amavisd-new 2.6.1,1 security =148

Performance-enhanced daemonized version of amavis-perl
Maintained by: gabor@FreeBSD.org
Port Added: 13 Jun 2002 15:50:35

---

---

amavisd-new is a performance-enhanced daemonized version of amavis-perl 

Note that the installation is different than the original package, and the
integration into your MTA can be different, so please read the README and
INSTALL files very carefully. 

amavisd-new also supports SpamAssassin integration.

WWW: http://www.ijs.si/software/amavisd/

CVSWeb : Sources : Main Web Site : Distfiles Availability : PortsMon

---

Required To Run: sysutils/p5-Unix-Syslog, mail/p5-MIME-Tools, converters/p5-MIME-Base64, converters/p5-Convert-TNEF, converters/p5-Convert-UUlib, archivers/p5-Compress-Zlib, archivers/p5-Archive-Zip, security/p5-Digest-MD5, devel/p5-Time-HiRes, devel/p5-IO-stringy, net/p5-IO-INET6, net/p5-Net-Server, mail/p5-Mail-DKIM, databases/p5-BerkeleyDB, mail/p5-Mail-SpamAssassin, sysutils/file, archivers/unrar, archivers/arj, archivers/lha, archivers/arc, archivers/cabextract, archivers/rpm2cpio, archivers/zoo, archivers/lzop, archivers/freeze, archivers/p7zip, textproc/ripole, lang/perl5.8

---

To install the port: cd /usr/ports/security/amavisd-new/ && make install clean
To add the package: pkg_add -r amavisd-new

---

Configuration Options

===> The following configuration options are available for amavisd-new-2.6.1,1:
     BDB=on (default) "Use BerkeleyDB for nanny/cache/snmp"
     SQLITE=off (default) "Use SQLite for lookups"
     MYSQL=off (default) "Use MySQL for lookups/logging/quarantine"
     PGSQL=off (default) "Use PgSQL for lookups/logging/quarantine"
     LDAP=off (default) "Use LDAP for lookups"
     SASL=off (default) "Use SASL authentication"
     MILTER=on (default) "Sendmail milter support"
     SPAMASSASSIN=on (default) "Use mail/p5-Mail-SpamAssassin"
     P0F=off (default) "Passive operating system fingerprinting"
     ALTERMIME=off (default) "Use AlterMime for defanging/disclaimers"
     FILE=on (default) "Use newer file(1) utility from ports"
     RAR=off (default) "RAR support with archivers/rar"
     UNRAR=on (default) "RAR support with archivers/unrar"
     ARJ=on (default) "ARJ support with archivers/arj"
     UNARJ=off (default) "ARJ support with archivers/unarj"
     LHA=on (default) "LHA support with archivers/lha"
     ARC=on (default) "ARC support with archivers/arc"
     NOMARCH=off (default) "ARC support with archivers/nomarch"
     CAB=on (default) "CAB support with archivers/cabextract"
     RPM=on (default) "RPM support with archivers/rpm2cpio"
     ZOO=on (default) "ZOO support with archivers/zoo"
     UNZOO=off (default) "ZOO support with archivers/unzoo"
     LZOP=on (default) "LZOP support with archivers/lzop"
     FREEZE=on (default) "FREEZE support with archivers/freeze"
     P7ZIP=on (default) "P7ZIP support with archivers/p7zip"
     MSWORD=on (default) "Ms Word support with textproc/ripole"
     TNEF=off (default) "Add external tnef decoder converters/tnef"
===> Use 'make config' to modify these settings

---

Master Sites:

http://www.ijs.si/software/amavisd/

http://mirrors.catpipe.net/amavisd-new/

http://mirror.mainloop.se/amavisd/

ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/

• 2008-05-13

  Affects: users of security/amavisd-new

  Author: scheidell@secnap.net

  Reason: 
    Amavisd-new 2.6.0 introduces several incompatibilities with prior versions.
    If you are upgrading from 2.5.4 or earlier, you will need to update your
    SQL schema.  If you have third party programs that access SQL tables, you
    will need to update those also.
  
