20:54 Dima Panov (fluffy) 

mail/opensmtpd: update to 7.3.0p2

PR:	272047
Release Notes:	https://github.com/OpenSMTPD/OpenSMTPD/releases/tag/7.3.0p0
		https://github.com/OpenSMTPD/OpenSMTPD/releases/tag/7.3.0p1
		https://github.com/OpenSMTPD/OpenSMTPD/releases/tag/7.3.0p2

    9b69195

16:31 fluffy 

mail/opensmtpd: update to 6.8.0p2 portable release

 

03:55 fluffy 

mail/opensmtpd: update to 6.7.1p1 portable release

- fixes a packaging issue causing asr.h to be installed in target system
- fixes a possible crash in the MTA when establishing IPv6 connections

 

16:14 fluffy 

mail/opensmtpd: update to 6.7.0p1 portable release

Changes in this release:
========================

New Features:

- Allowed use of the smtpd(8) session username in built-in filters when
available.
- Introduced a bypass keyword to smtpd(8) so that built-in filters can bypass
processing when a condition is met.
- Allowed use of 'auth' as an origin in smtpd.conf(5).
- Allowed use of mail-from and rctp-to as for and from parameters in
smtpd.conf(5).

Bug fixes:

- Ensured legacy ssl(8) session ID is persistent during a client TLS session,
fixing an issue using TLSv1.3 with smtp.mail.yahoo.com.
- Fixed security vulnerabilities in smtpd(8). Corrected an out-of-bounds read in
smtpd allowing an attacker to inject arbitrary commands into the envelope file
to be executed as root, and ensured privilege revocation in smtpctl(8) to
prevent arbitrary commands from being run with the _smtpq group.
- Allowed mail.local(8) to be run as non-root, opening a pipe to lockspool(1)
for file locking.
- Fixed a security vulnerability in smtpd(8) which could lead to a privilege
escalation on mbox deliveries and unprivileged code execution on lmtp
deliveries.
- Added support for CIDR in a: spf atoms in smtpd(8).
- Fixed a possible crash in smtpd(8) when combining "from rdns" with nested
virtual aliases under a particular configuration.

 

18:36 fluffy 

mail/opensmtpd: update to 6.6.4p1 security releaase

SECURITY RELEASE

An out of bounds read in smtpd allows an attacker to inject arbitrary commands
into the envelope file which are then executed as root. Separately, missing
privilege revocation in smtpctl allows arbitrary commands to be run with the
_smtpq group.

MFH:		2020Q1

 

15:32 fluffy 

mail/opensmtpd: update to 6.6.3p1 release

- switch default configuration to maildir
- allow mbox to deliver to users without requiring privileges in the daemon
- allow lmtp to receive sender/recipient in environment

MFH:		2020Q1

 

02:55 fluffy 

mil/opensmtpd: update to 6.6.2p1 relase

This update addressed LPE and RCE vulnerabilities in OpenSMTPD (CVE-2020-7247)
https://www.openwall.com/lists/oss-security/2020/01/28/3

This vulnerability is exploitable since May 2018 (commit a8e222352f, "switch
smtpd to new grammar") and allows an attacker to execute arbitrary shell
commands, as root:

- either locally, in OpenSMTPD's default configuration (which listens on
  the loopback interface and only accepts mail from localhost);

- or locally and remotely, in OpenSMTPD's "uncommented" default
  configuration (which listens on all interfaces and accepts external
  mail).

PR:		243686
Reported by:	authors via irc
MFH:		2020Q1
Relnotes:	https://www.mail-archive.com/misc@opensmtpd.org/msg04850.html

 

12:59 fluffy 

- Update OpenSMTPd to 6.6.1p1 portable release

 

16:24 fluffy 

- Update OpenSMTPd to 6.6.0 portable release
    This release builds with LibreSSL > 3.0.2 or OpenSSL > 1.1.0.
    FreeBSD 11.x users should update to 12.x/13.x or switch system-wide
    default ssl library to openssl111/libressl

- Update -extras to 6.4.0 release
    Filters still missing, corresponded ports temporary markes
    as IGNORED

PR:		213442,228937
MFH:		2019Q4

 

07:15 brnrd 

mail/opensmtpd: Update to 5.9.2

  - Update to 5.9.2p1
  - Remove usernamelen patch (default 255+1)
  - Fix renamed configure args
  - Add symlink for makemap (now included in smtpctl)
  - Align versioning with other OpenBSD projects
  - Add _smtpq group
  - Add UPDATING entry for existing installs
  - Update pkg-message for existing installs

Reviewed by:	adamw, mat
Approved by:	adamw, maintainer (implicit)
Differential Revision: D6421

 

15:36 gahr 

mail/opensmtpd: update to 5.7.3p2

Details at https://github.com/OpenSMTPD/OpenSMTPD/issues/650

While at it, remove a stale patch that isn't applicable anymore. Upstream
implements this logic already, and the patch doesn't actually patch anything.

