Source Mage code commit list

[David Kowis <dkowis AT shlrm.org>]

Elisamuel Resto wrote:
> GIT changes to master grimoire by Elisamuel Resto <ryuji AT sourcemage.org>:
>
>  mail/fetchmail/DETAILS       |   11 ++++++++---
>  mail/fetchmail/HISTORY       |    5 +++++
>  mail/fetchmail/fetchmail.gpg |binary
>  3 files changed, 13 insertions(+), 3 deletions(-)
>
> New commits:
> commit 502c4868f739c75af1a1748471373eb0a47ea66a
> Author: Elisamuel Resto <ryuji AT sourcemage.org>
> Commit: Elisamuel Resto <ryuji AT sourcemage.org>
>
>     mail/fetchmail: updated to 6.3.9-rc2 which has some security fixes
>     This issue fixes CVE-2007-4565 and CVE-2008-2711 -> SECURITY_PATCH++
>     For information: http://www.dt.e-technik.uni-dortmund.de/~ma/fetchmail/
>     Added SOURCE_GPG for checking tarballs with upstream signature
>     fetchmai.gpg added, containing upstream gpg key ID 052E7D95
>
> diff --git a/mail/fetchmail/DETAILS b/mail/fetchmail/DETAILS
> index dbecbdd..bf408a7 100755
> --- a/mail/fetchmail/DETAILS
> +++ b/mail/fetchmail/DETAILS
> @@ -1,11 +1,16 @@
>             SPELL=fetchmail
> -         VERSION=6.3.8
> -  SECURITY_PATCH=3
> -     
> SOURCE_HASH='sha512:ac242c0df3db12a2924f196f02bd5dbca78a738036985c7fc9ae27589422e2f1592f53a03ebb859cd9c3b915112d5324ec307730bf95a500cb64838862f25af5'
> +         VERSION=6.3.9-rc2
> +  SECURITY_PATCH=4
>            SOURCE=$SPELL-$VERSION.tar.bz2
> +         SOURCE2=$SOURCE.asc
> +  SOURCE2_IGNORE=signature
> +     
> #SOURCE_HASH='sha512:ac242c0df3db12a2924f196f02bd5dbca78a738036985c7fc9ae27589422e2f1592f53a03ebb859cd9c3b915112d5324ec307730bf95a500cb64838862f25af5'
> +      SOURCE_GPG="fetchmail.gpg:$SOURCE2:UPSTREAM_KEY"
>  SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
>     SOURCE_URL[0]=http://download.berlios.de/$SPELL/$SOURCE
>     SOURCE_URL[1]=http://download2.berlios.de/$SPELL/$SOURCE
> +  SOURCE2_URL[0]=http://download.berlios.de/$SPELL/$SOURCE2
> +  SOURCE2_URL[1]=http://download2.berlios.de/$SPELL/$SOURCE2
>          WEB_SITE=http://fetchmail.berlios.de/
>           ENTERED=20010922
>        LICENSE[0]=GPL
> diff --git a/mail/fetchmail/HISTORY b/mail/fetchmail/HISTORY
> index 064648e..1ae811a 100644
> --- a/mail/fetchmail/HISTORY
> +++ b/mail/fetchmail/HISTORY
> @@ -1,3 +1,8 @@
> +2008-07-29 Elisamuel Resto <ryuji AT sourcemage.org>
> +       * DETAILS: 6.3.9-rc2; SECURITY_PATCH++ (CVE-2007-4565, CVE-2008-2711)
> +         SOURCE_GPG for checking tarballs with upstream signature
> +       * fetchmai.gpg: added upstream gpg key ID 052E7D95
> +


please for to be sending a mail to sm-security:

http://wiki.sourcemage.org/SecurityFormat

kthxbai


--
David Kowis

www.ronpaul2008.com - Ron Paul for President!
www.sourcemage.org  - SourceMage GNU/Linux

Attachment: signature.asc
Description: OpenPGP digital signature