summaryrefslogtreecommitdiff
path: root/mail/sendmail
AgeCommit message (Collapse)AuthorFilesLines
2006-05-31The databases/openldap package has been split in -client and -server componentghen1-2/+2
packages. Convert LDAP-based applications to depend on openldap-client, and bump PKGREVISION for those that depend on it by default.
2006-05-12Update to sendmail 8.13.6adrianp8-151/+13
> 8.13.6/8.13.6 2006/03/22 > SECURITY: Replace unsafe use of setjmp(3)/longjmp(3) in the server > and client side of sendmail with timeouts in the libsm I/O > layer and fix problems in that code. Also fix handling of > a buffer in sm_syslog() which could have been used as an > attack vector to exploit the unsafe handling of > setjmp(3)/longjmp(3) in combination with signals. > Problem detected by Mark Dowd of ISS X-Force. > Handle theoretical integer overflows that could triggered if > the server accepted headers larger than the maximum > (signed) integer value. This is prevented in the default > configuration by restricting the size of a header, and on > most machines memory allocations would fail before reaching > those values. Problems found by Phil Brass of ISS. > If a server returns 421 for an RSET command when trying to start > another transaction in a session while sending mail, do > not trigger an internal consistency check. Problem found > by Allan E Johannesen of Worcester Polytechnic Institute. > If a server returns a 5xy error code (other than 501) in response > to a STARTTLS command despite the fact that it advertised > STARTTLS and that the code is not valid according to RFC > 2487 treat it nevertheless as a permanent failure instead > of a protocol error (which has been changed to a > temporary error in 8.13.5). Problem reported by Jeff > A. Earickson of Colby College. > Clear SMTP state after a HELO/EHLO command. Patch from John > Myers of Proofpoint. > Observe MinQueueAge option when gathering entries from the queue > for sorting etc instead of waiting until the entries are > processed. Patch from Brian Fundakowski Feldman. > Set up TLS session cache to properly handle clients that try to > resume a stored TLS session. > Properly count the number of (direct) child processes such that > a configured value (MaxDaemonChildren) is not exceeded. > Based on patch from Attila Bruncsak. > LIBMILTER: Remove superfluous backslash in macro definition > (libmilter.h). Based on patch from Mike Kupfer of > Sun Microsystems. > LIBMILTER: Don't try to set SO_REUSEADDR on UNIX domain sockets. > This generates an error message from libmilter on > Solaris, though other systems appear to just discard the > request silently. > LIBMILTER: Deal with sigwait(2) implementations that return > -1 and set errno instead of returning an error code > directly. Patch from Chris Adams of HiWAAY Informations > Services. > Portability: > Fix compilation checks for closefrom(3) and statvfs(2) > in NetBSD. Problem noted by S. Moonesamy, patch from > Andrew Brown.
2006-05-01Conflict with courier-mta.jlam1-2/+2
2006-04-23Modify packages that set PKG_USERS and PKG_GROUPS to follow the newjlam1-3/+4
syntax as specified in pkgsrc/mk/install/bsd.pkginstall.mk:1.47.
2006-04-13Update path from cyrus-sasl2 to cyrus-sasl.wiz1-2/+2
2006-03-26Add a URL to the new (?) past-releases directory on sendmail.org for fetchingadrianp1-1/+2
the distfile
2006-03-22Update sendmail to address the current security issueadrianp3-4/+10
Bump to nb2 This will change the internal version of sendmail to 8.13.5.20060308 > SECURITY: Replace unsafe use of setjmp(3)/longjmp(3) in the server > and client side of sendmail with timeouts in the libsm I/O > layer and fix problems in that code. Also fix handling of > a buffer in sm_syslog() which could have been used as an > attack vector to exploit the unsafe handling of > setjmp(3)/longjmp(3) in combination with signals. > Problem detected by Mark Dowd of ISS X-Force. > Handle theoretical integer overflows that could triggered if > the server accepted headers larger than the maximum > (signed) integer value. This is prevented in the default > configuration by restricting the size of a header, and on > most machines memory allocations would fail before reaching > those values. Problems found by Phil Brass of ISS.
2006-01-23Skip ".orig" files in the pax copy, in case local patches (or possibletv1-2/+2
pkgsrc patches) patch things in cf/.
2006-01-18Fix build on -HEADadrianp6-2/+108
Identified by Jean-Luc Wasmer in PR# 32527 Fixes from -HEAD by christos@ (setuserenv -> setuserenviron) Bump to nb1
2006-01-08Don't define NEEDSGETIPNODE on DragonFly as well.joerg1-2/+2
XXX Is this fragment really needed at all? include/sm/conf.h has a check for Linux and others should most likely be explicitly enumerated as well.
2005-12-29Remove USE_PKGINSTALL from pkgsrc now that mk/install/pkginstall.mkjlam1-2/+1
automatically detects whether we want the pkginstall machinery to be used by the package Makefile.
