From owner-svn-ports-all@freebsd.org Sun May 24 13:04:06 2020 Return-Path: Delivered-To: svn-ports-all@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id F11E432D468; Sun, 24 May 2020 13:04:06 +0000 (UTC) (envelope-from pi@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 49VL5f616gz414X; Sun, 24 May 2020 13:04:06 +0000 (UTC) (envelope-from pi@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id C962F21796; Sun, 24 May 2020 13:04:06 +0000 (UTC) (envelope-from pi@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id 04OD46KE068704; Sun, 24 May 2020 13:04:06 GMT (envelope-from pi@FreeBSD.org) Received: (from pi@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id 04OD452K068693; Sun, 24 May 2020 13:04:05 GMT (envelope-from pi@FreeBSD.org) Message-Id: <202005241304.04OD452K068693@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: pi set sender to pi@FreeBSD.org using -f From: Kurt Jaeger Date: Sun, 24 May 2020 13:04:05 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-branches@freebsd.org Subject: svn commit: r536400 - in branches/2020Q2/mail: qmail qmail-mysql qmail-tls qmail/files X-SVN-Group: ports-branches X-SVN-Commit-Author: pi X-SVN-Commit-Paths: in branches/2020Q2/mail: qmail qmail-mysql qmail-tls qmail/files X-SVN-Commit-Revision: 536400 X-SVN-Commit-Repository: ports MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 24 May 2020 13:04:07 -0000 Author: pi Date: Sun May 24 13:04:05 2020 New Revision: 536400 URL: https://svnweb.freebsd.org/changeset/ports/536400 Log: MFH: r536399 mail/qmail: Fixes CVE-2005-1513 to CVE-2005-1513, update TLS patch mail/qmail-tls: Update TLS patch See https://www.qualys.com/2020/05/19/cve-2005-1513/remote-code-execution-qmail.txt for details about the CVEs - now builds with openssl 1.1.1e from the ports PR: 244969, 245010 Submitted by: erdgeist@erdgeist.org (maintainer) Reported by: klokanek@eldar.cz Security: CVE-2005-1513, CVE-2005-1514, CVE-2005-1515 Approved by: portmgr (security blanket) Added: branches/2020Q2/mail/qmail/files/patch-alloc.c - copied unchanged from r536399, head/mail/qmail/files/patch-alloc.c Modified: branches/2020Q2/mail/qmail-mysql/Makefile branches/2020Q2/mail/qmail-tls/Makefile branches/2020Q2/mail/qmail/Makefile branches/2020Q2/mail/qmail/distinfo branches/2020Q2/mail/qmail/files/qmailsend.in Directory Properties: branches/2020Q2/ (props changed) Modified: branches/2020Q2/mail/qmail-mysql/Makefile ============================================================================== --- branches/2020Q2/mail/qmail-mysql/Makefile Sun May 24 12:59:01 2020 (r536399) +++ branches/2020Q2/mail/qmail-mysql/Makefile Sun May 24 13:04:05 2020 (r536400) @@ -3,7 +3,7 @@ PORTNAME= qmail PORTVERSION= ${QMAIL_VERSION}.${MYSQL_PATCH_VERSION} -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= mail PKGNAMESUFFIX= -mysql Modified: branches/2020Q2/mail/qmail-tls/Makefile ============================================================================== --- branches/2020Q2/mail/qmail-tls/Makefile Sun May 24 12:59:01 2020 (r536399) +++ branches/2020Q2/mail/qmail-tls/Makefile Sun May 24 13:04:05 2020 (r536400) @@ -3,7 +3,7 @@ PORTNAME= qmail PORTVERSION= ${QMAIL_VERSION}.${TLS_PATCH_DATE} -PORTREVISION= 2 +PORTREVISION= 3 CATEGORIES= mail PKGNAMESUFFIX= -tls @@ -13,7 +13,7 @@ CONFLICTS= *qmail-[0-9]* qmail-ldap-[0-9]* *qmail-mysq SLAVE_TLS= yes -TLS_PATCH_DATE= 20160918 +TLS_PATCH_DATE= 20200107 USES= ssl Modified: branches/2020Q2/mail/qmail/Makefile ============================================================================== --- branches/2020Q2/mail/qmail/Makefile Sun May 24 12:59:01 2020 (r536399) +++ branches/2020Q2/mail/qmail/Makefile Sun May 24 13:04:05 2020 (r536400) @@ -3,7 +3,7 @@ PORTNAME= ${QMAIL_PORTNAME} PORTVERSION?