| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
Reported by: VVD (via IRC)
|
|
|
|
|
|
|
|
|
|
| |
upstream:
- https://bugs.exim.org/show_bug.cgi?id=3046
- https://github.com/Exim/exim/commit/ced0bbf43860a2e4ddc88e3ba20ae731324586c5
PR: 275635
Author: Niels Kobschätzki <niels@kobschaetzki.net>
Approved-by: fluffy (implicit)
|
|
|
|
|
| |
PR: 275156
See Also: https://bugs.exim.org/show_bug.cgi?id=3054
|
|
|
|
|
|
|
| |
PR: 271767
Author: Alexander Sheiko <adsh@univ.kiev.ua>
Tested-by: David Siebörger <drs-freebsd@sieborger.nom.za>
Approved-by: fluffy (implicit)
|
|
|
|
|
|
|
|
|
|
|
|
| |
Notable changes:
- The internal (but exposed in logs, Received: headers and Message-ID: headers)
identifier used for messages is longer than in the previous release
PR: 274909
Changes: https://lists.exim.org/lurker/message/20231104.135832.37148bbd.en.html
Reported-by: doctor@doctor.nl2k.ab.ca
Approved-by: fluffy (maintainer)
Reviewed-by: Igor Zabelin <igorz@yandex.ru>
|
|
|
|
|
| |
PR: 274235
MFH: 2023Q4
|
|
|
|
|
| |
PR: 265098
Reported by: David Siebuerger <drs-freebsd@sieborger.nom.za>
|
|
|
|
|
|
|
|
|
|
| |
PR: 265098
Obtained-from: https://salsa.debian.org/exim-team/exim4/-/blob/master/debian/patches/
Reported-by: vvd
Approved-by: fluffy
Reviewed-by: drs-freebsd@sieborger.nom.za
Tested-by: pi, drs-freebsd@sieborger.nom.za
Changes: https://lists.exim.org/lurker/message/20220625.141825.d6de6074.en.html
|
|
|
|
|
|
|
| |
The comment prior to smtp_printf() implementation says that the
extra BOOL argument tells whether "further is data expected".
Looking at other invocations of it, including those
for error 451, it should be FALSE here.
|
|
|
|
|
|
|
|
| |
This fixes hang in TLS transport after 4xx or 5xx bug
(see https://bugs.exim.org/show_bug.cgi?id=2864)
PR: 262594
Tested by: Kurt Jaeger, David Siebörger
|
|
|
|
|
| |
Reported by: David Siebörger
Sponsored by: Netzkommune GmbH
|
|
|
|
|
|
|
|
|
|
|
| |
32-Fix-PAM-auth.-Bug-2813
35-Exiqgrep-check-arg-parsing.-Bug-2821
43-BSD-fix-resource-leak
45-Fix-bogus-error-message-copy.-Bug-2857
50-Fix-include_directory-in-redirect-routers.-Bug-2715
55-Specific-check-for-null-pointer
Thanks to: ler (for runtime testing)
|
|
|
|
|
|
|
|
|
|
|
|
| |
Finally, Exim will be pushed to 4.95 release.
Long wait was caused by some criticals errors in vanilla release,
upstream fixes got a some time to come.
* Apply sendfile patch, fixes SIGSEGV using clamd via TCP [1]
* Convert select() to poll(), fixes crashes (SIGSEV) on FreeBSD 12.2 [2]
PR: 258848 [1], 259822 [2]
Sponsored by: Netzkommune GmbH
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Last update for mail/opendmarc to 1.4.2 changes required params for
opendmarc_policy_store_dkim subroutine by introducing *dkim_selector
as pair for *domain.
Adjust exim' dmarc routines by pass NULL string as *dkim_selector to
force opendmarc subroutine go thru autodetect required selector on the fly.
This dirt'n'ugly hack will be dropped as soon as functionality will be
adjusted upstream in proper way.
Bump PORTREVISION to force rebuild.
Reported by: ler, poudriere failure
PR: 260678
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* New upstream security release.
+ Release based on +fixes branch.
