From owner-freebsd-ports Fri Jun 15 1:22:58 2001 Delivered-To: freebsd-ports@hub.freebsd.org Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by hub.freebsd.org (Postfix) with ESMTP id 3C1FD37B401 for ; Fri, 15 Jun 2001 01:21:21 -0700 (PDT) (envelope-from gnats@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.11.3/8.11.3) id f5F8LLS25630; Fri, 15 Jun 2001 01:21:21 -0700 (PDT) (envelope-from gnats) Received: from mail.drkshdw.org (user4.net011.fl.sprint-hsd.net [207.30.203.4]) by hub.freebsd.org (Postfix) with ESMTP id E09B037B409 for ; Fri, 15 Jun 2001 01:19:35 -0700 (PDT) (envelope-from root@mail.drkshdw.org) Received: (qmail 91823 invoked by uid 0); 15 Jun 2001 08:19:34 -0000 Message-Id: <20010615081934.91822.qmail@mail.drkshdw.org> Date: 15 Jun 2001 08:19:34 -0000 From: scorpio@drkshdw.org Reply-To: scorpio@drkshdw.org To: FreeBSD-gnats-submit@freebsd.org Cc: ve@sci.fi X-Send-Pr-Version: 3.113 Subject: ports/28170: UPDATE to mail/fetchmail Sender: owner-freebsd-ports@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org >Number: 28170 >Category: ports >Synopsis: SECURITY UPDATE to mail/fetchmail >Confidential: no >Severity: critical >Priority: low >Responsible: freebsd-ports >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Fri Jun 15 01:20:00 PDT 2001 >Closed-Date: >Last-Modified: >Originator: Jeff Palmer >Release: FreeBSD 4.3-STABLE i386 >Organization: >Environment: System: FreeBSD jeff.isni.net 4.3-STABLE FreeBSD 4.3-STABLE #4: Wed May 16 12:55:48 EDT 2001 root@jeff.isni.net:/usr/obj/usr/src/sys/FreeBSD i386 >Description: Security update. Updated fetchmail to the latest release to fix buffer overflow conditions. From webpage: fetchmail-5.8.6 (Tue Jun 12 08:16:54 EDT 2001), 20676 lines: * Reject candidate headers for the MAIL FROM address that have \n in them. * Add capability to insert poll trace data in the Received line. * HMH's patch to prevent buffer overflow due to long headers. Addresses Debian bug #100394. * Brendan Kehoe's patch to avoid doing DNS lookups on skip entries. >How-To-Repeat: >Fix: Index: Makefile =================================================================== RCS file: /home/ncvs/ports/mail/fetchmail/Makefile,v retrieving revision 1.124 diff -u -r1.124 Makefile --- Makefile 2001/05/31 07:08:13 1.124 +++ Makefile 2001/06/15 08:16:43 @@ -10,7 +10,7 @@ # want fetchmailconf to work, define WITH_X11 PORTNAME= fetchmail -PORTVERSION= 5.8.5 +PORTVERSION= 5.8.6 CATEGORIES= mail ipv6 MASTER_SITES= http://www.tuxedo.org/~esr/fetchmail/ \ ftp://ftp.ccil.org/pub/esr/fetchmail/ Index: distinfo =================================================================== RCS file: /home/ncvs/ports/mail/fetchmail/distinfo,v retrieving revision 1.102 diff -u -r1.102 distinfo --- distinfo 2001/05/31 07:08:13 1.102 +++ distinfo 2001/06/15 08:16:43 @@ -1 +1 @@ -MD5 (fetchmail-5.8.5.tar.gz) = 980e67fedcd02578d45fd939fe1c1643 +MD5 (fetchmail-5.8.6.tar.gz) = 576a9fd8d092706cd74d74d742c7d543 >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports" in the body of the message