PR:				206816
Submitted by:	sa.inbox@gmail.com
Approved by:	portmgr@

 

03:20 junovitch 

mail/opensmtpd: update 5.7.1 -> 5.7.3

Changes:	https://www.opensmtpd.org/announces/release-5.7.2.txt
Changes:	https://www.opensmtpd.org/announces/release-5.7.3.txt

Approved by:	ashish (maintainer, implicit from AFK notice)
Security:	42852f72-6bd3-11e5-9909-002590263bf5
Security:	ee7bdf7f-11bb-4eea-b054-c692ab848c20
Security:	CVE-2015-7687
MFH:		2015Q4

 

15:53 ashish 

- Update to 5.7.1p1
- Add TABLE_DB option to add support for aliases db
- Sort options in alphabetical order

PR:		201241
Submitted by:	brnrd

 

02:12 ashish 

- Update to 5.4.6

Changes:		http://article.gmane.org/gmane.mail.opensmtpd.general/2759

 

02:42 ashish 

- Update to 5.4.5p1
- Remove OPTIONS for the features unsupported upstream: SQLITE, MYSQL,
  LDAP, PGSQL, and REDIS
- Add workaround to prevent unnecessary dependency on autotools, due
  to problem with tarball
- Add note to UPDATING about the removal of OPTIONS

 

19:04 ashish 

OpenSMTPD port updates

mail/opensmtpd:
 - Update to 5.4.4p1
 - Add LIBASRDEVEL option to depend on dns/libasr-devel
 - Use OpenSSL from ports, should help with migration to LibreSSL
 - Explicitly provide path to OpenSSL[1]

mail/opensmtpd-devel:
 - Update to 201502012312
 - Add LIBASR option to depend on dns/libasr
 - Remove MYSQL, PGSQL, LDAP, and REDIS options as they're removed
   upstream
 - Add a note for above to UPDATING
 - Explicitly provide path to OpenSSL[1]
 - Add a diff to fix build failure on FreeBSD[2]

Reported by:	TJ <tj at mrsk.me> (via private email)
Submitted by:	Herbert J. Skuhra <herbert at oslo.ath.cx> (via list)

 

09:52 ashish 

- Update to 5.4.2p1
- Add OPTIONS for CA bundle, and Redis support
- Switch to OptionsNG helpers
- Remove _smtpf user (not used anymore)

Changes:	http://article.gmane.org/gmane.mail.opensmtpd.general/1415

 

17:14 ashish 

- Update to 5.4.1p1
- Update LICENSE information
- Add OPTIONS for SQLITE, MYSQL, PGSQL, and LDAP
- Add STAGE support
- Add a note to UPDATING about change in configuration

Changes:		http://article.gmane.org/gmane.mail.opensmtpd.general/1146

 

03:39 ashish 

- Update to 5.3.3p1
- Remove unneeded dependency on databases/sqlite3
- Use a cleaner way to pass configuration directory[1]

PR:		ports/179364[1]
Submitted by:	Emmanuel Vadot <elbarto at bocal.org>[1]
Changes:	http://article.gmane.org/gmane.mail.opensmtpd.general/630

 

21:54 ashish 

- Update to 5.3.2p1

Changes:		http://article.gmane.org/gmane.mail.opensmtpd.general/561

 

17:35 ashish 

- Update to 5.3.1p1
- Use CONFLICTS_INSTALL, instead of CONFLICTS[1]

Changes:	http://article.gmane.org/gmane.mail.opensmtpd.general/469
Reported by:	Vincent Gross <dermiste at kilob.yt>

 

14:58 ashish 

- Update to 5.3p1
- Bump PORTEPOCH
- Add additional USERS for privilege separation
- Add instructions for fixing permissions in pkg-message
- Add a note about privilege separation to UPDATING file

Changes:		http://article.gmane.org/gmane.mail.opensmtpd.general/446

 

02:50 ashish 

- Update to latest snapshot 201303011853
- Add option for PAM support

Changes:		http://article.gmane.org/gmane.mail.opensmtpd.general/435

 

11:45 ashish 

- Update to latest snapshot 201302212015p1

Changes:	http://article.gmane.org/gmane.mail.opensmtpd.general/405

 

07:19 ashish 

- Update to latest snapshot 201302152354

Changes:	http://thread.gmane.org/gmane.mail.opensmtpd.general/401

 

14:31 ashish 

- Update to latest snapshot 201302141353

Changes:	http://article.gmane.org/gmane.mail.opensmtpd.general/394

 

16:10 ashish 

- Update to latest snapshot 201302051638

 

20:30 ashish 

- Update to latest snapshot 201301312105

 

22:39 ashish 

- Update to latest snapshot 201301281310

 

00:44 ashish 

- Update to latest snapshot 201301191220
- Add a note to UPDATING about flushing queue before update

Changes:	http://thread.gmane.org/gmane.mail.opensmtpd.general/341

 

14:37 ashish 

- Update to latest snapshot 201301111154

Previous version committed few minutes ago was not latest, an error on my
part.

 

14:26 ashish 

- Update to latest snapshot 201301050937

 

13:25 ashish 

- Update to latest snapshot 201212222206
- Add dependency on databases/sqlite3
- Remove ABI version from LIB_DEPENDS
- Document the configuration change in UPDATING

 

08:01 ashish 

- Update to latest snapshot 201210090136

 

18:15 ashish 

- Update to latest snapshot 201209190752

 

17:18 ashish 

- Update to latest snapshot 201208192045

07:26 ashish 

- Update to latest snapshot 201207311144
- Fix rc.d script

PR:		ports/170577
Submitted by:	Artis Caune <Artis.Caune at gmail.com>

12:14 ashish 

- Update to latest snapshot 201207281129

14:50 ashish 

- Update to latest snapshot 201207111000

16:16 ashish 

- Update to latest snapshot 201206212223

22:34 ashish 

- Update to latest snapshot 201206161848
- Remove a patch, accepted by upstream

13:55 ashish 

- Update to latest snapshot 201205220027

13:12 ashish 

OpenSMTPD is a FREE implementation of the server-side SMTP protocol as
defined by RFC 5321, with some additional standard extensions. It
allows ordinary machines to exchange e-mails with other systems
speaking the SMTP protocol.

WWW:    http://www.OpenSMTPD.org/