[pkg-fetchmail-maint] Bug#212762: fetchmail 6.2.5.1 found to be faulty, 6.2.5.2 released.

Fri Jul 22 02:57:23 UTC 2005

The fetchmail update patch 6.2.5.1 was found to be faulty by Miloslav
Trmac, it contains a denial of service vulnerability. For details, see
<http://lists.berlios.de/pipermail/fetchmail-devel/2005-July/000397.html>

I have uploaded fetchmail-patch-6.2.5.2.gz to
<http://developer.berlios.de/project/showfiles.php?group_id=1824> which
contains a much simpler fix that Ludwig Nussel of SUSE Security has
provided.

I have updated the security announcement at
<http://fetchmail.berlios.de/fetchmail-SA-2005-01.txt> to version 1.01.

-- 
Matthias Andree