notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine

Bot filter coming soon

To deter bots pegging the database CPU to 100%, a bot testing filter to be added to the website. This should not affect newsfeeds etc. Anubis seems light-weight - it is already in use within the FreeBSD Project. This notice is just a heads up in case you see something odd. This notice will be updated after Anubis is installed.

non port: mail/exim/files/patch-z0007-Taint-fix-multiple-ACL-actions-to-properly-manage-tainted-

Number of commits found: 2

Tuesday, 4 May 2021
15:57 Dima Panov (fluffy) search for other commits by this committer
mail/exim:	update to 4.94.2 security release

  * New upstream security release.
    + Release based on +fixes branch.
    + Fixes multiple security vulnerabilities reported by Qualys and adds
      related robustness improvements. (Special thanks to Heiko)
      CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
      CVE-2020-28007: Link attack in Exim's log directory
      CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
      CVE-2020-28012: Missing close-on-exec flag for privileged pipe
      CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
      CVE-2020-28009: Integer overflow in get_stdinput()
      CVE-2020-28015, CVE-28021: New-line injection into spool header file
      CVE-2020-28026: Line truncation and injection in spool_read_header()
      CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
      CVE-2020-28017: Integer overflow in receive_add_recipient()
      CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
      CVE-2020-28011: Heap buffer overflow in queue_run()
      CVE-2020-28010: Heap out-of-bounds write in main()
      CVE-2020-28018: Use-after-free in tls-openssl.c
      CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()
      CVE-2020-28014, CVE-2021-27216: PID file handling
      CVE-2020-28008: Assorted attacks in Exim's spool directory
      CVE-2020-28019: Failure to reset function pointer after BDAT error
  * Incorporate debian patches to turn taint failures into warnings.
commit hash: 0a629bd71087f75c3b334edb53b01ec68709ab60 commit hash: 0a629bd71087f75c3b334edb53b01ec68709ab60 commit hash: 0a629bd71087f75c3b334edb53b01ec68709ab60 commit hash: 0a629bd71087f75c3b334edb53b01ec68709ab60 0a629bd
Friday, 17 Jul 2020
09:46 fluffy search for other commits by this committer
mail/exim: import exim-4.94+fixes branch as state of 2020.07.17

Used git diffs:

[02/26] Taint: fix pam expansion condition.  Bug 2587
[03/26] Taint: fix listcount expansion operator.  Bug 2586
[04/26] Docs: fix mistaken variable name
[06/26] Docs: typoes
[07/26] Taint: fix multiple ACL actions to properly manage tainted argument data
[08/26] Fix -bi.  Bug 2590
[09/26] Filters: fix "vacation" in Exim filter.  Bug 2593
[10/26] TLS: use RFC 6125 rules for certifucate name checks when CNAMES are
present. Bug 2594
[11/26] Taint: fix radius expansion condition
[13/26] Taint: fix verify.  Bug 2598
[14/26] Fix string_copy() macro to not multiple-eval args. Bug 2603
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Original commitRevision:542419 

Number of commits found: 2