Skip to Content.
Sympa Menu

sm-commit - Re: [SM-Commit] GIT changes to master grimoire by Elisamuel Resto (502c4868f739c75af1a1748471373eb0a47ea66a)

sm-commit AT lists.ibiblio.org

Subject: Source Mage code commit list

List archive

Chronological Thread  
  • From: David Kowis <dkowis AT shlrm.org>
  • To: Elisamuel Resto <ryuji AT sourcemage.org>
  • Cc: sm-commit AT lists.ibiblio.org
  • Subject: Re: [SM-Commit] GIT changes to master grimoire by Elisamuel Resto (502c4868f739c75af1a1748471373eb0a47ea66a)
  • Date: Tue, 29 Jul 2008 21:43:11 -0500

Elisamuel Resto wrote:
GIT changes to master grimoire by Elisamuel Resto <ryuji AT sourcemage.org>:

mail/fetchmail/DETAILS | 11 ++++++++---
mail/fetchmail/HISTORY | 5 +++++
mail/fetchmail/fetchmail.gpg |binary
3 files changed, 13 insertions(+), 3 deletions(-)

New commits:
commit 502c4868f739c75af1a1748471373eb0a47ea66a
Author: Elisamuel Resto <ryuji AT sourcemage.org>
Commit: Elisamuel Resto <ryuji AT sourcemage.org>

mail/fetchmail: updated to 6.3.9-rc2 which has some security fixes
This issue fixes CVE-2007-4565 and CVE-2008-2711 -> SECURITY_PATCH++
For information: http://www.dt.e-technik.uni-dortmund.de/~ma/fetchmail/
Added SOURCE_GPG for checking tarballs with upstream signature
fetchmai.gpg added, containing upstream gpg key ID 052E7D95

diff --git a/mail/fetchmail/DETAILS b/mail/fetchmail/DETAILS
index dbecbdd..bf408a7 100755
--- a/mail/fetchmail/DETAILS
+++ b/mail/fetchmail/DETAILS
@@ -1,11 +1,16 @@
SPELL=fetchmail
- VERSION=6.3.8
- SECURITY_PATCH=3
-
SOURCE_HASH='sha512:ac242c0df3db12a2924f196f02bd5dbca78a738036985c7fc9ae27589422e2f1592f53a03ebb859cd9c3b915112d5324ec307730bf95a500cb64838862f25af5'
+ VERSION=6.3.9-rc2
+ SECURITY_PATCH=4
SOURCE=$SPELL-$VERSION.tar.bz2
+ SOURCE2=$SOURCE.asc
+ SOURCE2_IGNORE=signature
+
#SOURCE_HASH='sha512:ac242c0df3db12a2924f196f02bd5dbca78a738036985c7fc9ae27589422e2f1592f53a03ebb859cd9c3b915112d5324ec307730bf95a500cb64838862f25af5'
+ SOURCE_GPG="fetchmail.gpg:$SOURCE2:UPSTREAM_KEY"
SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
SOURCE_URL[0]=http://download.berlios.de/$SPELL/$SOURCE
SOURCE_URL[1]=http://download2.berlios.de/$SPELL/$SOURCE
+ SOURCE2_URL[0]=http://download.berlios.de/$SPELL/$SOURCE2
+ SOURCE2_URL[1]=http://download2.berlios.de/$SPELL/$SOURCE2
WEB_SITE=http://fetchmail.berlios.de/
ENTERED=20010922
LICENSE[0]=GPL
diff --git a/mail/fetchmail/HISTORY b/mail/fetchmail/HISTORY
index 064648e..1ae811a 100644
--- a/mail/fetchmail/HISTORY
+++ b/mail/fetchmail/HISTORY
@@ -1,3 +1,8 @@
+2008-07-29 Elisamuel Resto <ryuji AT sourcemage.org>
+ * DETAILS: 6.3.9-rc2; SECURITY_PATCH++ (CVE-2007-4565, CVE-2008-2711)
+ SOURCE_GPG for checking tarballs with upstream signature
+ * fetchmai.gpg: added upstream gpg key ID 052E7D95
+


please for to be sending a mail to sm-security:

http://wiki.sourcemage.org/SecurityFormat

kthxbai


--
David Kowis

www.ronpaul2008.com - Ron Paul for President!
www.sourcemage.org - SourceMage GNU/Linux

Attachment: signature.asc
Description: OpenPGP digital signature




Archive powered by MHonArc 2.6.24.

Top of Page