--- - branch: pkgsrc-2009Q4 date: Mon Feb 15 07:37:32 UTC 2010 files: - new: 1.169.4.1 old: '1.169' path: pkgsrc/mail/fetchmail/Makefile pathrev: pkgsrc/mail/fetchmail/Makefile@1.169.4.1 type: modified - new: 1.40.4.1 old: '1.40' path: pkgsrc/mail/fetchmail/distinfo pathrev: pkgsrc/mail/fetchmail/distinfo@1.40.4.1 type: modified - new: 1.75.4.1 old: '1.75' path: pkgsrc/mail/fetchmailconf/Makefile pathrev: pkgsrc/mail/fetchmailconf/Makefile@1.75.4.1 type: modified id: 20100215T073732Z.f22df3cce6d7519b5acd75937b570fb3365d51f1 log: "Pullup ticket 3006 - requested by tron\nsecurity update\n\nRevisions pulled up:\n- pkgsrc/mail/fetchmail/Makefile\t1.170\n- pkgsrc/mail/fetchmail/distinfo\t1.41\n- pkgsrc/mail/fetchmailconf/Makefile\t1.78\n\n -------------------------------------------------------------------------\n \ Module Name: pkgsrc\n Committed By: wiz\n Date: Sun Feb 14 09:46:00 UTC 2010\n\n Modified Files:\n pkgsrc/mail/fetchmail: Makefile distinfo\n\n Log Message:\n Update to 6.3.14:\n\n fetchmail 6.3.14 (released 2010-02-05, 25487 LoC):\n\n # SECURITY FIXES\n * SSL/TLS certificate information is now also reported properly on computers\n that consider the \"char\" type signed. Fixes malloc() buffer overrun.\n Workaround for older versions: do not use verbose mode.\n See fetchmail-SA-2010-01.txt for details, including a minimal patch.\n\n # BUG FIXES\n * The IMAP client no longer skips messages from several IMAP servers including\n Dovecot if fetchmail's \"idle\" is in use. Causes were that fetchmail (a)\n ignored some untagged responses when it should not (b) relied on EXISTS\n messages in response to EXPUNGE, which aren't mandated by RFC-3501 (the IMAP\n standard) and aren't sent by Dovecot either.\n Fix by Sunil Shetye (the fix also consolidates IMAP response handling,\n improving overall robustness of the IMAP client), bug report and testing by\n Matt Doran, with further hints from Timo Sirainen.\n * The SMTP client now recovers from errors (such as servers dropping the\n connection after errors) when sending an RSET command.\n Fix by Sunil Shetye. Report by James Moe.\n * The IMAP client now uses \"SEARCH UNSEEN\" rather than \"SEARCH UNSEEN NOT\n DELETED\" again on IMAP2, to fix a regression in fetchmail 6.2.5 reported by\n Will Stringer in June 2004. (Sunil Shetye)\n * The IMAP client now uses \"SEARCH UNSEEN UNDELETED\" on IMAP4 and IMAP4r1\n servers (Sunil Shetye).\n * Workaround: The IMAP client now falls back to \"FETCH n:m FLAGS\" if the server\n does not support \"SEARCH\". (Sunil Shetye)\n * The IMAP client now requests message numbers in batches of 1,000 to avoid\n problems if there are more than 1860 unseen messages. (Sunil Shetye)\n Note that this wasn't security relevant because fetchmail would only read up\n to the maximum buffer size and leave the remainder of the string unread, going\n out of synch afterwards.\n * Stricter validation of IMAP responses containing byte or message counts.\n\n # CHANGES\n * Only include gssapi.h if we're not including gssapi/gssapi.h, to fix a FreeBSD\n compiler warning about gssapi.h being obsolete.\n\n # DOCUMENTATION\n * The README.SSL document was revised for grammar, spelling, and clarity.\n Courtesy of Robert Mullin.\n\n fetchmail 6.3.13 (released 2009-10-30, 25333 LoC):\n\n # REGRESSION FIXES\n * The multiline SMTP error fix in release 6.3.12 caused fetchmail to lose\n message codes 400..599 and treat all of these as temporary error. This would\n cause messages to be left on the server even if softbounce was turned off.\n Reported by Thomas Jarosch.\n\n fetchmail 6.3.12 (released 2009-10-05):\n\n # REGRESSION FIXES\n * The CVS-2009-2666 fix in fetchmail release 6.3.11 caused a free() of\n unallocated memory on SSL connections, which caused crashes or program aborts\n on some systems (depending on how initialization and free() of unallocated\n \ memory is handled in compiler and libc).\n Workaround for older versions: run in verbose mode.\n Patch courtesy of Thomas Heinz, fixes Gentoo Bug #280760.\n \ This regression affected only the 6.3.11 release, but not the patch that was\n part of the security announcement fetchmail-SA-2009-01.\n\n # BUG FIXES\n * Fix error reporting for GSSAPI on Heimdal (h5l) Kerberos.\n * Look for MD5_Init in libcrypto rather than libssl, fixes Gentoo Kerberos\n builds; fixes upstream parts of Gentoo Bugs #231400 and #185652, and fixes\n BerliOS Bug #16134.\n * Report multiline SMTP errors properly, reported by Earl Chew; fixes Debian Bug\n #529899, reported by Akihiro Terasaki.\n Note: This fix introduced a regression, fixed in 6.3.13.\n * Replace control characters in SMTP replies by '?'.\n * Fetchmailconf: Fix descriptions for smtpaddress and smtpname options;\n smtpaddress is for RCPT TO, not MAIL FROM. Found by Gerard Seibert.\n\n ..as well as translation updates in all three releases.\n\n \ To generate a diff of this commit:\n cvs rdiff -u -r1.169 -r1.170 pkgsrc/mail/fetchmail/Makefile\n \ cvs rdiff -u -r1.40 -r1.41 pkgsrc/mail/fetchmail/distinfo\n\n -------------------------------------------------------------------------\n \ Module Name: pkgsrc\n Committed By: tnn\n Date: Sun Feb 14 13:06:32 UTC 2010\n\n Modified Files:\n pkgsrc/mail/fetchmailconf: Makefile\n\n Log Message:\n catch up w/ fetchmail\n\n To generate a diff of this commit:\n cvs rdiff -u -r1.77 -r1.78 pkgsrc/mail/fetchmailconf/Makefile\n" module: pkgsrc subject: 'CVS commit: [pkgsrc-2009Q4] pkgsrc/mail' unixtime: '1266219452' user: spz