Bug 258071 - mail/fetchmail: security update to 6.4.22.rc2 - CVE-2021-39272
Summary: mail/fetchmail: security update to 6.4.22.rc2 - CVE-2021-39272
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: Matthias Andree
URL: https://www.fetchmail.info/fetchmail-...
Keywords: patch, security
Depends on:
Blocks: 258146
  Show dependency tree / graph
 
Reported: 2021-08-26 23:13 UTC by Matthias Andree
Modified: 2021-08-29 15:44 UTC (History)
2 users (show)

See Also:
chalpin: maintainer-feedback+

Attachments
port update formatted with git format-patch (1.50 KB, patch)
2021-08-26 23:13 UTC, Matthias Andree 		no flags Details | Diff
new update to 6.4.22.rc2 (1.50 KB, patch)
2021-08-27 18:06 UTC, Matthias Andree 		chalpin: maintainer-approval+
Details | Diff
Show Obsolete (1) View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Matthias Andree freebsd_committer freebsd_triage 2021-08-26 23:13:39 UTC 
Created attachment 227461 [details]
port update formatted with git format-patch

mail/fetchmail: security update to 6.4.22.rc1
    
    MFH:            2021Q3
    URL:            https://www.fetchmail.info/fetchmail-SA-2021-02.txt
    Changelog:      https://gitlab.com/fetchmail/fetchmail/-/blob/SNAPSHOT_6-4-22-rc1/NEWS#L89
    Security:       CVE-2021-39272
    Security:       1d6410e8-06c1-11ec-a35d-03ca114d16d6
Comment 1 Matthias Andree freebsd_committer freebsd_triage 2021-08-27 14:18:16 UTC 
Comment on attachment 227461 [details]
port update formatted with git format-patch

I am putting this on hold after a regression report.
Comment 2 Matthias Andree freebsd_committer freebsd_triage 2021-08-27 18:06:47 UTC 
Created attachment 227486 [details]
new update to 6.4.22.rc2

rc2 should fix the regressions observed in 6.4.22.rc1.

This is a new proposed patch, again in "git format-patch" format. 
Git parent hash subject to change ;-)
Comment 3 Corey Halpin 2021-08-27 18:47:41 UTC 
Comment on attachment 227486 [details]
new update to 6.4.22.rc2

Looks good to me, no new complaints from `portlint`, passes `poudriere testport`, and the built package works in my testing.

I approve this patch, thank you!
Comment 4 commit-hook freebsd_committer freebsd_triage 2021-08-27 21:27:17 UTC 
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=c2b9bf3fe69a4ea781dba11fb486dc1651cf2f0d

commit c2b9bf3fe69a4ea781dba11fb486dc1651cf2f0d
Author:     Matthias Andree <mandree@FreeBSD.org>
AuthorDate: 2021-08-26 23:07:41 +0000
Commit:     Matthias Andree <mandree@FreeBSD.org>
CommitDate: 2021-08-27 21:24:53 +0000

    mail/fetchmail: security update to 6.4.22.rc2

    MFH:            2021Q3
    URL:            https://www.fetchmail.info/fetchmail-SA-2021-02.txt
    Changelog:      https://gitlab.com/fetchmail/fetchmail/-/blob/SNAPSHOT_6-4-22-rc2/NEWS#L87
    Security:       CVE-2021-39272
    Security:       1d6410e8-06c1-11ec-a35d-03ca114d16d6
    PR:             258071
    Approved by:    Corey Halpin (maintainer)

 mail/fetchmail/Makefile | 2 +-
 mail/fetchmail/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)
Comment 5 commit-hook freebsd_committer freebsd_triage 2021-08-27 21:28:18 UTC 
A commit in branch 2021Q3 references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=92a4074f3ca8d2481381537d518fcb516eba7941

commit 92a4074f3ca8d2481381537d518fcb516eba7941
Author:     Matthias Andree <mandree@FreeBSD.org>
AuthorDate: 2021-08-26 23:07:41 +0000
Commit:     Matthias Andree <mandree@FreeBSD.org>
CommitDate: 2021-08-27 21:27:16 +0000

    mail/fetchmail: security update to 6.4.22.rc2

    MFH:            2021Q3
    URL:            https://www.fetchmail.info/fetchmail-SA-2021-02.txt
    Changelog:      https://gitlab.com/fetchmail/fetchmail/-/blob/SNAPSHOT_6-4-22-rc2/NEWS#L87
    Security:       CVE-2021-39272
    Security:       1d6410e8-06c1-11ec-a35d-03ca114d16d6
    PR:             258071
    Approved by:    Corey Halpin (maintainer)

    (cherry picked from commit c2b9bf3fe69a4ea781dba11fb486dc1651cf2f0d)

 mail/fetchmail/Makefile | 2 +-
 mail/fetchmail/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)
Comment 6 Matthias Andree freebsd_committer freebsd_triage 2021-08-27 21:28:42 UTC 
Thanks for the prompt review and approval!