2005-12-05Fixed pkglint warnings. The warnings are mostly quoting issues, forrillig2-7/+7
example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some other changes are outlined in http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html
2005-11-29Fix a bug that crept in when the statvfs and closefrom patch was added.adrianp2-4/+4
2005-10-24Updated distinfo for patch-ag, for statvfs and closefrom patch.jklos1-2/+2
2005-10-24Lost cvs tag. Fixed.jklos1-0/+2
2005-10-24Updated to properly select statvfs.h and closefrom where appropriate.jklos1-6/+34
2005-10-20While I'm here add back the PKG_OPTIONS_LEGACY_OPTS for socketmapadrianp1-1/+3
2005-10-20Update options.mk with a PKG_OPTIONS_LEGACY_OPTS to migrate from starttlsadrianp1-1/+2
to tls. Pointed out by Gilles@Gravier.org on netbsd-users@
2005-10-14Update sendmail to 8.13.5adrianp3-7/+8
From the CHANGELOG: > Store the filesystem identifier of the df/ subdirectory (if it > exists) in an internal structure instead of the base > directory. This structure is used decide whether there > is enough free disk space when selecting a queue, hence > without this change queue selection could fail if a df/ > subdirectory exists and is on a different filesystem > than the base directory. > Use the queue index of the df file (instead of the qf file) for > checking whether a link(2) operation can be used to split > an envelope across queue groups. Problem found by > Werner Wiethege. > If the list of items in the queue is larger than the maximum > number of items to process, sort the queue first and > then cut the list off instead of the other way around. > Patch from Matej Vela of Rudjer Boskovic Institute. > Fix helpfile to show full entry for ETRN. Problem noted by > Penelope Fudd, patch from Neil Rickert of Northern Illinois > University. > FallbackSmartHost should also be tried on temporary errors. > From John Beck of Sun Microsystems. > When a server responds with 421 to the STARTTLS command then treat > it as a temporary error, not as protocol error. Problem > noted by Andrey J. Melnikoff. > Properly define two functions in libsm as static because their > prototype used static too. Patch from Peter Klein. > Fix syntax errors in helpfile for MAIL and RCPT commands. > LIBMILTER: When smfi_replacebody() is called with bodylen equals > zero then do not silently ignore that call. Patch from > Gurusamy Sarathy of Active State. > LIBMILTER: Recognize "421" also in a multi-line reply to terminate > the SMTP session with that error. Fix from Brian Kantor. > Portability: New option HASSNPRINTF which can be set if the OS > has a properly working snprintf(3) to get rid > of the last two (safe) sprintf(3) calls in the > source code. > Add support for AIX 5.3. > Add support for SunOS 5.11 (aka Solaris 11). > Add support for Darwin 8.x. Patch from Lyndon Nerenberg. > OpenBSD 3.7 has removed support for NETISO. > CONFIG: Add OSTYPE(freebsd6) for FreeBSD 6.X.
2005-10-05Remove some more *LEGACY* settings that are over a month old andwiz1-4/+1
thus were before 2005Q3.
2005-08-23The real user name in PKG_USERS does not need to be escaped with doublerillig1-2/+2
backslashes anymore. A single backslash is enough. Changed the definition in all affected packages. For those that are not caught, an additional check is placed into bsd.pkginstall.mk.
2005-08-01Adapt for socketmap -> sendmail-socketmap.wiz1-3/+3
2005-08-01Rename socketmap option to sendmail-socketmap.wiz1-4/+5
2005-07-18- Move option from "starttls" to "tls" as pointed out by schmonz@ in privateadrianp2-6/+7
email. - Use PKG_OPTIONS_LEGACY_OPTS to deal with the change.
2005-07-16Get rid of USE_PERL5. The new way to express needing the Perl executablejlam1-2/+2
around at either build-time or at run-time is: USE_TOOLS+= perl # build-time USE_TOOLS+= perl:run # run-time Also remove some places where perl5/buildlink3.mk was being included by a package Makefile, but all that the package wanted was the Perl executable.
2005-07-02standardize whitespace in .include directivestv1-8/+8
2005-05-31Packages have no business modifying PKG_DEFAULT_OPTIONS -- it's adillo1-5/+2
user settable variable. Set PKG_SUGGESTED_OPTIONS instead. Also, make use of PKG_OPTIONS_LEGACY_VARS. Reviewed by wiz.
2005-05-22Remove USE_GNU_TOOLS and replace with the correct USE_TOOLS definitions:jlam1-2/+2
USE_GNU_TOOLS -> USE_TOOLS awk -> gawk m4 -> gm4 make -> gmake sed -> gsed yacc -> bison
2005-05-21SUBST_FILES.* must be relative to ${WRKSRC}.jlam1-2/+2
2005-05-13Change references to M4 & YACC into TOOLS_M4 & TOOLS_YACC to simplifyjlam1-2/+2
transition to new tools framework.
