[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: 8b177cea39a5f4c6b96b698fb29266678ee19e0b Author: Fabian Groffen gentoo org> AuthorDate: Fri Feb 16 12:07:39 2024 + Commit: Fabian Groffen gentoo org> CommitDate: Fri Feb 16 12:07:39 2024 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=8b177cea mail-mta/exim-4.97.1-r4: update regex memory patch Include 44b3172e3694 from upstream. Bug: https://bugs.gentoo.org/922780 Signed-off-by: Fabian Groffen gentoo.org> .../{exim-4.97.1-r4.ebuild => exim-4.97.1-r5.ebuild} | 0 .../exim/files/exim-4.97.1-memory-usage-bug-3047.patch | 18 -- 2 files changed, 12 insertions(+), 6 deletions(-) diff --git a/mail-mta/exim/exim-4.97.1-r4.ebuild b/mail-mta/exim/exim-4.97.1-r5.ebuild similarity index 100% rename from mail-mta/exim/exim-4.97.1-r4.ebuild rename to mail-mta/exim/exim-4.97.1-r5.ebuild diff --git a/mail-mta/exim/files/exim-4.97.1-memory-usage-bug-3047.patch b/mail-mta/exim/files/exim-4.97.1-memory-usage-bug-3047.patch index e467edf71fa2..c9b52f2aebfe 100644 --- a/mail-mta/exim/files/exim-4.97.1-memory-usage-bug-3047.patch +++ b/mail-mta/exim/files/exim-4.97.1-memory-usage-bug-3047.patch @@ -26,6 +26,11 @@ Date: Tue, 13 Feb 2024 17:34:19 + Subject: [PATCH] Use non-releasable memory for regex line-buffer Broken-by: 5aacb69f5c8 +From 44b3172e369435c2c1baa4e9c837252f729d2905 Mon Sep 17 00:00:00 2001 +From: Jeremy Harris +Date: Thu, 15 Feb 2024 19:56:40 + +Subject: [PATCH] regex: avoid releasing built RE midloop + diff --git a/src/src/exim.c b/src/src/exim.c --- a/src/exim.c +++ b/src/exim.c @@ -176,7 +181,7 @@ diff --git a/src/src/regex.c b/src/src/regex.c return OK; } } -@@ -110,9 +111,9 @@ FILE * mbox_file; +@@ -110,9 +111,8 @@ FILE * mbox_file; unsigned long mbox_size; FILE * mbox_file; pcre_list * re_list_head; @@ -184,7 +189,6 @@ diff --git a/src/src/regex.c b/src/src/regex.c long f_pos = 0; -int ret = FAIL; +int ret = FAIL, cnt, lcount = REGEX_LOOPCOUNT_STORE_RESET; -+rmark reset_point; regex_vars_clear(); @@ -199,8 +203,7 @@ diff --git a/src/src/regex.c b/src/src/regex.c -/* match each line against all regexes */ -linebuffer = store_get(32767, GET_TAINTED); -while (fgets(CS linebuffer, 32767, mbox_file)) -+reset_point = store_mark(); - { +- { - if ( mime_stream && mime_current_boundary /* check boundary */ - && Ustrncmp(linebuffer, "--", 2) == 0 - && Ustrncmp((linebuffer+2), mime_current_boundary, @@ -212,6 +215,8 @@ diff --git a/src/src/regex.c b/src/src/regex.c + /* precompile our regexes */ + if ((re_list_head = compile(*listptr, cacheable, ))) +{ ++rmark reset_point = store_mark(); ++ +while (fgets(CS big_buffer, big_buffer_size, mbox_file)) + { + if ( mime_stream && mime_current_boundary /* check boundary */ @@ -229,10 +234,11 @@ diff --git a/src/src/regex.c b/src/src/regex.c + lcount = REGEX_LOOPCOUNT_STORE_RESET; + } + } ++ ++store_reset(reset_point); +} - } +- } -/* no matches ... */ -+store_reset(reset_point); -done: if (!mime_stream)
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: 2582b32d9016fdda44afd8cbbfbb198584e14c41 Author: Fabian Groffen gentoo org> AuthorDate: Sun Feb 11 20:05:31 2024 + Commit: Fabian Groffen gentoo org> CommitDate: Sun Feb 11 20:05:31 2024 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2582b32d mail-mta/exim-4.97.1-r3: update regex memory patch Include 84add256b346 from upstream. Bug: https://bugs.gentoo.org/922780 Signed-off-by: Fabian Groffen gentoo.org> ...exim-4.97.1-r2.ebuild => exim-4.97.1-r3.ebuild} | 0 .../files/exim-4.97.1-memory-usage-bug-3047.patch | 35 +- 2 files changed, 34 insertions(+), 1 deletion(-) diff --git a/mail-mta/exim/exim-4.97.1-r2.ebuild b/mail-mta/exim/exim-4.97.1-r3.ebuild similarity index 100% rename from mail-mta/exim/exim-4.97.1-r2.ebuild rename to mail-mta/exim/exim-4.97.1-r3.ebuild diff --git a/mail-mta/exim/files/exim-4.97.1-memory-usage-bug-3047.patch b/mail-mta/exim/files/exim-4.97.1-memory-usage-bug-3047.patch index 75e5d1a42781..b8f4eb9c5eef 100644 --- a/mail-mta/exim/files/exim-4.97.1-memory-usage-bug-3047.patch +++ b/mail-mta/exim/files/exim-4.97.1-memory-usage-bug-3047.patch @@ -10,6 +10,11 @@ Date: Fri, 26 Jan 2024 21:58:59 + Subject: [PATCH] ACL: in "regex" condition, release store every thousand lines. Bug 3047 +From: Jeremy Harris +Date: Sun, 11 Feb 2024 13:57:18 + (+) +Subject: Use non-releaseable memory for regex match strings. Bug 3047 +Broken-by: 35aacb69f5c8 + diff --git a/src/src/exim.c b/src/src/exim.c --- a/src/exim.c @@ -110,7 +115,7 @@ diff --git a/src/src/regex.c b/src/src/regex.c /* precompile our regexes */ while ((regex_string = string_nextinlist(, , NULL, 0))) -@@ -58,7 +57,9 @@ while ((regex_string = string_nextinlist(, , NULL, 0))) +@@ -58,10 +57,19 @@ while ((regex_string = string_nextinlist(, , NULL, 0))) ri->pcre_text = regex_string; ri->next = re_list_head; re_list_head = ri; @@ -120,6 +125,34 @@ diff --git a/src/src/regex.c b/src/src/regex.c return re_list_head; } ++ ++/* Check list of REs against buffer, returning OK for (first) match, ++else FAIL. On match return allocated result strings in regex_vars[]. ++ ++We use the perm-pool for that, so that our caller can release ++other allocations. ++*/ + static int + matcher(pcre_list * re_list_head, uschar * linebuffer, int len) + { +@@ -75,6 +82,9 @@ for (pcre_list * ri = re_list_head; ri; ri = ri->next) + /* try matcher on the line */ + if ((n = pcre2_match(ri->re, (PCRE2_SPTR)linebuffer, len, 0, 0, md, pcre_gen_mtc_ctx)) > 0) + { ++int save_pool = store_pool; ++store_pool = POOL_PERM; ++ + Ustrncpy(regex_match_string_buffer, ri->pcre_text, + sizeof(regex_match_string_buffer)-1); + regex_match_string = regex_match_string_buffer; +@@ -87,6 +97,7 @@ for (pcre_list * ri = re_list_head; ri; ri = ri->next) + regex_vars[nn-1] = string_copyn(linebuffer + ovec[off], len); + } + ++store_pool = save_pool; + return OK; + } + } @@ -112,7 +113,8 @@ FILE * mbox_file; pcre_list * re_list_head; uschar * linebuffer;
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: 662e4585eef68252845c897c989764350141 Author: Fabian Groffen gentoo org> AuthorDate: Sun Jan 28 18:18:46 2024 + Commit: Fabian Groffen gentoo org> CommitDate: Sun Jan 28 18:20:00 2024 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=662e4585 mail-mta/exim-4.97.1-r2: update upstream patches for pcre2 memory usage Bug: https://bugs.gentoo.org/922780 Signed-off-by: Fabian Groffen gentoo.org> ...exim-4.97.1-r1.ebuild => exim-4.97.1-r2.ebuild} | 0 .../files/exim-4.97.1-memory-usage-bug-3047.patch | 210 +++-- 2 files changed, 190 insertions(+), 20 deletions(-) diff --git a/mail-mta/exim/exim-4.97.1-r1.ebuild b/mail-mta/exim/exim-4.97.1-r2.ebuild similarity index 100% rename from mail-mta/exim/exim-4.97.1-r1.ebuild rename to mail-mta/exim/exim-4.97.1-r2.ebuild diff --git a/mail-mta/exim/files/exim-4.97.1-memory-usage-bug-3047.patch b/mail-mta/exim/files/exim-4.97.1-memory-usage-bug-3047.patch index f141d08bb7b4..75e5d1a42781 100644 --- a/mail-mta/exim/files/exim-4.97.1-memory-usage-bug-3047.patch +++ b/mail-mta/exim/files/exim-4.97.1-memory-usage-bug-3047.patch @@ -1,36 +1,60 @@ -https://bugs.exim.org/show_bug.cgi?id=3047 -https://bugs.gentoo.org/922780 +From b4e7527561f1c68b821d5cf25efe29ae63d1d434 Mon Sep 17 00:00:00 2001 +From: Jeremy Harris +Date: Thu, 25 Jan 2024 17:48:43 + +Subject: [PATCH] Appendfile: release regex-match store every thousand files. + Bug 3047 -diff --git a/src/src/transports/appendfile.c b/src/src/transports/appendfile.c -index ec41ca035..91b353079 100644 a/src/transports/appendfile.c -+++ b/src/transports/appendfile.c -@@ -153,6 +153,10 @@ static const char *mailbox_formats[] = { - (!ob->quota_warn_threshold_is_percent || ob->quota_value > 0)) +From 35aacb69f5c839a4b77158464e401d86eb422ed6 Mon Sep 17 00:00:00 2001 +From: Jeremy Harris +Date: Fri, 26 Jan 2024 21:58:59 + +Subject: [PATCH] ACL: in "regex" condition, release store every thousand + lines. Bug 3047 + + +diff --git a/src/src/exim.c b/src/src/exim.c +--- a/src/exim.c b/src/exim.c +@@ -49,6 +49,8 @@ optimize out the tail recursion and so not make them too expensive. */ + static void * + function_store_malloc(PCRE2_SIZE size, void * tag) + { ++if (size > INT_MAX) ++ log_write(0, LOG_MAIN|LOG_PANIC_DIE, "excessive memory alloc request"); + return store_malloc((int)size); + } +@@ -63,12 +65,15 @@ if (block) store_free(block); + static void * + function_store_get(PCRE2_SIZE size, void * tag) + { ++if (size > INT_MAX) ++ log_write(0, LOG_MAIN|LOG_PANIC_DIE, "excessive memory alloc request"); + return store_get((int)size, GET_UNTAINTED); /* loses track of taint */ + } + + static void + function_store_nullfree(void * block, void * tag) + { ++/* We cannot free memory allocated using store_get() */ + } -+/* Free memory allocated by PCRE2 every so often, because a recent version -+is now using 20kB for every match call */ -+ -+#define RESET_STORE_FILECNT 1000 - /* - * Setup entry point * +diff --git a/src/src/transports/appendfile.c b/src/src/transports/appendfile.c +--- a/src/transports/appendfile.c b/src/transports/appendfile.c @@ -661,13 +665,14 @@ Returns:the sum of the sizes of the stattable files off_t check_dir_size(const uschar * dirname, int * countptr, const pcre2_code * re) { --DIR *dir; -+DIR * dir; + DIR *dir; off_t sum = 0; -int count = *countptr; -+int count = *countptr, lcount = RESET_STORE_FILECNT; ++int count = *countptr, lcount = REGEX_LOOPCOUNT_STORE_RESET; +rmark reset_point = store_mark(); if (!(dir = exim_opendir(dirname))) return 0; --for (struct dirent *ent; ent = readdir(dir); ) -+for (struct dirent * ent; ent = readdir(dir); ) + for (struct dirent *ent; ent = readdir(dir); ) { uschar * path, * name = US ent->d_name; struct stat statbuf; @@ -41,7 +65,7 @@ index ec41ca035..91b353079 100644 + if (--lcount == 0) +{ +store_reset(reset_point); reset_point = store_mark(); -+lcount = RESET_STORE_FILECNT; ++lcount = REGEX_LOOPCOUNT_STORE_RESET; +} /* If there's a regex, try to find the size using it */ @@ -54,3 +78,149 @@ index ec41ca035..91b353079 100644 *countptr = count; return sum; } +diff --git a/src/src/macros.h b/src/src/macros.h +--- a/src/macros.h b/src/macros.h +@@ -1185,4 +1185,9 @@ typedef enum { + sw_mrc_tx_fail, /* transmit failed */ + } sw_mrc_t; + ++/* Recent versions of PCRE2 are allocating 20kB per match, rather than the previous 112 B. ++When doing en extended loop of matching, release store periodically. */ ++ ++#define REGEX_LOOPCOUNT_STORE_RESET 1000 ++ + /* End of macros.h */ +diff --git a/src/src/regex.c b/src/src/regex.c +--- a/src/regex.c b/src/regex.c +@@ -31,12 +31,11 @@ extern uschar *mime_current_boundary; + + + static pcre_list * +-compile(const uschar * list, BOOL
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: c11d2a7a9507bd2392e0c8c83e6719debbf18ab1 Author: Fabian Groffen gentoo org> AuthorDate: Fri Jan 12 11:56:22 2024 + Commit: Fabian Groffen gentoo org> CommitDate: Fri Jan 12 11:56:22 2024 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c11d2a7a mail-mta/exim: cleanup vulnerable Signed-off-by: Fabian Groffen gentoo.org> mail-mta/exim/Manifest | 5 - mail-mta/exim/exim-4.96-r4.ebuild | 655 mail-mta/exim/exim-4.96.2-r1.ebuild| 656 - mail-mta/exim/exim-4.96.2.ebuild | 655 .../exim/files/exim-4.93-as-needed-ldflags.patch | 145 - mail-mta/exim/files/exim-4.94-opendmarc-1.4.patch | 14 - .../exim/files/exim-4.95-localscan_dlopen.patch| 221 --- mail-mta/exim/files/exim-4.97-CVE-2023-51766.patch | 265 - 8 files changed, 2616 deletions(-) diff --git a/mail-mta/exim/Manifest b/mail-mta/exim/Manifest index 9553d4d46a0a..d87f52e906c4 100644 --- a/mail-mta/exim/Manifest +++ b/mail-mta/exim/Manifest @@ -1,8 +1,3 @@ -DIST exim-4.96-gentoo-patches-r0.tar.xz 13308 BLAKE2B e01cd8b90593329d858cced27bea9da4860e80500c0b0b3f86418931a77616ac1e4a532cfffc551de5844bfcbcd115c1591b28577c234beb551458dc0877e764 SHA512 0a8d7b5903c8cd7c2cc07e4ea3ed62200ee0116fe0b5513ec97ba7f3ab1dd5cd0dc181eb93c3c1c7f767be7df3546ac07b622a8f4352eb883323c3a005a1c7db -DIST exim-4.96.2.tar.xz 1879896 BLAKE2B f172340e5f896dc1996e4e3cf46515c2336c47d3390524ca91cb9ef7258a62b83426592de582aa792584cbeaace519b4edea5e62b3ebeb8e5f599379255e04a5 SHA512 dc9f6a114e64ac826489edff88d50a24195b64714428e691c10a7bfb119b3ebb6455bf80cbb34dfd0a4e2e44cbde72effb009357a8e0a6065e512fe32092e3ed -DIST exim-4.96.tar.xz 1879152 BLAKE2B 4b424f2ebc661bd0db35d7f6da86300c6d5cb5b9a52cddd24fdd452daa76c84e471d4f8f278cf951d1503b01fd46fc3e6858d6feded09f34253d2cf2ae99b45a SHA512 6b863661465a0b9897c1b71875c5196a1903cf560dd85de45b08242b9731edb2bc10eb56945d62e477e5d15cc7a8d493915bff2ca81689673a8091c66f62c89e DIST exim-4.97.1.tar.xz 1919308 BLAKE2B ea41bf851185c7330e648c7757f2bf0b0aea3133e399630a40d220f5f542e9055e3ed0cd67c9ee5dcede281ccc17919a4ac328abd8f05d4d828e0381f10df0b8 SHA512 eab7ca28b37f1635c48f5e963ab69fcbad539b2c35a84286ecaad7d7ff5210bbefce86452302e08099afdc0710f9cb7ca6d9b152b0ba88a19292f7c5541e0cfc -DIST exim-pdf-4.96.2.tar.xz 2132268 