Date: 15 Jun 2001 08:19:34 -0000 From: scorpio@drkshdw.org To: FreeBSD-gnats-submit@freebsd.org Cc: ve@sci.fi Subject: ports/28170: UPDATE to mail/fetchmail Message-ID: <20010615081934.91822.qmail@mail.drkshdw.org>
next in thread | raw e-mail | index | archive | help
>Number: 28170
>Category: ports
>Synopsis: SECURITY UPDATE to mail/fetchmail
>Confidential: no
>Severity: critical
>Priority: low
>Responsible: freebsd-ports
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: update
>Submitter-Id: current-users
>Arrival-Date: Fri Jun 15 01:20:00 PDT 2001
>Closed-Date:
>Last-Modified:
>Originator: Jeff Palmer
>Release: FreeBSD 4.3-STABLE i386
>Organization:
>Environment:
System: FreeBSD jeff.isni.net 4.3-STABLE FreeBSD 4.3-STABLE #4: Wed May 16 12:55:48 EDT 2001
root@jeff.isni.net:/usr/obj/usr/src/sys/FreeBSD i386
>Description:
Security update.
Updated fetchmail to the latest release to fix buffer overflow conditions.
From webpage:
fetchmail-5.8.6 (Tue Jun 12 08:16:54 EDT 2001), 20676 lines:
* Reject candidate headers for the MAIL FROM address that have \n in them.
* Add capability to insert poll trace data in the Received line.
* HMH's patch to prevent buffer overflow due to long headers. Addresses
Debian bug #100394.
* Brendan Kehoe's patch to avoid doing DNS lookups on skip entries.
>How-To-Repeat:
>Fix:
Index: Makefile
===================================================================
RCS file: /home/ncvs/ports/mail/fetchmail/Makefile,v
retrieving revision 1.124
diff -u -r1.124 Makefile
--- Makefile 2001/05/31 07:08:13 1.124
+++ Makefile 2001/06/15 08:16:43
@@ -10,7 +10,7 @@
# want fetchmailconf to work, define WITH_X11
PORTNAME= fetchmail
-PORTVERSION= 5.8.5
+PORTVERSION= 5.8.6
CATEGORIES= mail ipv6
MASTER_SITES= http://www.tuxedo.org/~esr/fetchmail/ \
ftp://ftp.ccil.org/pub/esr/fetchmail/
Index: distinfo
===================================================================
RCS file: /home/ncvs/ports/mail/fetchmail/distinfo,v
retrieving revision 1.102
diff -u -r1.102 distinfo
--- distinfo 2001/05/31 07:08:13 1.102
+++ distinfo 2001/06/15 08:16:43
@@ -1 +1 @@
-MD5 (fetchmail-5.8.5.tar.gz) = 980e67fedcd02578d45fd939fe1c1643
+MD5 (fetchmail-5.8.6.tar.gz) = 576a9fd8d092706cd74d74d742c7d543
>Release-Note:
>Audit-Trail:
>Unformatted:
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010615081934.91822.qmail>