| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Update to 4.92.3 to fix CVE-2019-16928
PR: 240912
Submitted by: pi
Security: e917caba-e291-11e9-89f1-152fed202bb7
Approved by: ports-secteam (blanket)
Notes:
svn path=/branches/2019Q3/; revision=513213
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
mail/opendmarc: fix multiple addresses in From vulnerability
- please note that it might only be a partial fix, see
https://github.com/trusteddomainproject/OpenDMARC/pull/48#issuecomment-530375590
PR: 240505
Reported by: protonmail
Approved by: ports-secteam (delphij)
Obtained from: https://github.com/trusteddomainproject/OpenDMARC/pull/48
Security: https://protonmail.com/blog/bellingcat-cyberattack-phishing/
Notes:
svn path=/branches/2019Q3/; revision=512094
|
|
|
|
|
|
|
|
|
| |
Changes: https://www.thunderbird.net/thunderbird/60.9.0/releasenotes/
Security: 05463e0a-abd3-4fa4-bd5f-cd5ed132d4c6
Approved by: ports-secteam blanket
Notes:
svn path=/branches/2019Q3/; revision=511377
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Fix just another awful RCE in Exim: CVE-2019-15846
PR: 240362
Submitted by: Pascal Christen <pascal.christen hostpoint.ch>
Security: 61db9b88-d091-11e9-8d41-97657151f8c2
Approved by: ports-secteam (joneum)
Notes:
svn path=/branches/2019Q3/; revision=511315
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
gecko: don't require gconf on non-Gnome2 desktops
Take advantage of lazy bindings by not requiring runtime dependency.
DBus is required under Wayland (Gecko-specific) and for MIME handling
but GConf2 is useless outside of Gnome2. So, only use GConf2 if it's
already installed (similar to PulseAudio).
PR: 240323
Approved by: ports-secteam blanket
Notes:
svn path=/branches/2019Q3/; revision=511178
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
mail/dovecot, mail/dovecot-pigeonhole: Update to 2.3.7 and 0.5.7 respectively.
dovecot changelog:
* fts-solr: Removed break-imap-search parameter
+ Added more events for the new statistics, see
https://doc.dovecot.org/admin_manual/list_of_events/
+ mail-lua: Add IMAP metadata accessors, see
https://doc.dovecot.org/admin_manual/lua/
+ Add event exporters that allow exporting raw events to log files and
external systems, see
https://doc.dovecot.org/configuration_manual/event_export/
+ SNIPPET is now PREVIEW and size has been increased to 200 characters.
+ Add body option to fts_enforced. This triggers building FTS index only
on body search, and an error using FTS index fails the search rather
than reads through all the mails.
- Submission/LMTP: Fixed crash when domain argument is invalid in a
second EHLO/LHLO command.
- Copying/moving mails using Maildir format loses IMAP keywords in the
destination if the mail also has no system flags.
- mail_attachment_detection_options=add-flags-on-save caused email body
to be unnecessarily opened when FETCHing mail headers that were
already cached.
- mail attachment detection keywords not saved with maildir.
- dovecot.index.cache may have grown excessively large in some
situations. This happened especially when using autoexpunging with
lazy_expunge folders. Also with mdbox format in general the cache file
wasn't recreated as often as it should have.
- Autoexpunged mails weren't immediately deleted from the disk. Instead,
the deletion from disk happened the next time the folder was opened.
This could have caused unnecessary delays if the opening was done by
an interactive IMAP session.
- Dovecot's TCP connections sometimes add extra 40ms latency due to not
enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
affected, but everything else was. This delay wasn't always visible -
only in some situations with some message/packet sizes.
- imapc: Fix various crash conditions
- Dovecot builds were not always reproducible.
- login-proxy: With shutdown_clients=no after config reload the
existing connections could no longer be listed or kicked with doveadm.
- "doveadm proxy kick" with -f parameter caused a crash in some
situations.
- Auth policy can cause segmentation fault crash during auth process
shutdown if all auth requests have not been finished.
- Fix various minor bugs leading into incorrect behaviour in mailbox
list index handling. These rarely caused noticeable problems.
- LDAP auth: Iteration accesses freed memory, possibly crashing
auth-worker
- local_name { .. } filter in dovecot.conf does not correctly support
multiple names and wildcards were matched incorrectly.
- replicator: dsync assert-crashes if it can't connect to remote TCP
server.
- config: Memory leak in config process when ssl_dh setting wasn't
set and there was no ssl-parameters.dat file.
This caused config process to die once in a while
with "out of memory".
pigeonhole changelog:
+ vacation: Made the subject for the automatic response message produced
by the Sieve vacation action configurable. Both the default subject
(if the script defines none) and the subject template (e.g. used to
add a subject prefix) can be configured.
- dsync: dsync-replication does not synchronize Sieve scripts.
- imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
- testsuite: Pigeonhole testsuite segfaulted if it was compiled with
GCC 9
mail/dovecot: stop spamming the log with EINVAL.
PR: 239172
Submitted by: zillion1@o2.pl
Obtained from: dovecot mailing list.
mail/dovecot: stop whining about TCP_NODELAY errors.
[PATCH] lib: ostream-file: Don't log any errors when setting
TCP_NODELAY
It's likely never useful to log the error, and it seems more and more
unexpected errors just keep popping up.
Obtained from: upstream git.
mail/dovecot: One should actually TEST their patches.
Fix previous commit.
Pointy Hat To: ler
mail/dovecot: [PATCH] lib-storage: Namespace prefix shouldn't be included in all
mailbox name validity checks
Obtained from: upstream github.
mail/dovecot, mail/dovecot-pigeonhole: upgrade to 2.3.7.1 and 0.5.7.1 respectively.
These releases fix the reported regressions in v2.3.7 & v0.5.7.
Dovecot core:
- Fix TCP_NODELAY errors being logged on non-Linux OSes
- lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
- Remove wrongly added checks in namespace prefix checking
Pigeonhole:
- dsync: Sieve script syncing failed if mailbox attributes weren't
enabled.
mail/dovecot,mail/dovecot-pigeonhole: fix CVE-2019-11500
Changes
-------
* CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
when scanning data in quoted strings, leading to out of bounds heap
memory writes. Found by Nick Roessler and Rafi Rubin.
Security: CVE-2019-11500
PR: 241074
Approved by: ports-secteam (delphij, joneum)
Notes:
svn path=/branches/2019Q3/; revision=510165
|
|
|
|
|
|
|
|
|
|
|
| |
mail/aerc: Update to 0.2.1
Changes: https://git.sr.ht/~sircmpwn/aerc/refs/
Approved by: ports-secteam blanket (bug fixes, snapshot to release)
Notes:
svn path=/branches/2019Q3/; revision=507758
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
mail/sympa: Update to 6.2.44
Changelog since 6.2.42:
* Indentation of web templates are corrected. Though this change will not
affect functionality, administrators might have to apply their
customization to the new templates again.
* WWSympa: TLS client authentication: Now it gets rfc822Name in X.509v3
subjectAltName, otherwise emailAddress attribute in subject DN. Note
that earlier efforts getting attribute such as MAIL, Email in subject DN
are no longer supported.
* ARC: Now Mail-DKIM 0.55 or better is required for ARC support.
* WWSympa: Admin function to bulk unsubscribe which has been provided by
6.1.x was restored
Fixed bugs:
* "Use of uninitialized value $salt" on --import
* Improve handling of missing sympa/web_tt2 during upgrade
Merged pull requests:
* Support Test::Compile 2.0.0
* Remove all unneeded files from foundation-icons directory
PR: 238784
Submitted by: Geoffroy Desvernay <dgeo@centrale-marseille.fr> (maintainer)
Reported by: Daniel <d.stoye@cms.hu-berlin.de>
Approved by: ports-secteam (miwi)
Notes:
svn path=/branches/2019Q3/; revision=507355
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Update to 4.92.1 to fix CVE-2019-13917
PR: 239441
Submitted by: Pascal Christen <pascal.christen at hostpoint.ch>
Approved by: ports-secteam (miwi)
Notes:
svn path=/branches/2019Q3/; revision=507320
|
|
|
|
|
|
|
|
|
|
|
|
| |
www/w3m the default in order to install a text-based browser
to render HTML for nmh. Users can still deselect the option to
obtain a leaner install base. The other HTML rendering options
also still available.
