bug 64133

7 files changed, 52 insertions, 15 deletions

diff --git a/mail-filter/spamassassin/ChangeLog b/mail-filter/spamassassin/ChangeLog
index 1a401b0fca17..99cfa54cc176 100644
--- a/mail-filter/spamassassin/ChangeLog
+++ b/mail-filter/spamassassin/ChangeLog
@@ -1,6 +1,14 @@
 # ChangeLog for mail-filter/spamassassin
 # Copyright 2002-2004 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/mail-filter/spamassassin/ChangeLog,v 1.17 2004/10/26 23:39:42 mcummings Exp $
+# $Header: /var/cvsroot/gentoo-x86/mail-filter/spamassassin/ChangeLog,v 1.18 2004/12/20 10:13:56 mcummings Exp $
+
+*spamassassin-3.0.1 (20 Dec 2004)
+
+  20 Dec 2004; Michael Cummings <mcummings@gentoo.org>
+  files/3.0.0-spamd.conf, files/spamd.conf, spamassassin-3.0.0-r1.ebuild,
+  spamassassin-3.0.0.ebuild, spamassassin-3.0.1.ebuild:
+  Added note regarding potential for DoS against spamd when used against an
+  untrusted network. Should resolve bug 64133 for now.
 
   26 Oct 2004; Michael Cummings <mcummings@gentoo.org> :
   Bug 68841. - excessive memory-usage fixes - bug fixed which stopped DCC, Pyzor
diff --git a/mail-filter/spamassassin/Manifest b/mail-filter/spamassassin/Manifest
index a1ba7b671e53..2d75b8794aaa 100644
--- a/mail-filter/spamassassin/Manifest
+++ b/mail-filter/spamassassin/Manifest
@@ -1,28 +1,28 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA1
 
-MD5 111fb3875b7bfab24cd282880f1ae7ce ChangeLog 10652
+MD5 adf0453bea76a846b54c5e51419c99e2 ChangeLog 11004
 MD5 e2d8f1bf77722def1dd432e26455c818 metadata.xml 305
 MD5 65493afe87a913fca09fc1a71f91c049 spamassassin-2.63-r1.ebuild 2411
 MD5 2340f8dc700ca777028031b023b4d168 spamassassin-2.63.ebuild 2300
 MD5 765fc4df91c2d5259208d35fc1c6068b spamassassin-2.64.ebuild 2515
-MD5 2a3d10825088e74b85c07939be66c34b spamassassin-3.0.0-r1.ebuild 5602
-MD5 c607c46288451f185dc1c3a769e10fa8 spamassassin-3.0.0.ebuild 5799
-MD5 0bc711a9d3d30520a21f09f6584085ed spamassassin-3.0.1.ebuild 5606
-MD5 4b17c303c2a11eab455003b92cd1851a files/3.0.0-spamd.conf 596
-MD5 33f67831957d640746a374b8774e7d2d files/3.0.0-spamd.init 667
+MD5 5401cb605f05a9d1bb60d2b22aa32e22 spamassassin-3.0.0-r1.ebuild 5775
+MD5 a494f0c43e9ee58f3c99217cb1bf6637 spamassassin-3.0.0.ebuild 5972
+MD5 e84888a64e68cab6b337c7572f54a6d9 spamassassin-3.0.1.ebuild 5779
 MD5 2bc962fe7cbd5fc24b6ca7703a498e83 files/digest-spamassassin-2.63 75
+MD5 3fe5a2e4cdb6c4830cb22f635d1b24e3 files/3.0.0-spamd.conf 777
+MD5 33f67831957d640746a374b8774e7d2d files/3.0.0-spamd.init 667
 MD5 2bc962fe7cbd5fc24b6ca7703a498e83 files/digest-spamassassin-2.63-r1 75
 MD5 6a161feb8320fadb55f440aab192d008 files/digest-spamassassin-2.64 75
 MD5 7d4ce834279c9e36320d114a7118c127 files/digest-spamassassin-3.0.0 76
 MD5 7d4ce834279c9e36320d114a7118c127 files/digest-spamassassin-3.0.0-r1 76
-MD5 1ed9c6ddcb224ed5d2ad37aab7c0cce9 files/spamd.conf 265
+MD5 e76e0d7ee2c9225a16dfe1f177823f70 files/spamd.conf 446
 MD5 90925e8f6521add45f8a727ed982e61a files/spamd.init 645
 MD5 37be9f25f104cf5e5ad47b37351c7900 files/digest-spamassassin-3.0.1 76
 -----BEGIN PGP SIGNATURE-----
-Version: GnuPG v1.2.4 (GNU/Linux)
+Version: GnuPG v1.2.6 (GNU/Linux)
 
