[SECURITY] Fedora EPEL 6 Update: ssmtp-2.61-21.el6

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11274
2013-08-20 17:02:56
--------------------------------------------------------------------------------

Name        : ssmtp
Product     : Fedora EPEL 6
Version     : 2.61
Release     : 21.el6
URL         : http://packages.debian.org/stable/mail/ssmtp
Summary     : Extremely simple MTA to get mail off the system to a Mailhub
Description :
A secure, effective and simple way of getting mail off a system to your mail
hub. It contains no suid-binaries or other dangerous things - no mail spool
to poke around in, and no daemons running in the background. Mail is simply
forwarded to the configured mailhost. Extremely easy configuration.

WARNING: the above is all it does; it does not receive mail nor manage queues.
That belongs on a mail hub with a system administrator.

--------------------------------------------------------------------------------
Update Information:

Use a corrected patch to validate server certificates
Removes world read access from the configuration file thus prohibiting reading of password stored inside it.
Removes world read access from the configuration file thus prohibiting reading of password stored inside it.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #864894 - ssmtp: Does not validate server certificates when using TLS connection
        https://bugzilla.redhat.com/show_bug.cgi?id=864894
--------------------------------------------------------------------------------

This update can be installed with the "yum" update programs.  Use
su -c 'yum update ssmtp' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora EPEL GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------