lp://staging/~ari-tczew/ubuntu/hardy/fetchmail/fix-CVE-2008-2711

Branch merges

Propose for merging

No branches dependent on this one.

On hold for merging into lp://staging/ubuntu/hardy-security/fetchmail

Artur Rona: Pending requested 2010-04-01

Ubuntu branches: Pending requested 2010-04-01

Diff: 91 lines (+71/-0)

3 files modified

debian/changelog (+10/-0)
debian/patches/07_fix_CVE-2008-2711_DoS.patch (+60/-0)
debian/patches/series (+1/-0)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #240549: fetchmail denial of service CVE-2008-2711

Low

Won't Fix

Link a bug report

Related blueprints

24. By Artur Rona on 2010-04-01

* SECURITY UPDATE: Corrects a denial of service attack that can crash
  fetchmail when running in -v -v mode via malformed mail messages
  with long headers (LP: #240549)
  - debian/patches/07_fix_CVE-2008-2711_DoS.patch: Taken from intrepid
  - CVE-2008-2711

23. By Kees Cook on 2009-08-11

* SECURITY UPDATE: SSL cert validation bypass via NULL bytes.
  - add 06_cert_0_byte.patch, thanks to Nico Golde.
  - CVE-2009-2666

22. By Mathias Gug on 2007-11-14

* Merge from debian unstable, remaining changes:
  - debian/fetchmail.postinst: Use multiuser update-rc.d mode (TearDown).
  - debian/fetchmail.postinst: Remove shutdown and reboot rc links on
    upgrades. This needs to be kept until the next LTS release.
  - debian/control: exim4 -> postfix suggestion (this is an unimportant
    change now, so should the multiuser change ever go into Debian, this can
    be dropped).
  - debian/control: Set Ubuntu maintainer.
* Dropped:
  - debian/fetchmailconf.menu:
    - Fix lintian error about the menu section for fetchmailconf.

21. By LaMont Jones on 2007-10-04

Trigger rebuild for hppa

20. By Michael Bienia on 2007-09-05

* Merge to Debian unstable:
  - build with gssapi support (LP: #27616)
* Remaining Ubuntu changes:
  - debian/fetchmail.postinst: Use multiuser update-rc.d mode (TearDown).
  - debian/fetchmail.postinst: Remove shutdown and reboot rc links on
    upgrades. This needs to be kept until the next LTS release.
  - debian/control: exim4 -> postfix suggestion (this is an unimportant
    change now, so should the multiuser change ever go into Debian, this can
    be dropped).
  - debian/control: Set Ubuntu maintainer.
* debian/fetchmailconf.menu:
  - Fix lintian error about the menu section for fetchmailconf.

19. By Mathias Gug on 2007-06-19

* Merge to Debian unstable; remaining Ubuntu changes:
  - debian/fetchmail.postinst: Use multiuser update-rc.d mode (TearDown).
  - debian/fetchmail.postinst: Remove shutdown and reboot rc links on
    upgrades. This needs to be kept until the next LTS release.
  - debian/control: exim4 -> postfix suggestion (this is an unimportant
    change now, so should the multiuser change ever go into Debian, this can
    be dropped).
* debian/control: Set Ubuntu maintainer.

18. By Martin Pitt on 2007-05-14

* Merge to Debian unstable; remaining Ubuntu changes:
  - debian/fetchmail.postinst: Use multiuser update-rc.d mode (TearDown).
  - debian/fetchmail.postinst: Remove shutdown and reboot rc links on
    upgrades. This needs to be kept until the next LTS release.
  - debian/control: exim4 -> postfix suggestion (this is an unimportant
    change now, so should the multiuser change ever go into Debian, this can
    be dropped).
* debian/control: Set Ubuntu maintainer.

17. By Martin Pitt on 2007-02-06

debian/init: Shuffle inclusion and default options so that
/etc/default/fetchmail can override the config file location and default
options. Thanks to Tobias Hunger! Closes: LP#30730

16. By Matthias Klose on 2007-01-14

* Merge from debian unstable; remaining changes:
  - debian/control:
    + exim4 -> postfix dependency.
    + Add sysv-rc (>= 2.86.ds1-14.1ubuntu2) dependency for the 'multiuser'
      update-rc.d feature.
  - debian/fetchmail.postinst:
    + Install 'multiuser' rc.d symlinks.
    + Remove unnecessary rc.d symlinks on upgrades.

15. By Kees Cook on 2007-01-12

* Merge from debian unstable, remaining changes:
  - debian/control:
    + exim4 -> postfix dependency.
    + Add sysv-rc (>= 2.86.ds1-14.1ubuntu2) dependency for the 'multiuser'
      update-rc.d feature.
  - debian/fetchmail.postinst:
    + Install 'multiuser' rc.d symlinks.
    + Remove unnecessary rc.d symlinks on upgrades.