    COMPATIBILITY WITH 2.5.4
  
    - when using SQL for logging (e.g. for a pen pals feature) or for
      quarantining, SQL tables tables maddr, msgs, msgrcpt and quarantine need
      to be extended by a new field 'partition_tag';  see below for details;
  
    - when SQL logging (pen pals) or SQL lookups are used, one can choose a
      binary or a character data type for fields users.email, mailaddr.email,
      and maddr.email; now may be a good opportunity to change a data type
      to binary (string of bytes);  see below for details;
  
    - when using SQL for logging, a default for $sql_clause{'upd_msg'}
      has changed, so if a configuration file replaces this SQL clause
      by a non-default setting, it needs to be updated;
  
    Full information in /usr/local/share/doc/amavisd-new/RELEASE_NOTES
  
  



• 2006-05-26

  Affects: users of security/amavisd-new

  Author: gkovesdan@t-hosting.hu

  Reason: 
    The Clamav project recommended that security/clamav and security/clamav-devel
    should depend on archivers/unzoo instead of zoo, and on archivers/arj instead
    of unarj. Because the clamav and clamav-devel ports are used quite often with
    amavisd-new, this port was modified to depend on the same two archiver ports
    as well. The amavisd-new port automatically recognizes arj, but not unzoo, so
    ${PREFIX}/etc/amavisd.conf should be modified. This line should be changed:
  
  	  ['zoo',	\&do_zoo,	'zoo'],
    To this one:
  	  ['zoo',	\&do_zoo,	['zoo','unzoo'] ],
  
  

- Update to 2.6.1

PR:             ports/125368
Submitted by:   Helmut Schneider <jumper99@gmx.de>

Bump portrevision due to upgrade of devel/gettext.

The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).

PR:             ports/124340
Submitted by:   edwin@
Approved by:    portmgr (pav)

- Fix dependency and fix INDEX

Broken by:      gabor
Reported by:    erwin

- Update to 2.6.0 [1]
- Add Ms Word support via textproc/ripole

PR:             ports/123227 [1]
Submitted by:   Michael Scheidell <scheidell@secnap.net> [1]

- Update to 2.5.4

PR:             ports/121666
Submitted by:   garga

- Fix a typo in pkg-message

Submitted by:   miwi

- Update to 2.5.3

This is a maintainance release.
Release notes: http://www.ijs.si/software/amavisd/release-notes.txt

PR:             ports/118631 [1],
                ports/118732 [2]
Submitted by:   Olli Hauer <ohauer@gmx.de> [1],
                Michael Scheidell <scheidell@secnap.net> [2]

Welcome bsd.perl.mk.  Add support for constructs such as USE_PERL5=5.8.0+.
Drop support for antique perl.

Work done by:   gabor
Sponsored by:   Google Summer of Code 2007
Hat:            portmgr

- Make a dependency version more accurate. According to pkg_version(1)
  the current one is fine, but it is reported that portupgrade(1)
  has troubles with the current way.  No PORTREVISION bump, as it just blocked
  the upgrade, but we don't want to require people to rebuild again.

Reported by:    Aurelien Croc <aurelien@ap2c.org>

- Update to 2.5.2 [1]
- Don't try to install if WITH_RAR is selected and IA32 compatibility is not
  available [2]

PR:             ports/114084 [1], ports/113941 [2]
Submitted by:   garga [1], Michael Scheidell <scheidell@secnap.net> [2]

- Update to 2.5.1
- Dependency changes
- Require the fixed versions of zoo/unzoo, which are not vulnerable
- Add ramdisk support

PR:             ports/113396
Submitted by:   Michael Scheidell <scheidell@secnap.net>
Reviewed by:    Mark Martinec <Mark.Martinec@ijs.si> (author)

Fix packaging. No PORTREVISION bump, since it installs and deinstalls cleanly,
just does not package. Somehow tinderbox did not reflect this issue, but
pointyhat and local tests did.

Reported by:    Bryan Fullerton <bryanf@samurai.com>,
                pointyhat (via kris)
Approved by:    portmgr (linimon)

- Update to 2.5.0
- Add Altermime support
- Add P7Zip support

Release Notes:  http://www.ijs.si/software/amavisd/release-notes.txt

PR:             ports/112048
Submitted by:   Michael Scheidell <scheidell@secnap.net>

- Remove explicit -l from command line options of p0fanalyzer in the rc.d
  script and now amavis_p0f_daemon_flags defaults to -l, which was empty so far
- Bump PORTREVISION

Another round of the periodic sweep for removal of the
KEYWORD: FreeBSD scourge. We have ignored this keyword
for a long time now, so this is a non-functional change
(therefore no PORTREVISION bumps).