= ${QMAIL_VERSION} -PORTREVISION?= 4 +PORTREVISION?= 5 CATEGORIES= mail MASTER_SITES+= QMAIL DISTNAME= ${PORTNAME}-${QMAIL_VERSION} @@ -383,10 +383,6 @@ NO_MTREE= yes NO_PREFIX_RMDIR=yes .include - -.if defined(SLAVE_TLS) && ${OPSYS} == FreeBSD && ${OSVERSION} >= 1200000 -EXTRA_PATCHES+= ${FILESDIR}/netqmail-1.06-tls-20160918-freebsd-12.patch -.endif .if ${ARCH} == "amd64" && !defined(SLAVE_LDAP) \ && !defined(SLAVE_SPAMCONTROL) Modified: branches/2020Q2/mail/qmail/distinfo ============================================================================== --- branches/2020Q2/mail/qmail/distinfo Sun May 24 12:59:01 2020 (r536399) +++ branches/2020Q2/mail/qmail/distinfo Sun May 24 13:04:05 2020 (r536400) @@ -1,4 +1,4 @@ -TIMESTAMP = 1485784051 +TIMESTAMP = 1584978462 SHA256 (qmail/qmail-1.03.tar.gz) = 21ed6c562cbb55092a66197c35c8222b84115d1acab0854fdb1ad1f301626f88 SIZE (qmail/qmail-1.03.tar.gz) = 220668 SHA256 (qmail/netqmail-1.06.tar.gz) = 8e7d98d15211fc9f9c28109e942e2268f42a6672d68df92a42f2afa90ff00532 @@ -47,8 +47,8 @@ SHA256 (qmail/netqmail-mysql-1.1.15.patch) = 656d2366c SIZE (qmail/netqmail-mysql-1.1.15.patch) = 61635 SHA256 (qmail/spamcontrol-2731.tgz) = 24a9c0af8f405ae6bcc4038fd1fc1ea12d5e5c54642e105fd9f0790593128b71 SIZE (qmail/spamcontrol-2731.tgz) = 179422 -SHA256 (qmail/netqmail-1.06-tls-20160918.patch) = f41d4cca8c9603bfcdbd97d46654f49ad736d8d2f43032305096da80cc7e876a -SIZE (qmail/netqmail-1.06-tls-20160918.patch) = 50082 +SHA256 (qmail/netqmail-1.06-tls-20200107.patch) = 4230ffe10d58f9ded8f28f0d226e1cb1fa4e21321f7e8584388c52c4dd0f83b3 +SIZE (qmail/netqmail-1.06-tls-20200107.patch) = 52188 SHA256 (qmail/qmail-smtpd-auth-0.31.tar.gz) = 1b439fa7e128de13fa80b86883f61a39d17b87b7e8916b6a0eab065bbe49b938 SIZE (qmail/qmail-smtpd-auth-0.31.tar.gz) = 8798 SHA256 (qmail/qmail-smtpd-auth-close3.patch) = d933e871261d6740cebe5c21cad81146525cfe06a464e277979f61c1242b5ad4 Copied: branches/2020Q2/mail/qmail/files/patch-alloc.c (from r536399, head/mail/qmail/files/patch-alloc.c) ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ branches/2020Q2/mail/qmail/files/patch-alloc.c Sun May 24 13:04:05 2020 (r536400, copy of r536399, head/mail/qmail/files/patch-alloc.c) @@ -0,0 +1,19 @@ +diff -r -u a/alloc.c b/alloc.c +--- alloc.c 1998-06-15 03:53:16.000000000 -0700 ++++ alloc.c 2020-05-04 16:43:32.923310325 -0700 +@@ -1,3 +1,4 @@ ++#include + #include "alloc.h" + #include "error.h" + extern char *malloc(); +@@ -15,6 +16,10 @@ + unsigned int n; + { + char *x; ++ if (n >= (INT_MAX >> 3)) { ++ errno = error_nomem; ++ return 0; ++ } + n = ALIGNMENT + n - (n & (ALIGNMENT - 1)); /* XXX: could overflow */ + if (n <= avail) { avail -= n; return space + avail; } + x = malloc(n); Modified: branches/2020Q2/mail/qmail/files/qmailsend.in ============================================================================== --- branches/2020Q2/mail/qmail/files/qmailsend.in Sun May 24 12:59:01 2020 (r536399) +++ branches/2020Q2/mail/qmail/files/qmailsend.in Sun May 24 13:04:05 2020 (r536400) @@ -41,8 +41,8 @@ pidfile="/var/run/${name}.pid" qmailsend_start() { case ${qmailsend_delivery} in - maildir) command_args='./Maildir/';; - mailbox) command_args='./Mailbox';; + maildir) command_args=./Maildir/;; + mailbox) command_args=./Mailbox;; proc) command_args='|preline procmail';; V7) command_args='|preline -f /bin/mail -f "${SENDER:-MAILER-DAEMON}" -d "$USER"';; SVR4) command_args='|preline -f /bin/mail -r "${SENDER:-MAILER-DAEMON}" -d "$USER"';;