Commit Graph

437 Commits

Author SHA1 Message Date
Dima Panov 3fee612ec9 mail/exim: import exim-4.94+fixes branch as state of 2020.11.25
Used git diffs:

[38/42] GnuTLS: clear errno before any data i/o op, so error logging does not see stale values
[39/42] Fix non-TLS build
[40/42] eximon: fix FreeBSD build
[41/42] LDAP: fix taint-check in server list walk. Bug 2646
[42/42] Pass authenticator pubname through spool. Bug 2648

Also patch files/150.exim-tidydb to prevent its output when daily_show_success=NO. [1]

Submitted by:	Dmitry Selivanov <sd@rlan.ru> via email [1]
MFH:		2020Q3
2020-11-25 12:36:05 +00:00
Jan Beich 6d5d6429d5 devel/icu: update to 68.1
Changes:	http://site.icu-project.org/download/68
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
Reported by:	GitHub (watch releases)
2020-11-03 00:56:26 +00:00
Dima Panov 6d61cf0e62 mail/exim: import exim-4.94+fixes branch as state of 2020.09.09
Used git diffs:

[27/37] Fix spelling of local_part_data in docs and debug output
[27/37] Fix spelling of local_part_data in docs and debug output
[28/37] Fix ${readsocket } eol-replacement.  Bug 2630
[29/37] Taint: fix off-by-one in is_tainted().  Bug 2634
[30/37] Build: ifdef guard for EXPERIMENTAL_QUEUEFILE
[31/37] Taint: fix off-by-one in is_tainted().  Bug 2634
[32/37] DANE: force SNI to use $domain.  Bug 2265
[33/37] DANE: Fix 2-rcpt message, diff domins case.  Bug 2265
[34/37] Fix non-DANE build
[35/37] DANE: Fix 2 messages from queue case
[36/37] Fix non-DANE build

While here, make SPF option turned on by default

MFH:		2020Q3
2020-09-09 12:09:34 +00:00
Dima Panov 704f6e9e4f mail/exim: import exim-4.94+fixes branch as state of 2020.07.17
Used git diffs:

[02/26] Taint: fix pam expansion condition.  Bug 2587
[03/26] Taint: fix listcount expansion operator.  Bug 2586
[04/26] Docs: fix mistaken variable name
[06/26] Docs: typoes
[07/26] Taint: fix multiple ACL actions to properly manage tainted argument data
[08/26] Fix -bi.  Bug 2590
[09/26] Filters: fix "vacation" in Exim filter.  Bug 2593
[10/26] TLS: use RFC 6125 rules for certifucate name checks when CNAMES are present. Bug 2594
[11/26] Taint: fix radius expansion condition
[13/26] Taint: fix verify.  Bug 2598
[14/26] Fix string_copy() macro to not multiple-eval args. Bug 2603
[15/26] Cutthrough: handle request when a callout-hold is active.  Bug 2604
[16/26] Lookups: Fix "subdir" filter on a dsearch.
[18/26] Sqlite: fix segfault on bad/missing sqlite_dbfile.  Bug 2606
[19/26] Taint: fix ACL "spam" condition, to permit tainted name arguments.
[20/26] Fix message-reception clock usage.  Bug 2615
[21/26] typoes
[22/26] Fix DKIM signing to always ;-terminate.  Bug 2295
[23/26] Fix taint trap in parse_fix_phrase().  Bug 2617
[24/26] Taint: fix ACL "spam" condition, to permit tainted name arguments
[25/26] Fix debug_print_socket()
[26/26] debug_print_socket(): output formatting

MFH:		2020Q3
2020-07-17 09:46:00 +00:00
Dima Panov 8093a9238e mail/exim: update to 4.94 release
while here, convert POST-INSTALL-NOTES* to ucl

PR:		246922
Submitted by:	pi
MFH:		2020Q2
2020-06-02 04:19:49 +00:00
Dima Panov ce65a198ae mail/exim: unbreak build with only LMDB database backend enabled
PR:		237361
Reported by:	tobik
MFH:		2020Q2
2020-04-27 10:59:13 +00:00
Dima Panov 9f938c1f18 mail/exim: sort order to apply extra patches
Pointy hat to:	fluffy
2020-02-26 14:25:30 +00:00
Dima Panov 48f0116002 mail/exim: attempt to fix *taint* and auth issues
Bump PORTREVISION for master port to force all slaves rebuild
Drop PORTREVISION for exim-postgresql slave in favor of master settings