BLAKE2B 9104d42d742e7152d166b6158a6f060d0a29143b11e5064ecda177ead59ac66a9bb6ab3575e5bcaf7af5b49964d29b841285e67184592a8b64bab6099f4c8ac9 SHA512 c35eea4ab5510bba50d22813b28c9d2f5e4e2fed76993693b997f2090024dde674d58dffe044cb64642bf57b83fcae3bfc3dbcae43288fae11692ee49374df74 -DIST exim-pdf-4.96.tar.xz 2137468 BLAKE2B 7f61767f91864c43a3b7b6ca36ec7f41da6ad7029687a38cfa9307c444c2ffbd3eb61d45645ffd20ec16ba64a37e1ff08c02e7e4e36499c7783679af9a399081 SHA512 05e94579631656330d95d237c58bc9fd52229a067c5846e7c3409b4c83040c9216819bcb0090673d9991fd59e2c2025340592b31b241b557c6775782106854d1 DIST exim-pdf-4.97.1.tar.xz 2139688 BLAKE2B baadbb6ca7b88b11ea88f6b5ce0c96d9d713a1f5b358e4dfb52647ccc2bb1a9a6f74e75341839a8ee7df327f2f5645dbf223e4e5923631b02aa53a01b436 SHA512 6aa733b1d48b6237f458939ff53e484e702f47a0c10ba781ba101db404d39667bd2ddc876af4f597deda1991e534d5b8b874c549e6a86b5325ebd624a6713183 DIST system_filter.exim.gz 3075 BLAKE2B d05e872b5cef377d29126cda03fc0a74c8777b2119b76ff43da6e8de808035eb9bfcb034a85d81824f135d484e864bfc0629fc1af2c228a7277d5ee7cf9cde79 SHA512 cb358d3ce2499a0bb5920d962a06f2af8486e55ec90c8c928bd8e3aefb279aa57f5f960d5adfcef68bd94110b405eaa144e9629cfe6014a529c79c544600bbf3 diff --git a/mail-mta/exim/exim-4.96-r4.ebuild b/mail-mta/exim/exim-4.96-r4.ebuild deleted file mode 100644 index c3bb1a1d477e.. --- a/mail-mta/exim/exim-4.96-r4.ebuild +++ /dev/null @@ -1,655 +0,0 @@ -# Copyright 1999-2023 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI="7" - -inherit db-use toolchain-funcs pam systemd - -IUSE="arc berkdb +dane dcc +dkim dlfunc dmarc +dnsdb doc dovecot-sasl -dsn gdbm gnutls idn ipv6 ldap lmtp maildir mbx -mysql nis pam perl pkcs11 postgres +prdr proxy radius redis sasl selinux -socks5 spf sqlite srs +ssl syslog tdb tcpd +tpda X" -REQUIRED_USE=" - arc? ( dkim spf ) - dane? ( ssl !gnutls ) - dmarc? ( dkim spf ) - dkim? ( ssl !gnutls ) - gnutls? ( ssl ) - pkcs11? ( ssl ) - || ( berkdb gdbm tdb ) -" -# NOTE on USE="gnutls dane", gnutls[dane] is masked in base, unmasked -# for x86 and amd64 only, due to this, repoman won't allow depending on -# gnutls[dane] for all else. Because we cannot express USE=dane when -# USE=gnutls is in effect only in package.use.mask, the only option we -# have left is to a) ignore the dependency (but that results in bug -# #661164) or b) mask the usage of USE=dane with USE=gnutls. Both are -# incorrect, but b) is the only "correct" view from repoman. -# We cannot express a required
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: 8a7059d941873a35822e577495cf71fdea4dcc08 Author: Fabian Groffen gentoo org> AuthorDate: Mon Dec 25 10:34:01 2023 + Commit: Fabian Groffen gentoo org> CommitDate: Mon Dec 25 10:42:12 2023 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=8a7059d9 mail-mta/exim-4.94.2: drop old sparc how has exim-4.96.2 stable Signed-off-by: Fabian Groffen gentoo.org> mail-mta/exim/exim-4.94.2-r7.ebuild| 618 - .../exim/files/exim-4.94-localscan_dlopen.patch| 269 - 2 files changed, 887 deletions(-) diff --git a/mail-mta/exim/exim-4.94.2-r7.ebuild b/mail-mta/exim/exim-4.94.2-r7.ebuild deleted file mode 100644 index 8f5367aecfb8.. --- a/mail-mta/exim/exim-4.94.2-r7.ebuild +++ /dev/null @@ -1,618 +0,0 @@ -# Copyright 1999-2022 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI="7" - -inherit db-use toolchain-funcs pam systemd - -IUSE="arc +dane dcc +dkim dlfunc dmarc +dnsdb doc dovecot-sasl dsn exiscan-acl gnutls idn ipv6 ldap lmtp maildir mbx mysql nis pam perl pkcs11 postgres +prdr proxy radius redis sasl selinux spf sqlite srs +srs-alt srs-native +ssl syslog tcpd +tpda X" -REQUIRED_USE=" - arc? ( dkim spf ) - dane? ( ssl !gnutls ) - dmarc? ( dkim spf ) - dkim? ( ssl !gnutls ) - gnutls? ( ssl ) - pkcs11? ( ssl ) - spf? ( exiscan-acl ) - srs? ( - exiscan-acl - ^^ ( srs-alt srs-native ) - ) -" -# NOTE on USE="gnutls dane", gnutls[dane] is masked in base, unmasked -# for x86 and amd64 only, due to this, repoman won't allow depending on -# gnutls[dane] for all else. Because we cannot express USE=dane when -# USE=gnutls is in effect only in package.use.mask, the only option we -# have left is to a) ignore the dependency (but that results in bug -# #661164) or b) mask the usage of USE=dane with USE=gnutls. Both are -# incorrect, but b) is the only "correct" view from repoman. - -SDIR=$([[ ${PV} == *_rc* ]] && echo /test -[[ ${PV} == *.*.*.* ]] && echo /fixes) -COMM_URI="https://downloads.exim.org/exim4${SDIR}; - -DESCRIPTION="A highly configurable, drop-in replacement for sendmail" -SRC_URI="${COMM_URI}/${P//_rc/-RC}.tar.xz - mirror://gentoo/system_filter.exim.gz - doc? ( ${COMM_URI}/${PN}-pdf-${PV//_rc/-RC}.tar.xz )" -HOMEPAGE="https://www.exim.org/; - -SLOT="0" -LICENSE="GPL-2" -KEYWORDS="sparc" - -COMMON_DEPEND=">=sys-apps/sed-4.0.5 - ( >=sys-libs/db-3.2:= =net-nds/openldap-2.0.7:= ) - nis? ( - elibc_glibc? ( - net-libs/libtirpc:= - >=net-libs/libnsl-1:= - ) - ) - mysql? ( dev-db/mysql-connector-c:= ) - postgres? ( dev-db/postgresql:= ) - sasl? ( >=dev-libs/cyrus-sasl-2.1.26-r2 ) - redis? ( dev-libs/hiredis:= ) - spf? ( >=mail-filter/libspf2-1.2.5-r1 ) - dmarc? ( mail-filter/opendmarc:= ) - srs? ( srs-alt? ( mail-filter/libsrs_alt ) ) - X? ( - x11-libs/libX11 - x11-libs/libXmu - x11-libs/libXt - x11-libs/libXaw - ) - sqlite? ( dev-db/sqlite ) - radius? ( net-dialup/freeradius-client ) - virtual/libcrypt:= - virtual/libiconv - elibc_glibc? ( net-libs/libnsl ) - " - # added X check for #57206 -BDEPEND="virtual/pkgconfig" -DEPEND="${COMMON_DEPEND}" -RDEPEND="${COMMON_DEPEND} - !mail-mta/courier - !mail-mta/esmtp - !mail-mta/msmtp[mta] - !mail-mta/netqmail - !mail-mta/nullmailer - !mail-mta/postfix - !mail-mta/sendmail - !mail-mta/opensmtpd - !mail-mta/ssmtp[mta] - >=net-mail/mailbase-0.00-r5 - virtual/logger - dcc? ( mail-filter/dcc ) - selinux? ( sec-policy/selinux-exim ) - " - -S=${WORKDIR}/${P//_rc/-RC} - -src_prepare() { - # Legacy patches which need a respin for -p1 - eapply -p0 "${FILESDIR}"/exim-4.14-tail.patch - eapply -p0 "${FILESDIR}"/exim-4.74-radius-db-ENV-clash.patch # 287426 - eapply "${FILESDIR}"/exim-4.93-as-needed-ldflags.patch # 352265, 391279 - eapply -p0 "${FILESDIR}"/exim-4.76-crosscompile.patch # 266591 - eapply "${FILESDIR}"/exim-4.69-r1.27021.patch - eapply "${FILESDIR}"/exim-4.94-localscan_dlopen.patch - - # for this reason we have a := dep on opendmarc, they changed their - # API in a minor release - if use dmarc && has_version ">=mail-filter/opendmarc-1.4" ; then - eapply "${FILESDIR}"/exim-4.94-opendmarc-1.4.patch - fi - - if use maildir ; then - eapply "${FILESDIR}"/exim-4.94-maildir.patch - else - eapply -p0 "${FILESDIR}"/exim-4.80-spool-mail-group.patch # 438606 - fi - - eapply_user - - # user Exim believes it should be - MAILUSER=mail - MAILGROUP=mail -
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: 38b56d6352c696749e20078af71daaf871e58691 Author: Fabian Groffen gentoo org> AuthorDate: Mon Dec 25 10:39:54 2023 + Commit: Fabian Groffen gentoo org> CommitDate: Mon Dec 25 10:42:12 2023 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=38b56d63 mail-mta/exim: add backport for CVE-2023-51766 to 4.96 and 4.97 Addresses: Partially vulnerable to "SMTP Smuggling" if pipelining is enabled and chunking is disabled/unused Signed-off-by: Fabian Groffen gentoo.org> mail-mta/exim/Manifest | 2 - .../{exim-4.97-r1.ebuild => exim-4.96-r5.ebuild} | 33 ++- .../{exim-4.97-r1.ebuild => exim-4.97-r2.ebuild} | 1 + mail-mta/exim/files/exim-4.97-CVE-2023-51766.patch | 265 + 4 files changed, 294 insertions(+), 7 deletions(-) diff --git a/mail-mta/exim/Manifest b/mail-mta/exim/Manifest index 2422a76d59b8..897713920daf 100644 --- a/mail-mta/exim/Manifest +++ b/mail-mta/exim/Manifest @@ -1,9 +1,7 @@ -DIST exim-4.94.2.tar.xz 1838076 BLAKE2B 684e115a7af3efdab15451f8e11f9b53455c9166d8c078216d7a95223d77569cec8a882ed99b9180acbd8a9e747a0bca03d56993d011de15dc35143a989ab046 SHA512 5334c236221ed4e03dbc33e6a79d939b06037fa2f4b71971607a360b67af5c85a89681ee13a5eeaf0184382c55a160cf2e89ed7afb2949f025a54f1e88f9e3fc DIST exim-4.96-gentoo-patches-r0.tar.xz 13308 BLAKE2B e01cd8b90593329d858cced27bea9da4860e80500c0b0b3f86418931a77616ac1e4a532cfffc551de5844bfcbcd115c1591b28577c234beb551458dc0877e764 SHA512 0a8d7b5903c8cd7c2cc07e4ea3ed62200ee0116fe0b5513ec97ba7f3ab1dd5cd0dc181eb93c3c1c7f767be7df3546ac07b622a8f4352eb883323c3a005a1c7db DIST exim-4.96.2.tar.xz 1879896 BLAKE2B f172340e5f896dc1996e4e3cf46515c2336c47d3390524ca91cb9ef7258a62b83426592de582aa792584cbeaace519b4edea5e62b3ebeb8e5f599379255e04a5 SHA512 dc9f6a114e64ac826489edff88d50a24195b64714428e691c10a7bfb119b3ebb6455bf80cbb34dfd0a4e2e44cbde72effb009357a8e0a6065e512fe32092e3ed DIST exim-4.96.tar.xz 1879152 BLAKE2B 4b424f2ebc661bd0db35d7f6da86300c6d5cb5b9a52cddd24fdd452daa76c84e471d4f8f278cf951d1503b01fd46fc3e6858d6feded09f34253d2cf2ae99b45a SHA512 6b863661465a0b9897c1b71875c5196a1903cf560dd85de45b08242b9731edb2bc10eb56945d62e477e5d15cc7a8d493915bff2ca81689673a8091c66f62c89e DIST exim-4.97.tar.xz 1909536 BLAKE2B b0f09d5f162853996976c222786de14e2104acdf01fd61da486f59f4cf8af1182cdfb7ea31fd55ccfd9c57256e7f442dc1b46727e08fe2eca82a296ac4ae7899 SHA512 b28cbb49fa7e143dfcc94e004d57cf98a1945013e676cd103c1ee4cf52933d49d378baa13bea2663353dba97745d6b2ab8b7b66cde870788a2d85d7abd716968 -DIST exim-pdf-4.94.2.tar.xz 2092248 BLAKE2B 973ab4f117fdb58afa017bc41b4496fac1277e707a9926d67317c455b0bd617021c17cba6c8d793d8962aacef12c0790d5add7174017512b7b1ea070f8e8533d SHA512 3a661f69d81a992798d4b7e5b7def7cfffa297a7b3c02a6631be426cefff5a6e8783fa322a1bd105d01f7b06968d01e77963e6ab7be3157f63eb62eb6ff172b0 DIST exim-pdf-4.96.2.tar.xz 2132268 BLAKE2B 9104d42d742e7152d166b6158a6f060d0a29143b11e5064ecda177ead59ac66a9bb6ab3575e5bcaf7af5b49964d29b841285e67184592a8b64bab6099f4c8ac9 SHA512 c35eea4ab5510bba50d22813b28c9d2f5e4e2fed76993693b997f2090024dde674d58dffe044cb64642bf57b83fcae3bfc3dbcae43288fae11692ee49374df74 DIST exim-pdf-4.96.tar.xz 2137468 BLAKE2B 7f61767f91864c43a3b7b6ca36ec7f41da6ad7029687a38cfa9307c444c2ffbd3eb61d45645ffd20ec16ba64a37e1ff08c02e7e4e36499c7783679af9a399081 SHA512 05e94579631656330d95d237c58bc9fd52229a067c5846e7c3409b4c83040c9216819bcb0090673d9991fd59e2c2025340592b31b241b557c6775782106854d1 DIST exim-pdf-4.97.tar.xz 2136852 BLAKE2B df188e658e9e86d1b651d12b29e8a440677d75cc0384bab829323582a3a89b62f34e504b759ef2824b7735056696aed6ac33a4ca10a74fc5bc036f150caaac12 SHA512 defd1e7d823f4eadd2afe426d9105a395421824a1b1941b97bfda408905bdd105b5c219b713e15506d25d98fa48e965228f8daab286dc1be14a387f567c0b58b diff --git a/mail-mta/exim/exim-4.97-r1.ebuild b/mail-mta/exim/exim-4.96-r5.ebuild similarity index 90% copy from mail-mta/exim/exim-4.97-r1.ebuild copy to mail-mta/exim/exim-4.96-r5.ebuild index 3dbed307e7e4..95cd963bee1d 100644 --- a/mail-mta/exim/exim-4.97-r1.ebuild +++ b/mail-mta/exim/exim-4.96-r5.ebuild @@ -3,7 +3,7 @@ EAPI="7" -inherit db-use flag-o-matic toolchain-funcs pam systemd +inherit db-use toolchain-funcs pam systemd IUSE="arc berkdb +dane dcc +dkim dlfunc dmarc +dnsdb doc dovecot-sasl dsn gdbm gnutls idn ipv6 ldap lmtp maildir mbx @@ -35,6 +35,7 @@ COMM_URI="https://downloads.exim.org/exim4${SDIR}; GPV="r0" DESCRIPTION="A highly configurable, drop-in replacement for sendmail" SRC_URI="${COMM_URI}/${P//_rc/-RC}.tar.xz + https://dev.gentoo.org/~grobian/distfiles/${P}-gentoo-patches-${GPV}.tar.xz mirror://gentoo/system_filter.exim.gz doc? ( ${COMM_URI}/${PN}-pdf-${PV//_rc/-RC}.tar.xz )" HOMEPAGE="https://www.exim.org/; @@ -111,11 +112,29 @@ src_prepare() { # Legacy patches which need a respin for -p1 eapply -p0 "${FILESDIR}"/exim-4.14-tail.patch eapply -p0
