First Last Prev Next    No search results available      Search page      Enter new bug
Bug#: 124308
Alias:
Product:
Component:
Status: RESOLVED
Resolution: FIXED
Assigned To: Stuart Herbert (RETIRED) <stuart@gentoo.org>
Hardware:
OS:
Version:
Priority:
Severity:
Reporter: Lasse Bigum <zenith@zenith.dk>
Add CC:
CC:
Remove selected CCs
URL:
Summary:
Status Whiteboard:
Keywords:

Filename Description Type Creator Created Size Actions
popfile-0.22.4.ebuild popfile-0.22.4.ebuild text/plain Lasse Bigum 2006-02-27 14:57 0000 1.58 KB Details
Create a New Attachment (proposed patch, testcase, etc.) View All

Bug 124308 depends on: Show dependency tree
Show dependency graph
Bug 124308 blocks:
Votes: 0    Show votes for this bug    Vote for this bug

Additional Comments: (this is where you put emerge --info)







View Bug Activity   |   Format For Printing   |   XML   |   Clone This Bug

Description:   Opened: 2006-02-27 14:52 0000 
Bumped the ebuild of POPFile to v0.22.4, and changed the ebuild some to
accomodate the extra stuff one can use with POPFile.

Has not been tested extensively with the use-flags, and then only on x86, but
I'm leaving the ~ppc as it seems it will run fine on PPC as well (the old
ebuilds did at least)

------- Comment #1 From Lasse Bigum 2006-02-27 14:57:57 0000 ------- 
Created an attachment (id=80860) [edit]
popfile-0.22.4.ebuild

------- Comment #2 From Michael Cummings (RETIRED) 2006-02-27 15:46:22 0000 ------- 
I know what I said on irc - but i think i was wrong(!). In re-reading this
block:

        ssl? (
            dev-libs/openssl
                !=dev-perl/IO-Socket-SSL-0.97
            dev-perl/Net-SSLeay
        )
it strikes me that although we've avoided the 'bad' IO-Socket-SSL, we also
haven't installed a better one...is the problem a conflict with IO::S::SSL-0.97
or just the general presence of IO::S::SSL?

------- Comment #3 From Stuart Herbert (RETIRED) 2006-02-28 00:14:25 0000 ------- 
Any advice greatfully received.  Perl's definitely not my strong point :)

Many thanks,
Stu

------- Comment #4 From Torsten Veller 2006-05-03 12:02:56 0000 ------- 
From the Release Notes
<http://sourceforge.net/project/shownotes.php?release_id=395653&group_id=63137>:

| This version is a bug fix release and contains an important security
| related bug fix. It is a highly recommended upgrade because of the
| problem described in #1 below.
| 
| WHAT'S CHANGED SINCE v0.22.3
| 
| 1. A bug in the handling of the charset in an email could be exploited
|    to cause POPFile to crash when downloading messages.

If the versions in the tree are affected, we should do something soon.

------- Comment #5 From Lasse Bigum 2006-05-03 13:54:21 0000 ------- 
(In reply to comment #2)
> I know what I said on irc - but i think i was wrong(!).

Sorry, been too long, don't remember this anymore, and didn't see the comment
when you posted it :)

> In re-reading this block:
> 
>         ssl? (
>             dev-libs/openssl
>                 !=dev-perl/IO-Socket-SSL-0.97
>             dev-perl/Net-SSLeay
>         )
> it strikes me that although we've avoided the 'bad' IO-Socket-SSL, we also
> haven't installed a better one...is the problem a conflict with IO::S::SSL-0.97
> or just the general presence of IO::S::SSL?

It's just a problem with 0.97 it seems:
http://popfile.sourceforge.net/cgi-bin/wiki.pl?FrequentlyAskedQuestions/SSL

------- Comment #6 From Stuart Herbert (RETIRED) 2006-05-31 00:13:56 0000 ------- 
Many thanks.  I've added this ebuild into the tree.  It should appear on your
local rsync mirror in around one hour's time.

Best regards,
Stu
First Last Prev Next    No search results available      Search page      Enter new bug