Adopt recent commits from Exim repo as numerated extra-patches till new maintenance release will be published:

19. SPF: fix result for case of only non-spf TXT RRs
20. Fix error logging for dynamically-loaded modules
21. heimdal auth: fix the increase of big_buffer size
22. Taint: hybrid checking mode
23. Fix taint hybrid-checking on BSD
24. TFO: even in binary built for modern Linux, handle error returned by old Linux kernel
25. Taint: slow-mode checking only
26. Auths: fix cyrus-sasl driver for gssapi use
27. GnuTLS: fix hanging callout connections
2020-02-26 13:46:15 +00:00
Dima Panov 0e69ea3cec mail/exim: update to 4.93.0.4 maintenance release
This release is addressed to fix many of *taint* issues

PR:		244322
Reported by:	ler
2020-02-25 09:17:15 +00:00
Dima Panov 424daff729 mail/exim: unbreak EXIMON option and mail/exim/monitor slave port
- typedef unsigned long ulong;
- USE_XORG+= xext,xmu
2020-02-24 16:01:25 +00:00
Dima Panov f9f08df899 mail/exim: unbreak with AUTH_RADIUS
- bump PORTREVISION for radius users only
- allow to build with net/freeradius-client instead of abandonware net/radiusclient-ng
- Do not invoke printf-like function without parameter in call_radius.c
With exim 4.93, string_sprintf() requires at least two arguments
- take maintainership, discussed with vsevolod@ via private mail

PR:		244287, 244299
Reported by:	pi, Victor Sudakov
Approved by:	maintainer
2020-02-24 15:32:55 +00:00
Dima Panov cffd68eed3 mail/exim: update sa-exim plugin to 4.2.1
Unbreak build for exim-sa-exim slave port (${FILESDIR} misusage)

Incorporate some patches from Debian:

1) api-limitations.patch:
Exim now exports only the symbols that are part of the official API

2) remove-header-crs.patch:
Delete carriage returns from header lines.
When spamd gets a message with CRLF line endings, which it will when the spool file is in wire format, it will return a message with CRLF line endings, including the header. We will need to strip out the CRs.

3)spamc-args.patch:
Changes related to the arguments sent to spamc, namely that we don't pass -d (SAspamcHost), -p (SAspamcPort), or -U (SAspamcSockPath) if those options aren't set, as well as the new parameter -u (SAspamcUser).

4)sprintf_no_format_string.diff:
Do not invoke printf-like function without parameter.
With exim 4.93, string_sprintf() requires at least two arguments

PR:		244223
Submitted by:	fluffy
Approved by:	maintainer, implicit
2020-02-24 08:43:46 +00:00
Piotr Kubaj 0e255c02cd mail/exim: fix build of various slave ports on GCC architectures
Error:
macro_predef.c:83: error: 'for' loop initial declaration used outside C99 mode
2020-02-22 14:28:01 +00:00
Vsevolod Stakhov 5c8f61065e - Forgot ${FILESDIR} for EXTRA_PATCHES 2020-02-22 09:45:43 +00:00
Vsevolod Stakhov a459454401 - Fix build for SA_EXIM option
PR:		242518
Reported by:	VVD <vvd at unislabs.com>
2020-02-18 19:09:10 +00:00
Vsevolod Stakhov 521fa53036 - Fix build with no DANE
Reported by:	Alexander Sheiko <adsh at univ.kiev.ua> via email
2020-02-18 18:54:51 +00:00
Vsevolod Stakhov 477c24b2bf - Update to 4.93
Announce link: https://lists.exim.org/lurker/message/20191208.213349.3407a963.en.html
2020-02-17 13:58:43 +00:00
Tobias Kortkamp 581cac9416 Move remaining USE_MYSQL, WANT_MYSQL_VER to USES=mysql 2019-11-15 10:12:08 +00:00
Niclas Zeising 7ad72d866d Add USES=xorg USES=gl, ports categories l and m
Add USES=xorg and USES=gl to ports in categories starting with 'l' and 'm'.
While here, try to sprinkle other USES (mostly gnome and sdl) as needed.
2019-11-06 18:09:44 +00:00
Baptiste Daroussin 0be2ce42f1 Drop the ipv6 virtual category for m* category as it is not relevant anymore 2019-10-09 12:06:22 +00:00
Vsevolod Stakhov 7dcea01572 - Update to 4.92.3 to fix CVE-2019-16928
PR:		240912
Submitted by:	pi
MFH:		2019Q3
Security:	e917caba-e291-11e9-89f1-152fed202bb7
2019-09-29 08:33:28 +00:00
Vsevolod Stakhov 02937f0380 - Fix just another awful RCE in Exim: CVE-2019-15846
PR:		240362
Submitted by:	Pascal Christen <pascal.christen hostpoint.ch>
MFH:		2019Q3
2019-09-06 10:26:49 +00:00
Mathieu Arnold 558224994b onvert to UCL & cleanup pkg-message (categories l-m) 2019-08-13 22:29:42 +00:00
Vsevolod Stakhov ad80d40a95 - Update to 4.92.1 to fix CVE-2019-13917
PR:		239441
Submitted by:	Pascal Christen <pascal.christen at hostpoint.ch>
MFH:		2019Q3
2019-07-25 11:20:25 +00:00
Kubilay Kocak 79b86f5aec mail/exim: Fix build (linker) flags
"-export-dynamic" in EXIM_DYNAMIC_LDFLAGS is a linker option, currently
producing a warning during build:

/usr/bin/ld: warning: cannot find entry symbol xport-dynamic; defaulting to 00000000004019c0

The only reason that plugin modules work is that the option is redundant
with -rdynamic.

This change makes the minimum necessary change not relying on linker
argument compatibility (- vs --).

PR:		236426
Submitted by:	<andrew tao11 riddles org uk>
Approved by:	portmgr (maintainer timeout: ~6 weeks, "just fix it")
MFH:		2019Q2
2019-04-21 12:27:01 +00:00
Tobias Kortkamp ed41ef978a mail/exim: Rename LMDB_LIBS to _LMDB_LIBS
It otherwise looks like an options helper that appears after
bsd.port.options.mk which will be flagged as a DEV_ERROR after
D19553.  Rename LMDB_INCLUDES too for consistency.
2019-04-18 14:12:33 +00:00
Yuri Victorovich 2f31716e5c dns/libidn: Update to 1.35
Bump 48 ports.
Previous update to 1.34 broke jabberd.

PR:		228048
2019-04-02 03:35:54 +00:00
Larry Rosenman 0ec0fdfd5d mail/exim: add missing colon on I=
Reported by:	ler (self)
Approved by:	vsevolod (maintainer, private mail)
2019-03-11 16:26:23 +00:00
Vsevolod Stakhov 521ee6ce48 - Unbreak SA_EXIM option
- Bump revision

PR:	235705
Submitted by:	Henry David Bartholomew <PopularMoment at protonmail.com>
2019-02-14 10:49:34 +00:00
Vsevolod Stakhov eeb619fe01 - Update Exim to 4.92
PR:		235678 [1]
Submitted by:	pi [1], ler (via private email)
2019-02-12 10:46:10 +00:00
Baptiste Daroussin 7990f81066 Install texinfo files (GNU info) into ${PREFIX}/share/info
After a discussion on the mailing list on moving manpages to
${PREFIX}/share/man for consistency with base where it is
installed in usr/share/man, it appeared the same should happen
to GNU info files which were installed under share in base and
not in ports.

Now texinfo is not in base on any of the supported version of FreeBSD
it is possible to proceed to this move and it is easier to do than
the manpage change.

Other benefit than consistency are less patching: all build tools but
cmake are expecting info files to be under share/info and cmake (patched here)
was having an exception for BSD so the patch makes FreeBSD case less
specific for them

Bump revision of all impacted ports

PR:		232907
exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D17816
2018-11-10 18:12:57 +00:00
Mark Linimon 4272c8683f Conditionalize EXIM_WARN_FLAGS on clang to fix build on gcc-based
archs such as powerpc64.

Tested for no change on amd64.

