[pkgsrc/trunk]: pkgsrc/mail/dovecot2-pigeonhole mail/dovecot2-pigeonhole: upd...

[taca <taca%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/b8dd3f1c7e68
branches:  trunk
changeset: 400485:b8dd3f1c7e68
user:      taca <taca%pkgsrc.org@localhost>
date:      Thu Aug 29 01:07:24 2019 +0000

description:
mail/dovecot2-pigeonhole: update to 0.5.7.2

Update dovecot2-pigeonhole to 0.5.7.2.

Changes
-------
* CVE-2019-11500: ManageSieve protocol parser does not properly handle
NUL byte
? when scanning data in quoted strings, leading to out of bounds heap
? memory writes. Found by Nick Roessler and Rafi Rubin.

diffstat:

 mail/dovecot2-pigeonhole/Makefile |   4 ++--
 mail/dovecot2-pigeonhole/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (28 lines):

diff -r 53ae83b014da -r b8dd3f1c7e68 mail/dovecot2-pigeonhole/Makefile
--- a/mail/dovecot2-pigeonhole/Makefile Thu Aug 29 01:05:20 2019 +0000
+++ b/mail/dovecot2-pigeonhole/Makefile Thu Aug 29 01:07:24 2019 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.51 2019/07/24 18:14:42 nia Exp $
+# $NetBSD: Makefile,v 1.52 2019/08/29 01:07:24 taca Exp $
 
-DISTNAME=      dovecot-2.3-pigeonhole-0.5.7.1
+DISTNAME=      dovecot-2.3-pigeonhole-0.5.7.2
 PKGNAME=       ${DISTNAME:S/-2.3-/-/}
 CATEGORIES=    mail
 MASTER_SITES=  http://pigeonhole.dovecot.org/releases/2.3/
diff -r 53ae83b014da -r b8dd3f1c7e68 mail/dovecot2-pigeonhole/distinfo
--- a/mail/dovecot2-pigeonhole/distinfo Thu Aug 29 01:05:20 2019 +0000
+++ b/mail/dovecot2-pigeonhole/distinfo Thu Aug 29 01:07:24 2019 +0000
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.38 2019/07/23 15:12:22 taca Exp $
+$NetBSD: distinfo,v 1.39 2019/08/29 01:07:24 taca Exp $
 
-SHA1 (dovecot-2.3-pigeonhole-0.5.7.1.tar.gz) = 90bc5b78b7ba7f2ea7f34768942e82189ab66c0a
-RMD160 (dovecot-2.3-pigeonhole-0.5.7.1.tar.gz) = 1171b3e14b8fadbdc5aefcf27108f85e90fad5ea
-SHA512 (dovecot-2.3-pigeonhole-0.5.7.1.tar.gz) = 121eac4ad8bc1ddc55c554d00338bb553590b6aedffcb11e34f6cba102d59bd34580cb7218bd5fe820038c004d12db73f7a27ca135c3d4a12c4449bae3216355
-Size (dovecot-2.3-pigeonhole-0.5.7.1.tar.gz) = 1857291 bytes
+SHA1 (dovecot-2.3-pigeonhole-0.5.7.2.tar.gz) = 4e4336416b154380e9c53fe80b466d4324affcdf
+RMD160 (dovecot-2.3-pigeonhole-0.5.7.2.tar.gz) = e274011a5c9b44d496e835a6b09f00fd5a60e72a
+SHA512 (dovecot-2.3-pigeonhole-0.5.7.2.tar.gz) = 7fc8d89ee31c8e8c16a9aeaeffb591f4188de36fc80e3a30a9ae10bc5acd7ea5d5d91e077fda566e61d588d9221ec53044ce17a9cc0c9c219dbe6824558a1d60
+Size (dovecot-2.3-pigeonhole-0.5.7.2.tar.gz) = 1857602 bytes
 SHA1 (patch-aa) = 264399e166b5fece22bacd47b043c59f8f0f0a29