From 6d55ff72f9d7df58153445551a9e79e0a3b6414f71ce82cd199145e5e1f4bc58 Mon Sep 17 00:00:00 2001
From: Marcus Rueckert <mrueckert@suse.com>
Date: Tue, 19 Feb 2019 18:12:45 +0000
Subject: [PATCH] Accepting request 676252 from
 home:benoit_monin:branches:server:mail

update to version 1.8.3 (boo#1125420)
  * CVE-2019-8337
    This version fixes a security problem that affects version
    1.8.2 (older versions are not affected): when the new default
    value system for tls_trust_file is used, the result of
    certificate verification was not properly checked.

OBS-URL: https://build.opensuse.org/request/show/676252
OBS-URL: https://build.opensuse.org/package/show/server:mail/msmtp?expand=0&rev=85
---
 msmtp-1.8.2.tar.xz     |   3 ---
 msmtp-1.8.2.tar.xz.sig | Bin 310 -> 0 bytes
 msmtp-1.8.3.tar.xz     |   3 +++
 msmtp-1.8.3.tar.xz.sig | Bin 0 -> 310 bytes
 msmtp.changes          |  10 ++++++++++
 msmtp.spec             |   2 +-
 6 files changed, 14 insertions(+), 4 deletions(-)
 delete mode 100644 msmtp-1.8.2.tar.xz
 delete mode 100644 msmtp-1.8.2.tar.xz.sig
 create mode 100644 msmtp-1.8.3.tar.xz
 create mode 100644 msmtp-1.8.3.tar.xz.sig

diff --git a/msmtp-1.8.2.tar.xz b/msmtp-1.8.2.tar.xz
deleted file mode 100644
index 5dc7336..0000000
--- a/msmtp-1.8.2.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:d1185c1969ed00d0e2c57dbcd5eb09a9f82156042b21309d558f761978a58793
-size 335760
diff --git a/msmtp-1.8.2.tar.xz.sig b/msmtp-1.8.2.tar.xz.sig
deleted file mode 100644
index dc1b535ce5fea3cb213d6a879570ca08661eb33aa273367c969edc6d5c73e458..0000000000000000000000000000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 310
zcmV-60m=S}0W$;u0SW*e79j*LVYGsax_6rFv-2kdqNJ-HGW|3K0$e&2YXAxf5Cfv5
zs~$4_H2<0h|9bwwp81hw)TeYcro0axY4W;8z5Fc8RhI-TToU*pyinIr>hZ@9Fpj05
zhTh88THI@O!dY<}27gs9An$?Af8_up9E;+}|FBNa1x9mEJ>fE@@Wwbe!y8eU+<Bt(
zm3puXE~urnRSHySDGm~C6`*?p`xu6#cdvN7ylMZkc!y|H)A;v{gQ@<*{GlU}1`I3H
ztt7H2ReG+*I07?rwXCEs4O1!Sd4G-ElR(&BoA#`xAcU@kuU)#=GFua|wLdv)nx0=|
zKlgYo=c0TphzjBSXy2`(Yu5df3(q7x>yyVev8Ce88IY07^$L;@UNq8GTO)<d-(J47
I6u;aQ7-t`qp8x;=

diff --git a/msmtp-1.8.3.tar.xz b/msmtp-1.8.3.tar.xz
new file mode 100644
index 0000000..5a71c2d
--- /dev/null
+++ b/msmtp-1.8.3.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:3cb2eefd33d048f0f82de100ef39a494e44fd1485e376ead31f733d2f36b92b4
+size 336120
diff --git a/msmtp-1.8.3.tar.xz.sig b/msmtp-1.8.3.tar.xz.sig
new file mode 100644
index 0000000000000000000000000000000000000000000000000000000000000000..08b7b4dd67717045373bf09ab07800552444bdc9c4a60b69d1302b8209ac64e7
GIT binary patch
literal 310
zcmV-60m=S}0W$;u0SW*e79j*LVYGsax_6rFv-2kdqNJ-HGW|3K0$gFu%>W7s5Cfv5
zs~$4_G;tXR{w(DuNgjmDmU3M^5{vc<gwfOAF5d8l_ie4RgBXv^(0!JFaY~vEW0!^F
z)u!v|$^aqzsCV4sRydH8*S^PKolH@+nK3Ir9!RJ$U-6{LqsDk5@xOUixu}^;Cbw40
zRRLS|=mR4PPsD9X17o}cqe|pR!-A*bjkCTO&E%|VhtOwDNb;f7ZxcCFDb_{bCCScf
zG9UXdKwgj$_`#2Ry%hYWn>Mk*B2Cn?&)_m&Iy_m5b8VKgc1Nmt6lQEhCXmECAoFw;
z?~MIMqFv3v9gK^@a0=s8vWZvk867W((6U#V3591J$GKXUpf=J+<OL|42A93$p9eM2
IR@y%F_z{AX=l}o!

literal 0
HcmV?d00001

diff --git a/msmtp.changes b/msmtp.changes
index 866b36a..2c7de39 100644
--- a/msmtp.changes
+++ b/msmtp.changes
@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Thu Feb 14 20:48:32 UTC 2019 - Benoît Monin <benoit.monin@gmx.fr>
+
+- update to version 1.8.3 (boo#1125420)
+  * CVE-2019-8337
+    This version fixes a security problem that affects version
+    1.8.2 (older versions are not affected): when the new default
+    value system for tls_trust_file is used, the result of
+    certificate verification was not properly checked.
+
 -------------------------------------------------------------------
 Wed Feb 13 14:58:51 UTC 2019 - Tomas Cech <sleep_walker@opensuse.org>
 
diff --git a/msmtp.spec b/msmtp.spec
index 1089fc1..815b3b1 100644
--- a/msmtp.spec
+++ b/msmtp.spec
@@ -17,7 +17,7 @@
 
 
 Name:           msmtp
-Version:        1.8.2
+Version:        1.8.3
 Release:        0
 BuildRequires:  gnutls-devel
 BuildRequires:  libidn2-devel