From ady@ady.warpnet.ro  Fri Apr 28 03:41:30 2000
Return-Path: <ady@ady.warpnet.ro>
Received: from ady.warpnet.ro (ady.warpnet.ro [194.102.224.1])
	by hub.freebsd.org (Postfix) with ESMTP
	id 5804537B753; Fri, 28 Apr 2000 03:41:25 -0700 (PDT)
	(envelope-from ady@ady.warpnet.ro)
Received: (from ady@localhost)
	by ady.warpnet.ro (8.9.3/8.9.3) id NAA25617;
	Fri, 28 Apr 2000 13:43:49 +0300 (EEST)
	(envelope-from ady)
Message-Id: <200004281043.NAA25617@ady.warpnet.ro>
Date: Fri, 28 Apr 2000 13:43:49 +0300 (EEST)
From: ady@freebsd.ady.ro
Sender: ady@ady.warpnet.ro
Reply-To: ady@freebsd.ady.ro
To: FreeBSD-gnats-submit@freebsd.org
Cc: Kris Kennaway <kris@freebsd.org>,
	Forrest Aldrich <forrie@forrie.com>
Subject: port upgrade: mail/imap-uw from 4.7b to 4.7c1
X-Send-Pr-Version: 3.2

>Number:         18269
>Category:       ports
>Synopsis:       port upgrade: mail/imap-uw from 4.7b to 4.7c1
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    freebsd-ports
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Fri Apr 28 03:50:01 PDT 2000
>Closed-Date:    Fri Apr 28 20:14:40 JST 2000
>Last-Modified:  Fri Apr 28 20:14:57 JST 2000
>Originator:     Adrian Penisoara
>Release:        FreeBSD 3.4-STABLE i386
>Organization:
Warp Net Technologies
>Environment:

 This port has been tested under:
   * FreeBSD 3.4-STABLE i386

>Description:

 This is a quick update for mail/imap-uw after Mark Crispin (supposely) solved
the LIST "AAAAA...." vulnerability in imapd. If this is proven to be correct
then the warning message should be at least modified if not disabled (Kris ?).

>How-To-Repeat:

 Build the port.

>Fix:
	
 I've attached a compressed patchfile to upgrade the current port.

    I'd like to thank Kris Kennaway for his concern about this ports' security
    and Forrest Aldirch for sending me the notice.

 Adrian Penisoara
 Ady (@freebsd.ady.ro)

begin 644 imap-uw-4.7c1.diff.gz
M'XL("+5E"3D"`VEM87`M=7<M-"XW8S$N9&EF9@!UDUUKVS`4AJ^M7R%8+C9<
M?TC^D!T(Q+3.,,S)L+U1RJ#(MM2*Y0O'II20_SXI:1*GR2Y\+H[>\^@<G=>U
MX!P:33>%8D'71O=FKAKQ8J7T+^-BSH[94P(8AG%;JN6TA=&Z@1A#Y`P1'GH>
MQ+9M`UW7KSC:I!$'=?"A=O%!/1Y#P[\C4%=A/`;P"X``_IQEQ31*XY'V00*&
M2OV.LSR934=0<TU2`OTJ5P%X'Q7Q]UF6Q/E(6U`Q!S"-\B+.GO.D4#G>KH>6
M):-9T<I\HYM7L7QI5TN3U9VE;K/@'P"UGHYW2]::7%CKKK06HFE6S>9_`'6C
M`JBQD*OFVD<U6!_9+87Q2N=S9M;L@%5U:[%D%H`/2=X??K#MC;D#,'XLLNB^
M>,Y_31Y'FMG2QGP"ABJ:)#_4A(/MD;`;;/OJG6Q,ORU$UTK9\.'Q6S'??#I6
M.TJC9%K(+\Y.6QKSAK%R4YNT?C>;%:AOVTTY8F,M:N_DDU/FVG"G(ZWH&$RI
M]!`Z.LZ]=MQ9?FDYVQLZY&PY=.?*U<@@-V.D#Q[\N@<H6QU>]!L<010P&C*,
MRYH1EW)*_<HK48`='SF$538P\N0IOEDJ:_T@]`C0+^`5.DNJD"+*$'&\DM34
M<SBB=ETZMNU@YI$*`_V2WJ^5>-F&&\HMG/#[/9TE'J]Q@`,;A]3F(9)(WV85
:HJ7O.H1P^:?T\)]J(<$X(.`?QVU<X"X$``#[
`
end

>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->closed 
State-Changed-By: knu 
State-Changed-When: Fri Apr 28 20:14:40 JST 2000 
State-Changed-Why:  
Committed, thanks! 
>Unformatted:
