diff options
author | rea <rea@FreeBSD.org> | 2011-05-11 19:30:17 +0800 |
---|---|---|
committer | rea <rea@FreeBSD.org> | 2011-05-11 19:30:17 +0800 |
commit | dc7d758195a6976351145455b341ad775e58f674 (patch) | |
tree | 47ffdab00e6e9cd9a4ec1bf6eddb3e8db05bf475 /mail/exim | |
parent | 6a607c34c9dddddaafcae25ccdd8a48f48a161d7 (diff) | |
download | freebsd-ports-gnome-dc7d758195a6976351145455b341ad775e58f674.tar.gz freebsd-ports-gnome-dc7d758195a6976351145455b341ad775e58f674.tar.zst freebsd-ports-gnome-dc7d758195a6976351145455b341ad775e58f674.zip |
mail/exim: upgrade to 4.76
4.76 is the security release that fixes CVE-2011-1764, format string
attack and information leak, both inside the DKIM code.
List of changes (ftp://exim.inode.at/exim/ChangeLogs/ChangeLog-4.76):
PP/01 The new ldap_require_cert option would segfault if used. Fixed.
PP/02 Harmonised TLS library version reporting; only show if
debugging. Layout now matches that introduced for other
libraries in 4.74 PP/03.
PP/03 New openssl_options items: no_sslv2 no_sslv3 no_ticket no_tlsv1
PP/04 New "dns_use_edns0" global option.
PP/05 Don't segfault on misconfiguration of ref:name exim-user as uid.
Bugzilla 1098.
PP/06 Extra paranoia around buffer usage at the STARTTLS transition.
nb: Exim is not vulnerable to http://www.kb.cert.org/vuls/id/555316
TK/01 Updated PolarSSL code to 0.14.2.
Bugzilla 1097. Patch from Andreas Metzler.
PP/07 Catch divide-by-zero in ${eval:...}.
Fixes bugzilla 1102.
PP/08 Condition negation of bool{}/bool_lax{} did not negate. Fixed.
Bugzilla 1104.
TK/02 Bugzilla 1106: CVE-2011-1764 - DKIM log line was subject to a
format-string attack -- SECURITY: remote arbitrary code execution.
TK/03 SECURITY - DKIM signature header parsing was double-expanded,
second time unintentionally subject to list matching rules,
letting the header cause arbitrary Exim lookups (of items which can
occur in lists, *not* arbitrary string expansion). This allowed for
information disclosure.
PP/09 Fix another SIGFPE (x86) in ${eval:...} expansion, this time related
to INT_MIN/-1 -- value coerced to INT_MAX.
New stuff (ftp://exim.inode.at/exim/ChangeLogs/NewStuff-4.76):
1. The global option "dns_use_edns0" may be set to coerce EDNS0 usage
on or off in the resolver library.
And I am also adding patch for exiqgrep that was taken from
http://bugs.exim.org/show_bug.cgi?id=1103 [1].
PR: ports/156903 [2], ports/156872 [3]
Reported-by: Oliver Brandmueller <ob@e-gitt.net> [1], admin@anes.su [2], Alexander Wittig <alexander@wittig.name> [3]
Approved-by: erwin (mentor)
Feature-safe: yes
Diffstat (limited to 'mail/exim')
-rw-r--r-- | mail/exim/Makefile | 2 | ||||
-rw-r--r-- | mail/exim/distinfo | 4 | ||||
-rw-r--r-- | mail/exim/files/patch-exiqgrep.src | 15 |
3 files changed, 18 insertions, 3 deletions
diff --git a/mail/exim/Makefile b/mail/exim/Makefile index 9f34171a97ea..1a5d4390cd36 100644 --- a/mail/exim/Makefile +++ b/mail/exim/Makefile @@ -77,7 +77,7 @@ PLIST_SUB+= SO_1024="" PLIST_SUB+= SO_1024="@comment " .endif -EXIM_VERSION= 4.75 +EXIM_VERSION= 4.76 SA_EXIM_VERSION=4.2 SO_1024_VERSION=3.2 diff --git a/mail/exim/distinfo b/mail/exim/distinfo index eaac60f991b0..db3e0c9b194c 100644 --- a/mail/exim/distinfo +++ b/mail/exim/distinfo @@ -1,5 +1,5 @@ -SHA256 (exim/exim-4.75.tar.bz2) = dc6ef216dcf5b44b6c43f00a3ccb16c4b22e1cb2a414e324df22e991fd490ded -SIZE (exim/exim-4.75.tar.bz2) = 1600867 +SHA256 (exim/exim-4.76.tar.bz2) = 4625b0fb916835ae60a73311a8956267fa1248e888f584c337a5b7df20174e95 +SIZE (exim/exim-4.76.tar.bz2) = 1605832 SHA256 (exim/sa-exim-4.2.tar.gz) = 72e0a735547f18b05785e6c58a71d24623858f0f5234a5dc0e24cb453999e99a SIZE (exim/sa-exim-4.2.tar.gz) = 66575 SHA256 (exim/spamooborona1024-src-3.2.tar.gz) = ab22a430f3860460045f6b213c68c89700a0cd10cbb6c7a808ece326c53787ee diff --git a/mail/exim/files/patch-exiqgrep.src b/mail/exim/files/patch-exiqgrep.src new file mode 100644 index 000000000000..32986dad99ad --- /dev/null +++ b/mail/exim/files/patch-exiqgrep.src @@ -0,0 +1,15 @@ +Should be removed once it will get into the mainline release. + +Taken-from: http://bugs.exim.org/show_bug.cgi?id=1103 +Reported-by: Oliver Brandmueller <ob@e-gitt.net> +--- src/exiqgrep.src.orig 2011-05-10 10:29:50.000000000 +0400 ++++ src/exiqgrep.src 2011-05-10 10:31:13.000000000 +0400 +@@ -88,7 +88,7 @@ + chomp(); + my $line = $_; + #Should be 1st line of record, if not error. +- if ($line =~ /^\s*(\w+)\s+((?:\d+(?:\.\d+)?[A-Z])?)\s*(\w{6}-\w{6}-\w{2})\s+(<.*?>)/) { ++ if ($line =~ /^\s*(\w+)\s+((?:\d+(?:\.\d+)?[A-Z]?)?)\s*(\w{6}-\w{6}-\w{2})\s+(<.*?>)/) { + my $msg = $3; + $id{$msg}{age} = $1; + $id{$msg}{size} = $2; |