2005-04-27- Update to sendmail 8.13.4adrianp3-69/+6
- Remove old patch-ai - From the ChangeLog: > The bug fixes in 8.13.3 for connection handling uncovered a > different error which could result in connections that > stay in CLOSE_WAIT state due to a variable that was not > properly initialized. Problem noted by Michael Sims. > Deal with empty hostnames in hostsignature(). This bug could lead > to an endless loop when doing LMTP deliveries to another > host. Problem first reported by Martin Lathoud and > tracked down by Gael Roualland. > Make sure return parameters are initialized in getmxrr(). Problem > found by Gael Roualland using valgrind. > If shared memory is used and the RunAsUser option is set, then the > owner and group of the shared memory segment is set to > the ids specified RunAsUser and the access mode is set > to 0660 to allow for updates by sendmail processes. > The number of queue entries that is (optionally) kept in shared > memory was wrong in some cases, e.g., envelope splitting > and bounce generation. > Undo a change made in 8.13.0 to silently truncate long strings > in address rewriting because the message can be triggered > for header checks where long strings are legitimate. > Problem reported by Mary Verge DeSisto, and tracked > down with the help of John Beck of Sun Microsystems. > The internal stab map did not obey the -m flag. Patch from > Rob McMahon of Warwick University, England. > The socket map did not obey the -f flag. Problem noted by > Dan Ringdahl, forwarded by Andrzej Filip. > The addition of LDAP recursion in 8.13.0 broke enforcement of > the LDAP map -1 argument which tells the MTA to only > return success if and only if a single LDAP match is found. > Add additional error checks in the MTA for milter communication > to avoid a possible segmentation fault. Based on patch > by Joe Maimon. > Do not trigger an assertion if X509_digest() returns success but > does not assign a value to its output parameter. Based > on patch by Brian Kantor. > Add more checks when resetting internal AUTH data (applies only > to Cyrus SASL version 2). Otherwise an SMTP session might > be dropped after an AUTH failure. > Portability: > Add LA_LONGLONG as valid LA_TYPE type for systems that use > "long long" to read load average data, e.g., > AIX 5.1 in 32 bit mode. Note: this has to be set > "by hand", it is not (yet) automatically detected. > Problem noted by Burak Bilen. > Use socklen_t for accept(), etc. on AIX 5.x. This should > fix problems when compiling in 64 bit mode. > Problem first reported by Harry Meiert of > University of Bremen.
2005-04-12Nuke USE_BUILDLINK3 (some files missed in megacommit).tv1-2/+1
2005-04-01- Fix builds with SASLv2 following removal of SASLv1 supportadrianp2-9/+1
- Patch submitted by Shin'ichiro TAYA in PR 29857, thanks.
2005-03-28Remove security/cyrus-sasl and security/cy-login. These packagesjlam1-13/+3
tracked the Cyrus SASL 1.5.x releases, which are no longer maintained. Adjust packages to use security/cyrus-sasl2 instead for SASL support. This closes PR pkg/28218 and PR pkg/29736.
2005-03-25- Grab maintainership as discussed (wiz@, tv@)adrianp1-2/+2
2005-02-24Add RMD160 digests.agc1-1/+2
2005-02-10- Update sendmail to 8.13.3adrianp7-36/+96
- Fix smrsh man page patch - Tidy up MESSAGE - Replace 8.13.1 errata with 8.13.3 errata - Remove rename of file outside ${PREFIX} on db2 installs > 8.13.3/8.13.3 2005/01/11 > Enhance handling of I/O errors, especially EOF, when STARTTLS > is active. > Make sure a connection is not reused after it has been closed > due to a 421 error. Problem found by Allan E Johannesen > of Worcester Polytechnic Institute. > Avoid triggering an assertion when sendmail is interrupted while > closing a connection. Problem found by Allan E Johannesen > of Worcester Polytechnic Institute. > Regression: a change in 8.13.2 caused sendmail not to try the > next MX host (or FallbackMXhost if configured) when, at > connection open, the current server returns a 4xy or 5xy > SMTP reply code. Problem noted by Mark Tranchant. > > 8.13.2/8.13.2 2004/12/15 > Do not split the first header even if it exceeds the internal > buffer size. Previously a part of such a header would > end up in the body of the message. Problem noted by > Simple Nomad of BindView. > Do not complain about "cataddr: string too long" when checking > headers that do not contain RFC 2822 addresses. > Problem noted by Rich Graves of Brandeis University. > If a server returns a 421 reply to the RSET command between > message deliveries, do not attempt to deliver any more > messages on that connection. This prevents bogus "Bad > file number" recipient status. Problem noted by > Allan E Johannesen of Worcester Polytechnic Institute. > Allow trailing white space in EHLO command as recommended by RFC > 2821. Problem noted by Ralph Santagato of SBC Services. > Deal with clients which use AUTH but negotiate a smaller buffer size > for data exchanges than the value used by sendmail, e.g., > Cyrus IMAP lmtp server. Based on patch by Jamie Clark. > When passing ESMTP arguments for RCPT to a milter, do not cut > them off at a comma. Problem noted by Krzysztof Oledzki. > Add more logging to milter change header functions to > complement existing logging. Based on patch from > Gurusamy Sarathy of Active State. > Include <lber.h> in include/sm/config.h when LDAPMAP is defined. > Patch from Edgar Hoch of the University of Stuttgart. > Fix DNS lookup if IPv6 is enabled when converting an IP address > to a hostname for use with SASL. Problem noted by Ken Jones; > patch from Hajimu UMEMOTO. > CONFIG: For consistency enable MODIFY_MAILER_FLAGS for the prog > mailer. Patch from John Beck of Sun Microsystems. > LIBMILTER: It was possible that xxfi_abort() was called after > xxfi_eom() for a message if some timeouts were triggered. > Patch from Alexey Kravchuk. > LIBMILTER: Slightly rearrange mutex use in listener.c to allow > different threads to call smfi_opensocket() and smfi_main(). > Patch from Jordan Ritter of Cloudmark. > MAIL.LOCAL: Properly terminate MBDB before exiting. Problem > noted by Nelson Fung. > MAIL.LOCAL: make strip-mail.local used a wrong path to access > mail.local. Problem noted by William Park. > VACATION: Properly terminate MBDB before exiting. Problem noted > by Nelson Fung. > Portability: > Add support for DragonFly BSD. > New Files: > cf/ostype/dragonfly.m4 > devtools/OS/DragonFly > include/sm/os/sm_os_dragonfly.h > Deleted Files: > libsm/vsscanf.c
2005-01-02Remove inet6 from PKG_DEFAULT_OPTIONS as this can cause the packageadrianp1-2/+2
to build in IPv6 support on systems where USE_INET6 has been set to NO. This addresses PR #28708 opened by georg.schwarz (at) freenet.de
2004-11-17Remove obsolete variables. You'll want to use:xtraeme1-25/+1
PKG_OPTIONS.<pkg>+= foo blah
2004-10-03missed bump from libtool change (dependency libraries)tv1-2/+2
2004-09-02options.mk fixes for this package including:adrianp2-5/+13
- Option handling was ignoring old USE_* statements - Don't try and compile sendmail with SASLv1 _and_ SASLv2 support - Add missing migration option for USE_STARTTLS
2004-08-31- Add errata patch from sendmail.org - suggestion from Takahiro Kambe <taca@>adrianp3-2/+17
- Ok'ed wiz@ http://www.sendmail.org/8.13.1.html#ERRATA http://www.sendmail.org/patches/parseaddr.c.cataddr.8.379
2004-08-30- remove references to pkgsrc-wip directories that should not be thereadrianp1-4/+4
2004-08-30Add missed file update for the sendmail 8.13.1 update.adrianp1-0/+2
- Add NetBSD CVS tag
2004-08-30Update of sendmail to 8.13.1adrianp20-141/+265
pkgsrc changes: - move to use options.mk framework - solaris support tidy-up - fix linux man page extension handling bug - allow for a user defined smrsh directory - update MASTER_SITES - optional SOCKETMAP support and sample script installation - ok'ed snj@/wiz@ Summary of some of the major changes include: - New map "socket" to query maps via TCP/IP sockets. - Connection rate control as well as control over the number of incoming open connections. - Several LDAP enhancements such as LDAP recursion and LDAP URI support. - Message quarantining. - AUTH EXTERNAL will only be enabled if STARTTLS was successful and the client has been authenticated, i.e., {verify} is OK. - Basic support for certificate revocation lists. - New queue timeouts for DSN messages. - Experimental support for MTAMark. For a full list of changes see: - http://www.sendmail.org/8.13.0.html - http://www.sendmail.org/8.13.1.html
2004-07-21Add CONFLICTS with the upcoming mail/fastforward update.schmonz1-2/+2
2004-07-13Fix build on recent NetBSD-current (statvfs).markd2-5/+29
Patch from Julian C. Dunn in PR 25481 slightly modified by me.
2004-06-23Handle installation of PREFIX/share/sendmail better. Fixes PR#23735cjep2-4/+5
2004-05-09Convert to buildlink3.snj2-10/+10
2004-04-21Drop localized *_USE_LDAP definitions and consistently use USE_OPENLDAPcube2-5/+5
instead. As announced on tech-pkg. Most notably affected are Postfix, sendmail, Samba and cyrus-saslauthd. Be sure to update your mk.conf accordingly.
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-12 13:08:10 +0000