Insert a $FreeBSD tag where needed, and adjust a comment
in mail/milter-regex to match reality.

- Remove support for FreeBSD 4.x

Approved by:    erwin (mentor, implicit)

- Fix dependency [1]
- Turn on WITH_FILE at default
- Bump PORTREVISION

PR:             ports/108734 [1]
Reported by:    Attila Nagy <bra@fsn.hu> [1]
Submitted by:   Martin Matuska <martin@matuska.org> [1]
Approved by:    erwin (mentor)

- Update to 2.4.5

PR:             ports/108623
Submitted by:   Michael Scheidell <scheidell@secnap.net>
Approved by:    erwin (mentor)

Change my e-mail address.

Approved by:    erwin (mentor)

Correct path to Compress::Zlib.pm after recent p5-Compress-Zlib update.

- Update to 2.4.4
- Don't quote amavis_p0f_daemon_flags in the p0f rc.d script [1]
- Don't use -p option of daemon on 4.X since it doesn't have such [1]

Requested by:   Michael Scheidell <scheidell@secnap.net> [1]
PR:             105862
Submitted by:   gabor (maintainer)

Remove empty patch file.

Forgotten by:           erwin

Distfile was rerolled due to a minor bugfix. Update distinfo and bump
PORTREVISION

PR:             103895
Submitted by:   gabor (maintainer)
Reported by:    Henrik Schack <henrik@schack.dk>,
                Mark Martinec (author)

- Update to 2.4.3
- Remove NEW_MILTER from OPTIONS since it was a circular dependency
- Change description for SQLITE in OPTIONS since it is almost only
  useful for logging
- Change the order of p0f parameters in the rc.d script, because -l
  must be the last command line option [1]
- Add new option so that arguments can be passed to p0f-analyzer.pl
  as well not just for p0f

Submitted by:   Henrik Schack <henrik@schack.dk> [1],
                gabor (maintainer)

- Use the same naming scheme for p0fanalyzer rc.d script as used by milter
script
- Fix pkg-message to reflect the p0fanalyzer rc.d script behavior
- Don't hardcode the interface into p0fanalyzer rc.d script
- Respect amavis_p0fanalyzer_flags
- Bump PORTREVISION

PR:             103560
Submitted by:   gabor (maintainer)
Requested by:   Attila Nagy <bra at fsn dot hu>,
                Reto Burkhalter <reto dot burkhalter at basis06 dot com>

Really fix p0fanalyzer support this time.

Noticed by:     Henrik Schack <henrik@schack.dk>
Submitted by:   maintainer

Add a file missed in the last commit which:
- Add p0f (passive OS fingerprinting) to OPTIONS and an rc.d script for
p0fanalyzer

PR:             102944
Submitted by:   Gabor Kovesdan <gkovesdan@t-hosting.hu> (maintainer)
Noticed by:     Henrik Schack <henrik@schack.dk>

Big rework:
- Register some dependencies directly that were installed by another
dependencies before
- Add BerkeleyDB to OPTIONS for nanny/cache/snmp, it is not a mandatory
dependency any more
- Add SQLite to OPTIONS for lookups/logging/quarantine
- Add SASL to OPTIONS for authentication
- Add SpamAssassin to OPTIONS, it is not a mandatory dependency any more
- Add p0f (passive OS fingerprinting) to OPTIONS and an rc.d script for
p0fanalyzer
- Add file to OPTIONS to use ports' file(1) instead of system file(1)
- Add nomarch and cabextract to OPTIONS, they are not mandatory any more
- Provide some alternatives for archiver dependencies (rar/unrar, arj/unar,
etc.)
- Cleanup deprecated PLIST_SUB and pkg-plist entries
- Use reinplace editing instead of patches where possible
- Ensure that the config file is installed with proper attributes
- Add some p0f explanation to pkg-message
- Style

PR:             102944
Submitted by:   Gabor Kovesdan <gkovesdan@t-hosting.hu> (maintainer)

Fix typo in UNZOO option

PR:             101129
Submitted by:   gabor (maintainer)

- Fix a bug when using LMTP transfer
- Make some archiver support optionally

PR:             101071
Submitted by:   gabor (maintainer)

Update to 2.4.2

PR:             99785
Submitted by:   Gabor Kovesdan <gkovesdan@t-hosting.hu> (maintainer)

- Since clamav changed recently to depend of arj and unzoo instead of unarj
  and zoo, change amavisd-new to do the same and so, depend of the same
  archivers.

