From 9a294be424a4f78e1a54e3df7a706181fa287793 Mon Sep 17 00:00:00 2001 From: Fabrice Fontaine Date: Sun, 30 Oct 2022 23:43:28 +0100 Subject: [PATCH] package/msmtp: security bump to version 1.8.22 - Fixed a security problem in msmtpd: mail addresses starting with '-' could be interpreted as options of the pipe command. https://github.com/marlam/msmtp-mirror/blob/msmtp-1.8.22/NEWS Signed-off-by: Fabrice Fontaine Signed-off-by: Yann E. MORIN --- package/msmtp/msmtp.hash | 4 ++-- package/msmtp/msmtp.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/msmtp/msmtp.hash b/package/msmtp/msmtp.hash index 1e73d92470..c5571f2fb3 100644 --- a/package/msmtp/msmtp.hash +++ b/package/msmtp/msmtp.hash @@ -1,7 +1,7 @@ # Locally calculated after checking signature -# https://marlam.de/msmtp/releases/msmtp-1.8.14.tar.xz.sig +# https://marlam.de/msmtp/releases/msmtp-1.8.22.tar.xz.sig # with key 2F61B4828BBA779AECB3F32703A2A4AB1E32FD34 -sha256 d56f065d711486e9c234618515a02a48a48dab4051b34f3e108fbecb6fb773b4 msmtp-1.8.14.tar.xz +sha256 1b04206286a5b82622335e4eb09e17074368b7288e53d134543cbbc6b79ea3e7 msmtp-1.8.22.tar.xz # Hash for license file: sha256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903 COPYING diff --git a/package/msmtp/msmtp.mk b/package/msmtp/msmtp.mk index 3db36f4cd0..c3928ffcbb 100644 --- a/package/msmtp/msmtp.mk +++ b/package/msmtp/msmtp.mk @@ -4,7 +4,7 @@ # ################################################################################ -MSMTP_VERSION = 1.8.14 +MSMTP_VERSION = 1.8.22 MSMTP_SITE = https://marlam.de/msmtp/releases MSMTP_SOURCE = msmtp-$(MSMTP_VERSION).tar.xz MSMTP_DEPENDENCIES = host-pkgconf