Re: PR/49492 CVS commit: pkgsrc/mail/heirloom-mailx

[jgw%sdf.org@localhost]

"Benny Siegert" <bsiegert%netbsd.org@localhost> wrote:

> The following reply was made to PR pkg/49492; it has been noted by GNATS.
>
> From: "Benny Siegert" <bsiegert%netbsd.org@localhost>
> To: gnats-bugs%gnats.NetBSD.org@localhost
> Cc: 
> Subject: PR/49492 CVS commit: pkgsrc/mail/heirloom-mailx
> Date: Sun, 28 Dec 2014 14:16:14 +0000
>
>  Module Name:	pkgsrc
>  Committed By:	bsiegert
>  Date:		Sun Dec 28 14:16:14 UTC 2014
>  
>  Modified Files:
>  	pkgsrc/mail/heirloom-mailx: Makefile PLIST distinfo
>  Added Files:
>  	pkgsrc/mail/heirloom-mailx/patches: patch-extern.h patch-fio.c
>  	    patch-getopt.c patch-mailx.1 patch-names.c patch-openssl.c
>  	    patch-sendout.c
>  Removed Files:
>  	pkgsrc/mail/heirloom-mailx/patches: patch-aa patch-ab patch-af
>  
>  Log Message:
>  Update heirloom-mailx to 12.5. From maintainer in PR pkg/49492.
>  
>  Significant changes:
>  - MASTER_SITES now points at ${MASTER_SITE_DEBIAN:=pool/main/h/heirloom-mailx/}
>  - LICENSE filled out based on content of COPYING file in source
>  - addresses CVE-2004-2771 and CVE-2014-7844; address expansion disabled by
>    default
>  - remove SSL2 related code to match state of OpenSSL
>  
>  
>  To generate a diff of this commit:
>  cvs rdiff -u -r1.6 -r1.7 pkgsrc/mail/heirloom-mailx/Makefile
>  cvs rdiff -u -r1.2 -r1.3 pkgsrc/mail/heirloom-mailx/PLIST \
>      pkgsrc/mail/heirloom-mailx/distinfo
>  cvs rdiff -u -r1.1 -r0 pkgsrc/mail/heirloom-mailx/patches/patch-aa \
>      pkgsrc/mail/heirloom-mailx/patches/patch-ab
>  cvs rdiff -u -r1.1.1.1 -r0 pkgsrc/mail/heirloom-mailx/patches/patch-af
>  cvs rdiff -u -r0 -r1.1 pkgsrc/mail/heirloom-mailx/patches/patch-extern.h \
>      pkgsrc/mail/heirloom-mailx/patches/patch-fio.c \
>      pkgsrc/mail/heirloom-mailx/patches/patch-getopt.c \
>      pkgsrc/mail/heirloom-mailx/patches/patch-mailx.1 \
>      pkgsrc/mail/heirloom-mailx/patches/patch-names.c \
>      pkgsrc/mail/heirloom-mailx/patches/patch-openssl.c \
>      pkgsrc/mail/heirloom-mailx/patches/patch-sendout.c
>  

Please add an "nbXX" bump to this package so the overly agressive CVE system
doesn't keep flagging it as vulnerable.  Thanks, - Jeff