Submitted by:   maintainer via email

Replace stale MASTER_SITE with a good one.

PR:             ports/97552
Submitted by:   maintainer
Approved by:    tmclaugh (mentor)

- Update to 2.4.1
- Patch out a copy&paste typo in LDAP.schema

PR:             ports/97130
Submitted by:   maintainer (Gabor Kovesdan)

- Update to 2.4.0
- Substitute deprecated USE_RCORDER with USE_RC_SUBR
- Add some dependency that are necessary according to the documentation

PR:             ports/95349
Submitted by:   maintainer

Remove the FreeBSD KEYWORD from all rc.d scripts where it appears.
We have not checked for this KEYWORD for a long time now, so this
is a complete noop, and thus no PORTREVISION bump. Removing it at
this point is mostly for pedantic reasons, and partly to avoid
perpetuating this anachronism by copy and paste to future scripts.

SHA256ify

Approved by: krion@

Submitter takes maintainership.

PR:             ports/90154
Submitted by:   Gabor Kovesdan <gabor.kovesdan@t-hosting.hu>

- Create /var/amavis/var directory at install time [1]
- Install the amavisd-release script [2]
- Drop maintainership [3]

PR:             ports/89723 [1], ports/90047 [2]
Submitted by:   Mipam <root@relay3.ordina.nl> [1],
                Dave Smith <david.smith@omnieng.co.uk> [2],
                Blaz Zupan <blaz@si.FreeBSD.org> (maintainer, by private
                email) [3]

Add a check to see if WITH_MILTER is not set (and don't build milter
in that case).

PR:             ports/85834
Submitted by:   Vivek Khera <vivek@khera.org>
Approved by:    blaz@si.FreeBSD.org (maintainer)

Update amavisd-new to 2.3.3. [1]
Start amavisd as root so that it works both with and without chroot. [2]

PR:             ports/85241 [1], ports/83988 [2]
Submitted by:   Blaz Zupan (maintainer)

- fix installation of start script on 4.x

PR:             83604
Submitted by:   Blaz Zupan <blaz@si.FreeBSD.org>

- Update to 2.3.2.
- Use USE_RC_SUBR / USE_RCORDER for amavis.sh.
- Use SUB_FILES / SUB_LIST for pkg-* files.
- Add new MILTER option.
- Probably some other fixes I've forgot.

PR:             ports/82423
Reported by:    Petr Rehor <prehor@gmail.com>
Submitted by:   maintainer

- Fix libmilter detection.

PR:             ports/81392
Submitted by:   Henri Hennebert <hlh@ciger.be>
Approved by:    maintainer

- Update to 2.3.1

PR:             ports/81219
Submitted by:   Michael Scheidell <scheidell@secnap.net> via maintainer

- Update security/amavisd-new to 2.3.0.

PR:             80318
Submitted by:   Blaz Zupan <blaz@si.FreeBSD.org> (maintainer)

- correct the arguments of pw groupadd

Noticed by:     kris

- register UID:GID 110 for vscan

PR:             77366
Submitted by:   Scott Balmos <scott.balmos at utoledo.edu>
Approved by:    Blaz Zupan <blaz at si.FreeBSD.org>

- Update to 2.2.1

PR:             ports/75513
Submitted by:   Blaz Zupan <blaz@si.FreeBSD.org> (maintainer)

- Update to 2.2.0

PR:             ports/73441
Submitted by:   Blaz Zupan <blaz@si.FreeBSD.org> (maintainer)

Upgrade to 2.1.2.

PR:             ports/71907
Submitted by:   maintainer

Update to 2.1.1

PR:             ports/70933
Submitted by:   maintainer

Upgrade to 2.1.0.

PR:             ports/70526
Submitted by:   maintainer

- Don't pretend we support anything older than perl 5.8.2. Support for
  5.00503 was severly broken and amavisd-new author officially only supports
  5.8.2 and up. As an added bonus, this simplifies the makefile very much.
- Install a usable amavisd.conf if none exists
- On installation, remove amavisd.conf if it is equal to default one
- On installation, create /var/amavis/tmp, because the new amavisd.conf
  uses this directory to store temporary files
- Remove address extension options from the example configuration file.
  Neither sendmail nor postfix support address extensions on FreeBSD
  by default.

