diff options
| author | snj <snj@pkgsrc.org> | 2005-06-13 05:36:28 +0000 |
|---|---|---|
| committer | snj <snj@pkgsrc.org> | 2005-06-13 05:36:28 +0000 |
| commit | 3c9389df7ab4cde61aacd60c48373892fec2f128 (patch) | |
| tree | 4727becb2eed9b01455a4d48a5d26acb1fc93efe /news | |
| parent | 218ce539908fc1442f1090ce77dccf21628a1f20 (diff) | |
| download | pkgsrc-3c9389df7ab4cde61aacd60c48373892fec2f128.tar.gz | |
Pullup ticket 550 - requested by Lubomir Sedlacik
security update for leafnode
Revisions pulled up:
- pkgsrc/news/leafnode/Makefile 1.26
- pkgsrc/news/leafnode/distinfo 1.15
Module Name: pkgsrc
Committed By: salo
Date: Thu Jun 9 18:21:23 UTC 2005
Modified Files:
pkgsrc/news/leafnode: Makefile distinfo
Log Message:
Update to version 1.11.3
Changes:
### SECURITY BUGFIXES
- Fetchnews did not detect timeouts while it was downloading an article
header, which malicious upstream servers could exploit to mount
a denial of service attack against the fetchnews client. See
leafnode-SA-2005-02.txt. CVE Name: CAN-2005-1911
### BUGFIXES
- Bugfix sed expression in makesubst script. (Reported by Jeff Zacharias.)
### CHANGES
- texpire now tags the message.id expired count with "message.id" rather
than "total:" to avoid misleading the user who assumes that "total:"
would have to be the sum of the group counts. See also the FAQ change
below. SourceForge bug #1215453.
- When debugmode and verbose mode are set, leafnode programs now print a
warning to stdout that the user should check syslog.conf and the
syslog output rather than the screen print for debugging and sleeps for
three seconds.
### DOCUMENTATION
- Add FAQ entry to explain discrepancies between texpire group counts
and message.id expired articles counts.
- Add FAQ entry to explain influence of Gnus' gnus-read-active-file
setting on lost subscriptions, and extend stop fetchnews from
unsubscribing FAQ. Debian bug #307685.
- Drop FAQ entry on license issues as some parts of leafnode are in fact
GPLd.
- Drop FAQ entry on why old articles aren't posted, obsolete since
1.9.33.
- INSTALL and INSTALL_de have been polished.
- Add a hint that syslog.conf must be edited to config.example.
- leafnode(8) mentions that LIST ACTIVE keeps an existing subscription
fresh.
Diffstat (limited to 'news')
| -rw-r--r-- | news/leafnode/Makefile | 5 | ||||
| -rw-r--r-- | news/leafnode/distinfo | 8 |
2 files changed, 6 insertions, 7 deletions
diff --git a/news/leafnode/Makefile b/news/leafnode/Makefile index 5111ec3ae40..7697ca8a6b2 100644 --- a/news/leafnode/Makefile +++ b/news/leafnode/Makefile @@ -1,8 +1,7 @@ -# $NetBSD: Makefile,v 1.22.2.1 2005/05/14 06:05:13 snj Exp $ +# $NetBSD: Makefile,v 1.22.2.2 2005/06/13 05:36:28 snj Exp $ -DISTNAME= leafnode-1.11.2.rel +DISTNAME= leafnode-1.11.3.rel PKGNAME= ${DISTNAME:S/.rel//} -PKGREVISION= # empty CATEGORIES= news MASTER_SITES= ${MASTER_SITE_SOURCEFORGE:=leafnode/} EXTRACT_SUFX= .tar.bz2 diff --git a/news/leafnode/distinfo b/news/leafnode/distinfo index 4bfc65dfbaa..768407a84c4 100644 --- a/news/leafnode/distinfo +++ b/news/leafnode/distinfo @@ -1,6 +1,6 @@ -$NetBSD: distinfo,v 1.13.2.1 2005/05/14 06:05:13 snj Exp $ +$NetBSD: distinfo,v 1.13.2.2 2005/06/13 05:36:28 snj Exp $ -SHA1 (leafnode-1.11.2.rel.tar.bz2) = 138904683e9fa7f8630bc7e0273f2085ad4e7784 -RMD160 (leafnode-1.11.2.rel.tar.bz2) = be14a2be86e9efcbc25d4f473f8514254a8ffa54 -Size (leafnode-1.11.2.rel.tar.bz2) = 391034 bytes +SHA1 (leafnode-1.11.3.rel.tar.bz2) = 6910f05c0fa4b1bb5a4baaa6e6fd529fef5ece22 +RMD160 (leafnode-1.11.3.rel.tar.bz2) = 786fc42b58660d8d47eccd5d610718202eb50a3c +Size (leafnode-1.11.3.rel.tar.bz2) = 506217 bytes SHA1 (patch-aa) = 6820ab420cb656e61848f9eb29d4674bccb856a6 |