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: e1634b7a70c6c987472c68a979add070fea799d6 Author: Fabian Groffen gentoo org> AuthorDate: Wed Nov 8 08:03:24 2023 + Commit: Fabian Groffen gentoo org> CommitDate: Wed Nov 8 08:03:24 2023 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e1634b7a mail-mta/exim: cleanup Signed-off-by: Fabian Groffen gentoo.org> mail-mta/exim/Manifest | 2 - mail-mta/exim/exim-4.94.2-r12.ebuild | 662 - mail-mta/exim/exim-4.94.2-r7.ebuild| 2 +- mail-mta/exim/exim-4.96.1.ebuild | 655 mail-mta/exim/files/exim-4.94-CVE-2022-3559.patch | 99 --- .../exim/files/exim-4.94.2-fix-crash-resolve.patch | 24 - mail-mta/exim/files/exim-4.94.2-openssl3.patch | 332 --- 7 files changed, 1 insertion(+), 1775 deletions(-) diff --git a/mail-mta/exim/Manifest b/mail-mta/exim/Manifest index 1ad7d2a61766..2422a76d59b8 100644 --- a/mail-mta/exim/Manifest +++ b/mail-mta/exim/Manifest @@ -1,11 +1,9 @@ DIST exim-4.94.2.tar.xz 1838076 BLAKE2B 684e115a7af3efdab15451f8e11f9b53455c9166d8c078216d7a95223d77569cec8a882ed99b9180acbd8a9e747a0bca03d56993d011de15dc35143a989ab046 SHA512 5334c236221ed4e03dbc33e6a79d939b06037fa2f4b71971607a360b67af5c85a89681ee13a5eeaf0184382c55a160cf2e89ed7afb2949f025a54f1e88f9e3fc DIST exim-4.96-gentoo-patches-r0.tar.xz 13308 BLAKE2B e01cd8b90593329d858cced27bea9da4860e80500c0b0b3f86418931a77616ac1e4a532cfffc551de5844bfcbcd115c1591b28577c234beb551458dc0877e764 SHA512 0a8d7b5903c8cd7c2cc07e4ea3ed62200ee0116fe0b5513ec97ba7f3ab1dd5cd0dc181eb93c3c1c7f767be7df3546ac07b622a8f4352eb883323c3a005a1c7db -DIST exim-4.96.1.tar.xz 1879404 BLAKE2B fc6425be41ef7722f7d7b6b541c01774a4bafe55ca38152dc3fbb837e00ea52fabc39a42fcbf0500f4e0eda40deec3cbb0d746da9700a4a615f9ee4869e325c5 SHA512 ef1a0e57c59cdf4e915b3ac5dcdbc69f565b14dd92b0527f6796b2c46a9ec34f991f9790fb4171c99417f7e482cdd62d77e780cc71fab227c8bed876103f7fdd DIST exim-4.96.2.tar.xz 1879896 BLAKE2B f172340e5f896dc1996e4e3cf46515c2336c47d3390524ca91cb9ef7258a62b83426592de582aa792584cbeaace519b4edea5e62b3ebeb8e5f599379255e04a5 SHA512 dc9f6a114e64ac826489edff88d50a24195b64714428e691c10a7bfb119b3ebb6455bf80cbb34dfd0a4e2e44cbde72effb009357a8e0a6065e512fe32092e3ed DIST exim-4.96.tar.xz 1879152 BLAKE2B 4b424f2ebc661bd0db35d7f6da86300c6d5cb5b9a52cddd24fdd452daa76c84e471d4f8f278cf951d1503b01fd46fc3e6858d6feded09f34253d2cf2ae99b45a SHA512 6b863661465a0b9897c1b71875c5196a1903cf560dd85de45b08242b9731edb2bc10eb56945d62e477e5d15cc7a8d493915bff2ca81689673a8091c66f62c89e DIST exim-4.97.tar.xz 1909536 BLAKE2B b0f09d5f162853996976c222786de14e2104acdf01fd61da486f59f4cf8af1182cdfb7ea31fd55ccfd9c57256e7f442dc1b46727e08fe2eca82a296ac4ae7899 SHA512 b28cbb49fa7e143dfcc94e004d57cf98a1945013e676cd103c1ee4cf52933d49d378baa13bea2663353dba97745d6b2ab8b7b66cde870788a2d85d7abd716968 DIST exim-pdf-4.94.2.tar.xz 2092248 BLAKE2B 973ab4f117fdb58afa017bc41b4496fac1277e707a9926d67317c455b0bd617021c17cba6c8d793d8962aacef12c0790d5add7174017512b7b1ea070f8e8533d SHA512 3a661f69d81a992798d4b7e5b7def7cfffa297a7b3c02a6631be426cefff5a6e8783fa322a1bd105d01f7b06968d01e77963e6ab7be3157f63eb62eb6ff172b0 -DIST exim-pdf-4.96.1.tar.xz 2132252 BLAKE2B 7e6d756630211b6465f9162c7a6b461774b3999ad8c3c1ace157a39b7e07f86644d206c5687991b6098aec47445319def44ddb2895b2a16146f6abd1c11d47a6 SHA512 d39ee2f9a05326809a6e8454a108d717838dacfa42c2cade72f5937b1b44d70e70152fa75f4b4e9548cd4198d54f8a8c1323e14d7d1f9a0a23c99a53db1001b0 DIST exim-pdf-4.96.2.tar.xz 2132268 BLAKE2B 9104d42d742e7152d166b6158a6f060d0a29143b11e5064ecda177ead59ac66a9bb6ab3575e5bcaf7af5b49964d29b841285e67184592a8b64bab6099f4c8ac9 SHA512 c35eea4ab5510bba50d22813b28c9d2f5e4e2fed76993693b997f2090024dde674d58dffe044cb64642bf57b83fcae3bfc3dbcae43288fae11692ee49374df74 DIST exim-pdf-4.96.tar.xz 2137468 BLAKE2B 7f61767f91864c43a3b7b6ca36ec7f41da6ad7029687a38cfa9307c444c2ffbd3eb61d45645ffd20ec16ba64a37e1ff08c02e7e4e36499c7783679af9a399081 SHA512 05e94579631656330d95d237c58bc9fd52229a067c5846e7c3409b4c83040c9216819bcb0090673d9991fd59e2c2025340592b31b241b557c6775782106854d1 DIST exim-pdf-4.97.tar.xz 2136852 BLAKE2B df188e658e9e86d1b651d12b29e8a440677d75cc0384bab829323582a3a89b62f34e504b759ef2824b7735056696aed6ac33a4ca10a74fc5bc036f150caaac12 SHA512 defd1e7d823f4eadd2afe426d9105a395421824a1b1941b97bfda408905bdd105b5c219b713e15506d25d98fa48e965228f8daab286dc1be14a387f567c0b58b diff --git a/mail-mta/exim/exim-4.94.2-r12.ebuild b/mail-mta/exim/exim-4.94.2-r12.ebuild deleted file mode 100644 index c84859d97f58.. --- a/mail-mta/exim/exim-4.94.2-r12.ebuild +++ /dev/null @@ -1,662 +0,0 @@ -# Copyright 1999-2022 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI="7" - -inherit db-use toolchain-funcs pam systemd - -IUSE="arc berkdb +dane dcc +dkim dlfunc dmarc +dnsdb doc dovecot-sasl -dsn exiscan-acl gdbm gnutls idn ipv6 ldap lmtp
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: 050f88a892c6dc4f60c338ed8da4fb953f85090e Author: Fabian Groffen gentoo org> AuthorDate: Sat May 27 09:24:25 2023 + Commit: Fabian Groffen gentoo org> CommitDate: Sat May 27 09:24:50 2023 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=050f88a8 mail-mta/exim-4.96-r3: move 4.96 patches into tarball Signed-off-by: Fabian Groffen gentoo.org> mail-mta/exim/Manifest | 1 + mail-mta/exim/exim-4.96-r3.ebuild | 33 +-- mail-mta/exim/files/exim-4.96-dane-dns_again.patch | 81 --- .../exim/files/exim-4.96-deamon-startup-fix.patch | 53 - .../files/exim-4.96-dmarc_use_after_free.patch | 31 --- .../exim/files/exim-4.96-expansion-crash.patch | 69 -- .../exim/files/exim-4.96-openssl-bad-alpn.patch| 101 - .../files/exim-4.96-openssl-double-expansion.patch | 217 --- .../files/exim-4.96-openssl-tls_eccurve-lt-3.patch | 44 .../exim-4.96-openssl-tls_eccurve-setting.patch| 169 --- .../exim/files/exim-4.96-openssl-verify-ocsp.patch | 232 - .../exim/files/exim-4.96-recursion-dns_again.patch | 57 - .../files/exim-4.96-regex-use-after-free.patch | 173 --- .../exim-4.96-rewrite-malformed-addr-fix.patch | 42 .../files/exim-4.96-spf-memory-error-fix.patch | 25 --- .../exim/files/exim-4.96-transport-crash.patch | 27 --- 16 files changed, 20 insertions(+), 1335 deletions(-) diff --git a/mail-mta/exim/Manifest b/mail-mta/exim/Manifest index 254aa57e04a2..079903b715c8 100644 --- a/mail-mta/exim/Manifest +++ b/mail-mta/exim/Manifest @@ -1,4 +1,5 @@ DIST exim-4.94.2.tar.xz 1838076 BLAKE2B 684e115a7af3efdab15451f8e11f9b53455c9166d8c078216d7a95223d77569cec8a882ed99b9180acbd8a9e747a0bca03d56993d011de15dc35143a989ab046 SHA512 5334c236221ed4e03dbc33e6a79d939b06037fa2f4b71971607a360b67af5c85a89681ee13a5eeaf0184382c55a160cf2e89ed7afb2949f025a54f1e88f9e3fc +DIST exim-4.96-gentoo-patches-r0.tar.xz 13308 BLAKE2B e01cd8b90593329d858cced27bea9da4860e80500c0b0b3f86418931a77616ac1e4a532cfffc551de5844bfcbcd115c1591b28577c234beb551458dc0877e764 SHA512 0a8d7b5903c8cd7c2cc07e4ea3ed62200ee0116fe0b5513ec97ba7f3ab1dd5cd0dc181eb93c3c1c7f767be7df3546ac07b622a8f4352eb883323c3a005a1c7db DIST exim-4.96.tar.xz 1879152 BLAKE2B 4b424f2ebc661bd0db35d7f6da86300c6d5cb5b9a52cddd24fdd452daa76c84e471d4f8f278cf951d1503b01fd46fc3e6858d6feded09f34253d2cf2ae99b45a SHA512 6b863661465a0b9897c1b71875c5196a1903cf560dd85de45b08242b9731edb2bc10eb56945d62e477e5d15cc7a8d493915bff2ca81689673a8091c66f62c89e DIST exim-pdf-4.94.2.tar.xz 2092248 BLAKE2B 973ab4f117fdb58afa017bc41b4496fac1277e707a9926d67317c455b0bd617021c17cba6c8d793d8962aacef12c0790d5add7174017512b7b1ea070f8e8533d SHA512 3a661f69d81a992798d4b7e5b7def7cfffa297a7b3c02a6631be426cefff5a6e8783fa322a1bd105d01f7b06968d01e77963e6ab7be3157f63eb62eb6ff172b0 DIST exim-pdf-4.96.tar.xz 2137468 BLAKE2B 7f61767f91864c43a3b7b6ca36ec7f41da6ad7029687a38cfa9307c444c2ffbd3eb61d45645ffd20ec16ba64a37e1ff08c02e7e4e36499c7783679af9a399081 SHA512 05e94579631656330d95d237c58bc9fd52229a067c5846e7c3409b4c83040c9216819bcb0090673d9991fd59e2c2025340592b31b241b557c6775782106854d1 diff --git a/mail-mta/exim/exim-4.96-r3.ebuild b/mail-mta/exim/exim-4.96-r3.ebuild index 646aa80b8ade..b9f58258caa4 100644 --- a/mail-mta/exim/exim-4.96-r3.ebuild +++ b/mail-mta/exim/exim-4.96-r3.ebuild @@ -34,8 +34,10 @@ SDIR=$([[ ${PV} == *_rc* ]] && echo /test [[ ${PV} == *.*.*.* ]] && echo /fixes) COMM_URI="https://downloads.exim.org/exim4${SDIR}; +GPV="r0" DESCRIPTION="A highly configurable, drop-in replacement for sendmail" SRC_URI="${COMM_URI}/${P//_rc/-RC}.tar.xz + https://dev.gentoo.org/~grobian/distfiles/${P}-gentoo-patches-${GPV}.tar.xz mirror://gentoo/system_filter.exim.gz doc? ( ${COMM_URI}/${PN}-pdf-${PV//_rc/-RC}.tar.xz )" HOMEPAGE="https://www.exim.org/; @@ -116,20 +118,23 @@ src_prepare() { eapply -p0 "${FILESDIR}"/exim-4.76-crosscompile.patch # 266591 eapply "${FILESDIR}"/exim-4.69-r1.27021.patch eapply "${FILESDIR}"/exim-4.95-localscan_dlopen.patch - eapply "${FILESDIR}"/exim-4.96-rewrite-malformed-addr-fix.patch # upstr - eapply "${FILESDIR}"/exim-4.96-spf-memory-error-fix.patch # upstr - eapply "${FILESDIR}"/exim-4.96-regex-use-after-free.patch # upstr - eapply -p2 "${FILESDIR}"/exim-4.96-dmarc_use_after_free.patch # upstr - eapply "${FILESDIR}"/exim-4.96-deamon-startup-fix.patch # upstr - eapply "${FILESDIR}"/exim-4.96-openssl-verify-ocsp.patch # upstr - eapply "${FILESDIR}"/exim-4.96-openssl-double-expansion.patch # upstr - eapply "${FILESDIR}"/exim-4.96-recursion-dns_again.patch # upstr - eapply "${FILESDIR}"/exim-4.96-openssl-tls_eccurve-setting.patch # upstr - eapply
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: d4637e8d3a6d78bfb956570ddf9b03236f3620c0 Author: Fabian Groffen gentoo org> AuthorDate: Tue Jan 3 10:22:20 2023 + Commit: Fabian Groffen gentoo org> CommitDate: Tue Jan 3 10:22:20 2023 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d4637e8d mail-mta/exim-4.94.2-r12: update openssl-3 patches Signed-off-by: Fabian Groffen gentoo.org> ...im-4.94.2-r11.ebuild => exim-4.94.2-r12.ebuild} | 2 +- mail-mta/exim/files/exim-4.94.2-openssl3.patch | 306 - 2 files changed, 303 insertions(+), 5 deletions(-) diff --git a/mail-mta/exim/exim-4.94.2-r11.ebuild b/mail-mta/exim/exim-4.94.2-r12.ebuild similarity index 99% rename from mail-mta/exim/exim-4.94.2-r11.ebuild rename to mail-mta/exim/exim-4.94.2-r12.ebuild index 352ae0cdcd7e..a347cf1581f6 100644 --- a/mail-mta/exim/exim-4.94.2-r11.ebuild +++ b/mail-mta/exim/exim-4.94.2-r12.ebuild @@ -122,7 +122,7 @@ src_prepare() { eapply "${FILESDIR}"/exim-4.94-localscan_dlopen.patch eapply "${FILESDIR}"/exim-4.94.2-fix-crash-resolve.patch # 799368 upstr eapply "${FILESDIR}"/exim-4.94-CVE-2022-3559.patch # 877607 upstr - eapply "${FILESDIR}"/exim-4.94.2-openssl3.patch # 888619 backport + eapply "${FILESDIR}"/exim-4.94.2-openssl3.patch # 888619 backports # for this reason we have a := dep on opendmarc, they changed their # API in a minor release diff --git a/mail-mta/exim/files/exim-4.94.2-openssl3.patch b/mail-mta/exim/files/exim-4.94.2-openssl3.patch index d1102aac8bfa..f9758515bef1 100644 --- a/mail-mta/exim/files/exim-4.94.2-openssl3.patch +++ b/mail-mta/exim/files/exim-4.94.2-openssl3.patch @@ -1,13 +1,34 @@ -Based on original commit, but applied to 4.94.2 tarball. +Original commits from upstream applied to 4.94.2 release tarball + +From a5d79c99f4948d9fd288a1bfaca3a44cf2caaa32 Mon Sep 17 00:00:00 2001 +From: Jeremy Harris +Date: Wed, 1 Dec 2021 17:36:18 + +Subject: [PATCH] OpenSSL: use nondeprecated D-H functions under 3.0.0. + +From c6a290f4d8df3734b3cdc2232b4334ff8386c1da Mon Sep 17 00:00:00 2001 +From: Jeremy Harris +Date: Wed, 1 Dec 2021 18:52:21 + +Subject: [PATCH] OpenSSL: tidy DH and ECDH param setup Testsuite: expand DH + testcase From ff7829398d74e67f1c1f40339a772fd76708e5ac Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jaroslav=20=C5=A0karvada?= Date: Sat, 27 Nov 2021 21:07:15 + Subject: [PATCH] Fix build for OpenSSL 3.0.0 . Bug 2810 - src/src/tls-openssl.c | 10 +++--- - 1 file changed, 7 insertions(+), 3 deletions(-) +From ca4014de81e6aa367aa0a54c49b4c3d4b137814c Mon Sep 17 00:00:00 2001 +From: Jeremy Harris +Date: Sun, 1 Jan 2023 12:18:38 + +Subject: [PATCH] OpenSSL: fix tls_eccurve setting explicit curve/group. Bug + 2954 + +From 7fa5764c203f2f4a900898a79ed02d674075313f Mon Sep 17 00:00:00 2001 +From: Jeremy Harris +Date: Mon, 2 Jan 2023 15:04:14 + +Subject: [PATCH] OpenSSL: Fix tls_eccurve on earlier versions than 3.0.0. Bug + 2954 + +Broken-by: ca4014de81e6 --- a/src/tls-openssl.c +++ b/src/tls-openssl.c @@ -32,3 +53,280 @@ Subject: [PATCH] Fix build for OpenSSL 3.0.0 . Bug 2810 #endif #ifdef SSL_OP_NO_TLSv1_2 { US"no_tlsv1_2", SSL_OP_NO_TLSv1_2 }, +@@ -1017,23 +1021,27 @@ + */ + + /* If dhparam is set, expand it, and load up the parameters for DH encryption. ++Server only. + + Arguments: + sctx The current SSL CTX (inbound or outbound) + dhparam DH parameter file or fixed parameter identity string +- host connected host, if client; NULL if server + errstrerror string pointer + + Returns:TRUE if OK (nothing to set up, or setup worked) + */ + + static BOOL +-init_dh(SSL_CTX *sctx, uschar *dhparam, const host_item *host, uschar ** errstr) ++init_dh(SSL_CTX * sctx, uschar * dhparam, uschar ** errstr) + { +-BIO *bio; +-DH *dh; +-uschar *dhexpanded; +-const char *pem; ++BIO * bio; ++#if OPENSSL_VERSION_NUMBER < 0x3000L ++DH * dh; ++#else ++EVP_PKEY * pkey; ++#endif ++uschar * dhexpanded; ++const char * pem; + int dh_bitsize; + + if (!expand_check(dhparam, US"tls_dhparam", , errstr)) +@@ -1046,7 +1054,7 @@ + if (!(bio = BIO_new_file(CS dhexpanded, "r"))) + { + tls_error(string_sprintf("could not read dhparams file %s", dhexpanded), +- host, US strerror(errno), errstr); ++ NULL, US strerror(errno), errstr); + return FALSE; + } + } +@@ -1061,17 +1069,23 @@ + if (!(pem = std_dh_prime_named(dhexpanded))) + { + tls_error(string_sprintf("Unknown standard DH prime \"%s\"", dhexpanded), +-host, US strerror(errno), errstr); ++NULL, US strerror(errno), errstr); + return FALSE; + } + bio = BIO_new_mem_buf(CS pem, -1); + } + +-if (!(dh = PEM_read_bio_DHparams(bio, NULL, NULL, NULL))) ++if (!( ++#if OPENSSL_VERSION_NUMBER < 0x3000L ++ dh = PEM_read_bio_DHparams(bio, NULL, NULL, NULL) ++#else ++
