Update to V1.0.3, per request of our security officers:

Versions prior to 1.0.3 of the nmh package contained a vulnerability
where incoming mail messages with carefully designed MIME headers could
cause nmh's mhshow command to execute arbitrary shell code.

See the changelog for another 372 lines of changes.

1 files changed, 78 insertions, 51 deletions

diff --git a/mail/nmh/pkg/PLIST b/mail/nmh/pkg/PLIST
index 7e616a6af44..fc384d72b70 100644
--- a/mail/nmh/pkg/PLIST
+++ b/mail/nmh/pkg/PLIST
@@ -1,31 +1,25 @@
-@comment $NetBSD: PLIST,v 1.11 2000/01/18 15:50:33 agc Exp $
+@comment $NetBSD: PLIST,v 1.12 2000/03/02 00:23:16 hubertf Exp $
 bin/ali
+bin/mhn
 bin/anno
 bin/burst
 bin/comp
 bin/dist
 bin/flist
-bin/flists
 bin/folder
-bin/folders
 bin/forw
-bin/inc
 bin/mark
 bin/mhbuild
 bin/mhlist
 bin/mhmail
-bin/mhn
 bin/mhparam
 bin/mhpath
 bin/mhshow
 bin/mhstore
-bin/mhtest
 bin/msgchk
 bin/msh
-bin/next
 bin/packf
 bin/pick
-bin/prev
 bin/prompter
 bin/refile
 bin/repl
@@ -35,47 +29,16 @@ bin/scan
 bin/send
 bin/show
 bin/sortm
+bin/inc
 bin/viamail
 bin/whatnow
 bin/whom
-etc/nmh/MailAliases
-etc/nmh/components
-etc/nmh/digestcomps
-etc/nmh/distcomps
-etc/nmh/forwcomps
-etc/nmh/mhl.body
-etc/nmh/mhl.digest
-etc/nmh/mhl.format
-etc/nmh/mhl.forward
-etc/nmh/mhl.headers
-etc/nmh/mhl.reply
-etc/nmh/mhn.defaults.dist
-etc/nmh/mts.conf.dist
-etc/nmh/rcvdistcomps
-etc/nmh/replcomps
-etc/nmh/replgroupcomps
-etc/nmh/scan.default
-etc/nmh/scan.mailx
-etc/nmh/scan.nomime
-etc/nmh/scan.size
-etc/nmh/scan.time
-etc/nmh/scan.timely
-etc/nmh/scan.unseen
-etc/nmh/tmac.h
-libexec/nmh/ap
-libexec/nmh/conflict
-libexec/nmh/dp
-libexec/nmh/fmtdump
-libexec/nmh/install-mh
-libexec/nmh/mhl
-libexec/nmh/post
-libexec/nmh/rcvdist
-libexec/nmh/rcvpack
-libexec/nmh/rcvstore
-libexec/nmh/rcvtty
-libexec/nmh/sendfiles
-libexec/nmh/slocal
-libexec/nmh/spost
+bin/flists
+bin/folders
+bin/prev
+bin/next
+bin/sendfiles
+man/man1/repl.1
 man/man1/ali.1
 man/man1/anno.1
 man/man1/burst.1
@@ -87,6 +50,7 @@ man/man1/forw.1
 man/man1/inc.1
 man/man1/mark.1
 man/man1/mh-chart.1
+man/man1/nmh.1
 man/man1/mhbuild.1
 man/man1/mhl.1
 man/man1/mhlist.1
@@ -99,7 +63,6 @@ man/man1/mhstore.1
 man/man1/msgchk.1
 man/man1/msh.1
 man/man1/next.1
-man/man1/nmh.1
 man/man1/packf.1
 man/man1/pick.1
 man/man1/prev.1
@@ -109,7 +72,6 @@ man/man1/rcvpack.1
 man/man1/rcvstore.1
 man/man1/rcvtty.1
 man/man1/refile.1
-man/man1/repl.1
 man/man1/rmf.1
 man/man1/rmm.1
 man/man1/scan.1
@@ -128,6 +90,7 @@ man/man5/mh-mail.5
 man/man5/mh-profile.5
 man/man5/mh-sequence.5
 man/man5/mh-tailor.5
+man/man5/mh_profile.5
 man/man8/ap.8
 man/man8/conflict.8
 man/man8/dp.8
@@ -141,7 +104,71 @@ share/doc/nmh/FAQ
 share/doc/nmh/MAIL.FILTERING
 share/doc/nmh/README
 share/doc/nmh/TODO
-share/doc/nmh/ZSH.COMPLETION
-@dirrm etc/nmh
-@dirrm libexec/nmh
+share/doc/nmh/COMPLETION-ZSH
+etc/nmh/mhl.body
+etc/nmh/mhl.digest
+etc/nmh/mhl.format
+etc/nmh/mhl.forward
+etc/nmh/mhl.headers
+etc/nmh/mhl.reply
+etc/nmh/scan.default
+etc/nmh/scan.mailx
+etc/nmh/scan.nomime
+etc/nmh/scan.size
+etc/nmh/scan.time
+etc/nmh/scan.timely
+etc/nmh/scan.unseen
+etc/nmh/components
+etc/nmh/digestcomps
+etc/nmh/distcomps
+etc/nmh/forwcomps
+etc/nmh/rcvdistcomps
+etc/nmh/rcvdistcomps.outbox
+etc/nmh/replcomps
+etc/nmh/replgroupcomps
+etc/nmh/MailAliases
+etc/nmh/mhn.defaults.dist
+etc/nmh/tmac.h
+etc/nmh/mhn.defaults
+etc/nmh/mts.conf.dist
+etc/nmh/mhl.body.old
+etc/nmh/mhl.digest.old
+etc/nmh/mhl.format.old
+etc/nmh/mhl.forward.old
+etc/nmh/mhl.headers.old
+etc/nmh/mhl.reply.old
+etc/nmh/scan.default.old
+etc/nmh/scan.mailx.old
+etc/nmh/scan.nomime.old
+etc/nmh/scan.size.old
+etc/nmh/scan.time.old
+etc/nmh/scan.timely.old
+etc/nmh/scan.unseen.old
+etc/nmh/components.old
+etc/nmh/digestcomps.old
+etc/nmh/distcomps.old
+etc/nmh/forwcomps.old
+etc/nmh/rcvdistcomps.old
+etc/nmh/rcvdistcomps.outbox.old
+etc/nmh/replcomps.old
+etc/nmh/replgroupcomps.old
+etc/nmh/MailAliases.old
+etc/nmh/mhn.defaults.old
+etc/nmh/mts.conf.old
+libexec/nmh/ap
+libexec/nmh/conflict
+libexec/nmh/dp
+libexec/nmh/fmtdump
+libexec/nmh/install-mh
+libexec/nmh/mhl
+libexec/nmh/post
+libexec/nmh/rcvdist
+libexec/nmh/rcvpack
+libexec/nmh/rcvstore
+libexec/nmh/rcvtty
+libexec/nmh/slocal
+libexec/nmh/spost
+libexec/nmh/mhtest
 @dirrm share/doc/nmh
+@dirrm libexec/nmh
+@dirrm etc/nmh