summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSebastian Pipping <sping@gentoo.org>2011-12-07 23:35:00 +0000
committerSebastian Pipping <sping@gentoo.org>2011-12-07 23:35:00 +0000
commitf6b474f284761346cf6b63ed911396800b594df4 (patch)
tree4ae433b16a8590dbb865933021095bc063869fdf /net-mail/mpack/ChangeLog
parentDrop KDE 4.7.2 (diff)
downloadgentoo-2-f6b474f284761346cf6b63ed911396800b594df4.tar.gz
gentoo-2-f6b474f284761346cf6b63ed911396800b594df4.tar.bz2
gentoo-2-f6b474f284761346cf6b63ed911396800b594df4.zip
net-mail/mpack: Fix sending mails (bug #171075)
(Portage version: 2.1.10.39/cvs/Linux x86_64)
Diffstat (limited to 'net-mail/mpack/ChangeLog')
-rw-r--r--net-mail/mpack/ChangeLog16
1 files changed, 14 insertions, 2 deletions
diff --git a/net-mail/mpack/ChangeLog b/net-mail/mpack/ChangeLog
index 5a87dc414e90..2e7503e97b59 100644
--- a/net-mail/mpack/ChangeLog
+++ b/net-mail/mpack/ChangeLog
@@ -1,6 +1,18 @@
# ChangeLog for net-mail/mpack
-# Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-mail/mpack/ChangeLog,v 1.14 2010/03/29 20:03:48 grobian Exp $
+# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/net-mail/mpack/ChangeLog,v 1.15 2011/12/07 23:34:59 sping Exp $
+
+*mpack-1.6-r1 (07 Dec 2011)
+
+ 07 Dec 2011; Sebastian Pipping <sping@gentoo.org> +mpack-1.6-r1.ebuild,
+ +files/mpack-1.6-compile.patch, +files/mpack-1.6-paths.patch:
+ The s/mktemp/mkstemp/ from <mpack-1.6-gentoo.patch> is broken: it does not
+ fully fix the TOCTTOU vulnerability but breaks sending of e-mails (bug
+ #171075). So I extracted the parts of (1) missing include, (2) wrong
+ prototypes and (3) system path corrections from that patch, made dedicated
+ files and added missing bits to each of these, and ripped the
+ s/mktemp/mkstemp/ part out. A proper TOCTTOU fix is left todo. It's not
+ trivial to do.
29 Mar 2010; Fabian Groffen <grobian@gentoo.org> mpack-1.6.ebuild:
Marked ~ppc-macos, ~x86-solaris and ~sparc-solaris, bug #310751