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: c1ee45f74e9ab5f27b279d1a604f6dc71f7685b7 Author: Fabian Groffen gentoo org> AuthorDate: Wed Oct 19 09:18:29 2022 + Commit: Fabian Groffen gentoo org> CommitDate: Wed Oct 19 09:20:50 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c1ee45f7 mail-mta/exim-4.94.2-r10: revbump to fix compilation with exiscan The CVE patch broke compilation when content scanning is not enabled. Ensure the regex_vars_clear function is always built. Closes: https://bugs.gentoo.org/877633 Signed-off-by: Fabian Groffen gentoo.org> ...xim-4.94.2-r9.ebuild => exim-4.94.2-r10.ebuild} | 0 mail-mta/exim/files/exim-4.94-CVE-2022-3559.patch | 28 ++ 2 files changed, 13 insertions(+), 15 deletions(-) diff --git a/mail-mta/exim/exim-4.94.2-r9.ebuild b/mail-mta/exim/exim-4.94.2-r10.ebuild similarity index 100% rename from mail-mta/exim/exim-4.94.2-r9.ebuild rename to mail-mta/exim/exim-4.94.2-r10.ebuild diff --git a/mail-mta/exim/files/exim-4.94-CVE-2022-3559.patch b/mail-mta/exim/files/exim-4.94-CVE-2022-3559.patch index 9617c70d9e57..8793514b8fb7 100644 --- a/mail-mta/exim/files/exim-4.94-CVE-2022-3559.patch +++ b/mail-mta/exim/files/exim-4.94-CVE-2022-3559.patch @@ -50,21 +50,6 @@ Subject: [PATCH 1/1] Fix $regex use-after-free. Bug 2915 #endif --- exim-4.94.2/src/regex.c2021-04-30 14:08:21.0 +0200 +++ exim-4.94.2/src/regex.c2022-10-19 09:35:03.229084750 +0200 -@@ -87,6 +87,14 @@ - return FAIL; - } - -+/* reset expansion variables */ -+void -+regex_vars_clear(void) -+{ -+regex_match_string = NULL; -+for (int i = 0; i < REGEX_VARS; i++) regex_vars[i] = NULL; -+} -+ - int - regex(const uschar **listptr) - { @@ -98,7 +106,7 @@ int ret = FAIL; @@ -84,6 +69,19 @@ Subject: [PATCH 1/1] Fix $regex use-after-free. Bug 2915 /* precompile our regexes */ if (!(re_list_head = compile(*listptr))) +@@ -213,3 +205,12 @@ + } + + #endif /* WITH_CONTENT_SCAN */ ++ ++/* reset expansion variables */ ++void ++regex_vars_clear(void) ++{ ++regex_match_string = NULL; ++for (int i = 0; i < REGEX_VARS; i++) regex_vars[i] = NULL; ++} ++ --- exim-4.94.2/src/smtp_in.c 2021-04-30 14:08:21.0 +0200 +++ exim-4.94.2/src/smtp_in.c 2022-10-19 09:15:58.613447975 +0200 @@ -2161,8 +2161,10 @@
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: 6a18f75bc0b98b1bc66844c82d5eee10eac9dfd7 Author: Fabian Groffen gentoo org> AuthorDate: Mon Jun 8 08:05:57 2020 + Commit: Fabian Groffen gentoo org> CommitDate: Mon Jun 8 08:06:10 2020 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=6a18f75b mail-mta/exim-4.94-r1: fix PAM expansion, bug #727310 Closes: https://bugs.gentoo.org/727310 Package-Manager: Portage-2.3.99, Repoman-2.3.22 Signed-off-by: Fabian Groffen gentoo.org> .../exim/{exim-4.94.ebuild => exim-4.94-r1.ebuild} | 1 + .../exim/files/exim-4.94-taint-pam-expansion.patch | 35 ++ 2 files changed, 36 insertions(+) diff --git a/mail-mta/exim/exim-4.94.ebuild b/mail-mta/exim/exim-4.94-r1.ebuild similarity index 99% rename from mail-mta/exim/exim-4.94.ebuild rename to mail-mta/exim/exim-4.94-r1.ebuild index cc977b34b9a..52358f32bef 100644 --- a/mail-mta/exim/exim-4.94.ebuild +++ b/mail-mta/exim/exim-4.94-r1.ebuild @@ -114,6 +114,7 @@ src_prepare() { eapply -p0 "${FILESDIR}"/exim-4.76-crosscompile.patch # 266591 eapply "${FILESDIR}"/exim-4.69-r1.27021.patch eapply "${FILESDIR}"/exim-4.94-localscan_dlopen.patch + eapply -p2 "${FILESDIR}"/exim-4.94-taint-pam-expansion.patch # drop on NR if use maildir ; then eapply "${FILESDIR}"/exim-4.94-maildir.patch diff --git a/mail-mta/exim/files/exim-4.94-taint-pam-expansion.patch b/mail-mta/exim/files/exim-4.94-taint-pam-expansion.patch new file mode 100644 index 000..81863d340ed --- /dev/null +++ b/mail-mta/exim/files/exim-4.94-taint-pam-expansion.patch @@ -0,0 +1,35 @@ +From f7f933a199be8bb7362c715e0040545b514cddca Mon Sep 17 00:00:00 2001 +From: Jeremy Harris +Date: Tue, 2 Jun 2020 14:50:31 +0100 +Subject: [PATCH] Taint: fix pam expansion condition. Bug 2587 + +--- + doc/doc-txt/ChangeLog| 5 + + src/src/auths/call_pam.c | 5 ++--- + 2 files changed, 7 insertions(+), 3 deletions(-) + +modified for gentoo so the patch applies by dropping Changelog part + +diff --git a/src/src/auths/call_pam.c b/src/src/auths/call_pam.c +index 2959cbbf3..80bb23ec3 100644 +--- a/src/src/auths/call_pam.c b/src/src/auths/call_pam.c +@@ -83,8 +83,7 @@ for (int i = 0; i < num_msg; i++) + { + case PAM_PROMPT_ECHO_ON: + case PAM_PROMPT_ECHO_OFF: +- arg = string_nextinlist(_args, , big_buffer, big_buffer_size); +- if (!arg) ++ if (!(arg = string_nextinlist(_args, , NULL, 0))) + { + arg = US""; + pam_arg_ended = TRUE; +@@ -155,7 +154,7 @@ pam_arg_ended = FALSE; + fail. PAM doesn't support authentication with an empty user (it prompts for it, + causing a potential mis-interpretation). */ + +-user = string_nextinlist(_args, , big_buffer, big_buffer_size); ++user = string_nextinlist(_args, , NULL, 0); + if (user == NULL || user[0] == 0) return FAIL; + + /* Start off PAM interaction */
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: 1468afd12e683a61448e2ff58c47e54715f0ff29 Author: Fabian Groffen gentoo org> AuthorDate: Wed May 13 07:44:37 2020 + Commit: Fabian Groffen gentoo org> CommitDate: Wed May 13 07:45:13 2020 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1468afd1 mail-mta/exim-4.93.0.4-r1: revbump for CVE-2020-12783 Bug: https://bugs.gentoo.org/722484 Package-Manager: Portage-2.3.89, Repoman-2.3.20 Signed-off-by: Fabian Groffen gentoo.org> ...xim-4.93.0.4.ebuild => exim-4.93.0.4-r1.ebuild} | 1 + mail-mta/exim/files/exim-4.93-CVE-2020-12783.patch | 83 ++ 2 files changed, 84 insertions(+) diff --git a/mail-mta/exim/exim-4.93.0.4.ebuild b/mail-mta/exim/exim-4.93.0.4-r1.ebuild similarity index 99% rename from mail-mta/exim/exim-4.93.0.4.ebuild rename to mail-mta/exim/exim-4.93.0.4-r1.ebuild index ae3fd4019c8..714de0e7045 100644 --- a/mail-mta/exim/exim-4.93.0.4.ebuild +++ b/mail-mta/exim/exim-4.93.0.4-r1.ebuild @@ -115,6 +115,7 @@ src_prepare() { eapply "${FILESDIR}"/exim-4.69-r1.27021.patch eapply "${FILESDIR}"/exim-4.93-localscan_dlopen.patch eapply -p2 "${FILESDIR}"/exim-4.93-radius.patch # 720364 + eapply "${FILESDIR}"/exim-4.93-CVE-2020-12783.patch # 722484 if use maildir ; then eapply "${FILESDIR}"/exim-4.20-maildir.patch diff --git a/mail-mta/exim/files/exim-4.93-CVE-2020-12783.patch b/mail-mta/exim/files/exim-4.93-CVE-2020-12783.patch new file mode 100644 index 000..c957d5541e4 --- /dev/null +++ b/mail-mta/exim/files/exim-4.93-CVE-2020-12783.patch @@ -0,0 +1,83 @@ +auths/spa: fix for CVE-2020-12783 + +This is a combined patch of git commits: + +57aa14b216432be381b6295c312065b2fd034f86 +a04174dc2a84ae1008c23b6a7109e7fa3fb7b8b0 + +leaving out whitespace noise for a smaller patch +and made it apply to the 4.93 release + +modified paths because Exim dists differ in layout from the git repo + +Fix SPA authenticator, checking client-supplied data before using it. Bug 2571 +Rework SPA fix to avoid overflows. Bug 2571 + + +--- a/src/auths/auth-spa.c b/src/auths/auth-spa.c +@@ -405,7 +405,7 @@ int + /* base 64 to raw bytes in quasi-big-endian order, returning count of bytes */ + { + int len = 0; +- register uschar digit1, digit2, digit3, digit4; ++ uschar digit1, digit2, digit3, digit4; + + if (in[0] == '+' && in[1] == ' ') + in += 2; +--- a/src/auths/spa.c b/src/auths/spa.c +@@ -139,7 +139,8 @@ SPAAuthChallenge challenge; + SPAAuthResponse response; + SPAAuthResponse *responseptr = + uschar msgbuf[2048]; +-uschar *clearpass; ++uschar *clearpass, *s; ++unsigned off; + + /* send a 334, MS Exchange style, and grab the client's request, + unless we already have it via an initial response. */ +@@ -194,9 +195,19 @@ that causes failure if the size of msgbuf is exceeded. / + + { + int i; +- char *p = ((char*)responseptr) + IVAL(>uUser.offset,0); ++ char * p; + int len = SVAL(>uUser.len,0)/2; + ++ if ( (off = IVAL(>uUser.offset,0)) >= sizeof(SPAAuthResponse) ++ || len >= sizeof(responseptr->buffer)/2 ++ || (p = (CS responseptr) + off) + len*2 >= CS (responseptr+1) ++ ) ++{ ++DEBUG(D_auth) ++ debug_printf("auth_spa_server(): bad uUser spec in response\n"); ++return FAIL; ++} ++ + if (len + 1 >= sizeof(msgbuf)) return FAIL; + for (i = 0; i < len; ++i) + { +@@ -245,12 +256,16 @@ spa_smb_nt_encrypt(clearpass, challenge.challengeData, ntRespData); + + /* compare NT hash (LM may not be available) */ + +-if (memcmp(ntRespData, +- ((unsigned char*)responseptr)+IVAL(>ntResponse.offset,0), +- 24) == 0) +- /* success. we have a winner. */ +- { ++off = IVAL(>ntResponse.offset,0); ++if (off >= sizeof(SPAAuthResponse) - 24) ++ { ++ DEBUG(D_auth) ++debug_printf("auth_spa_server(): bad ntRespData spec in response\n"); ++ return FAIL; ++ } ++s = (US responseptr) + off; ++ ++if (memcmp(ntRespData, s, 24) == 0) + return auth_check_serv_cond(ablock); +- } + + /* Expand server_condition as an authorization check (PH) */
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: 631b045c07527ab0ca4d4d585c56faa3855187fe Author: Fabian Groffen gentoo org> AuthorDate: Sat May 9 09:57:23 2020 + Commit: Fabian Groffen gentoo org> CommitDate: Sat May 9 09:57:38 2020 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=631b045c mail-mta/exim-4.93.0.4: fix compilation with certain USE-combinations - fix localscan compilation - fix nis compilation - refine DB includes to lookup only - fix radius compilation Closes: https://bugs.gentoo.org/720364 Closes: https://bugs.gentoo.org/720362 Package-Manager: Portage-2.3.89, Repoman-2.3.20 Signed-off-by: Fabian Groffen gentoo.org> mail-mta/exim/exim-4.93.0.4.ebuild | 8 ++- .../exim/files/exim-4.93-localscan_dlopen.patch| 4 +- mail-mta/exim/files/exim-4.93-radius.patch | 66 ++ 3 files changed, 74 insertions(+), 4 deletions(-) diff --git a/mail-mta/exim/exim-4.93.0.4.ebuild b/mail-mta/exim/exim-4.93.0.4.ebuild index a7ac64a9ffb..6e787039465 100644 --- a/mail-mta/exim/exim-4.93.0.4.ebuild +++ b/mail-mta/exim/exim-4.93.0.4.ebuild @@ -114,6 +114,7 @@ src_prepare() { eapply -p0 "${FILESDIR}"/exim-4.76-crosscompile.patch # 266591 eapply "${FILESDIR}"/exim-4.69-r1.27021.patch eapply "${FILESDIR}"/exim-4.93-localscan_dlopen.patch + eapply -p2 "${FILESDIR}"/exim-4.93-radius.patch # 720364 if use maildir ; then eapply "${FILESDIR}"/exim-4.20-maildir.patch @@ -219,11 +220,11 @@ src_configure() { local DB_VERS="5.3 5.1 4.8 4.7 4.6 4.5 4.4 4.3 4.2 3.2" cat >> Makefile <<- EOC USE_DB=yes - CFLAGS+=-I$(db_includedir ${DB_VERS}) - DBMLIB=-l$(db_libname ${DB_VERS}) LOOKUP_CDB=yes LOOKUP_PASSWD=yes LOOKUP_DSEARCH=yes + LOOKUP_INCLUDE += -I$(db_includedir ${DB_VERS}) + DBMLIB = -l$(db_libname ${DB_VERS}) EOC if ! use dnsdb; then @@ -255,7 +256,8 @@ src_configure() { EOC if use elibc_glibc ; then cat >> Makefile <<- EOC - CFLAGS += -I"${EPREFIX}"/usr/include/tirpc + LOOKUP_INCLUDE += -I"${EPREFIX}"/usr/include/tirpc + LOOKUP_LIBS += -lnsl EOC fi fi diff --git a/mail-mta/exim/files/exim-4.93-localscan_dlopen.patch b/mail-mta/exim/files/exim-4.93-localscan_dlopen.patch index d2a5e63128a..0d016dbeb26 100644 --- a/mail-mta/exim/files/exim-4.93-localscan_dlopen.patch +++ b/mail-mta/exim/files/exim-4.93-localscan_dlopen.patch @@ -72,7 +72,7 @@ Only in exim-4.92/src: globals.h.orig diff -ur exim-4.92.orig/src/local_scan.c exim-4.92/src/local_scan.c --- exim-4.92.orig/src/local_scan.c2019-01-30 14:59:52.0 +0100 +++ exim-4.92/src/local_scan.c 2019-02-16 18:29:56.832732592 +0100 -@@ -5,61 +5,131 @@ +@@ -5,61 +5,133 @@ /* Copyright (c) University of Cambridge 1995 - 2009 */ /* See the file NOTICE for conditions of use and distribution. */ @@ -126,9 +126,11 @@ diff -ur exim-4.92.orig/src/local_scan.c exim-4.92/src/local_scan.c - is used in the rejection message. -*/ +#ifdef DLOPEN_LOCAL_SCAN ++#include +#include +static int (*local_scan_fn)(int fd, uschar **return_text) = NULL; +static int load_local_scan_library(void); ++extern uschar *local_scan_path;/* Path to local_scan() library */ +#endif int diff --git a/mail-mta/exim/files/exim-4.93-radius.patch b/mail-mta/exim/files/exim-4.93-radius.patch new file mode 100644 index 000..55c52bee561 --- /dev/null +++ b/mail-mta/exim/files/exim-4.93-radius.patch @@ -0,0 +1,66 @@ +From 70b28b113e21d21a528876c3abe88ccb5f7cc77d Mon Sep 17 00:00:00 2001 +From: Fabian Groffen +Date: Sat, 9 May 2020 11:35:12 +0200 +Subject: [PATCH] call_radius: fix compilation due to incorrect usage of + string_sprintf + +Since f3ebb786e451da973560f1c9d8cdb151d25108b5, string_sprintf cannot be +used without arguments any more, so use US directly. + +While at it, also make newline usage consistent to not return a newline +in errptr, when it is debug-printed, a newline is added. + +https://bugs.gentoo.org/720364 + +Signed-off-by: Fabian Groffen +--- + src/src/auths/call_radius.c | 16 + 1 file changed, 8 insertions(+), 8 deletions(-) + +diff --git a/src/src/auths/call_radius.c b/src/src/auths/call_radius.c +index c3637436d..253fd75cd 100644 +--- a/src/src/auths/call_radius.c b/src/src/auths/call_radius.c +@@ -115,16 +115,16 @@ if (rc_read_config(RADIUS_CONFIG_FILE) != 0) + *errptr = string_sprintf("RADIUS: can't open %s", RADIUS_CONFIG_FILE); + + else if (rc_read_dictionary(rc_conf_str("dictionary")) != 0) +- *errptr = string_sprintf("RADIUS: can't read dictionary"); ++ *errptr = US("RADIUS: can't read dictionary"); + + else if (rc_avpair_add(,
