Package: libetpan / 1.9.4-5

Metadata

Package Version Patches format
libetpan 1.9.4-5 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
11_use_openjade.patch | (download)

doc/Makefile.am | 2 1 1 - 0 !
doc/Makefile.in | 2 1 1 - 0 !
2 files changed, 2 insertions( ), 2 deletions(-)

 replace jade command with openjade
12_add_dummy_readme.diff | (download)

README | 1 1 0 - 0 !
1 file changed, 1 insertion( )

---
13_fix_CVE 2020 15953.diff | (download)

src/low-level/imap/mailimap.c | 7 7 0 - 0 !
src/low-level/pop3/mailpop3.c | 8 8 0 - 0 !
src/low-level/smtp/mailsmtp.c | 8 8 0 - 0 !
3 files changed, 23 insertions( )

 fix cve-2020-15953: starttls buffering issue that affects
 IMAP, SMTP, and POP3.
 This patch is the merge of the two upstream commits fixing the issue:
 - first by Fabian Ising <[email protected]>, fixing the
   issue in SMTP/POP3
 - second by Damian Poddebniak <[email protected]>, fixing
   the issue in IMAP
14_fix_encoding.diff | (download)

src/data-types/carray.h | 2 1 1 - 0 !
src/data-types/chash.h | 2 1 1 - 0 !
src/data-types/clist.h | 2 1 1 - 0 !
3 files changed, 3 insertions( ), 3 deletions(-)

 fix national encoding in header files
15_Fixed crash when st_info_list is NULL. Fixes 420. Fi.patch | (download)

src/low-level/imap/mailimap_types.c | 8 5 3 - 0 !
1 file changed, 5 insertions( ), 3 deletions(-)

 fixed crash when st_info_list is null. fixes #420. fixes
 CVE-2022-4121.
16_fix_precedence_related_to_poll.patch | (download)

src/data-types/connect.c | 2 1 1 - 0 !
src/data-types/mailstream_ssl.c | 2 1 1 - 0 !
2 files changed, 2 insertions( ), 2 deletions(-)

 fix: operator precedence related to poll

Fixes the following warnings:

```
connect.c:162:19: warning: suggest parentheses around comparison in operand of & [-Wparentheses]
mailstream_ssl.c:368:32: warning: self-comparison always evaluates to false [-Wtautological-compare]
mailstream_ssl.c:368:32: warning: suggest parentheses around comparison in operand of & [-Wparentheses]
```

17 Replace Cyrus SASL MD5 with Colin Plumb s MD5.patch | (download)

doc/DOCUMENTATION | 4 1 3 - 0 !
src/data-types/Makefile.am | 4 2 2 - 0 !
src/data-types/md5.c | 763 216 547 - 0 !
src/data-types/md5.h | 104 36 68 - 0 !
src/data-types/md5namespace.h | 5 0 5 - 0 !
src/low-level/pop3/mailpop3.c | 2 1 1 - 0 !
6 files changed, 256 insertions( ), 626 deletions(-)

 replace cyrus sasl md5 with colin plumb's md5

HMAC-MD5 is not used anymore, so drop it without replacement.
Using Colin Plumb's MD5 gets rid of the RSA-MD license.

Keep the C   conditionals as well as the namespace include in
the md5.h header.

Link: https://github.com/jeffboody/libmd5/tree/5b2f2eab1f5126933dd9560c1cfbcabf7e6a1722

Modified to apply to current Debian sources.