[oe-commits] org.oe.dev fetchmail: updated to latest release with security patch.

mwester commit oe at amethyst.openembedded.net
Tue Jun 17 18:35:08 UTC 2008


fetchmail: updated to latest release with security patch.
Now also creates the fetchmailconf package.

Author: mwester at openembedded.org
Branch: org.openembedded.dev
Revision: 59b0acbe7b43c5a0149104a730ada9a656e79a51
ViewMTN: http://monotone.openembedded.org/revision/info/59b0acbe7b43c5a0149104a730ada9a656e79a51
Files:
1
packages/fetchmail/fetchmail-6.3.8
packages/fetchmail/fetchmail-6.3.8/CVE-2007-4565.patch
packages/fetchmail/fetchmail_6.3.8.bb
Diffs:

#
# mt diff -r65c32d46a1c88d26d131ba086d5089a78de3b44a -r59b0acbe7b43c5a0149104a730ada9a656e79a51
#
#
#
# add_dir "packages/fetchmail/fetchmail-6.3.8"
# 
# add_file "packages/fetchmail/fetchmail-6.3.8/CVE-2007-4565.patch"
#  content [43420cf3d87053e2d4e56ae314920ae659928942]
# 
# add_file "packages/fetchmail/fetchmail_6.3.8.bb"
#  content [21e5679e7fa133bbf6003b93bc30eafd03755649]
#
============================================================
--- packages/fetchmail/fetchmail-6.3.8/CVE-2007-4565.patch	43420cf3d87053e2d4e56ae314920ae659928942
+++ packages/fetchmail/fetchmail-6.3.8/CVE-2007-4565.patch	43420cf3d87053e2d4e56ae314920ae659928942
@@ -0,0 +1,11 @@
+--- fetchmail-6.3.8-orig/sink.c
++++ fetchmail-6.3.8/sink.c
+@@ -262,7 +262,7 @@
+     const char *md1 = "MAILER-DAEMON", *md2 = "MAILER-DAEMON@";
+ 
+     /* don't bounce in reply to undeliverable bounces */
+-    if (!msg->return_path[0] ||
++    if (!msg || !msg->return_path[0] ||
+ 	strcmp(msg->return_path, "<>") == 0 ||
+ 	strcasecmp(msg->return_path, md1) == 0 ||
+ 	strncasecmp(msg->return_path, md2, strlen(md2)) == 0)
============================================================
--- packages/fetchmail/fetchmail_6.3.8.bb	21e5679e7fa133bbf6003b93bc30eafd03755649
+++ packages/fetchmail/fetchmail_6.3.8.bb	21e5679e7fa133bbf6003b93bc30eafd03755649
@@ -0,0 +1,20 @@
+DESCRIPTION = "Fetchmail is a free, full-featured, robust, \
+well-documented remote-mail retrieval and forwarding utility \
+intended to be used over on-demand TCP/IP links \
+(such as SLIP or PPP connections)."
+SECTION = "console/network"
+
+LICENSE = "GPL"
+
+PR = "r1"
+
+SRC_URI = "${DEBIAN_MIRROR}/main/f/${PN}/${PN}_${PV}.orig.tar.gz \
+	   file://CVE-2007-4565.patch;patch=1 \
+	   "
+
+inherit autotools gettext
+
+# Special handling for the fetchmailconf python scripts
+PACKAGES += "${PN}conf"
+FILES_${PN}conf = "${libdir}/python2.5/site-packages/fetchmailconf.py*"
+rdepends_${PN}conf = "${PN}"






More information about the Openembedded-commits mailing list