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: e4104b9c4bd8cbaba4712e6a8d4e6c8d120ba5c0 Author: Fabian Groffen gentoo org> AuthorDate: Fri Aug 2 06:42:47 2019 + Commit: Fabian Groffen gentoo org> CommitDate: Fri Aug 2 06:42:47 2019 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e4104b9c mail-mta/exim: cleanup vulnerable CVE-2019-10149 Bug: https://bugs.gentoo.org/687336 Package-Manager: Portage-2.3.66, Repoman-2.3.16 Signed-off-by: Fabian Groffen gentoo.org> mail-mta/exim/Manifest | 2 - mail-mta/exim/exim-4.91-r2.ebuild | 561 - .../exim/files/exim-4.74-localscan_dlopen.patch| 262 -- 3 files changed, 825 deletions(-) diff --git a/mail-mta/exim/Manifest b/mail-mta/exim/Manifest index c666f92c515..92f89a8e4ee 100644 --- a/mail-mta/exim/Manifest +++ b/mail-mta/exim/Manifest @@ -1,7 +1,5 @@ -DIST exim-4.91.tar.xz 1744660 BLAKE2B 8d50a709def02a52f8e76a16fcf51a4fc7e553217d5513a361aa780f58bff336a9ab90d8683e3841a074f54f3c75f2f77bf1a353a849be1207bffdd5fb6e4c51 SHA512 35b34dda8dd0f27c0429e6eb8409756ecd3cf9e535bac421d696b1560db0ff3bf4cd0e4a00bc0b7e32137d31bb5de20776c7c1830ec125aa36b5c4376b0c71a2 DIST exim-4.92.1.tar.xz 1767976 BLAKE2B fb5bdb8762f16e30c43c7899e5fb5b459bb5e910458f970d20a5cb26cdde842d87a1f8150e4c0f9e931fa277e2f33a0fb8a6d478b5bf871d03a12ebd06c36d67 SHA512 fd43448db0aa5139f8b459322b95e258f232ac8a4bf21a19099c7768329ec20c344c4e0d8dd2e98c33a192a5f97d7666a746de2c87bdfb8da42c625c985d7e05 DIST exim-4.92.tar.xz 1767136 BLAKE2B 6c97578807073a782112218c65de460cc94f046d807eddc7330f2f67266c0ef341ded61050a16aca13c88e606a923a9e08033c8bfb618a7ef34b3d2ea6db32ca SHA512 62c327e6184a358ba7f0dbc38b44d2537234be91727a5bfac97e74af64a8d77e376b3221dcfdd8f6eca7d812f9233595503dc6e50e2972bed40a1b74eb209c31 -DIST exim-pdf-4.91.tar.xz 1973672 BLAKE2B 0b9e3f65c8e8a5f727dd4359d1c5c6c867c0ecfce3b44763d5a24f2d98353bc58c42456e9884994f404d17685909ea287a478189407ba8e7835352274c788980 SHA512 82add9b42749b6d938ff3b44a4dea3dfe84bcb2a1efea8a32b64d81a9ea312033d33023b5c224a44a2c053b18f9042bd1f2834847cf48873d1725a5594704a12 DIST exim-pdf-4.92.1.tar.xz 2038948 BLAKE2B 6624fb8930944f79e0c7e52a001727cfcff508ac69cb4107247201b8598d6e223cac7c7eda14c3102d0eabc151a547b6cc5ef11a6c4a830f31dfd88e24907c1d SHA512 437b868cd7dedae59e32b9245c8c1ca3375605eb4911846bc3508b627acf32c99bda644b3c3e84eb539a39b3c2cc4f83314eebe55160b3da617ccaec2f1623a2 DIST exim-pdf-4.92.tar.xz 2038812 BLAKE2B d5966a27f980a2ceb31293d92049a6691a08262bd20ae7315f41929f0d7a45b5d66c7000f9596b193e74d0c17f91c56a3262602047673c49649f1cad6b216547 SHA512 3a40818025fceaa7ac17f8e7ce06a61e3cf65267c821aea93e1a1a659782b047ab177b88a38c9b2271c0a296e1dc7939e23fe0f89415a11cd45693cb8af10c15 DIST system_filter.exim.gz 3075 BLAKE2B d05e872b5cef377d29126cda03fc0a74c8777b2119b76ff43da6e8de808035eb9bfcb034a85d81824f135d484e864bfc0629fc1af2c228a7277d5ee7cf9cde79 SHA512 cb358d3ce2499a0bb5920d962a06f2af8486e55ec90c8c928bd8e3aefb279aa57f5f960d5adfcef68bd94110b405eaa144e9629cfe6014a529c79c544600bbf3 diff --git a/mail-mta/exim/exim-4.91-r2.ebuild b/mail-mta/exim/exim-4.91-r2.ebuild deleted file mode 100644 index cf587588b81..000 --- a/mail-mta/exim/exim-4.91-r2.ebuild +++ /dev/null @@ -1,561 +0,0 @@ -# Copyright 1999-2019 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI="6" - -inherit db-use eutils toolchain-funcs multilib pam systemd - -IUSE="arc dane dcc +dkim dlfunc dmarc +dnsdb doc dovecot-sasl dsn elibc_glibc exiscan-acl gnutls idn ipv6 ldap libressl lmtp maildir mbx mysql nis pam perl pkcs11 postgres +prdr proxy radius redis sasl selinux spf sqlite srs ssl syslog tcpd +tpda X" -REQUIRED_USE=" - arc? ( dkim spf ) - dane? ( ssl !gnutls ) - dmarc? ( dkim spf ) - gnutls? ( ssl ) - pkcs11? ( ssl ) - spf? ( exiscan-acl ) - srs? ( exiscan-acl ) -" -# NOTE on USE="gnutls dane", gnutls[dane] is masked in base, unmasked -# for x86 and amd64 only, due to this, repoman won't allow depending on -# gnutls[dane] for all else. Because we cannot express USE=dane when -# USE=gnutls is in effect only in package.use.mask, the only option we -# have left is to a) ignore the dependency (but that results in bug -# #661164) or b) mask the usage of USE=dane with USE=gnutls. Both are -# incorrect, but b) is the only "correct" view from repoman. - -COMM_URI="https://downloads.exim.org/exim4$([[ ${PV} == *_rc* ]] && echo /test)" - -DESCRIPTION="A highly configurable, drop-in replacement for sendmail" -SRC_URI="${COMM_URI}/${P//rc/RC}.tar.xz - mirror://gentoo/system_filter.exim.gz - doc? ( ${COMM_URI}/${PN}-pdf-${PV//rc/RC}.tar.xz )" -HOMEPAGE="http://www.exim.org/; - -SLOT="0" -LICENSE="GPL-2" -KEYWORDS="alpha amd64 arm hppa ia64 ppc ppc64 sparc x86 ~x86-fbsd ~x86-solaris" - -COMMON_DEPEND=">=sys-apps/sed-4.0.5 - ( >=sys-libs/db-3.2:= =net-nds/openldap-2.0.7 ) - nis? ( - elibc_glibc? ( -
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: 4971a74df5e8753cfbb4d40c0ff4960d951b2e52 Author: Fabian Groffen gentoo org> AuthorDate: Tue Jun 11 08:16:54 2019 + Commit: Fabian Groffen gentoo org> CommitDate: Tue Jun 11 08:16:54 2019 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=4971a74d mail-mta/exim: revbump for fix for bug #687554 Bug: https://bugs.gentoo.org/687554 Signed-off-by: Fabian Groffen gentoo.org> Package-Manager: Portage-2.3.66, Repoman-2.3.11 mail-mta/exim/exim-4.92-r1.ebuild | 562 + .../files/exim-4.92-fix-eval-expansion-32bit.patch | 51 ++ 2 files changed, 613 insertions(+) diff --git a/mail-mta/exim/exim-4.92-r1.ebuild b/mail-mta/exim/exim-4.92-r1.ebuild new file mode 100644 index 000..a0346ffb579 --- /dev/null +++ b/mail-mta/exim/exim-4.92-r1.ebuild @@ -0,0 +1,562 @@ +# Copyright 1999-2019 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI="6" + +inherit db-use eutils toolchain-funcs multilib pam systemd + +IUSE="arc dane dcc +dkim dlfunc dmarc +dnsdb doc dovecot-sasl dsn elibc_glibc exiscan-acl gnutls idn ipv6 ldap libressl lmtp maildir mbx mysql nis pam perl pkcs11 postgres +prdr proxy radius redis sasl selinux spf sqlite srs ssl syslog tcpd +tpda X" +REQUIRED_USE=" + arc? ( dkim spf ) + dane? ( ssl !gnutls ) + dmarc? ( dkim spf ) + gnutls? ( ssl ) + pkcs11? ( ssl ) + spf? ( exiscan-acl ) + srs? ( exiscan-acl ) +" +# NOTE on USE="gnutls dane", gnutls[dane] is masked in base, unmasked +# for x86 and amd64 only, due to this, repoman won't allow depending on +# gnutls[dane] for all else. Because we cannot express USE=dane when +# USE=gnutls is in effect only in package.use.mask, the only option we +# have left is to a) ignore the dependency (but that results in bug +# #661164) or b) mask the usage of USE=dane with USE=gnutls. Both are +# incorrect, but b) is the only "correct" view from repoman. + +COMM_URI="https://downloads.exim.org/exim4$([[ ${PV} == *_rc* ]] && echo /test)" + +DESCRIPTION="A highly configurable, drop-in replacement for sendmail" +SRC_URI="${COMM_URI}/${P//rc/RC}.tar.xz + mirror://gentoo/system_filter.exim.gz + doc? ( ${COMM_URI}/${PN}-pdf-${PV//rc/RC}.tar.xz )" +HOMEPAGE="http://www.exim.org/; + +SLOT="0" +LICENSE="GPL-2" +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86 ~x86-fbsd ~x86-solaris" + +COMMON_DEPEND=">=sys-apps/sed-4.0.5 + ( >=sys-libs/db-3.2:= =net-nds/openldap-2.0.7 ) + nis? ( + elibc_glibc? ( + net-libs/libtirpc + >=net-libs/libnsl-1:= + ) + ) + mysql? ( virtual/libmysqlclient ) + postgres? ( dev-db/postgresql:= ) + sasl? ( >=dev-libs/cyrus-sasl-2.1.26-r2 ) + redis? ( dev-libs/hiredis ) + spf? ( >=mail-filter/libspf2-1.2.5-r1 ) + dmarc? ( mail-filter/opendmarc ) + srs? ( mail-filter/libsrs_alt ) + X? ( + x11-libs/libX11 + x11-libs/libXmu + x11-libs/libXt + x11-libs/libXaw + ) + sqlite? ( dev-db/sqlite ) + radius? ( net-dialup/freeradius-client ) + virtual/libiconv + elibc_glibc? ( net-libs/libnsl ) + " + # added X check for #57206 +DEPEND="${COMMON_DEPEND} + virtual/pkgconfig" +RDEPEND="${COMMON_DEPEND} + !mail-mta/courier + !mail-mta/esmtp + !mail-mta/mini-qmail + !=mail-mta/msmtp-1.4.19-r1[mta] + !mail-mta/netqmail + !mail-mta/nullmailer + !mail-mta/postfix + !mail-mta/qmail-ldap + !mail-mta/sendmail + !mail-mta/opensmtpd + !=mail-mta/ssmtp-2.64-r2[mta] + !net-mail/mailwrapper + >=net-mail/mailbase-0.00-r5 + virtual/logger + dcc? ( mail-filter/dcc ) + selinux? ( sec-policy/selinux-exim ) + " + +S=${WORKDIR}/${P//rc/RC} + +src_prepare() { + epatch "${FILESDIR}"/exim-4.14-tail.patch + epatch "${FILESDIR}"/exim-4.92-localscan_dlopen.patch + epatch "${FILESDIR}"/exim-4.69-r1.27021.patch + epatch "${FILESDIR}"/exim-4.74-radius-db-ENV-clash.patch # 287426 + epatch "${FILESDIR}"/exim-4.82-makefile-freebsd.patch # 235785 + epatch "${FILESDIR}"/exim-4.89-as-needed-ldflags.patch # 352265, 391279 + epatch "${FILESDIR}"/exim-4.76-crosscompile.patch # 266591 + epatch "${FILESDIR}"/exim-4.92-fix-eval-expansion-32bit.patch #687554 + + if use maildir ; then + epatch "${FILESDIR}"/exim-4.20-maildir.patch + else + epatch "${FILESDIR}"/exim-4.80-spool-mail-group.patch # 438606 + fi + + eapply_user + + # user Exim believes it should be + MAILUSER=mail + MAILGROUP=mail + if use prefix && [[ ${EUID} != 0 ]] ; then + MAILUSER=$(id -un) + MAILGROUP=$(id -gn) + fi +} + +src_configure() { + # general
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: 85749f8757dad788e0a475affc9b77f4a722aac9 Author: Fabian Groffen gentoo org> AuthorDate: Sun Feb 17 10:37:02 2019 + Commit: Fabian Groffen gentoo org> CommitDate: Tue Feb 19 12:19:43 2019 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=85749f87 mail-mta/exim: version bump Signed-off-by: Fabian Groffen gentoo.org> Package-Manager: Portage-2.3.51, Repoman-2.3.11 mail-mta/exim/Manifest | 2 + mail-mta/exim/exim-4.92.ebuild | 561 + .../exim/files/exim-4.92-localscan_dlopen.patch| 267 ++ 3 files changed, 830 insertions(+) diff --git a/mail-mta/exim/Manifest b/mail-mta/exim/Manifest index a9d8a746f01..7195d5f1d29 100644 --- a/mail-mta/exim/Manifest +++ b/mail-mta/exim/Manifest @@ -1,3 +1,5 @@ DIST exim-4.91.tar.xz 1744660 BLAKE2B 8d50a709def02a52f8e76a16fcf51a4fc7e553217d5513a361aa780f58bff336a9ab90d8683e3841a074f54f3c75f2f77bf1a353a849be1207bffdd5fb6e4c51 SHA512 35b34dda8dd0f27c0429e6eb8409756ecd3cf9e535bac421d696b1560db0ff3bf4cd0e4a00bc0b7e32137d31bb5de20776c7c1830ec125aa36b5c4376b0c71a2 +DIST exim-4.92.tar.xz 1767136 BLAKE2B 6c97578807073a782112218c65de460cc94f046d807eddc7330f2f67266c0ef341ded61050a16aca13c88e606a923a9e08033c8bfb618a7ef34b3d2ea6db32ca SHA512 62c327e6184a358ba7f0dbc38b44d2537234be91727a5bfac97e74af64a8d77e376b3221dcfdd8f6eca7d812f9233595503dc6e50e2972bed40a1b74eb209c31 DIST exim-pdf-4.91.tar.xz 1973672 BLAKE2B 0b9e3f65c8e8a5f727dd4359d1c5c6c867c0ecfce3b44763d5a24f2d98353bc58c42456e9884994f404d17685909ea287a478189407ba8e7835352274c788980 SHA512 82add9b42749b6d938ff3b44a4dea3dfe84bcb2a1efea8a32b64d81a9ea312033d33023b5c224a44a2c053b18f9042bd1f2834847cf48873d1725a5594704a12 +DIST exim-pdf-4.92.tar.xz 2038812 BLAKE2B d5966a27f980a2ceb31293d92049a6691a08262bd20ae7315f41929f0d7a45b5d66c7000f9596b193e74d0c17f91c56a3262602047673c49649f1cad6b216547 SHA512 3a40818025fceaa7ac17f8e7ce06a61e3cf65267c821aea93e1a1a659782b047ab177b88a38c9b2271c0a296e1dc7939e23fe0f89415a11cd45693cb8af10c15 DIST system_filter.exim.gz 3075 BLAKE2B d05e872b5cef377d29126cda03fc0a74c8777b2119b76ff43da6e8de808035eb9bfcb034a85d81824f135d484e864bfc0629fc1af2c228a7277d5ee7cf9cde79 SHA512 cb358d3ce2499a0bb5920d962a06f2af8486e55ec90c8c928bd8e3aefb279aa57f5f960d5adfcef68bd94110b405eaa144e9629cfe6014a529c79c544600bbf3 diff --git a/mail-mta/exim/exim-4.92.ebuild b/mail-mta/exim/exim-4.92.ebuild new file mode 100644 index 000..1b4f24e9a07 --- /dev/null +++ b/mail-mta/exim/exim-4.92.ebuild @@ -0,0 +1,561 @@ +# Copyright 1999-2019 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI="6" + +inherit db-use eutils toolchain-funcs multilib pam systemd + +IUSE="arc dane dcc +dkim dlfunc dmarc +dnsdb doc dovecot-sasl dsn elibc_glibc exiscan-acl gnutls idn ipv6 ldap libressl lmtp maildir mbx mysql nis pam perl pkcs11 postgres +prdr proxy radius redis sasl selinux spf sqlite srs ssl syslog tcpd +tpda X" +REQUIRED_USE=" + arc? ( dkim spf ) + dane? ( ssl !gnutls ) + dmarc? ( dkim spf ) + gnutls? ( ssl ) + pkcs11? ( ssl ) + spf? ( exiscan-acl ) + srs? ( exiscan-acl ) +" +# NOTE on USE="gnutls dane", gnutls[dane] is masked in base, unmasked +# for x86 and amd64 only, due to this, repoman won't allow depending on +# gnutls[dane] for all else. Because we cannot express USE=dane when +# USE=gnutls is in effect only in package.use.mask, the only option we +# have left is to a) ignore the dependency (but that results in bug +# #661164) or b) mask the usage of USE=dane with USE=gnutls. Both are +# incorrect, but b) is the only "correct" view from repoman. + +COMM_URI="https://downloads.exim.org/exim4$([[ ${PV} == *_rc* ]] && echo /test)" + +DESCRIPTION="A highly configurable, drop-in replacement for sendmail" +SRC_URI="${COMM_URI}/${P//rc/RC}.tar.xz + mirror://gentoo/system_filter.exim.gz + doc? ( ${COMM_URI}/${PN}-pdf-${PV//rc/RC}.tar.xz )" +HOMEPAGE="http://www.exim.org/; + +SLOT="0" +LICENSE="GPL-2" +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86 ~x86-fbsd ~x86-solaris" + +COMMON_DEPEND=">=sys-apps/sed-4.0.5 + ( >=sys-libs/db-3.2:= =net-nds/openldap-2.0.7 ) + nis? ( + elibc_glibc? ( + net-libs/libtirpc + >=net-libs/libnsl-1:= + ) + ) + mysql? ( virtual/libmysqlclient ) + postgres? ( dev-db/postgresql:= ) + sasl? ( >=dev-libs/cyrus-sasl-2.1.26-r2 ) + redis? ( dev-libs/hiredis ) + spf? ( >=mail-filter/libspf2-1.2.5-r1 ) + dmarc? ( mail-filter/opendmarc ) + srs? ( mail-filter/libsrs_alt ) + X? ( + x11-libs/libX11 + x11-libs/libXmu + x11-libs/libXt + x11-libs/libXaw + ) + sqlite? ( dev-db/sqlite ) + radius? ( net-dialup/freeradius-client ) + virtual/libiconv +