Suggested by: Ken Hornstein <kenh@cmf.nrl.navy.mil> (nmh upline)
Notes:
svn path=/head/; revision=505814
|
|
|
|
|
|
|
|
| |
Changes: https://www.thunderbird.net/thunderbird/60.8.0/releasenotes/
Security: 0592f49f-b3b8-4260-b648-d1718762656c
Notes:
svn path=/head/; revision=505800
|
|
|
|
|
|
|
| |
MFH: 2019Q3
Notes:
svn path=/head/; revision=505793
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
An implicit include has gone away (Intrinsic.h) so users of X11/StringDefs.h
now need to explictly include X11/Intrinsic.h to get the typedef for
String, otherwise many of the macro's like this one:
#define XtRString ((String)&XtStrings[1797])
will fall over.
Notes:
svn path=/head/; revision=505789
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
to render HTML. The dependencies are build and run dependencies, build
dependencies because nmh auto-configures itself at build time for text
based browsers it finds. The nmh upstream developer,
Ken Hornstein <kenh@cmf.nrl.navy.mil>, prefers w3m but any text-based
browser will do. The browser option is not default in order to satisfy
minimalist install rerequirements.
Reported by: Ken Hornstein <kenh@cmf.nrl.navy.mil> (upstream)
MFH: 2019Q3
Notes:
svn path=/head/; revision=505784
|
|
|
|
| |
Notes:
svn path=/head/; revision=505749
|
|
|
|
|
|
|
|
| |
PR: 238714
Submitted by: Kan Sasaki <sasaki@fcc.ad.jp> (maintainer)
Notes:
svn path=/head/; revision=505490
|
|
|
|
|
|
|
|
| |
PR: 238713
Submitted by: Kan Sasaki <sasaki@fcc.ad.jp> (maintainer)
Notes:
svn path=/head/; revision=505489
|
|
|
|
|
|
|
|
| |
PR: 238589
Submitted by: Derek Schrock <dereks@lifeofadishwasher.com> (maintainer)
Notes:
svn path=/head/; revision=505472
|
|
|
|
| |
Notes:
svn path=/head/; revision=505403
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Release 0.78.0:
core:
* Fix line annotation arrows for usage in dimensioning
* Handle Ink annots without an InkList but with an AP
* Fix typos preventing parsing of Movie start and duration
* Fix crash on malformed files
glib:
* Add poppler_document_create_dests_tree()
* Don't use the deprecated g_type_class_add_private()
* Document the differences between render() and render_for_printing()
* Fix introspection for poppler_document_new_from_data
* Don't create PopplerInputStream with length 0. Issue #414
* Document G_IO_ERROR as a possible error condition
* docs: Add index for API new in 0.78
build system:
* Fixes cross compilation of gir in Void Linux
* Add -Wshadow to the default warning flags
* install pkg-config pc files if pkg-config is found
PR: 238857
Exp-run by: antoine
Approved by: gnome (kwm, implicit)
Notes:
svn path=/head/; revision=505331
|
|
|
|
| |
Notes:
svn path=/head/; revision=505322
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
it provides, but dependency was not recorded in the package. This bug
went unnoticed for a long time because `libiconv.so.2' library typically
exists on any FreeBSD installation, and was revealed by recent exp-run.
Since port revision was bumped just now in the previous commit, abuse it
and do not bump again.
