~ubuntu-branches/ubuntu/feisty/fetchmail/feisty-security : changes

~ubuntu-branches/ubuntu/feisty/fetchmail/feisty-security » Changes from revision 18

From Revision 18

Rev	Summary	Authors	Tags	Date
18	* SECURITY UPDATE: DoS via NULL pointer dereference when SMT... * SECURITY UPDATE: DoS via NULL pointer dereference when SMTP refuses to send certain warning messages * added 02_CVE-2007-4565.patch to sink.c to verify msg is not NULL * SECURITY UPDATE: Due to a design flaw in the APOP protocol, remote attackers may be able to acquire a portion of a user's authentication credentials using man-in-the-middle techniques. * added 03_CVE-2007-1558.patch. This patch adds notes about APOP's limitations as well as updating pop3.c to more strictly validate the presented challenge for RFC-822 conformity. This change to pop3.c does not fix the APOP design flaw, but does make attacks against APOP somewhat more difficult. * added 04_manpage.patch for improperly formatted manpage (upstream bug) * References CVE-2007-4565 CVE-2007-1558 * Modify Maintainer value to match the DebianMaintainerField specification.	Jamie Strandboge	6.3.6-1ubuntu2.1	16 years ago
17	debian/init: Shuffle inclusion and default options so that debian/init: Shuffle inclusion and default options so that /etc/default/fetchmail can override the config file location and default options. Thanks to Tobias Hunger! Closes: LP#30730	Martin Pitt	6.3.6-1ubuntu2	17 years ago
16	* Merge from debian unstable; remaining changes: * Merge from debian unstable; remaining changes: - debian/control: + exim4 -> postfix dependency. + Add sysv-rc (>= 2.86.ds1-14.1ubuntu2) dependency for the 'multiuser' update-rc.d feature. - debian/fetchmail.postinst: + Install 'multiuser' rc.d symlinks. + Remove unnecessary rc.d symlinks on upgrades.	Matthias Klose	6.3.6-1ubuntu1	17 years ago
15	* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes: - debian/control: + exim4 -> postfix dependency. + Add sysv-rc (>= 2.86.ds1-14.1ubuntu2) dependency for the 'multiuser' update-rc.d feature. - debian/fetchmail.postinst: + Install 'multiuser' rc.d symlinks. + Remove unnecessary rc.d symlinks on upgrades.	Kees Cook	6.3.6~rc5-1ubuntu1	17 years ago
14	* Merge from debian unstable. Remaining Ubuntu changes: * Merge from debian unstable. Remaining Ubuntu changes: - debian/control: + exim4 -> postfix dependency. + Add sysv-rc (>= 2.86.ds1-14.1ubuntu2) dependency for the 'multiuser' update-rc.d feature. - debian/fetchmail.postinst: + Install 'multiuser' rc.d symlinks. + Remove unnecessary rc.d symlinks on upgrades.	Andrew Mitchell	6.3.6~rc3-1ubuntu1	17 years ago
13	* Merge to Debian unstable. Remaining Ubuntu changes: * Merge to Debian unstable. Remaining Ubuntu changes: - debian/control: + exim4 -> postfix dependency. + Add sysv-rc (>= 2.86.ds1-14.1ubuntu2) dependency for the 'multiuser' update-rc.d feature. - debian/fetchmail.postinst: + Install 'multiuser' rc.d symlinks. + Remove unnecessary rc.d symlinks on upgrades.	Martin Pitt	6.3.4-7ubuntu1	17 years ago
12	Add debian/patches/03.fix-ja.po.dpatch: Japanese does not ha... Add debian/patches/03.fix-ja.po.dpatch: Japanese does not have any plural forms; remove the useless msgstr[1] from Japanese translation so that msgfmt does not abort with a fatal error. Fixes FTBFS.	Martin Pitt	6.3.4-1ubuntu4	17 years ago
11	s/python2.3/python2.4/ in debian/rules to fix FTBFS. s/python2.3/python2.4/ in debian/rules to fix FTBFS.	Scott James Remnant	6.3.4-1ubuntu3	17 years ago
10	Remove stop script symlinks from rc0 and rc6. Remove stop script symlinks from rc0 and rc6.	Scott James Remnant	6.3.4-1ubuntu2	17 years ago
9	* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes: - LSB init script, - suggest postfix rather than exim4, - python2.4	Scott James Remnant	6.3.4-1ubuntu1	17 years ago
8	* Install fetchmailconf files into /usr/lib/python2.4 rather... * Install fetchmailconf files into /usr/lib/python2.4 rather than /usr/lib/python2.3 - Malone #31798	Andrew Mitchell	6.3.2-2ubuntu2	18 years ago
7	* Resynchronise with Debian. This brings the new upstream ve... * Resynchronise with Debian. This brings the new upstream version to dapper since upstream support for 6.2 was dropped. * Drop debian/patches/CVE-2005-4348.dpatch, upstream now.	Martin Pitt	6.3.2-2ubuntu1	18 years ago
6	* SECURITY UPDATE: Remote DoS. * SECURITY UPDATE: Remote DoS. * Add debian/patches/CVE-2005-4348.dpatch: - Fix double free crash on messages without any headers when using multidrop mode. - Fix backported from stable 6.2.5.5 release. - CVE-2005-4348.	Martin Pitt	6.2.5.4-1ubuntu2	18 years ago
5	Resynchronise with Debian. Resynchronise with Debian.	Martin Pitt	6.2.5.4-1ubuntu1	18 years ago
4	Removed error message if /etc/fetchmailrc doesn't exist on s... Removed error message if /etc/fetchmailrc doesn't exist on startup, which it won't on fresh installs. (Ubuntu #13044).	Scott James Remnant	6.2.5-13ubuntu3	18 years ago
3	Resynchronise with Debian. Resynchronise with Debian.	Michael Vogt	6.2.5-12ubuntu1	19 years ago
2	Added versioned depend on lsb-base Added versioned depend on lsb-base	Nathaniel McCallum	6.2.5-8ubuntu2	19 years ago
1	Import upstream version 6.2.5 Import upstream version 6.2.5	Nathaniel McCallum	upstream-6.2.5	19 years ago