Approved by:	portmgr (tier-2 blanket)
2018-09-18 08:58:46 +00:00
Xin LI 7232456d14 mail/exim: Stop using arc4random_stir.
PR:		230826, 230756
Approved by:	portmgr
2018-08-26 07:45:55 +00:00
Vsevolod Stakhov 8d16b09148 Various fixes for the Exim port
- Fix build with no OSCP support (ported from upstream) [1]
- Fix Dane support [2]
- Silence compile warnings caused by Exim code style

Reported by:	ler [1], Max Kostikov [2] via private email
2018-04-17 09:32:06 +00:00
Vsevolod Stakhov e34d2b1619 Fix SPF support, add experimental ARC option
Reported by:	pi via email
2018-04-16 17:03:19 +00:00
Vsevolod Stakhov 54e83cc506 Update Exim to version 4.91 2018-04-16 16:14:59 +00:00
Vsevolod Stakhov aea600aebb - Update to 4.90.1
MFH:		2018Q1
Security:	316b3c3e-0e98-11e8-8d41-97657151f8c2
2018-02-10 19:33:10 +00:00
Vsevolod Stakhov 65514e6bab - Update to 4.90
PR:		224539
Submitted by:	pi
2017-12-23 18:35:41 +00:00
Vsevolod Stakhov 502758a841 - Update to 4.89.1
MFH:		2017Q4
Security:	75dd622c-d5fd-11e7-b9fe-c13eb7bcbf4f
2017-11-30 18:48:13 +00:00
Vsevolod Stakhov cf5a1dbd3f - Fix RCE vulnerability:
The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89
allows remote attackers to execute arbitrary code or cause a denial of service
(use-after-free) via vectors involving BDAT commands.

PR:		223870
Submitted by:	Gary
MFH:		2017Q4
Security:	CVE-2017-16943
2017-11-27 07:55:17 +00:00
Vsevolod Stakhov 4bc25af896 - Fix finding of mariadb headers [1]
- Fix build with custom mysql library

PR:		221533 [1]
Submitted by:	vvd at unislabs.com [1]
2017-08-15 20:42:40 +00:00
Vsevolod Stakhov 6f53fc6ef1 - Add workaround for CVE-2017-1000369
MFH:		2017Q2
2017-06-21 22:17:34 +00:00
Vsevolod Stakhov aa643749c7 - Update to 4.89 2017-03-08 16:46:06 +00:00
Vsevolod Stakhov b66dc913d6 - Fix build after r313495
- Bump revision

PR:		216966
Submitted by:	kib
2017-02-15 12:39:53 +00:00
Vsevolod Stakhov b67c11452c - Remove obsoleted OLD_DEMIME option
- Enable CONTENT_SCAN by default to compensate OLD_DEMIME removal

PR:		215871
Submitted by:	Mark Hills mark-freebsd at xwax.org
2017-01-16 13:03:27 +00:00
Dmitry Marakasov 9d79e7b146 - Remove always-true/false conditions after FreeBSD 9, 10.1, 10.2 EOL
Approved by:	portmgr blanket
2017-01-09 13:16:49 +00:00
Vsevolod Stakhov 2149bdc512 - Update to version 4.88
- Add experimental LMDB lookup option
- Add experimental queuefile option
- Remove rspamd pacth which is now included in Exim

Changes: ftp://ftp.exim.org/pub/exim/exim4/NewStuff
2017-01-02 11:57:25 +00:00
Vsevolod Stakhov 59eeaf62af - Update to 4.87.1 (security release)
- Fix subdirs to allow download of the distfiles

MFH:		2016Q4
Security:	CVE-2016-9963
2016-12-25 14:02:11 +00:00
Mathieu Arnold f037e39601 USE_BDB cleanup.
- USE_BDB=4x+ -> USES=bdb.
- USE_BDB=yes -> USES=bdb.
- USE_BDB=xx  -> USES=bdb:xx.

Other modernisations when I see them.

PR:		209183
Sponsored by:	Absolight
2016-08-08 13:46:50 +00:00
Mathieu Arnold 21bc5c0345 Remove USE_SQLITE from bsd.databases.mk, replaced by USES=sqlite.
While there replace USE_SQLITE=x by USES=sqlite:x.

PR:		208971
Submitted by:	mat
Exp-run by:	antoine
With hat:	portmgr
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D5951
2016-04-25 16:13:38 +00:00