PR:             ports/70306
Submitted by:   maintainer

- update amavisd-new to 20040701
- add dependency on cabextract and rpm2cpio.pl
- add menu used to add required dependencies
  for MySQL, PostgreSQL and LDAP support
- add warning when running under perl version below 5.8.2
- remove taint checks when running perl 5.00503
- (hopefully) fix chroot support by running amavisd with -u
  instead of using "su"
- mention other virus scanners available in the ports collection
  in the startup message

PR:             ports/68732
Submitted by:   maintainer

update to 20030616.p9

PR:             65120
Submitted by:   Blaz Zupan <blaz.zupan@amis.net>

- fix dependencies for modules already included in perl 5.8 (PR 64374)
- remove dependency on Carp::Heavy module which is not available with
  stock FreeBSD 4.9 perl
- add official post -p8 buglet fixes which will be included in -p9
- add size information to distinfo
- bump portrevision

PR:             ports/64589
Submitted by:   Blaz Zupan <blaz.zupan@amis.net> (maintainer)

Update to 20030616.p8
Add new official mirrors.

PR:             ports/64146
Submitted by:   Blaz Zupan <blaz@si.FreeBSD.org> (maintainer)

Upgrade security/amavisd-new

        Upgrade security/amavisd-new port to 20030616.p7

Also make portlint less unhappy wrt file

PR:             ports/61042
Submitted by:   Blaz Zupan <blaz@si.FreeBSD.org>

1) Update security/amavisd-new to amavisd-new-20030616-p6.
2) Incorporate changes from PR 57382:
   - add rc.subr support
   - cleanup sed variable replacement scripts
   - add pointer to Clam Antivirus to installation message
  PR 57382 was closed by mistake, I thought the contents
  have already been commited, while they were not.

PR:             59323
Submitted by:   milter@free.fr (1)
Submitted by:   Martin Matuska <martin@tradex.sk> (2)
Approved by:    MAINTAINER

- update amavisd-new to 20030616.p5.
- fix dependency on devel/p5-IO, which should only be used when
  perl older than 5.6.1 is installed.
- enable cpio for extraction of tar archives, which uses much less
  memory than Archive::Tar (suggested by amavisd-new author)

PR:             56013
Submitted by:   Blaz Zupan <blaz.zupan@amis.net>

Update to 20030616.p2.

Submitted by:   Rob Evers <rob@debank.tv> (20030616.p1)
Approved by:    maintainer (20030616.p2)
PR:             53728

- installs two new README files that I missed in the previous update
- adds an entry to amavisd.conf for the Fizzer worm because it fakes
  the sender address (suggested by mutt@free.fr)
- set the log level back to 0, because apparently it was set to 2 by
  mistake by the author (suggested by mutt@free.fr)

- Bump PORTREVISION

PR:             52399
Submitted by:   maintainer

- update to 20030314.p2
- remove the locale hack in the startup script; it's no
  longer necessary

PR:             52066
Submitted by:   maintainer

Update amavisd-new port to 20030314.p1.
Don't remove amavis user/group and directories, just remind user that they
should do it manually if they don't want to use the port anymore.

PR:             51153
Submitted by:   Blaz Zupan <blaz.zupan@amis.net>

MAINTAINER UPDATE: security/amavisd-new

        Fixes for amavisd-new port:
        - add missing dependency on devel/p5-IO
        - install amavisdconf utility
        - bump portrevision

PR:             ports/48984
Submitted by:   Blaz Zupan <blaz@si.FreeBSD.org>

Fix a bug where non-RFC 2822 compliant mails were generated when a
non-US locale was in use.

PR:             50028
Submitted by:   maintainer

De-pkg-comment.

upgrade to 20021227 p2
allow build without sendmail milter

Submitted by:   maintainer

Fix broken files (duplicate contents).

Noticed by:     Blaz Zupan <blaz@si.FreeBSD.org>
Pointy hat to:  /me

Update to version 20021227.p1.
Pass maintainership to submitter (approved by former maintainer).

Submitted by:   Blaz Zupan <blaz@si.FreeBSD.org>

Add amavisd-new, performance-enhanced daemonized version of amavis-perl.

PR:             38934
Submitted by:   Christopher K Davis (ckd-freebsd@ckdhr.com)

3 vulnerabilities affecting 4 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities