22 20:29:55 UTC 2008 Modified Files: pkgsrc/mail/postfix: Makefile pkgsrc/mail/postfix-current: Makefile Log Message: Add some (http) mirrors. --- Module Name: pkgsrc Committed By: martti Date: Thu Sep 4 08:25:20 UTC 2008 Modified Files: pkgsrc/mail/postfix: Makefile distinfo pkgsrc/mail/postfix/patches: patch-aa patch-ag patch-ai Log Message: Updated mail/postfix to 2.5.5 Postfix 2.4 and later, on Linux kernel 2.6, is vulnerable to a denial of service attack by a local user. There is no breach of data confidentiality or data integrity. This problem was found by the Postfix author during routine source code maintenance. An on-line version of this announcement is available at http://www.postfix.org/announcements/20080902.html --- Module Name: pkgsrc Committed By: martti Date: Thu Sep 4 08:25:31 UTC 2008 Modified Files: pkgsrc/mail/postfix-current: Makefile distinfo pkgsrc/mail/postfix-current/patches: patch-aa patch-ag patch-ai Log Message: Updated mail/postfix-current to 2.6.20080903 Postfix 2.4 and later, on Linux kernel 2.6, is vulnerable to a denial of service attack by a local user. There is no breach of data confidentiality or data integrity. This problem was found by the Postfix author during routine source code maintenance. An on-line version of this announcement is available at http://www.postfix.org/announcements/20080902.html 2008-09-05T11:41:53Z ghen ghen 2008-09-05T11:41:53Z urn:sha1:45ac9754fec56885b9360175107a21c857a419a4 security update for clamav - pkgsrc/mail/clamav/Makefile 1.87 - pkgsrc/mail/clamav/buildlink3.mk 1.16 - pkgsrc/mail/clamav/distinfo 1.54 - pkgsrc/mail/clamav/patches/patch-ad 1.15 - pkgsrc/mail/clamav/patches/patch-af 1.6 - pkgsrc/mail/clamav/patches/patch-ah 1.16 - pkgsrc/mail/clamav/patches/patch-ba removed Module Name: pkgsrc Committed By: martti Date: Thu Sep 4 06:44:07 UTC 2008 Modified Files: pkgsrc/mail/clamav: Makefile buildlink3.mk distinfo pkgsrc/mail/clamav/patches: patch-ad patch-af patch-ah Removed Files: pkgsrc/mail/clamav/patches: patch-ba Log Message: Updated mail/clamav to 0.94 * Lots of bug fixes I removed patch-ba and tested this on NetBSD/i386 3.1.1_PATCH and NetBSD/amd64 4.0_STABLE and everything seems to work... 2008-08-24T11:10:26Z rtr rtr 2008-08-24T11:10:26Z urn:sha1:b2a0672ec2b0a60b5b695e6981ea113a2e927535 thunderbird, thunderbird-gtk1: update package for security fixes revisions pulled up: pkgsrc/mail/thunderbird/Makefile-thunderbird.common 1.36 pkgsrc/mail/thunderbird/PLIST 1.24 pkgsrc/mail/thunderbird/distinfo 1.46 pkgsrc/mail/thunderbird-gtk1/PLIST 1.14 pkgsrc/mail/thunderbird/patches/patch-af 1.5 pkgsrc/mail/thunderbird/patches/patch-ap 1.5 pkgsrc/mail/thunderbird/patches/patch-dw 1.2 Module Name: pkgsrc Committed By: ghen Date: Fri Aug 22 09:42:15 UTC 2008 Modified Files: pkgsrc/mail/thunderbird: Makefile-thunderbird.common PLIST distinfo pkgsrc/mail/thunderbird-gtk1: PLIST pkgsrc/mail/thunderbird/patches: patch-af patch-ap patch-dw Log Message: Update thunderbird and thunderbird-gtk1 to 2.0.0.16. Security fixes in this version: MFSA 2008-34 Remote code execution by overflowing CSS reference counter MFSA 2008-33 Crash and remote code execution in block reflow MFSA 2008-31 Peer-trusted certs can use alt names to spoof MFSA 2008-29 Faulty .properties file results in uninitialized memory being used MFSA 2008-26 Buffer length checks in MIME processing MFSA 2008-25 Arbitrary code execution in mozIJSSubScriptLoader.loadSubScript() MFSA 2008-24 Chrome script loading from fastload file MFSA 2008-21 Crashes with evidence of memory corruption For more info, see +http://www.mozilla.com/en-US/thunderbird/2.0.0.16/releasenotes/ 2008-08-19T01:55:43Z rtr rtr 2008-08-19T01:55:43Z urn:sha1:1758ada266b899b455a98612c1f54a63b0efec90 turba: fix plist revisions pulled up: pkgsrc/mail/turba/Makefile 1.30 pkgsrc/mail/turba/PLIST 1.12 Module Name: pkgsrc Committed By: adrianp Date: Thu Jul 31 19:54:04 UTC 2008 Modified Files: pkgsrc/mail/turba: Makefile PLIST Log Message: Add js directory which should fix PR 39253 PKGREVISION++ 2008-08-19T01:27:09Z rtr rtr 2008-08-19T01:27:09Z urn:sha1:f3093bee92203415033e6957d6a7866a5c3cf6e2 imp: fix package plist revisions pulled up: pkgsrc/mail/imp/Makefile 1.49 pkgsrc/mail/imp/PLIST 1.12 Module Name: pkgsrc Committed By: adrianp Date: Thu Jul 31 19:48:20 UTC 2008 Modified Files: pkgsrc/mail/imp: Makefile PLIST Log Message: Add js directory which should fix PR 39253 PKGREVISION++ 2008-08-18T12:18:46Z rtr rtr 2008-08-18T12:18:46Z urn:sha1:7e8243df41d92c78751200b2cd14a5f61871e3ec postfix-current: update package for fixes revisions pulled up: pkgsrc/mail/postfix-current/Makefile 1.99 pkgsrc/mail/postfix-current/distinfo 1.45 Module Name: pkgsrc Committed By: martti Date: Mon Aug 18 07:19:13 UTC 2008 Modified Files: pkgsrc/mail/postfix-current: Makefile distinfo Log Message: Updated mail/postfix-current to 2.6.20080814 20080804 Bugfix: dangling pointer in vstring_sprintf_prepend(). File: util/vstring.c. 20080814 Security: some systems have changed their link() semantics, and will hardlink a symlink, contrary to POSIX and XPG4. Sebastian Krahmer, SuSE. File: util/safe_open.c. The solution introduces the following incompatible change: when the target of mail delivery is a symlink, the parent directory of that symlink must now be writable by root only (in addition to the already existing requirement that the symlink itself is owned by root). This change will break legitimate configurations that deliver mail to a symbolic link in a directory with less restrictive permissions. 2008-08-18T09:57:49Z rtr rtr 2008-08-18T09:57:49Z urn:sha1:c2329fc3224bb287f9be1162ee3d35da30109873 postfix-current: update package for fixes revisions pulled up: pkgsrc/mail/postfix-current/Makefile 1.98 pkgsrc/mail/postfix-current/distinfo 1.44 Module Name: pkgsrc Committed By: martti Date: Wed Aug 13 07:34:44 UTC 2008 Modified Files: pkgsrc/mail/postfix-current: Makefile distinfo Log Message: Updated mail/postfix-current to 2.6.20080726 * Lots of bug fixes 2008-08-18T09:46:08Z rtr rtr 2008-08-18T09:46:08Z urn:sha1:7b1bf95a30a1c242fa327e33ee59de75fcfee983 postfix: update package for security fixes revisions pulled up: pkgsrc/mail/postfix/Makefile 1.218 pkgsrc/mail/postfix/distinfo 1.118 Module Name: pkgsrc Committed By: martti Date: Mon Aug 18 07:13:41 UTC 2008 Modified Files: pkgsrc/mail/postfix: Makefile distinfo Log Message: Updated mail/postfix to 2.5.4 20080804 Bugfix: dangling pointer in vstring_sprintf_prepend(). File: util/vstring.c. 20080814 Security: some systems have changed their link() semantics, and will hardlink a symlink, contrary to POSIX and XPG4. Sebastian Krahmer, SuSE. File: util/safe_open.c. The solution introduces the following incompatible change: when the target of mail delivery is a symlink, the parent directory of that symlink must now be writable by root only (in addition to the already existing requirement that the symlink itself is owned by root). This change will break legitimate configurations that deliver mail to a symbolic link in a directory with less restrictive permissions. 2008-07-13T16:26:17Z tonnerre tonnerre 2008-07-13T16:26:17Z urn:sha1:4b34406425f2ffc01680159d5437a5454ee75da5 (CVE-2007-5740). 2008-07-13T13:15:29Z tonnerre tonnerre 2008-07-13T13:15:29Z urn:sha1:6457920318bcad8b25e31dc39e1ceff60a580de1