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: c87c9d43f1e04c6f13067946c6cdb868667e4c2f Author: Fabian Groffen gentoo org> AuthorDate: Sun Oct 8 09:02:10 2017 + Commit: Fabian Groffen gentoo org> CommitDate: Sun Oct 8 09:24:54 2017 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c87c9d43 mail-mta/exim: add patch from upstream for crash in address expando Package-Manager: Portage-2.3.8, Repoman-2.3.3 .../{exim-4.89-r2.ebuild => exim-4.89-r3.ebuild} | 1 + .../files/exim-4.89-address-expando-crash.patch| 85 ++ 2 files changed, 86 insertions(+) diff --git a/mail-mta/exim/exim-4.89-r2.ebuild b/mail-mta/exim/exim-4.89-r3.ebuild similarity index 99% rename from mail-mta/exim/exim-4.89-r2.ebuild rename to mail-mta/exim/exim-4.89-r3.ebuild index 1f2228c4f0c..654084176e6 100644 --- a/mail-mta/exim/exim-4.89-r2.ebuild +++ b/mail-mta/exim/exim-4.89-r3.ebuild @@ -96,6 +96,7 @@ src_prepare() { epatch "${FILESDIR}"/exim-4.76-crosscompile.patch # 266591 epatch "${FILESDIR}"/exim-4.89-CVE-2017-1000369.patch # 622212 epatch "${FILESDIR}"/${P}-transport-crash.patch # from git/in next release + epatch "${FILESDIR}"/${P}-address-expando-crash.patch # from git/in next release if use maildir ; then epatch "${FILESDIR}"/exim-4.20-maildir.patch diff --git a/mail-mta/exim/files/exim-4.89-address-expando-crash.patch b/mail-mta/exim/files/exim-4.89-address-expando-crash.patch new file mode 100644 index 000..2a868490a42 --- /dev/null +++ b/mail-mta/exim/files/exim-4.89-address-expando-crash.patch @@ -0,0 +1,85 @@ +ignoring parts which don't match due to repo reorg post release + +From 1b7cf216d933b395dee691f05becca4dd44b26f7 Mon Sep 17 00:00:00 2001 +From: "Heiko Schlittermann (HS12-RIPE)"+Date: Wed, 4 Oct 2017 22:25:45 +0200 +Subject: [PATCH] Check for proper output separator in expanding + ${addresses:STRING}(Closes 2171) + +Better yet would be to force setting the output separator literally, +and not after expansion of the STRING. But this would be an incompatible +change. +--- + doc/doc-docbook/spec.xfpt| 10 +- + src/src/expand.c | 8 +++- + test/scripts/-Basic/0002 | 1 + + test/stdout/0002 | 1 + + 4 files changed, 18 insertions(+), 2 deletions(-) + +ignored - diff --git a/doc/doc-docbook/spec.xfpt b/doc/doc-docbook/spec.xfpt +ignored - index 4a8e1d0..c140945 100644 +ignored - --- a/doc/doc-docbook/spec.xfpt +ignored - +++ b/doc/doc-docbook/spec.xfpt +ignored - @@ -10118,7 +10118,15 @@ character. For example: +ignored - .code +ignored - ${addresses:>& Chief , s...@base.ment (dogsbody)} +ignored - .endd +ignored - -expands to &`ceo@up.stairs&@base.ment`&. Compare the &*address*& (singular) +ignored - +expands to &`ceo@up.stairs&@base.ment`&. The string is expanded +ignored - +first, so if the expanded string starts with >, it may change the output +ignored - +separator unintentionally. This can be avoided by setting the output +ignored - +separator explicitly: +ignored - +.code +ignored - +${addresses:>:$h_from:} +ignored - +.endd +ignored - + +ignored - +Compare the &*address*& (singular) +ignored - expansion item, which extracts the working address from a single RFC2822 +ignored - address. See the &*filter*&, &*map*&, and &*reduce*& items for ways of +ignored - processing lists. +diff --git a/src/src/expand.c b/src/src/expand.c +index 353b8ea..67b3d65 100644 +--- a/src/src/expand.c b/src/src/expand.c +@@ -6797,7 +6797,13 @@ while (*s != 0) + int start, end, domain; /* Not really used */ + + while (isspace(*sub)) sub++; +-if (*sub == '>') { *outsep = *++sub; ++sub; } ++if (*sub == '>') ++ if (*outsep = *++sub) ++sub; ++ else { ++expand_string_message = string_sprintf("output separator " ++ "missing in expanding ${addresses:%s}", --sub); ++goto EXPAND_FAILED; ++ } + parse_allow_group = TRUE; + + for (;;) +ignored - diff --git a/test/scripts/-Basic/0002 b/test/scripts/-Basic/0002 +ignored - index cb0bb18..dd9cea2 100644 +ignored - --- a/test/scripts/-Basic/0002 +ignored - +++ b/test/scripts/-Basic/0002 +ignored - @@ -133,6 +133,7 @@ addresses: ${addresses:>+ Exim Person (that's me),\ +ignored - addresses: ${addresses:Exim Person (that's me), \ +ignored - xyz@abc, nullgroupname:;, group: p@q, r@s; } +ignored - addresses: ${addresses:local-p...@dom.ain } +ignored - +addresses: ${addresses:>} +ignored - +ignored - escape: ${escape:B7·F2ò} +ignored - excape8bit: ${escape8bit:undisturbed text\ttab\nnewline\ttab\\backslash \176tilde\177DEL\200\x81.} +ignored - diff --git a/test/stdout/0002 b/test/stdout/0002 +ignored - index 5593f06..1422289 100644 +ignored - --- a/test/stdout/0002 +ignored - +++
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: 1a5cdd9ceb1e3b02e4076b9033b54fa980083e24 Author: Fabian Groffen gentoo org> AuthorDate: Thu Oct 5 13:37:33 2017 + Commit: Fabian Groffen gentoo org> CommitDate: Thu Oct 5 13:37:33 2017 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1a5cdd9c mail-mta/exim: cleanupsecurity affected version, bug #622212 Package-Manager: Portage-2.3.8, Repoman-2.3.3 mail-mta/exim/Manifest | 2 - mail-mta/exim/exim-4.88.ebuild | 528 - .../exim/files/exim-4.88-as-needed-ldflags.patch | 145 -- mail-mta/exim/files/exim.rc9 | 45 -- 4 files changed, 720 deletions(-) diff --git a/mail-mta/exim/Manifest b/mail-mta/exim/Manifest index 85e003d0642..bfccbae830e 100644 --- a/mail-mta/exim/Manifest +++ b/mail-mta/exim/Manifest @@ -1,5 +1,3 @@ -DIST exim-4.88.tar.bz2 1824610 SHA256 119d5fd7e31fc224e84dfa458fe182f200856bae7adf852a8287c242161f8a2d SHA512 ea094bf703628c201de119fc5f09539475e52158e935f8f2a9e4138c4a1bfe885017145c3cc5e22aa9087b195091955c69385ebf1ea0baec64ed5c1b8e3b1caf WHIRLPOOL d2d8c404217fcc5bbc7bc18500456f2709a099b0a31d4930343b836c35c62e3914fa1c686ea7d9ba5eea95f0caab13c3b76c1508eda74cb75dabb0d61472428e DIST exim-4.89.tar.bz2 1844430 SHA256 912f2ee03c8dba06a3a4c0ee40522d367e1b65dc59e38dfcc1f5d9eecff51ab0 SHA512 1e059966a93b47f055ab4ec2a4556f2c918aff56ea0367585f3a853f00411e9c275e13be4f9ae615a468fa06263135cd6a138fa1753f1b7fb3259a3321fcca65 WHIRLPOOL d0b30cde5cf2dbe278d393eae70e40a3861a153a2411f98f73a7ae43881032cc3e0f15163b09e17d61c09e673c2e766371c80533908af3460f483a5c18dff80f -DIST exim-pdf-4.88.tar.bz2 1922494 SHA256 33736fafb45c5922fcbc0def7626f46cb74927987b78943aa26949ef30789574 SHA512 8c4f580fa319c0285bcb49056ecd72b056cbbfa287a15a4d856965b4218469c85607ec7321ae0f2ba3be868f05a70a7fb8a77d5836a574417e6bffc64720bee5 WHIRLPOOL 7e3e65c58cc9a313d3440de6b79ed4f113ea265e39201aa2d36c091037c2b20718bd49f04e99f2aa029a20d238cd21178762e2ba6b470596309e83fb3ffc542b DIST exim-pdf-4.89.tar.bz2 1924606 SHA256 17d70ef5b2814f725633efcf339bcb49ac9564ecd648e0e3d010b5e43d6c167d SHA512 b04ea2e4dcdb1aaf52ef77ccd76e6599c68c4c6e5a98090720dbd3c50f7191bf3f6cd7dc2089a765c47576311780809cff547f85f004caec411d0f1ac9985299 WHIRLPOOL 4ab5bc7bdbbfc998ae7ee63f19449d051a1d7183f9b70297db100f44b82df2cca0853c309ddfccafee2d44cd1228258e06628ed82dab76de851bec856321c58f DIST system_filter.exim.gz 3075 SHA256 3a3471b486a09e0a0153f7b520e1eaf26d21b97d73ea8348bdc593c00eb1e437 SHA512 cb358d3ce2499a0bb5920d962a06f2af8486e55ec90c8c928bd8e3aefb279aa57f5f960d5adfcef68bd94110b405eaa144e9629cfe6014a529c79c544600bbf3 WHIRLPOOL ce68d9c18b24eca3ef97ea810964cc1ada5f85b795a7c432ad39b5788188a16419101c92fb52b418738d760e1d658f7a41485e5561079a667d84d276c71be5a4 diff --git a/mail-mta/exim/exim-4.88.ebuild b/mail-mta/exim/exim-4.88.ebuild deleted file mode 100644 index 767a7dd9736..000 --- a/mail-mta/exim/exim-4.88.ebuild +++ /dev/null @@ -1,528 +0,0 @@ -# Copyright 1999-2017 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 - -EAPI="6" - -inherit eutils toolchain-funcs multilib pam systemd - -IUSE="dane dcc +dkim dlfunc dmarc +dnsdb doc dovecot-sasl dsn exiscan-acl gnutls ipv6 ldap libressl lmtp maildir mbx mysql nis pam perl pkcs11 postgres +prdr proxy radius redis sasl selinux spf sqlite srs ssl syslog tcpd tpda X elibc_glibc" -REQUIRED_USE=" - dane? ( !gnutls ) - dmarc? ( spf dkim ) - pkcs11? ( gnutls ) - spf? ( exiscan-acl ) - srs? ( exiscan-acl ) -" - -COMM_URI="ftp://ftp.exim.org/pub/exim/exim4$([[ ${PV} == *_rc* ]] && echo /test)" - -DESCRIPTION="A highly configurable, drop-in replacement for sendmail" -SRC_URI="${COMM_URI}/${P//rc/RC}.tar.bz2 - mirror://gentoo/system_filter.exim.gz - doc? ( ${COMM_URI}/${PN}-pdf-${PV//rc/RC}.tar.bz2 )" -HOMEPAGE="http://www.exim.org/; - -SLOT="0" -LICENSE="GPL-2" -KEYWORDS="hppa" # 622212 - -COMMON_DEPEND=">=sys-apps/sed-4.0.5 - >=sys-libs/db-3.2:= - dev-libs/libpcre - perl? ( dev-lang/perl:= ) - pam? ( virtual/pam ) - tcpd? ( sys-apps/tcp-wrappers ) - ssl? ( - !libressl? ( dev-libs/openssl:0= ) - libressl? ( dev-libs/libressl:= ) - ) - gnutls? ( net-libs/gnutls[pkcs11?] - dev-libs/libtasn1 ) - ldap? ( >=net-nds/openldap-2.0.7 ) - nis? ( elibc_glibc? ( || ( - =sys-libs/glibc-2.23[rpc] - ) ) ) - mysql? ( virtual/libmysqlclient ) - postgres? ( dev-db/postgresql:= ) - sasl? ( >=dev-libs/cyrus-sasl-2.1.26-r2 ) - redis? ( dev-libs/hiredis ) - spf? ( >=mail-filter/libspf2-1.2.5-r1 ) - dmarc? ( mail-filter/opendmarc ) - srs? ( mail-filter/libsrs_alt ) - X? ( x11-proto/xproto - x11-libs/libX11 - x11-libs/libXmu - x11-libs/libXt - x11-libs/libXaw - ) -
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: a28012017468408c57306f590e3fb254d8746dd2 Author: Fabian Groffen gentoo org> AuthorDate: Wed Sep 20 06:47:22 2017 + Commit: Fabian Groffen gentoo org> CommitDate: Wed Sep 20 06:47:22 2017 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a2801201 mail-mta/exim: add backport for crash on remote server behaviour Package-Manager: Portage-2.3.8, Repoman-2.3.1 mail-mta/exim/exim-4.89-r2.ebuild | 529 + .../exim/files/exim-4.89-transport-crash.patch | 62 +++ 2 files changed, 591 insertions(+) diff --git a/mail-mta/exim/exim-4.89-r2.ebuild b/mail-mta/exim/exim-4.89-r2.ebuild new file mode 100644 index 000..1f2228c4f0c --- /dev/null +++ b/mail-mta/exim/exim-4.89-r2.ebuild @@ -0,0 +1,529 @@ +# Copyright 1999-2017 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 + +EAPI="6" + +inherit eutils toolchain-funcs multilib pam systemd + +IUSE="dane dcc +dkim dlfunc dmarc +dnsdb doc dovecot-sasl dsn exiscan-acl gnutls ipv6 ldap libressl lmtp maildir mbx mysql nis pam perl pkcs11 postgres +prdr proxy radius redis sasl selinux spf sqlite srs ssl syslog tcpd tpda X elibc_glibc" +REQUIRED_USE=" + dane? ( !gnutls ) + dmarc? ( spf dkim ) + pkcs11? ( gnutls ) + spf? ( exiscan-acl ) + srs? ( exiscan-acl ) +" + +COMM_URI="ftp://ftp.exim.org/pub/exim/exim4$([[ ${PV} == *_rc* ]] && echo /test)" + +DESCRIPTION="A highly configurable, drop-in replacement for sendmail" +SRC_URI="${COMM_URI}/${P//rc/RC}.tar.bz2 + mirror://gentoo/system_filter.exim.gz + doc? ( ${COMM_URI}/${PN}-pdf-${PV//rc/RC}.tar.bz2 )" +HOMEPAGE="http://www.exim.org/; + +SLOT="0" +LICENSE="GPL-2" +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86 ~x86-fbsd ~x86-solaris" + +COMMON_DEPEND=">=sys-apps/sed-4.0.5 + >=sys-libs/db-3.2:= + dev-libs/libpcre + perl? ( dev-lang/perl:= ) + pam? ( virtual/pam ) + tcpd? ( sys-apps/tcp-wrappers ) + ssl? ( + !libressl? ( dev-libs/openssl:0= ) + libressl? ( dev-libs/libressl:= ) + ) + gnutls? ( net-libs/gnutls[pkcs11?] + dev-libs/libtasn1 ) + ldap? ( >=net-nds/openldap-2.0.7 ) + nis? ( elibc_glibc? ( || ( + =sys-libs/glibc-2.23[rpc] + ) ) ) + mysql? ( virtual/libmysqlclient ) + postgres? ( dev-db/postgresql:= ) + sasl? ( >=dev-libs/cyrus-sasl-2.1.26-r2 ) + redis? ( dev-libs/hiredis ) + spf? ( >=mail-filter/libspf2-1.2.5-r1 ) + dmarc? ( mail-filter/opendmarc ) + srs? ( mail-filter/libsrs_alt ) + X? ( x11-proto/xproto + x11-libs/libX11 + x11-libs/libXmu + x11-libs/libXt + x11-libs/libXaw + ) + sqlite? ( dev-db/sqlite ) + radius? ( net-dialup/freeradius-client ) + virtual/libiconv + " + # added X check for #57206 +DEPEND="${COMMON_DEPEND} + virtual/pkgconfig" +RDEPEND="${COMMON_DEPEND} + !mail-mta/courier + !mail-mta/esmtp + !mail-mta/mini-qmail + !=mail-mta/msmtp-1.4.19-r1[mta] + !mail-mta/netqmail + !mail-mta/nullmailer + !mail-mta/postfix + !mail-mta/qmail-ldap + !mail-mta/sendmail + !mail-mta/opensmtpd + !=mail-mta/ssmtp-2.64-r2[mta] + !net-mail/mailwrapper + >=net-mail/mailbase-0.00-r5 + virtual/logger + dcc? ( mail-filter/dcc ) + selinux? ( sec-policy/selinux-exim ) + " + +S=${WORKDIR}/${P//rc/RC} + +src_prepare() { + epatch "${FILESDIR}"/exim-4.14-tail.patch + epatch "${FILESDIR}"/exim-4.74-localscan_dlopen.patch + epatch "${FILESDIR}"/exim-4.69-r1.27021.patch + epatch "${FILESDIR}"/exim-4.74-radius-db-ENV-clash.patch # 287426 + epatch "${FILESDIR}"/exim-4.82-makefile-freebsd.patch # 235785 + epatch "${FILESDIR}"/exim-4.89-as-needed-ldflags.patch # 352265, 391279 + epatch "${FILESDIR}"/exim-4.76-crosscompile.patch # 266591 + epatch "${FILESDIR}"/exim-4.89-CVE-2017-1000369.patch # 622212 + epatch "${FILESDIR}"/${P}-transport-crash.patch # from git/in next release + + if use maildir ; then + epatch "${FILESDIR}"/exim-4.20-maildir.patch + else + epatch "${FILESDIR}"/exim-4.80-spool-mail-group.patch # 438606 + fi + + eapply_user + + # user Exim believes it should be + MAILUSER=mail + MAILGROUP=mail + if use prefix && [[ ${EUID} != 0 ]] ; then + MAILUSER=$(id -un) + MAILGROUP=$(id -gn) + fi +} + +src_configure() { + # general config and paths + + sed -i.orig \ + -e "/SYSTEM_ALIASES_FILE/s'SYSTEM_ALIASES_FILE'${EPREFIX}/etc/mail/aliases'" \ + "${S}"/src/configure.default || die + + sed -i -e 's/^buildname=.*/buildname=exim-gentoo/g' Makefile || die + +