+ Fixes multiple security vulnerabilities reported by Qualys and adds
related robustness improvements. (Special thanks to Heiko)
CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
CVE-2020-28007: Link attack in Exim's log directory
CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
CVE-2020-28012: Missing close-on-exec flag for privileged pipe
CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
CVE-2020-28009: Integer overflow in get_stdinput()
CVE-2020-28015, CVE-28021: New-line injection into spool header file
CVE-2020-28026: Line truncation and injection in spool_read_header()
CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
CVE-2020-28017: Integer overflow in receive_add_recipient()
CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
CVE-2020-28011: Heap buffer overflow in queue_run()
CVE-2020-28010: Heap out-of-bounds write in main()
CVE-2020-28018: Use-after-free in tls-openssl.c
CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()
CVE-2020-28014, CVE-2021-27216: PID file handling
CVE-2020-28008: Assorted attacks in Exim's spool directory
CVE-2020-28019: Failure to reset function pointer after BDAT error
* Incorporate debian patches to turn taint failures into warnings.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Used git diffs:
[38/42] GnuTLS: clear errno before any data i/o op, so error logging does not see stale values
[39/42] Fix non-TLS build
[40/42] eximon: fix FreeBSD build
[41/42] LDAP: fix taint-check in server list walk. Bug 2646
[42/42] Pass authenticator pubname through spool. Bug 2648
Also patch files/150.exim-tidydb to prevent its output when daily_show_success=NO. [1]
Submitted by: Dmitry Selivanov <sd@rlan.ru> via email [1]
MFH: 2020Q3
Notes:
svn path=/head/; revision=556289
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Used git diffs:
[27/37] Fix spelling of local_part_data in docs and debug output
[27/37] Fix spelling of local_part_data in docs and debug output
[28/37] Fix ${readsocket } eol-replacement. Bug 2630
[29/37] Taint: fix off-by-one in is_tainted(). Bug 2634
[30/37] Build: ifdef guard for EXPERIMENTAL_QUEUEFILE
[31/37] Taint: fix off-by-one in is_tainted(). Bug 2634
[32/37] DANE: force SNI to use $domain. Bug 2265
[33/37] DANE: Fix 2-rcpt message, diff domins case. Bug 2265
[34/37] Fix non-DANE build
[35/37] DANE: Fix 2 messages from queue case
[36/37] Fix non-DANE build
While here, make SPF option turned on by default
MFH: 2020Q3
Notes:
svn path=/head/; revision=548081
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Used git diffs:
[02/26] Taint: fix pam expansion condition. Bug 2587
[03/26] Taint: fix listcount expansion operator. Bug 2586
[04/26] Docs: fix mistaken variable name
[06/26] Docs: typoes
[07/26] Taint: fix multiple ACL actions to properly manage tainted argument data
[08/26] Fix -bi. Bug 2590
[09/26] Filters: fix "vacation" in Exim filter. Bug 2593
[10/26] TLS: use RFC 6125 rules for certifucate name checks when CNAMES are present. Bug 2594
[11/26] Taint: fix radius expansion condition
[13/26] Taint: fix verify. Bug 2598
[14/26] Fix string_copy() macro to not multiple-eval args. Bug 2603
[15/26] Cutthrough: handle request when a callout-hold is active. Bug 2604
[16/26] Lookups: Fix "subdir" filter on a dsearch.
[18/26] Sqlite: fix segfault on bad/missing sqlite_dbfile. Bug 2606
[19/26] Taint: fix ACL "spam" condition, to permit tainted name arguments.