PR: 229613
Notes:
svn path=/head/; revision=505201
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
ports to build against it. Most changes are rather minor and mechanical
except for the devel/gdb (obtained via their bugtracker [1], courtesy of
Doug Evans). One port (science/meep) I had to mark BROKEN after fixing
it proved to be very tedious and actually unreliable. It is very old,
there are newer versions available so it should be fixed by updating.
One port (devel/libruin) had revealed a bug in the new Guile code (an
auxiliary script, really) that had to be worked-round; reference to the
problematic upstream commit is provided in the patch.
PR: 229613
Exp-run by: antoine
[1] https://sourceware.org/bugzilla/show_bug.cgi?id=21104#c8
Notes:
svn path=/head/; revision=505200
|
|
|
|
|
|
|
|
|
| |
Submitted by: rene
Reviewed by: mat, tcberner
Differential Revision: https://reviews.freebsd.org/D20725
Notes:
svn path=/head/; revision=505150
|
|
|
|
|
|
|
| |
Submitted by: maintainer
Notes:
svn path=/head/; revision=505019
|
|
|
|
| |
Notes:
svn path=/head/; revision=504937
|
|
|
|
|
|
|
| |
- convert pkg-message to UCL
Notes:
svn path=/head/; revision=504936
|
|
|
|
|
|
|
|
|
|
|
| |
Release notes: https://www.thunderbird.net/en-US/thunderbird/60.7.2/releasenotes/
Approved by: gecko@ (jbeich@, implicit)
MFH: 2019Q2
Security: 49beb00f-a6e1-4a42-93df-9cb14b4c2bee
Notes:
svn path=/head/; revision=504791
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Upstream has rerolled the tarball:
"I discovered that I had made a mistake in
including files related to the old licenses in the tarball. They were
in pre-2019/LICENSE-rep,v and pre-2019/RESTRICTIONS,v"
PR: 238734
Approved by: mat (mentor)
Differential Revision: https://reviews.freebsd.org/D20707
Notes:
svn path=/head/; revision=504789
|
|
|
|
|
|
|
|
|
|
| |
Release Notes (soon): https://www.thunderbird.net/en-US/thunderbird/60.7.2/releasenotes/
Approved by: gecko@ (jbeich@, implicit)
MFH: 2019Q2
Notes:
svn path=/head/; revision=504642
|
|
|
|
|
|
|
|
| |
Approved by: mat (mentor)
Differential Revision: https://reviews.freebsd.org/D20696
Notes:
svn path=/head/; revision=504601
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Update XFCE Master sites list
Submitted by: olivierd
Reviewed by: mat
Approved by: portmgr (mat)
Differential Revision: https://reviews.freebsd.org/D8416
Notes:
svn path=/head/; revision=504557
|
|
|
|
| |
Notes:
svn path=/head/; revision=504554
|
|
|
|
| |
Notes:
svn path=/head/; revision=504485
|
|
|
|
|
|
|
|
| |
Also fix handling of tcell dependency which is actually replaced
with a patched version.
Notes:
svn path=/head/; revision=504421
|
|
|
|
|
|
|
| |
Approved by: portmgr blanket
Notes:
svn path=/head/; revision=504402
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Incompatibility with snapshot 20190615
====================================
The Postfix TLS library by default no longer waits after sending a
TLS 'close' notification. This should be safe with TLSv1.2 and
later. Specify "tls_fast_shutdown_enable = no" to enable historical
Postfix behavior.
Major changes with snapshot 20190615
====================================
After sending a TLS 'close' notification, the Postfix library by
default no longer waits for the TLS peer to respond. According to
RFC 2246 (TLSv1.2) section 7.2.1, "It is not required for the
initiator of the close to wait for the responding close_notify alert
before closing the read side of the connection."
The SMTP+LMTP delivery agent can now prepend Delivered-To, X-Original-To
and Return-Path headers, just like the pipe(8) delivery agent. This
uses the same "flags=DOR" command-line flags in master.cf. See the
smtp(8) manpage for details.
This obsoletes the "lmtp_assume_final = yes" setting, and replaces
it with "flags=...X...", for consistency with pipe(8).
