Module Name:	pkgsrc
Committed By:	ghen
Date:		Sun Apr 15 11:33:39 UTC 2007

Modified Files:
	pkgsrc/mail/fetchmail [pkgsrc-2007Q1]: Makefile distinfo
	pkgsrc/mail/fetchmailconf [pkgsrc-2007Q1]: Makefile

Log Message:
Pullup ticket 2065 - requested by tron
security update for fetchmail

- pkgsrc/mail/fetchmail/Makefile			1.162
- pkgsrc/mail/fetchmail/distinfo			1.37
- pkgsrc/mail/fetchmailconf/Makefile			1.72

   Module Name:	pkgsrc
   Committed By:	tron
   Date:		Sat Apr 14 22:14:29 UTC 2007

   Modified Files:
	   pkgsrc/mail/fetchmail: Makefile distinfo
	   pkgsrc/mail/fetchmailconf: Makefile

   Log Message:
   Update "fetchmail" and "fetchmailconf" packages to version 6.3.8.
   Changes since version 6.3.6:
   - Make the APOP challenge parser more distrustful and have it reject
     challenges that do not conform to RFC-822 msg-id format, in the hope
     to make mounting man-in-the-middle attacks (MITM) against APOP a bit
     more difficult. (CVE-2007-1558)
   - Fix pluralization of oversized-message warning mails.
   - Fix manual page: --sslcheck -> --sslcertck, and do not set trailing
     "recommended:" in bold.
   - Repoll immediately if a protocol error happens during the authentication
     attempt after a failed opportunistic TLS upgrade.
   - Fix rendering of the "24 - 26, 28, 29" paragraph in the exit codes
     section.
   - If SOCKS support was compiled in, add 'socks' to the feature_options
     Python list emitted in --configdump.
   - Do not crash with a null pointer dereference when opening the BSMTP file
     fails. Improve error checking and reporting.
   - Make BSMTP output actually work, it would persistently fail with SOCKET
     error after writing the first header.
   - Fix KPOP.
   - Fix repoll when server disconnects after opportunistic TLS failed for
     POP3.


To generate a diff of this commit:
cvs rdiff -r1.161 -r1.161.2.1 pkgsrc/mail/fetchmail/Makefile
cvs rdiff -r1.36 -r1.36.2.1 pkgsrc/mail/fetchmail/distinfo
cvs rdiff -r1.71 -r1.71.2.1 pkgsrc/mail/fetchmailconf/Makefile

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.