[20/26] Fix message-reception clock usage. Bug 2615
[21/26] typoes
[22/26] Fix DKIM signing to always ;-terminate. Bug 2295
[23/26] Fix taint trap in parse_fix_phrase(). Bug 2617
[24/26] Taint: fix ACL "spam" condition, to permit tainted name arguments
[25/26] Fix debug_print_socket()
[26/26] debug_print_socket(): output formatting
MFH: 2020Q3
Notes:
svn path=/head/; revision=542419
|
|
|
|
|
|
|
|
|
|
|
| |
while here, convert POST-INSTALL-NOTES* to ucl
PR: 246922
Submitted by: pi
MFH: 2020Q2
Notes:
svn path=/head/; revision=537520
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bump PORTREVISION for master port to force all slaves rebuild
Drop PORTREVISION for exim-postgresql slave in favor of master settings
Adopt recent commits from Exim repo as numerated extra-patches till new maintenance release will be published:
19. SPF: fix result for case of only non-spf TXT RRs
20. Fix error logging for dynamically-loaded modules
21. heimdal auth: fix the increase of big_buffer size
22. Taint: hybrid checking mode
23. Fix taint hybrid-checking on BSD
24. TFO: even in binary built for modern Linux, handle error returned by old Linux kernel
25. Taint: slow-mode checking only
26. Auths: fix cyrus-sasl driver for gssapi use
27. GnuTLS: fix hanging callout connections
Notes:
svn path=/head/; revision=527168
|
|
|
|
|
|
|
|
| |
- typedef unsigned long ulong;
- USE_XORG+= xext,xmu
Notes:
svn path=/head/; revision=526980
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- bump PORTREVISION for radius users only
- allow to build with net/freeradius-client instead of abandonware net/radiusclient-ng
- Do not invoke printf-like function without parameter in call_radius.c
With exim 4.93, string_sprintf() requires at least two arguments
- take maintainership, discussed with vsevolod@ via private mail
PR: 244287, 244299
Reported by: pi, Victor Sudakov
Approved by: maintainer
Notes:
svn path=/head/; revision=526974
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Unbreak build for exim-sa-exim slave port (${FILESDIR} misusage)
Incorporate some patches from Debian:
1) api-limitations.patch:
Exim now exports only the symbols that are part of the official API
2) remove-header-crs.patch:
Delete carriage returns from header lines.
When spamd gets a message with CRLF line endings, which it will when the spool file is in wire format, it will return a message with CRLF line endings, including the header. We will need to strip out the CRs.
3)spamc-args.patch:
Changes related to the arguments sent to spamc, namely that we don't pass -d (SAspamcHost), -p (SAspamcPort), or -U (SAspamcSockPath) if those options aren't set, as well as the new parameter -u (SAspamcUser).
4)sprintf_no_format_string.diff:
Do not invoke printf-like function without parameter.
With exim 4.93, string_sprintf() requires at least two arguments
PR: 244223
Submitted by: fluffy
Approved by: maintainer, implicit
Notes:
svn path=/head/; revision=526957
|
|
|
|
|
|
|
|
| |
PR: 242518
Reported by: VVD <vvd at unislabs.com>
Notes:
svn path=/head/; revision=526471
|
|
|
|
|
|
|
| |
Announce link: https://lists.exim.org/lurker/message/20191208.213349.3407a963.en.html
Notes:
svn path=/head/; revision=526373
|
|
|
|
|
|
|
|
| |
Reported by: ler (self)
Approved by: vsevolod (maintainer, private mail)
Notes:
svn path=/head/; revision=495360
|
|
|
|
|
|
|
|
|
|
| |
- Bump revision
PR: 235705
Submitted by: Henry David Bartholomew <PopularMoment at protonmail.com>
Notes:
svn path=/head/; revision=492912
|
|
|
|
|
|
|
|
| |
PR: 235678 [1]
Submitted by: pi [1], ler (via private email)
Notes:
svn path=/head/; revision=492772
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
After a discussion on the mailing list on moving manpages to
${PREFIX}/share/man for consistency with base where it is
installed in usr/share/man, it appeared the same should happen
to GNU info files which were installed under share in base and
not in ports.
Now texinfo is not in base on any of the supported version of FreeBSD
it is possible to proceed to this move and it is easier to do than
the manpage change.
Other benefit than consistency are less patching: all build tools but
cmake are expecting info files to be under share/info and cmake (patched here)
was having an exception for BSD so the patch makes FreeBSD case less
specific for them
Bump revision of all impacted ports
PR: 232907
exp-run by: antoine
Differential Revision: https://reviews.freebsd.org/D17816
Notes:
svn path=/head/; revision=484628
|
|
|
|
|
|
|
|
| |
PR: 230826, 230756
Approved by: portmgr
Notes:
svn path=/head/; revision=478103
|
|
|
|
|
|
|
|
|
|
|
| |
- Fix build with no OSCP support (ported from upstream) [1]
- Fix Dane support [2]
- Silence compile warnings caused by Exim code style
Reported by: ler [1], Max Kostikov [2] via private email
Notes:
svn path=/head/; revision=467585
|
|
|
|
|
|
|
|
| |
MFH: 2017Q4
Security: 75dd622c-d5fd-11e7-b9fe-c13eb7bcbf4f
Notes:
svn path=/head/; revision=455220
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89
allows remote attackers to execute arbitrary code or cause a denial of service
(use-after-free) via vectors involving BDAT commands.