Notes:
svn path=/head/; revision=504383
|
|
|
|
|
|
|
| |
Changes: https://metacpan.org/changes/distribution/Mail-Box-IMAP4
Notes:
svn path=/head/; revision=504204
|
|
|
|
|
|
|
| |
Pointy hat: mat, for assuming the patch was ok and only giving it a quick glance.
Notes:
svn path=/head/; revision=504174
|
|
|
|
|
|
|
|
|
|
|
| |
Fix startup scripts so that PREFIX is not %D.
PR: 238501
Approved by: mat (mentor)
Differential Revision: https://reviews.freebsd.org/D20611
Notes:
svn path=/head/; revision=504168
|
|
|
|
|
|
|
|
| |
exmh 2.9.0 is not hosted on any tcl/tk site at the moment.
The standard SF download helper fails to work in this case.
Notes:
svn path=/head/; revision=504148
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- The sources are now compressed with xz instead of gzip.
- Support for GMime 2.6 was dropped and GMime 3.0.3 or later is required now.
- drop workaround for info(1) on FreeBSD 10 since it's no longer supported
- drop workaround for Sphinx since another one was included in notmuch's upstream
ChangeLog: https://notmuchmail.org/pipermail/notmuch/2019/028257.html
PR: 238418
Submitted by: seschwar@gmail.com (maintainer)
Notes:
svn path=/head/; revision=504137
|
|
|
|
|
|
|
|
|
|
| |
Ditto for the two Mailman/Cgi/remote?mmsearch.
PR: 238508 [1]
Reported by: asp-freebsd@partan.com [1]
Notes:
svn path=/head/; revision=504130
|
|
|
|
|
|
|
| |
Changes: https://metacpan.org/changes/distribution/Mail-Box-IMAP4
Notes:
svn path=/head/; revision=504106
|
|
|
|
|
|
|
|
|
|
|
| |
Release Notes (soon):
https://www.thunderbird.net/en-US/thunderbird/60.7.1/releasenotes/
Approved by: jbeich (gecko@, implicit)
MFH: 2019Q2
Notes:
svn path=/head/; revision=504100
|
|
|
|
|
|
|
|
| |
Approved by: tcberner (mentor)
Differential Revision: https://reviews.freebsd.org/D20593
Notes:
svn path=/head/; revision=503945
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
various cleanups
PR: 220978
Submitted by: kai
Reported by: mi@ALDAN.algebra.com
Approved by: mat (mentor)
Differential Revision: https://reviews.freebsd.org/D20155
Notes:
svn path=/head/; revision=503924
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Aerc is an email client that runs in your terminal. It is highly
efficient and extensible, perfect for the discerning hacker.
Some of its more interesting features include:
- Editing emails in an embedded terminal tmux-style, allowing you
to check on incoming emails and reference other threads while you
compose your replies
- Render HTML emails with an interactive terminal web browser,
highlight patches with diffs, and browse with an embedded less
session
- Vim-style keybindings and ex-command system, allowing for powerful
automation at a single keystroke
- First-class support for working with git & email
- Open a new tab with a terminal emulator and a shell running for
easy access to nearby git repos for parallel work
- Support for multiple accounts, with support for IMAP, Maildir, SMTP,
and sendmail transfer protocols
- CalDAV and CardDAV support for synchronizing contacts & calendar
events
- Asynchronous IMAP support ensures the UI never gets locked up by
a flaky network, as mutt often does
- Efficient network usage - aerc only downloads the information
which is necessary to present the UI, making for a snappy and
bandwidth-efficient experience
WWW: https://aerc-mail.org/
Notes:
svn path=/head/; revision=503916
|
|
|
|
|
|
|
|
|
| |
pt_BR, zh_CN translations has been added.
Relnotes: https://github.com/stremlau/html5_notifier/releases/tag/v0.6.3
Notes:
svn path=/head/; revision=503729
|
|
|
|
| |
Notes:
svn path=/head/; revision=503629
|