Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 28 May 2007 09:46:11 +0200 (CEST)
From:      Udo Schweigert <udo.schweigert@siemens.com>
To:        FreeBSD-gnats-submit@FreeBSD.org
Subject:   ports/113079: maintainer-update of mail/mutt
Message-ID:  <200705280746.l4S7kB1Y084636@alaska.cert.siemens.com>
Resent-Message-ID: <200705280750.l4S7o99X044794@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         113079
>Category:       ports
>Synopsis:       maintainer-update of mail/mutt
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          maintainer-update
>Submitter-Id:   current-users
>Arrival-Date:   Mon May 28 07:50:09 GMT 2007
>Closed-Date:
>Last-Modified:
>Originator:     Udo Schweigert
>Release:        FreeBSD 6.2-STABLE
>Organization:
>Environment:

>Description:

Maintainer update of mail/mutt:

	- Security update to 1.4.2.3
	  Fixes CVE-2007-2683 (gecos overflow) and CVE-2007-1558 (APOP MD5 collision attack)

>How-To-Repeat:
>Fix:

diff -ru  /usr/ports/mail/mutt/Makefile ./Makefile
--- /usr/ports/mail/mutt/Makefile	Wed Apr 25 06:45:18 2007
+++ ./Makefile	Mon May 28 09:38:35 2007
@@ -7,22 +7,23 @@
 #
 
 PORTNAME=	mutt
-PORTVERSION=	1.4.2.2
+PORTVERSION=	1.4.2.3
 PORTREVISION=	0
+PATCHVERSION=	1.4.2.2
 CATEGORIES+=	mail ipv6
 MASTER_SITES=	ftp://ftp.mutt.org/mutt/ \
 		ftp://ftp.fu-berlin.de/pub/unix/mail/mutt/ \
 		ftp://ftp.demon.co.uk/pub/mirrors/mutt/ \
 		ftp://ftp.parodius.com/pub/mutt/
-DISTFILES=	${DISTNAME}i${EXTRACT_SUFX}
 
-PATCH_SITES=	http://www.mutt.org.ua/download/mutt-${PORTVERSION}/:vvv \
-		http://www2.mutt.org.ua/download/mutt-${PORTVERSION}/:vvv \
-		http://www3.mutt.org.ua/download/mutt-${PORTVERSION}/:vvv \
-		ftp://ftp.mutt.org.ua/pub/mutt/mutt-${PORTVERSION}/:vvv \
-		ftp://ftp3.mutt.org.ua/pub/mutt/mutt-${PORTVERSION}/:vvv
-PATCHFILES=	patch-${PORTVERSION}.rr.compressed.gz:vvv \
-		patch-${PORTVERSION}.vvv.initials.gz:vvv
+PATCHVERSION?=	${PORTVERSION}
+PATCH_SITES=	http://www.mutt.org.ua/download/mutt-${PATCHVERSION}/:vvv \
+		http://www2.mutt.org.ua/download/mutt-${PATCHVERSION}/:vvv \
+		http://www3.mutt.org.ua/download/mutt-${PATCHVERSION}/:vvv \
+		ftp://ftp.mutt.org.ua/pub/mutt/mutt-${PATCHVERSION}/:vvv \
+		ftp://ftp3.mutt.org.ua/pub/mutt/mutt-${PATCHVERSION}/:vvv
+PATCHFILES=	patch-${PATCHVERSION}.rr.compressed.gz:vvv \
+		patch-${PATCHVERSION}.vvv.initials.gz:vvv
 PATCH_DIST_STRIP=	-p1
 
 MAINTAINER?=	udo.schweigert@siemens.com
diff -ru  /usr/ports/mail/mutt/distinfo ./distinfo
--- /usr/ports/mail/mutt/distinfo	Wed Jul 19 06:43:26 2006
+++ ./distinfo	Mon May 28 09:36:38 2007
@@ -1,6 +1,6 @@
-MD5 (mutt/mutt-1.4.2.2i.tar.gz) = 51a08429c5bd5c34af3f4268b8cbcda3
-SHA256 (mutt/mutt-1.4.2.2i.tar.gz) = 3e7d16b9d37712149c68ab2ad837dcfa799bed432f8a21696dcd5c0595799397
-SIZE (mutt/mutt-1.4.2.2i.tar.gz) = 2676306
+MD5 (mutt/mutt-1.4.2.3.tar.gz) = dcb94661827dd090fa813e73e122ea0c
+SHA256 (mutt/mutt-1.4.2.3.tar.gz) = 1a4920e5efccd6a83932af4223cb568956158f62e9f595798acc4004aca6ace5
+SIZE (mutt/mutt-1.4.2.3.tar.gz) = 2646433
 MD5 (mutt/patch-1.4.2.2.rr.compressed.gz) = 32eeaeaefa82dc869a5af9a32e7279e2
 SHA256 (mutt/patch-1.4.2.2.rr.compressed.gz) = 3f70a8b666e1dd5342acb418aac8cb4a1ab68559b389346052bb1078a3b8dfee
 SIZE (mutt/patch-1.4.2.2.rr.compressed.gz) = 10191
>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200705280746.l4S7kB1Y084636>