brad ec490ee1b5 Fix denial of service issue with Pine 4.44. ...

An attacker can send a fully legal email message with a crafted
From-header and thus forcing pine to core dump on startup.
The only way to launch pine is manually removing the bad message
either directly from the spool, or from another MUA. Until the
message has been removed or edited there is no way of accessing
the INBOX using pine.

http://marc.theaimsgroup.com/?l=bugtraq&m=103668430620531&w=2

2002-11-25 17:08:37 +00:00

..

patch-build

upgrade to Pine 4.41 + Pico 4.2

2001-11-19 02:01:57 +00:00

patch-doc_pine.1

upgrade to Pine 4.40

2001-09-27 16:52:40 +00:00

patch-doc_tech-notes.txt

fix offsets after upgrade to 4.44

2002-01-13 09:03:25 +00:00

patch-pico_osdep_spell.unx

upgrade to Pine 4.40

2001-09-27 16:52:40 +00:00

patch-pine_bldaddr_c

Fix denial of service issue with Pine 4.44.

2002-11-25 17:08:37 +00:00

patch-pine_headers.h

upgrade to Pine 4.40

2001-09-27 16:52:40 +00:00

patch-pine_init.c

upgrade to Pine 4.40

2001-09-27 16:52:40 +00:00

patch-pine_mailcap.c

upgrade to Pine 4.40

2001-09-27 16:52:40 +00:00

patch-pine_mailcmd.c

upgrade to Pine 4.40

2001-09-27 16:52:40 +00:00

patch-pine_mailindx.c

upgrade to Pine 4.40

2001-09-27 16:52:40 +00:00

patch-pine_makefile.bso

add libdes so this links with -current's OpenSSL.

2002-06-05 19:46:37 +00:00

patch-pine_osdep_os-bso.h

upgrade to Pine 4.40

2001-09-27 16:52:40 +00:00

patch-pine_pine.c

upgrade to Pine 4.42

2001-11-22 20:29:20 +00:00

patch-pine_pine.hlp

fix offsets after upgrade to 4.44

2002-01-13 09:03:25 +00:00

patch-pine_rpdump_c

upgrade to Pine 4.40

2001-09-27 16:52:40 +00:00

patch-pine_rpload_c

upgrade to Pine 4.40

2001-09-27 16:52:40 +00:00

patch-pine_send.c

upgrade to Pine 4.40

2001-09-27 16:52:40 +00:00