rpms/squirrelmail/F-13 .cvsignore, 1.31, 1.32 sources, 1.32, 1.33 squirrelmail.spec, 1.82, 1.83 squirrelmail-1.4.20-cve_2010_1637.patch, 1.1, NONE

Michal Hlavinka mhlavink at fedoraproject.org
Fri Jul 23 07:48:17 UTC 2010


Author: mhlavink

Update of /cvs/pkgs/rpms/squirrelmail/F-13
In directory cvs01.phx2.fedoraproject.org:/tmp/cvs-serv7093

Modified Files:
	.cvsignore sources squirrelmail.spec 
Removed Files:
	squirrelmail-1.4.20-cve_2010_1637.patch 
Log Message:
* Fri Jul 23 2010 Michal Hlavinka <mhlavink at redhat.com> - 1.4.21-1
- updated to 1.4.21
- fixes literal processing of 8-bit usernames/passwords during 
  login (CVE-2010-2813)



Index: .cvsignore
===================================================================
RCS file: /cvs/pkgs/rpms/squirrelmail/F-13/.cvsignore,v
retrieving revision 1.31
retrieving revision 1.32
diff -u -p -r1.31 -r1.32
--- .cvsignore	8 Mar 2010 15:47:27 -0000	1.31
+++ .cvsignore	23 Jul 2010 07:48:16 -0000	1.32
@@ -1,2 +1,2 @@
-squirrelmail-1.4.20.tar.bz2
+squirrelmail-1.4.21.tar.bz2
 all_locales-1.4.18-20090526.tar.bz2


Index: sources
===================================================================
RCS file: /cvs/pkgs/rpms/squirrelmail/F-13/sources,v
retrieving revision 1.32
retrieving revision 1.33
diff -u -p -r1.32 -r1.33
--- sources	8 Mar 2010 15:47:27 -0000	1.32
+++ sources	23 Jul 2010 07:48:16 -0000	1.33
@@ -1,2 +1,2 @@
-76aa7963e67edc7cea2be919f51ded72  squirrelmail-1.4.20.tar.bz2
+44d2fe85d6fc3092bf4f11e6e928f9dc  squirrelmail-1.4.21.tar.bz2
 ddb51e99e87b2aa8180cebe07de89fa2  all_locales-1.4.18-20090526.tar.bz2


Index: squirrelmail.spec
===================================================================
RCS file: /cvs/pkgs/rpms/squirrelmail/F-13/squirrelmail.spec,v
retrieving revision 1.82
retrieving revision 1.83
diff -u -p -r1.82 -r1.83
--- squirrelmail.spec	22 Jun 2010 10:34:38 -0000	1.82
+++ squirrelmail.spec	23 Jul 2010 07:48:17 -0000	1.83
@@ -5,8 +5,8 @@
 
 Summary: webmail client written in php
 Name: squirrelmail
-Version: 1.4.20
-Release: 3%{?dist}
+Version: 1.4.21
+Release: 1%{?dist}
 License: GPLv2+
 URL: http://www.squirrelmail.org/
 Group: Applications/Internet
@@ -33,9 +33,6 @@ Patch4: squirrelmail-1.4.17-biguid.patch
 # bug #508631 - use hunspell instead of aspell
 Patch5: squirrelmail-1.4.19-hunspell.patch
 
-# CVE-2010-1637 for sm <=1 .4.20
-Patch6: squirrelmail-1.4.20-cve_2010_1637.patch
-
 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 BuildArch: noarch
 BuildRequires: gettext
@@ -56,7 +53,6 @@ easy to configure and install.
 %patch3 -p1
 %patch4 -p1
 %patch5 -p1
-%patch6 -p1
 
 mkdir locale_tempdir
 pushd locale_tempdir
@@ -268,6 +264,11 @@ rm -rf $RPM_BUILD_ROOT
 %{_sysconfdir}/cron.daily/squirrelmail.cron
 
 %changelog
+* Fri Jul 23 2010 Michal Hlavinka <mhlavink at redhat.com> - 1.4.21-1
+- updated to 1.4.21
+- fixes literal processing of 8-bit usernames/passwords during 
+  login (CVE-2010-2813)
+
 * Tue Jun 22 2010 Michal Hlavinka <mhlavink at redhat.com> - 1.4.20-3
 - fix CVE-2010-1637 : mail fetch plugin's port-scans via non-standard 
   POP3 server ports


--- squirrelmail-1.4.20-cve_2010_1637.patch DELETED ---



More information about the scm-commits mailing list