Attachment 195176 Details for Bug 229809 – Update to 1.10.1

[patch] Update to 1.10.1

0001-Update-mail-mutt-to-1.10.1.patch (text/plain), 2.00 KB, created by Derek Schrock on 2018-07-16 17:39:59 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Derek Schrock

Created: 2018-07-16 17:39:59 UTC

Size: 2.00 KB

patch

obsolete

>From b73dc74870e0656237b572aa1c7fed38e9f0c6cd Mon Sep 17 00:00:00 2001
>From: Derek Schrock <dereks@lifeofadishwasher.com>
>Date: Mon, 16 Jul 2018 13:22:34 -0400
>Subject: [PATCH] Update mail/mutt to 1.10.1
>
>* 0001 - Fixes a remote code injection vulnerability when "subscribing"
>  to an IMAP mailbox, either via $imap_check_subscribed, or via the
>  <subscribe> function in the browser menu.  Mutt was generating a
>  "mailboxes" command and sending that along to the muttrc parser.
>  However, it was not escaping "`", which executes code and inserts
>  the result.  This would allow a malicious IMAP server to execute
>  arbitrary code (for $imap_check_subscribed).
>
>* 0002 - Fixes POP body caching path traversal vulnerability.
>
>* 0003 - Fixes IMAP header caching path traversal vulnerability.
>---
> mail/mutt/Makefile | 4 ++--
> mail/mutt/distinfo | 6 +++---
> 2 files changed, 5 insertions(+), 5 deletions(-)
>
>diff --git a/mail/mutt/Makefile b/mail/mutt/Makefile
>index b59fe5a2244e..d22a764f4ceb 100644
>--- a/mail/mutt/Makefile
>+++ b/mail/mutt/Makefile
>@@ -2,8 +2,8 @@
> # $FreeBSD$
> 
> PORTNAME=	mutt
>-DISTVERSION=	1.10.0
>-PORTREVISION?=	1
>+DISTVERSION=	1.10.1
>+PORTREVISION?=	0
> CATEGORIES+=	mail ipv6
> MASTER_SITES=	ftp://ftp.mutt.org/pub/mutt/ \
> 		ftp://ftp.fu-berlin.de/pub/unix/mail/mutt/ \
>diff --git a/mail/mutt/distinfo b/mail/mutt/distinfo
>index b1e3855d6e3b..06be97440110 100644
>--- a/mail/mutt/distinfo
>+++ b/mail/mutt/distinfo
>@@ -1,6 +1,6 @@
>-TIMESTAMP = 1531128584
>-SHA256 (mutt/mutt-1.10.0.tar.gz) = 0215b5f90ef9cc33441a6ca842379b64412ed7f8da83ed68bfaa319179f5535b
>-SIZE (mutt/mutt-1.10.0.tar.gz) = 4249980
>+TIMESTAMP = 1531761572
>+SHA256 (mutt/mutt-1.10.1.tar.gz) = 734a3883158ec3d180cf6538d8bd7f685ce641d2cdef657aa0038f76e79a54a0
>+SIZE (mutt/mutt-1.10.1.tar.gz) = 4255890
> SHA256 (mutt/mutt-1.10.0.vc.greeting) = e33b0659290cfbcff0055a5e3ec0762fed7eb76127e0c29cd00586d62cb92df8
> SIZE (mutt/mutt-1.10.0.vc.greeting) = 4560
> SHA256 (mutt/patch-1.10.0.vvv.nntp.gz) = 895c168f00cd073234c6cbb0d6972b5b390c64bf9ee5a13f58e0ea0652cabe4a
>-- 
>2.18.0
>

Flags:

fernape: maintainer-approval+

Actions: View | Diff

Attachments on bug 229809: 195176