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: 81618852a1f9d12b4aeea8a85b9d0f37f81f05b9 Author: Thomas Deutschmann gentoo org> AuthorDate: Mon Jun 19 16:06:14 2017 + Commit: Thomas Deutschmann gentoo org> CommitDate: Mon Jun 19 16:06:32 2017 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=81618852 mail-mta/exim: Rev bump to add patch for CVE-2017-1000369 (bug #622212) Package-Manager: Portage-2.3.5, Repoman-2.3.2 mail-mta/exim/exim-4.89-r1.ebuild | 529 + .../exim/files/exim-4.89-CVE-2017-1000369.patch| 58 +++ 2 files changed, 587 insertions(+) diff --git a/mail-mta/exim/exim-4.89-r1.ebuild b/mail-mta/exim/exim-4.89-r1.ebuild new file mode 100644 index 000..0d1ab8856b6 --- /dev/null +++ b/mail-mta/exim/exim-4.89-r1.ebuild @@ -0,0 +1,529 @@ +# Copyright 1999-2017 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 + +EAPI="6" + +inherit eutils toolchain-funcs multilib pam systemd + +IUSE="dane dcc +dkim dlfunc dmarc +dnsdb doc dovecot-sasl dsn exiscan-acl gnutls ipv6 ldap libressl lmtp maildir mbx mysql nis pam perl pkcs11 postgres +prdr proxy radius redis sasl selinux spf sqlite srs ssl syslog tcpd tpda X elibc_glibc" +REQUIRED_USE=" + dane? ( !gnutls ) + dmarc? ( spf dkim ) + pkcs11? ( gnutls ) + spf? ( exiscan-acl ) + srs? ( exiscan-acl ) +" + +COMM_URI="ftp://ftp.exim.org/pub/exim/exim4$([[ ${PV} == *_rc* ]] && echo /test)" + +DESCRIPTION="A highly configurable, drop-in replacement for sendmail" +SRC_URI="${COMM_URI}/${P//rc/RC}.tar.bz2 + mirror://gentoo/system_filter.exim.gz + doc? ( ${COMM_URI}/${PN}-pdf-${PV//rc/RC}.tar.bz2 )" +HOMEPAGE="http://www.exim.org/; + +SLOT="0" +LICENSE="GPL-2" +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86 ~x86-fbsd ~x86-solaris" + +COMMON_DEPEND=">=sys-apps/sed-4.0.5 + >=sys-libs/db-3.2:= + dev-libs/libpcre + perl? ( dev-lang/perl:= ) + pam? ( virtual/pam ) + tcpd? ( sys-apps/tcp-wrappers ) + ssl? ( + !libressl? ( dev-libs/openssl:0= ) + libressl? ( dev-libs/libressl:= ) + ) + gnutls? ( net-libs/gnutls[pkcs11?] + dev-libs/libtasn1 ) + ldap? ( >=net-nds/openldap-2.0.7 ) + nis? ( elibc_glibc? ( || ( + =sys-libs/glibc-2.23[rpc] + ) ) ) + mysql? ( virtual/libmysqlclient ) + postgres? ( dev-db/postgresql:= ) + sasl? ( >=dev-libs/cyrus-sasl-2.1.26-r2 ) + redis? ( dev-libs/hiredis ) + spf? ( >=mail-filter/libspf2-1.2.5-r1 ) + dmarc? ( mail-filter/opendmarc ) + srs? ( mail-filter/libsrs_alt ) + X? ( x11-proto/xproto + x11-libs/libX11 + x11-libs/libXmu + x11-libs/libXt + x11-libs/libXaw + ) + sqlite? ( dev-db/sqlite ) + radius? ( net-dialup/freeradius-client ) + virtual/libiconv + " + # added X check for #57206 +DEPEND="${COMMON_DEPEND} + virtual/pkgconfig" +RDEPEND="${COMMON_DEPEND} + !mail-mta/courier + !mail-mta/esmtp + !mail-mta/mini-qmail + !=mail-mta/msmtp-1.4.19-r1[mta] + !mail-mta/netqmail + !mail-mta/nullmailer + !mail-mta/postfix + !mail-mta/qmail-ldap + !mail-mta/sendmail + !mail-mta/opensmtpd + !=mail-mta/ssmtp-2.64-r2[mta] + !net-mail/mailwrapper + >=net-mail/mailbase-0.00-r5 + virtual/logger + dcc? ( mail-filter/dcc ) + selinux? ( sec-policy/selinux-exim ) + " + +S=${WORKDIR}/${P//rc/RC} + +src_prepare() { + epatch "${FILESDIR}"/exim-4.14-tail.patch + epatch "${FILESDIR}"/exim-4.74-localscan_dlopen.patch + epatch "${FILESDIR}"/exim-4.69-r1.27021.patch + epatch "${FILESDIR}"/exim-4.74-radius-db-ENV-clash.patch # 287426 + epatch "${FILESDIR}"/exim-4.82-makefile-freebsd.patch # 235785 + epatch "${FILESDIR}"/exim-4.89-as-needed-ldflags.patch # 352265, 391279 + epatch "${FILESDIR}"/exim-4.76-crosscompile.patch # 266591 + epatch "${FILESDIR}"/exim-4.89-CVE-2017-1000369.patch # 622212 + + if use maildir ; then + epatch "${FILESDIR}"/exim-4.20-maildir.patch + else + epatch "${FILESDIR}"/exim-4.80-spool-mail-group.patch # 438606 + fi + + eapply_user + + # user Exim believes it should be + MAILUSER=mail + MAILGROUP=mail + if use prefix && [[ ${EUID} != 0 ]] ; then + MAILUSER=$(id -un) + MAILGROUP=$(id -gn) + fi +} + +src_configure() { + # general config and paths + + sed -i.orig \ + -e "/SYSTEM_ALIASES_FILE/s'SYSTEM_ALIASES_FILE'${EPREFIX}/etc/mail/aliases'" \ + "${S}"/src/configure.default || die + + sed -i -e 's/^buildname=.*/buildname=exim-gentoo/g' Makefile || die + + sed -e "48i\CFLAGS=${CFLAGS}" \ + -e
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: 12942acaa4b53ec62de0112ecda4fb24e7386312 Author: Fabian Groffen gentoo org> AuthorDate: Sat Mar 11 07:58:35 2017 + Commit: Fabian Groffen gentoo org> CommitDate: Sat Mar 11 07:58:35 2017 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=12942aca mail-mta/exim: remove bashisms from init-script, bug #612262 Package-Manager: Portage-2.3.3, Repoman-2.3.1 mail-mta/exim/exim-4.89.ebuild | 2 +- mail-mta/exim/files/exim.rc10 | 47 ++ 2 files changed, 48 insertions(+), 1 deletion(-) diff --git a/mail-mta/exim/exim-4.89.ebuild b/mail-mta/exim/exim-4.89.ebuild index 5a527a41b49..562c9d8ef25 100644 --- a/mail-mta/exim/exim-4.89.ebuild +++ b/mail-mta/exim/exim-4.89.ebuild @@ -490,7 +490,7 @@ src_install () { insinto /etc/logrotate.d newins "${FILESDIR}/exim.logrotate" exim - newinitd "${FILESDIR}"/exim.rc9 exim + newinitd "${FILESDIR}"/exim.rc10 exim newconfd "${FILESDIR}"/exim.confd exim systemd_dounit "${FILESDIR}"/{exim.service,exim.socket,exim-submission.socket} diff --git a/mail-mta/exim/files/exim.rc10 b/mail-mta/exim/files/exim.rc10 new file mode 100644 index 000..c44dba16ce2 --- /dev/null +++ b/mail-mta/exim/files/exim.rc10 @@ -0,0 +1,47 @@ +#!/sbin/openrc-run +# Copyright 1999-2017 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 + +extra_started_commands="reload" + +depend() { + need logger + use antivirus net + provide mta +} + +tidy_dbs() { + local spooldir=$(/usr/sbin/exim -C /etc/exim/${SVCNAME}.conf -bP -n spool_directory) + local db + local ret=0 + ebegin "Tidying hints databases in ${spooldir}/db" + for db in "${spooldir}"/db/* ; do + case "${db}" in + *".lockfile"|*"*") continue ;; + esac + /usr/sbin/exim_tidydb ${TIDY_OPTS} "${spooldir}" ${db##*/} > /dev/null + : $((ret += $?)) + done + eend ${ret} +} + +start() { + # if you use multiple instances, make sure you set spool_directory + # in the configfile + tidy_dbs + ebegin "Starting ${SVCNAME}" + start-stop-daemon --start --exec /usr/sbin/exim --pidfile /run/${SVCNAME}.pid -- -C /etc/exim/${SVCNAME}.conf ${EXIM_OPTS:--bd -q15m} + eend $? +} + +stop() { + ebegin "Stopping ${SVCNAME}" + start-stop-daemon --stop --pidfile /run/${SVCNAME}.pid --name exim + eend $? +} + +reload() { + ebegin "Reloading ${SVCNAME}" + start-stop-daemon --signal HUP --pidfile /run/${SVCNAME}.pid --name exim + eend $? +}
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: 62a850cc4c30b096ca965f64dc9b21a8fcf8b53b Author: Fabian Groffen gentoo org> AuthorDate: Fri Jul 8 11:28:24 2016 + Commit: Fabian Groffen gentoo org> CommitDate: Fri Jul 8 11:28:24 2016 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=62a850cc mail-mta/exim: cleanup Package-Manager: portage-2.2.28 mail-mta/exim/Manifest | 8 - mail-mta/exim/exim-4.84.2.ebuild | 508 mail-mta/exim/exim-4.84.ebuild | 508 mail-mta/exim/exim-4.85.2.ebuild | 508 mail-mta/exim/exim-4.86.2.ebuild | 525 - mail-mta/exim/files/exim-4.86-TMPDIR.patch | 71 --- mail-mta/exim/files/exim-4.86-radius-include.patch | 15 - .../exim/files/exim-4.86-radius-type-fix.patch | 25 - mail-mta/exim/files/exim-4.86.2-TMPDIR.patch | 68 --- mail-mta/exim/files/exim.rc8 | 30 -- 10 files changed, 2266 deletions(-) diff --git a/mail-mta/exim/Manifest b/mail-mta/exim/Manifest index 7f78b6b..c702b5e 100644 --- a/mail-mta/exim/Manifest +++ b/mail-mta/exim/Manifest @@ -1,15 +1,7 @@ -DIST exim-4.84.2.tar.bz2 1745970 SHA256 eb082aedf9349a29e25120e53f9e67a7ca6c4a6dad579c1425da1e131599bf52 SHA512 04f0f4631d5eb81d7732f4e210fdda87e34adb497f1af744868fab0fe1dc64845b0d1228b34660e0123436a78d0ecf62a6d18702a0ba4f2c1a1c1398b8ac4aaf WHIRLPOOL 34054528aa0a1724001942474ad23385221a42def71bb7460574052f06fe93bead0af04ba5cbdd463fddcb85d855c5441ed3b72a1a97f862a4bf9534267f4434 -DIST exim-4.84.tar.bz2 1761790 SHA256 78ea22be87fb6df880e7fd482f3bec9ef6ceca0c9dedd50f8a26cae0b38b9e9c SHA512 3cd41af6d57e5f0377fc93367753eae6cb6bf835803e8608c44e1da5acefce1ed8886f4fe7536950de072bfed6e927afe1536c1e6466cf3121dd352b69a68039 WHIRLPOOL 9e840aa6afa0db68455b4ab458706eedd7ea57b084999c9e85eaaec0530ed93958731d934ff1d7830d9b5cd086e36cb56dc8a2f78dad85bdba9ae6573510e840 -DIST exim-4.85.2.tar.bz2 1773050 SHA256 b0dcdb8832e77716396a6ca8a7523263af518d23910d818ba9a492fe93bef618 SHA512 17398ac730cc355ea063d68f9396e1f9238d2c9cc90939dd0ed3a003aa995e79190f6a206f1b338c95f300a43c97481b0b24d34bcded7b281b521f9dbb41fc6d WHIRLPOOL faa21b50b76e7d5ffe94d4bbf3616492108a0ab3702c16d1e0e6fe62d6ecc351d5df62d99f0c97aa32d8e20c1af96a3ed57207a026f8830f0df149edf508a33d DIST exim-4.85.tar.bz2 1784150 SHA256 13211f2bbc5400d095a9b4be075eb1347e0d98676fdfe4be8a3b4d56281daaa4 SHA512 2c5846528ee98e4aff5dbabe49dfa5ba6753fa64154b9671a7849db8a17773917fe13bcb9e5f732c43d7479debfadd8012b8650823eb12504a6b1b28be456161 WHIRLPOOL 4057cd745f12ff62e956838406544060d3d2d7383027959f3c1ca12eff43bddb9be63e284767245b271e53bef92596c1241f5e90e9ed611d02e95b7a30adc7c8 -DIST exim-4.86.2.tar.bz2 1799316 SHA256 7756deafd0583776e091f2efcba9b36203e668cf420d8876f314980803636eb3 SHA512 5869a7ae8fd66819f654f6617c7e77075a24b110074317b77135b8cc86f12632e79758d41819c6e91871e0145adaba4b91651f5c6c1d2ebd17927f0198876231 WHIRLPOOL 81e284bf6d1be9597e858468834ce8ff60f2783b75fea85a020df20a15a088339c4b2ccc6199c83672fcb37c05d4ca7957e70a2f2827292454266e7f9bcab87f DIST exim-4.86.tar.bz2 1804807 SHA256 f1ccf2ce2ea51b7fbbf160e7e0e41d24ca401cf44a185128ad99ea04635fc456 SHA512 0b90cd1b4d99bbb976336ccf9c2c3375f453a74bb306f1b0215f7ecca80fbda83cf5cc38c502516c2903c5d753f1f559c534fc4f4b1b32ee3300db86de6610ab WHIRLPOOL a7e938cfaeb92af1b81c8a113752914b61e49d7fd71c39460b944716725b1e98b50a7c9ef1699569cd031ee7cac210639d9ef9bd21280e5ce7682eb40db91726 DIST exim-4.87.tar.bz2 1801422 SHA256 74691e0dff4d1b5d387e9c33c86f96a8f6d2adbc781c0dec9d2061a847b07dc9 SHA512 2b0d5c82133315c444e29abd182e0866482c904db1abe5ffe9a3008c2174f52eca850a433c069b4102874dc32bbe4af112beac94ffa154f1c06615c24deb47a4 WHIRLPOOL 3aede6629fbf41a71f6907e636458165258b523a3080d0b59ba6b295c1a258d8ce205a3295d4c49c2e6e88ef597b64895684fd47a3f5c3fba360d8e56be5f7f9 -DIST exim-html-4.84.2.tar.bz2 459553 SHA256 407165354936515c28d6f206cf20bb3c3c7f55e70e66c551154e8e9dd554955d SHA512 17b1151f90eec13334ac27f9f8430276bf1a7b4c9c6e41c76afb52e18fe107ab421194881876221acef6386a7bd8c6a5372fec6217f88e3dd4bcaef8809aa178 WHIRLPOOL df3960dfbb631b9b82d60edda27910e58936e17edc6782cd63bf70bf826bce8dbe76d7add6444045334eb6230167f5f76984274d9ba3a6c6b50009412c6e6e8b -DIST exim-html-4.84.tar.bz2 465281 SHA256 7ee7e9015b853915604b7806be93d56e9ba1fb915b63f0d6828c47f2228fd45b SHA512 7de8513476b6abcdfd36b0121a2a9d6decf1ccf94ef51b8363e544066cc05670e6f2b4d03d5fbc49071b1431183dfd9badde5cbcc65f51d55ec6b25ebcb070b9 WHIRLPOOL 88c376fd399e17b2bc06d2d0fad19f8c6485807118a81e0c200f6c39defe7155fa920489481a8b82e629951766ce0222b85956f387d22d22549303bd3dff7f82 -DIST exim-html-4.85.2.tar.bz2 461392 SHA256 b84e19f53b4077efbb94e232c8ce6557d133e0275a1d0ec32f2677068ad33dfa SHA512 e6f8531cbf0edc50db43d74b1e671ea51a2eaac7c06c8551f0229bc3a7882c725c8025a95d8a728aeb4ab3feddf6d2e1e5b7191869ac02cdfcb428e986a86422 WHIRLPOOL