PR: 223870
Submitted by: Gary
MFH: 2017Q4
Security: CVE-2017-16943
Notes:
svn path=/head/; revision=454936
|
|
|
|
|
|
|
|
|
|
| |
- Fix build with custom mysql library
PR: 221533 [1]
Submitted by: vvd at unislabs.com [1]
Notes:
svn path=/head/; revision=448008
|
|
|
|
|
|
|
| |
MFH: 2017Q2
Notes:
svn path=/head/; revision=444082
|
|
|
|
| |
Notes:
svn path=/head/; revision=435696
|
|
|
|
|
|
|
|
|
|
| |
- Bump revision
PR: 216966
Submitted by: kib
Notes:
svn path=/head/; revision=434160
|
|
|
|
|
|
|
|
|
|
|
| |
- Add experimental LMDB lookup option
- Add experimental queuefile option
- Remove rspamd pacth which is now included in Exim
Changes: ftp://ftp.exim.org/pub/exim/exim4/NewStuff
Notes:
svn path=/head/; revision=430351
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Enable recommended default options
- Rename no longer experimental options
- Add rspamd shutdown patch
Exim 4.87 announce link:
https://lists.exim.org/lurker/message/20160406.181048.292a54e9.en.html
Notes:
svn path=/head/; revision=413740
|
|
|
|
|
|
|
| |
[1]: https://bugs.exim.org/show_bug.cgi?id=1671
Notes:
svn path=/head/; revision=395319
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Add experimental INTERNATIONAL option
- Add experimental SOCKS option
- Removed rspamd extra patch (included by default now)
- Removed xclient patch (broken and not used)
Relnotes: ftp://ftp.exim.org/pub/exim/exim4/NewStuff [1]
Notes:
svn path=/head/; revision=393028
|
|
|
|
|
|
|
|
| |
With hat: portmgr
Sponsored by: Absolight
Notes:
svn path=/head/; revision=387082
|
|
|
|
|
|
|
|
|
|
| |
- Remove obsoleted POST-INSTALL note [2]
- Bump revision since options have been changed
Submitted by: swappers at gmail.com [1], pi@ [2]
Notes:
svn path=/head/; revision=377174
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Add DANE experimental support
- Add EVENT experimental support
- Drop SRS_ALT option as exim cannot work with libsrs2 so srs_alt is the only option now
- Polish IGNORE messages
- Remove already included patch
- Update documentation slave ports
The ChangeLog/NewStuff/README.UPDATING can be reviewed at:
http://git.exim.org/exim.git/blob/exim-4_85:/doc/doc-txt/ChangeLog
http://git.exim.org/exim.git/blob/exim-4_85:/doc/doc-txt/NewStuff
http://git.exim.org/exim.git/blob/exim-4_85:/src/README.UPDATING
Notes:
svn path=/head/; revision=376931
|
|
|
|
|
|
|
| |
Obtained from: exim git and Victor Ustugov adopted patch
Notes:
svn path=/head/; revision=372527
|
|
|
|
| |
Notes:
svn path=/head/; revision=372149
|
|
|
|
|
|
|
|
|
|
|
| |
This is a bugfix only release of exim. The most important fix was introduced in the
ports by local patch which is not needed now.
PR: 192625
Submitted by: pi
Notes:
svn path=/head/; revision=364779
|
|
|
|
|
|
|
|
|
|
|
| |
- Remove SA_1024 as it has been adandoned long ago [1]
- Fix message in post-install stage [1]
- Bump revision
Submitted by: Victor Ustugov via jabber [1]
Notes:
svn path=/head/; revision=363709
|
|
|
|
|
|
|
| |
'__' instead.
Notes:
svn path=/head/; revision=363362
|