CVS: cvs.openbsd.org: ports

CVSROOT:	/cvs
Module name:	ports
Changes by:	brad@cvs.openbsd.org	2002/11/25 10:26:23

Modified files:
	mail/pine      : Tag: OPENBSD_3_2 Makefile 
Added files:
	mail/pine/patches: Tag: OPENBSD_3_2 patch-pine_bldaddr_c 

Log message:
Fix denial of service issue with Pine 4.44.

An attacker can send a fully legal email message with a crafted From-header and thus forcing pine to core dump on startup. The only way to launch pine is manually removing the bad message either directly from the spool, or from another MUA. Until the message has been removed or edited there is no way of accessing the INBOX using pine.

http://marc.theaimsgroup.com/?l=bugtraq&m=103668430620531&w=2 Received on Mon Nov 25 12:27:55 2002