fetchmail 6.3.6-1ubuntu2.1 source package in Ubuntu

Changelog

fetchmail (6.3.6-1ubuntu2.1) feisty-security; urgency=low

  * SECURITY UPDATE: DoS via NULL pointer dereference when SMTP refuses to
    send certain warning messages
  * added 02_CVE-2007-4565.patch to sink.c to verify msg is not NULL
  * SECURITY UPDATE: Due to a design flaw in the APOP protocol, remote
    attackers may be able to acquire a portion of a user's authentication
    credentials using man-in-the-middle techniques.
  * added 03_CVE-2007-1558.patch.  This patch adds notes about APOP's
    limitations as well as updating pop3.c to more strictly validate the
    presented challenge for RFC-822 conformity. This change to pop3.c does
    not fix the APOP design flaw, but does make attacks against APOP somewhat
    more difficult.
  * added 04_manpage.patch for improperly formatted manpage (upstream bug)
  * References
    CVE-2007-4565
    CVE-2007-1558
  * Modify Maintainer value to match the DebianMaintainerField
    specification.

 -- Jamie Strandboge <email address hidden>   Tue, 25 Sep 2007 09:55:32 -0400