69181 2004-10-27 13:10 0000 dev-perl/MIME-tools 5.415 includes security fixes 2004-11-02 10:25:36 0000 1 1 1 Unclassified Gentoo Security Vulnerabilities unspecified All Linux RESOLVED FIXED B3 [glsa] P2 minor --- 1 linux4ibook@free.fr security@gentoo.org perl@gentoo.org linux4ibook@free.fr 2004-10-27 13:10:15 0000 http://lists.roaringpenguin.com/pipermail/mimedefang/2004-October/024959.html http://lists.roaringpenguin.com/pipermail/mimedefang/2004-October/024964.html Initial post about the problem : http://www.jiscmail.ac.uk/cgi-bin/webadmin?A2=ind0410&L=mailscanner&T=0&F=&S=&P=126285 Reproducible: Always Steps to Reproduce: 1. 2. 3. koon@gentoo.org 2004-10-27 13:40:34 0000 Perl team, please bump. mcummings@gentoo.org 2004-10-28 03:19:58 0000 Added. Tested on sparc and x86, so I can unmask there, but will need other archs before continuing. sejo@gentoo.org 2004-10-28 04:51:15 0000 stable on ppc also had to mark MIME-Base64-3.05 stable or repoman complained... (poor thing) greetings mcummings@gentoo.org 2004-10-28 05:40:37 0000 ok, marked stable on x86 and sparc (should have done it to begin with, sorry folks) kloeri@gentoo.org 2004-10-30 03:03:50 0000 Eek! for some reason I forgot to mention that I stabled MIME-tools on alpha yesterday.. koon@gentoo.org 2004-11-01 02:27:11 0000 Do we need a GLSA ? This one is much like the Archive-Zip thing (allow virus detection evasion on some mail scanning systems)... and we issued one for that. jaervosz@gentoo.org 2004-11-01 03:02:06 0000 I think we should issue a GLSA for this one as well. sgala@apache.org 2004-11-01 05:09:42 0000 This version breaks tests (and thus ebuild) of SOAP-Lite. SOAP-Lite builds with 5.413 and 5.414, though Also, while 5.415 is labelled "ppc", 5.414 is labelled "~ppc", which looks funny. mcummings@gentoo.org 2004-11-02 03:23:06 0000 We asked ppc to test and unmask this version - hence the jump. It does *not* break SOAP-Lite-60a-r1. There was a mistake in the ebuild which I corrected this morning and retested. SOAP-Lite-60a-r1 works fine with 5.413 and up, including 5.415. If you can pass me some code that doesn't work I'd be happy to test it out. The tests will fail with the flush because of a flaw in the tests themselves, not SOAP-Lite/MIME-tools interaction. blubb@gentoo.org 2004-11-02 04:08:03 0000 amd64 stable koon@gentoo.org 2004-11-02 10:25:36 0000 GLSA 200411-06