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: d64c7f7c68164c8d99325dd8fba7efcd515b9b09 Author: Fabian Groffen gentoo org> AuthorDate: Fri Mar 4 10:56:37 2016 + Commit: Fabian Groffen gentoo org> CommitDate: Fri Mar 4 10:56:37 2016 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d64c7f7c mail-mta/exim: fix TMPDIR patch for 4.86.2, drop for 4.87_rc5 as it's upstream, bug #576332 Package-Manager: portage-2.2.26 mail-mta/exim/exim-4.86.2.ebuild | 2 +- mail-mta/exim/exim-4.87_rc5.ebuild | 1 - mail-mta/exim/files/exim-4.86.2-TMPDIR.patch | 68 3 files changed, 69 insertions(+), 2 deletions(-) diff --git a/mail-mta/exim/exim-4.86.2.ebuild b/mail-mta/exim/exim-4.86.2.ebuild index afad148..1e63f26 100644 --- a/mail-mta/exim/exim-4.86.2.ebuild +++ b/mail-mta/exim/exim-4.86.2.ebuild @@ -87,7 +87,7 @@ src_prepare() { epatch "${FILESDIR}"/exim-4.76-crosscompile.patch # 266591 epatch "${FILESDIR}"/exim-4.86-radius-type-fix.patch epatch "${FILESDIR}"/exim-4.86-radius-include.patch - epatch "${FILESDIR}"/exim-4.86-TMPDIR.patch # 63420 + epatch "${FILESDIR}"/exim-4.86.2-TMPDIR.patch # 63420 if use maildir ; then epatch "${FILESDIR}"/exim-4.20-maildir.patch diff --git a/mail-mta/exim/exim-4.87_rc5.ebuild b/mail-mta/exim/exim-4.87_rc5.ebuild index 2bcd192..661bf5e 100644 --- a/mail-mta/exim/exim-4.87_rc5.ebuild +++ b/mail-mta/exim/exim-4.87_rc5.ebuild @@ -85,7 +85,6 @@ src_prepare() { epatch "${FILESDIR}"/exim-4.82-makefile-freebsd.patch # 235785 epatch "${FILESDIR}"/exim-4.87-as-needed-ldflags.patch # 352265, 391279 epatch "${FILESDIR}"/exim-4.76-crosscompile.patch # 266591 - epatch "${FILESDIR}"/exim-4.86-TMPDIR.patch # 63420 if use maildir ; then epatch "${FILESDIR}"/exim-4.20-maildir.patch diff --git a/mail-mta/exim/files/exim-4.86.2-TMPDIR.patch b/mail-mta/exim/files/exim-4.86.2-TMPDIR.patch new file mode 100644 index 000..9c05a24 --- /dev/null +++ b/mail-mta/exim/files/exim-4.86.2-TMPDIR.patch @@ -0,0 +1,68 @@ +Adapted for 4.86.2 + +From c36cf51b85cfc86e46226c846914c8d915f9f3c0 Mon Sep 17 00:00:00 2001 +From: Alexander Tsoy+Date: Tue, 2 Feb 2016 20:56:15 +0300 +Subject: [PATCH] Rename build-time option TMPDIR to EXIM_TMPDIR + +--- + src/EDITME | 2 +- + src/config.h.defaults | 2 +- + src/exim.c | 12 ++-- + 3 files changed, 8 insertions(+), 8 deletions(-) + +diff --git a/src/EDITME b/src/EDITME +index 30a296e..6afe0c7 100644 +--- a/src/EDITME b/src/EDITME +@@ -1123,7 +1123,7 @@ SYSTEM_ALIASES_FILE=/etc/aliases + # it replaces the value with what is defined here. Commenting this setting + # suppresses the check altogether. + +-TMPDIR="/tmp" ++EXIM_TMPDIR="/tmp" + + + #-- +diff --git a/src/config.h.defaults b/src/config.h.defaults +index 14de083..c1cf1a9 100644 +--- a/src/config.h.defaults b/src/config.h.defaults +@@ -150,7 +150,7 @@ it's a default value. */ + + #define TCP_WRAPPERS_DAEMON_NAME "exim" + #define TIMEZONE_DEFAULT +-#define TMPDIR ++#define EXIM_TMPDIR + + #define TRANSPORT_APPENDFILE + #define TRANSPORT_AUTOREPLY +--- a/src/exim.c b/src/exim.c +@@ -3887,20 +3887,20 @@ + temporary files are created; Exim doesn't use these (apart from when delivering + to MBX mailboxes), but called libraries such as DBM libraries may require them. + If TMPDIR is found in the environment, reset it to the value defined in the +-TMPDIR macro, if this macro is defined. */ ++EXIM_TMPDIR macro, if this macro is defined. */ + +-#ifdef TMPDIR ++#ifdef EXIM_TMPDIR + { + uschar **p; + if (environ) for (p = USS environ; *p != NULL; p++) + { + if (Ustrncmp(*p, "TMPDIR=", 7) == 0 && +-Ustrcmp(*p+7, TMPDIR) != 0) ++Ustrcmp(*p+7, EXIM_TMPDIR) != 0) + { +- uschar *newp = malloc(Ustrlen(TMPDIR) + 8); +- sprintf(CS newp, "TMPDIR=%s", TMPDIR); ++ uschar *newp = malloc(Ustrlen(EXIM_TMPDIR) + 8); ++ sprintf(CS newp, "TMPDIR=%s", EXIM_TMPDIR); + *p = newp; +- DEBUG(D_any) debug_printf("reset TMPDIR=%s in environment\n", TMPDIR); ++ DEBUG(D_any) debug_printf("reset TMPDIR=%s in environment\n", EXIM_TMPDIR); + } + } + }
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: 173a12d5c7db64de27086e6ac64c47bd3432bb81 Author: Fabian Groffen gentoo org> AuthorDate: Fri Dec 11 09:21:06 2015 + Commit: Fabian Groffen gentoo org> CommitDate: Fri Dec 11 09:21:06 2015 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=173a12d5 mail-mta/exim: version bump to 4.87 RC1 Package-Manager: portage-2.2.20.1 mail-mta/exim/Manifest | 2 + mail-mta/exim/exim-4.87_rc1.ebuild | 511 + .../exim/files/exim-4.87-as-needed-ldflags.patch | 145 ++ 3 files changed, 658 insertions(+) diff --git a/mail-mta/exim/Manifest b/mail-mta/exim/Manifest index ba03148..2168cd0 100644 --- a/mail-mta/exim/Manifest +++ b/mail-mta/exim/Manifest @@ -1,7 +1,9 @@ DIST exim-4.84.tar.bz2 1761790 SHA256 78ea22be87fb6df880e7fd482f3bec9ef6ceca0c9dedd50f8a26cae0b38b9e9c SHA512 3cd41af6d57e5f0377fc93367753eae6cb6bf835803e8608c44e1da5acefce1ed8886f4fe7536950de072bfed6e927afe1536c1e6466cf3121dd352b69a68039 WHIRLPOOL 9e840aa6afa0db68455b4ab458706eedd7ea57b084999c9e85eaaec0530ed93958731d934ff1d7830d9b5cd086e36cb56dc8a2f78dad85bdba9ae6573510e840 DIST exim-4.85.tar.bz2 1784150 SHA256 13211f2bbc5400d095a9b4be075eb1347e0d98676fdfe4be8a3b4d56281daaa4 SHA512 2c5846528ee98e4aff5dbabe49dfa5ba6753fa64154b9671a7849db8a17773917fe13bcb9e5f732c43d7479debfadd8012b8650823eb12504a6b1b28be456161 WHIRLPOOL 4057cd745f12ff62e956838406544060d3d2d7383027959f3c1ca12eff43bddb9be63e284767245b271e53bef92596c1241f5e90e9ed611d02e95b7a30adc7c8 DIST exim-4.86.tar.bz2 1804807 SHA256 f1ccf2ce2ea51b7fbbf160e7e0e41d24ca401cf44a185128ad99ea04635fc456 SHA512 0b90cd1b4d99bbb976336ccf9c2c3375f453a74bb306f1b0215f7ecca80fbda83cf5cc38c502516c2903c5d753f1f559c534fc4f4b1b32ee3300db86de6610ab WHIRLPOOL a7e938cfaeb92af1b81c8a113752914b61e49d7fd71c39460b944716725b1e98b50a7c9ef1699569cd031ee7cac210639d9ef9bd21280e5ce7682eb40db91726 +DIST exim-4.87_RC1.tar.bz2 1818628 SHA256 cec26ecd7879cd04ab30fc1c152c4967549c8499a4432754ec97c6ecbc712911 SHA512 a97eb31ea612fb19f5fe2da23a51e248beb4faa5a378939207d52207254f50c54b97047a83e6995214ec5e58b1540dc12fb4c865ba81b7013c923342d2e0 WHIRLPOOL 4a57f87c84b83853892c400042a221992d9d4a3049195059feb6735ddb848482eac00d1f429da0dbcca2ca3cf984b4ba23f5645ebd1eab5ea92b31ed7cc4aa0b DIST exim-html-4.84.tar.bz2 465281 SHA256 7ee7e9015b853915604b7806be93d56e9ba1fb915b63f0d6828c47f2228fd45b SHA512 7de8513476b6abcdfd36b0121a2a9d6decf1ccf94ef51b8363e544066cc05670e6f2b4d03d5fbc49071b1431183dfd9badde5cbcc65f51d55ec6b25ebcb070b9 WHIRLPOOL 88c376fd399e17b2bc06d2d0fad19f8c6485807118a81e0c200f6c39defe7155fa920489481a8b82e629951766ce0222b85956f387d22d22549303bd3dff7f82 DIST exim-html-4.85.tar.bz2 467069 SHA256 fd91946369626e74842a0799b93d0d9e4a201fe640af84e1b5349fe6ff204167 SHA512 8214576300827f79c0880e2d2163f71d7f1b3fe2aff714b591a011e48816965de5a773c3509137b085fec3d4d2128931f8398768c24dad6c92b7df27cbcafe74 WHIRLPOOL a7edffd7124c4920708616d3e59c0db5159dee5f7e4fd62ce29fdba769d39781a3826d4e3e39cdc97669941bb9a5c977defe280feb73cbe159b23df4cb6fe95f DIST exim-html-4.86.tar.bz2 471159 SHA256 02226a9fbb6d5aaa9d35f3e2a3bd9077e2307463de6baf6e3e2e938c1fe39146 SHA512 0c15fbccaf9b744fb8b7990d2b2bd0555a04ef5ed82ffbf2e32372a539bae6d7cebad96960f5570a2f8f27d31ebdf2467c51cb053b059996bb9122bc02fa741b WHIRLPOOL d9fbaa73491ab1657afb6ba59da5adea26144b58b358aeb9829731d3f35d6c1d8c7021c5243cb989e7c704cc346cde2a330f9eedc5b357326c1d56d7caa4a6c5 +DIST exim-html-4.87_RC1.tar.bz2 475376 SHA256 37303fbca2282e86328e2b3bab84526b920ac54e0d4b96d3597639a495ef70db SHA512 1d338abda79aa49968ded992cfa60e4c791bd647783095991be9d7eaf144e4b20460915585af78b498def4a8d3f160937eef85f767adb4512f28384e9ab620db WHIRLPOOL e12e97e1cd0d9b6648377f298c478e5fa2f060ebd004b4726e100414c83f53e6b8e294a8b102357ac15a3868f34ae299edc4213a46851bb78c6e62415999a1ef DIST system_filter.exim.gz 3075 SHA256 3a3471b486a09e0a0153f7b520e1eaf26d21b97d73ea8348bdc593c00eb1e437 SHA512 cb358d3ce2499a0bb5920d962a06f2af8486e55ec90c8c928bd8e3aefb279aa57f5f960d5adfcef68bd94110b405eaa144e9629cfe6014a529c79c544600bbf3 WHIRLPOOL ce68d9c18b24eca3ef97ea810964cc1ada5f85b795a7c432ad39b5788188a16419101c92fb52b418738d760e1d658f7a41485e5561079a667d84d276c71be5a4 diff --git a/mail-mta/exim/exim-4.87_rc1.ebuild b/mail-mta/exim/exim-4.87_rc1.ebuild new file mode 100644 index 000..99e8dde --- /dev/null +++ b/mail-mta/exim/exim-4.87_rc1.ebuild @@ -0,0 +1,511 @@ +# Copyright 1999-2015 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Id$ + +EAPI="5" + +inherit eutils toolchain-funcs multilib pam systemd + +IUSE="dcc +dkim dlfunc dmarc +dnsdb doc dovecot-sasl dsn exiscan-acl gnutls ipv6 ldap libressl lmtp maildir mbx mysql nis pam perl pkcs11 postgres +prdr proxy radius redis sasl selinux spf sqlite srs ssl syslog tcpd tpda X" +REQUIRED_USE="spf? ( exiscan-acl ) srs? ( exiscan-acl ) dmarc? ( spf dkim ) pkcs11? ( gnutls )" +
[gentoo-commits] repo/gentoo:master commit in: mail-mta/exim/, mail-mta/exim/files/
commit: 2091c3a9d7ceccca564d8277d4de8e0e934615d7 Author: Alexander Tsoy tsoy me> AuthorDate: Sat Oct 17 21:44:31 2015 + Commit: Sergey Popov gentoo org> CommitDate: Mon Oct 19 10:52:50 2015 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2091c3a9 mail-mta/exim: use freeradius-client instead of radiusclient Also fix compilation with USE=radius. It was broken since 4.86 release. Acked-by: Sergey Popov gentoo.org> Gentoo-Bug: 563356 mail-mta/exim/exim-4.86-r2.ebuild | 513 + mail-mta/exim/files/exim-4.86-radius-include.patch | 15 + .../exim/files/exim-4.86-radius-type-fix.patch | 25 + 3 files changed, 553 insertions(+) diff --git a/mail-mta/exim/exim-4.86-r2.ebuild b/mail-mta/exim/exim-4.86-r2.ebuild new file mode 100644 index 000..ef5243c --- /dev/null +++ b/mail-mta/exim/exim-4.86-r2.ebuild @@ -0,0 +1,513 @@ +# Copyright 1999-2015 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Id$ + +EAPI="5" + +inherit eutils toolchain-funcs multilib pam systemd + +IUSE="dcc +dkim dlfunc dmarc +dnsdb doc dovecot-sasl dsn exiscan-acl gnutls ipv6 ldap libressl lmtp maildir mbx mysql nis pam perl pkcs11 postgres +prdr proxy radius redis sasl selinux spf sqlite srs ssl syslog tcpd tpda X" +REQUIRED_USE="spf? ( exiscan-acl ) srs? ( exiscan-acl ) dmarc? ( spf dkim ) pkcs11? ( gnutls )" + +COMM_URI="ftp://ftp.exim.org/pub/exim/exim4$([[ ${PV} == *_rc* ]] && echo /test)" + +DESCRIPTION="A highly configurable, drop-in replacement for sendmail" +SRC_URI="${COMM_URI}/${P//rc/RC}.tar.bz2 + mirror://gentoo/system_filter.exim.gz + doc? ( ${COMM_URI}/${PN}-html-${PV//rc/RC}.tar.bz2 )" +HOMEPAGE="http://www.exim.org/; + +SLOT="0" +LICENSE="GPL-2" +KEYWORDS="~amd64 ~x86" + +COMMON_DEPEND=">=sys-apps/sed-4.0.5 + >=sys-libs/db-3.2 + dev-libs/libpcre + perl? ( dev-lang/perl:= ) + pam? ( virtual/pam ) + tcpd? ( sys-apps/tcp-wrappers ) + ssl? ( + !libressl? ( dev-libs/openssl:0= ) + libressl? ( dev-libs/libressl:= ) + ) + gnutls? ( net-libs/gnutls[pkcs11?] + dev-libs/libtasn1 ) + ldap? ( >=net-nds/openldap-2.0.7 ) + mysql? ( virtual/mysql ) + postgres? ( dev-db/postgresql ) + sasl? ( >=dev-libs/cyrus-sasl-2.1.26-r2 ) + redis? ( dev-libs/hiredis ) + spf? ( >=mail-filter/libspf2-1.2.5-r1 ) + dmarc? ( mail-filter/opendmarc ) + srs? ( mail-filter/libsrs_alt ) + X? ( x11-proto/xproto + x11-libs/libX11 + x11-libs/libXmu + x11-libs/libXt + x11-libs/libXaw + ) + sqlite? ( dev-db/sqlite ) + radius? ( net-dialup/freeradius-client ) + virtual/libiconv + " + # added X check for #57206 +DEPEND="${COMMON_DEPEND} + virtual/pkgconfig" +RDEPEND="${COMMON_DEPEND} + !mail-mta/courier + !mail-mta/esmtp + !mail-mta/mini-qmail + !=mail-mta/msmtp-1.4.19-r1[mta] + !mail-mta/netqmail + !mail-mta/nullmailer + !mail-mta/postfix + !mail-mta/qmail-ldap + !mail-mta/sendmail + !mail-mta/opensmtpd + !=mail-mta/ssmtp-2.64-r2[mta] + !net-mail/mailwrapper + >=net-mail/mailbase-0.00-r5 + virtual/logger + dcc? ( mail-filter/dcc ) + selinux? ( sec-policy/selinux-exim ) + " + +S=${WORKDIR}/${P//rc/RC} + +src_prepare() { + epatch "${FILESDIR}"/exim-4.14-tail.patch + epatch "${FILESDIR}"/exim-4.74-localscan_dlopen.patch + epatch "${FILESDIR}"/exim-4.69-r1.27021.patch + epatch "${FILESDIR}"/exim-4.74-radius-db-ENV-clash.patch # 287426 + epatch "${FILESDIR}"/exim-4.82-makefile-freebsd.patch # 235785 + epatch "${FILESDIR}"/exim-4.77-as-needed-ldflags.patch # 352265, 391279 + epatch "${FILESDIR}"/exim-4.76-crosscompile.patch # 266591 + epatch "${FILESDIR}"/exim-4.86-radius-type-fix.patch + epatch "${FILESDIR}"/exim-4.86-radius-include.patch + + if use maildir ; then + epatch "${FILESDIR}"/exim-4.20-maildir.patch + else + epatch "${FILESDIR}"/exim-4.80-spool-mail-group.patch # 438606 + fi + + # user Exim believes it should be + MAILUSER=mail + MAILGROUP=mail + if use prefix && [[ ${EUID} != 0 ]] ; then + MAILUSER=$(id -un) + MAILGROUP=$(id -gn) + fi +} + +src_configure() { + # general config and paths + + sed -i.orig \ + -e "/SYSTEM_ALIASES_FILE/s'SYSTEM_ALIASES_FILE'${EPREFIX}/etc/mail/aliases'" \ + "${S}"/src/configure.default || die + + sed -i -e 's/^buildname=.*/buildname=exim-gentoo/g' Makefile || die + + sed -e "48i\CFLAGS=${CFLAGS}" \ + -e "s:BIN_DIRECTORY=/usr/exim/bin:BIN_DIRECTORY=${EPREFIX}/usr/sbin:" \ + -e