-iD8DBQFBfuAttG5z4I8BtQoRAktgAJ0XEWHrKUKH2ftW32Ba3RdtwSv7RgCfQSxm
-Pd+yk73TKfPNa7QnbEzFUZs=
-=iIUr
+iD8DBQFBxqW2tG5z4I8BtQoRAnSbAJ4sA7z2Tee0seLsOB00ylCFlkPpXACcDwCE
+69OqLX0yYjfPRyZbGPxKYOg=
+=zoer
 -----END PGP SIGNATURE-----
diff --git a/mail-filter/spamassassin/files/3.0.0-spamd.conf b/mail-filter/spamassassin/files/3.0.0-spamd.conf
index 8cb93f8ed036..4ede33ecb769 100644
--- a/mail-filter/spamassassin/files/3.0.0-spamd.conf
+++ b/mail-filter/spamassassin/files/3.0.0-spamd.conf
@@ -1,5 +1,12 @@
 # Config file for /etc/init.d/spamd
 
+
+# ***WARNING***
+# spamd was not designed to listed to an untrusted network. spamd
+# is vulnerable to DoS attacks (and eternal doom) if used to listen
+# to an untrusted network.
+#
+
 # Some options:
 #
 # -c          to create a per user configuration file
diff --git a/mail-filter/spamassassin/files/spamd.conf b/mail-filter/spamassassin/files/spamd.conf
index c953bcb64d3b..8705c5f60fe7 100644
--- a/mail-filter/spamassassin/files/spamd.conf
+++ b/mail-filter/spamassassin/files/spamd.conf
@@ -1,5 +1,12 @@
 # Config file for /etc/init.d/spamd
 
+# ***WARNING***
+# spamd was not designed to listed to an untrusted network. spamd
+# is vulnerable to DoS attacks (and eternal doom) if used to listen
+# to an untrusted network.
+#
+
+
 # Some options:
 #
 # -a for auto-white-list
diff --git a/mail-filter/spamassassin/spamassassin-3.0.0-r1.ebuild b/mail-filter/spamassassin/spamassassin-3.0.0-r1.ebuild
index 62cc91425c56..bd9532ef6199 100644
--- a/mail-filter/spamassassin/spamassassin-3.0.0-r1.ebuild
+++ b/mail-filter/spamassassin/spamassassin-3.0.0-r1.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2004 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/mail-filter/spamassassin/spamassassin-3.0.0-r1.ebuild,v 1.2 2004/10/16 14:02:51 mcummings Exp $
+# $Header: /var/cvsroot/gentoo-x86/mail-filter/spamassassin/spamassassin-3.0.0-r1.ebuild,v 1.3 2004/12/20 10:13:56 mcummings Exp $
 
 inherit perl-module
 
@@ -194,5 +194,10 @@ pkg_postinst() {
 	einfo "If upgraded from 2.x, please read the file"
 	einfo "  /usr/share/doc/${PF}/UPGRADE.gz"
 	einfo
+	ewarn 
+	ewarn "spamd is not designed to listen to an untrusted network"
+	ewarn "and is vulnerable to DoS attacks (and eternal doom) if"
+	ewarn "configured to do so"
+	ewarn
 }
 
diff --git a/mail-filter/spamassassin/spamassassin-3.0.0.ebuild b/mail-filter/spamassassin/spamassassin-3.0.0.ebuild
index cf711323ebbe..a0fb901a666c 100644
--- a/mail-filter/spamassassin/spamassassin-3.0.0.ebuild
+++ b/mail-filter/spamassassin/spamassassin-3.0.0.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2004 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/mail-filter/spamassassin/spamassassin-3.0.0.ebuild,v 1.3 2004/09/24 16:22:47 mcummings Exp $
+# $Header: /var/cvsroot/gentoo-x86/mail-filter/spamassassin/spamassassin-3.0.0.ebuild,v 1.4 2004/12/20 10:13:56 mcummings Exp $
 
 inherit perl-module
 
@@ -199,5 +199,10 @@ pkg_postinst() {
 	einfo "If upgraded from 2.x, please read the file"
 	einfo "  /usr/share/doc/${PF}/UPGRADE.gz"
 	einfo
+	ewarn 
+	ewarn "spamd is not designed to listen to an untrusted network"
+	ewarn "and is vulnerable to DoS attacks (and eternal doom) if"
+	ewarn "configured to do so"
+	ewarn
 }
 
diff --git a/mail-filter/spamassassin/spamassassin-3.0.1.ebuild b/mail-filter/spamassassin/spamassassin-3.0.1.ebuild
index fe8168a85085..b704f18298e4 100644
--- a/mail-filter/spamassassin/spamassassin-3.0.1.ebuild
+++ b/mail-filter/spamassassin/spamassassin-3.0.1.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2004 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/mail-filter/spamassassin/spamassassin-3.0.1.ebuild,v 1.1 2004/10/26 23:39:42 mcummings Exp $
+# $Header: /var/cvsroot/gentoo-x86/mail-filter/spamassassin/spamassassin-3.0.1.ebuild,v 1.2 2004/12/20 10:13:56 mcummings Exp $
 
 inherit perl-module
 
@@ -197,5 +197,10 @@ pkg_postinst() {
 	einfo "If upgraded from 2.x, please read the file"
 	einfo "  /usr/share/doc/${PF}/UPGRADE.gz"
 	einfo
+	ewarn 
+	ewarn "spamd is not designed to listen to an untrusted network"
+	ewarn "and is vulnerable to DoS attacks (and eternal doom) if"
+	ewarn "configured to do so"
+	ewarn
 }