Accepting request 676252 from home:benoit_monin:branches:server:mail

update to version 1.8.3 (boo#1125420)
  * CVE-2019-8337
    This version fixes a security problem that affects version
    1.8.2 (older versions are not affected): when the new default
    value system for tls_trust_file is used, the result of
    certificate verification was not properly checked.

OBS-URL: https://build.opensuse.org/request/show/676252
OBS-URL: https://build.opensuse.org/package/show/server:mail/msmtp?expand=0&rev=85
This commit is contained in:
Marcus Rückert 2019-02-19 18:12:45 +00:00 committed by Git OBS Bridge
parent 2718175d12
commit 6d55ff72f9
6 changed files with 14 additions and 4 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:d1185c1969ed00d0e2c57dbcd5eb09a9f82156042b21309d558f761978a58793
size 335760

Binary file not shown.

3
msmtp-1.8.3.tar.xz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:3cb2eefd33d048f0f82de100ef39a494e44fd1485e376ead31f733d2f36b92b4
size 336120

BIN
msmtp-1.8.3.tar.xz.sig Normal file

Binary file not shown.

View File

@ -1,3 +1,13 @@
-------------------------------------------------------------------
Thu Feb 14 20:48:32 UTC 2019 - Benoît Monin <benoit.monin@gmx.fr>
- update to version 1.8.3 (boo#1125420)
* CVE-2019-8337
This version fixes a security problem that affects version
1.8.2 (older versions are not affected): when the new default
value system for tls_trust_file is used, the result of
certificate verification was not properly checked.
------------------------------------------------------------------- -------------------------------------------------------------------
Wed Feb 13 14:58:51 UTC 2019 - Tomas Cech <sleep_walker@opensuse.org> Wed Feb 13 14:58:51 UTC 2019 - Tomas Cech <sleep_walker@opensuse.org>

View File

@ -17,7 +17,7 @@
Name: msmtp Name: msmtp
Version: 1.8.2 Version: 1.8.3
Release: 0 Release: 0
BuildRequires: gnutls-devel BuildRequires: gnutls-devel
BuildRequires: libidn2-devel BuildRequires: libidn2-devel