CVS commit: pkgsrc/mail/rspamd

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sun Oct  4 15:56:10 UTC 2026

Modified Files:
        pkgsrc/mail/rspamd: Makefile PLIST distinfo

Log Message:
rspamd: update to 4.2.1.

4.2.1: 01 Oct 2026

  ** Bug fixes **
  * [CritFix] http: Do not size the body from a chunk size or Content-Length sent by the peer (a huge chunk size caused a heap overflow)
  * [CritFix] http: Keep zero-copy reads inside the body (use-after-free when a finish handler replaces the body)
  * [CritFix] fstring: Refuse a length that cannot be allocated (the size wrapped and later writes went out of bounds)
  * [CritFix] cryptobox: Fail closed on low order public keys (an uninitialised shared secret was cached and used to decrypt fuzzy requests)
  * [CritFix] hiredis: Keep the socket until async cleanup (assertion abort when redis is down)
  * [Fix] http_parser: Refuse a message framed by both Content-Length and Transfer-Encoding
  * [Fix] http_parser: Check Content-Length and chunk sizes before they overflow
  * [Fix] http: Finish the last trailer of a chunked message and keep chunk framing out of encrypted inner bodies
  * [Fix] http: Apply timeouts at the correct I/O stage
  * [Fix] maps: Use the HTTP body length instead of the shared memory size (garbage in large chunked maps and their cache)
  * [Fix] maps: Keep the previous map on failed reloads, reject truncated zstd frames and write the whole map on /savemap
  * [Fix] maps: Skip the HTTP cache header when reading cdb maps
  * [Fix] maps: Do not leak the shared memory mapping on errors
  * [Fix] fuzzy_storage: Bound the TCP backlog, meter unauthenticated error replies and enforce key expiry for writes and deletes
  * [Fix] fuzzy_backend: Saturate deduplicated weights and reject short redis shingle digests
  * [Fix] fuzzy: Preserve address userdata in Redis count scans
  * [Fix] rdns: Fix TCP queue accounting, a dropped last byte of TCP packets, malformed reply handling and the retransmit channel lifetime
  * [Fix] lua_tcp: Stop after a fatal TLS read and bound the data buffered for a stop pattern
  * [Fix] lua_http/lua_redis: Fix request tuning after DNS, coroutine cleanup on cancellation and freed redis replies read from Lua
  * [Fix] re_cache: Verify hyperscan prefiltered regexps per input and saturate hit counts instead of wrapping
  * [Fix] regexp: Validate UTF-8 once per search instead of on every remaining suffix
  * [Fix] spf: Match a and mx without a prefix length per address family, and apply the macro digit transformer
  * [Fix] dkim: Fix a header table leak and the l= body check with relaxed canonicalisation
  * [Fix] url: Do not read past an IPv6 host at the end of the input, and treat mapped loopback as local
  * [Fix] url_redirector: Key by the raw URL, cap the whole chain and resolve relative Location headers
  * [Fix] rbl: Fix whitelists for IPv6 addresses
  * [Fix] multimap: Support IPv6 ULA prefixes in Redis maps
  * [Fix] avast: Keep the cached virus verdict for archives
  * [Fix] archives: Harden rar, 7z and libarchive parsing
  * [Fix] 7z: Read substreams sizes and digests per stream (archives with an unpacked header listed no files)
  * [Fix] html: Bound the text inspected per link and do not sniff JSON attachments as HTML
  * [Fix] html: Bound nested HTML processing and structure exports without losing phishing checks
  * [Fix] html: Stop rescanning quoted attributes for '>' and keep entity replacements within the consumed input
  * [Fix] css: Bound the token count while building the block tree and do not swallow the byte after a hex escape
  * [Fix] mime: Decode adjacent encoded words with their own charsets
  * [Fix] ucl: Let binary msgpack strings own their value (use-after-free once the input buffer is released)
  * [Fix] ucl: Keep the key when a msgpack map ends in an empty value
  * [Fix] Rules: Exempt Mailchimp from SUBJ_EXCESS_QP and REPLYTO_EXCESS_QP


To generate a diff of this commit:
cvs rdiff -u -r1.143 -r1.144 pkgsrc/mail/rspamd/Makefile
cvs rdiff -u -r1.44 -r1.45 pkgsrc/mail/rspamd/PLIST
cvs rdiff -u -r1.80 -r1.81 pkgsrc/mail/rspamd/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mail/rspamd/Makefile
diff -u pkgsrc/mail/rspamd/Makefile:1.143 pkgsrc/mail/rspamd/Makefile:1.144
--- pkgsrc/mail/rspamd/Makefile:1.143   Tue Sep 29 06:06:25 2026
+++ pkgsrc/mail/rspamd/Makefile Sun Oct  4 15:56:09 2026
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.143 2026/09/29 06:06:25 wiz Exp $
+# $NetBSD: Makefile,v 1.144 2026/10/04 15:56:09 wiz Exp $
 #
 # When updating this, run 'make cfgfiles'.
 
-DISTNAME=      rspamd-4.2.0
-PKGREVISION=   2
+DISTNAME=      rspamd-4.2.1
 CATEGORIES=    mail
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=rspamd/}
 
@@ -112,8 +111,8 @@ post-extract:
 post-install:
        ${MV} ${DESTDIR}${PKG_SYSCONFDIR} ${DESTDIR}${PREFIX}/share/examples/rspamd
 
-# as of 4.1.5
-# 1191 tests 1187 passed 3110 assertions 0 failed 0 errors 4 unassertive 0 pending
+# as of 4.2.1, after 'make install'
+# 1315 tests 1311 passed 3979 assertions 0 failed 0 errors 4 unassertive 0 pending
 
 TEST_ENV+=     
LD_LIBRARY_PATH=${WRKSRC}/${CMAKE_BUILD_DIR}/src:${WRKSRC}/${CMAKE_BUILD_DIR}/contrib/replxx:${WRKSRC}/${CMAKE_BUILD_DIR}/contrib/aho-corasick:${WRKSRC}/${CMAKE_BUILD_DIR}/contrib/libev:${WRKSRC}/${CMAKE_BUILD_DIR}/contrib/kann
 

Index: pkgsrc/mail/rspamd/PLIST
diff -u pkgsrc/mail/rspamd/PLIST:1.44 pkgsrc/mail/rspamd/PLIST:1.45
--- pkgsrc/mail/rspamd/PLIST:1.44       Sat Sep 26 10:50:07 2026
+++ pkgsrc/mail/rspamd/PLIST    Sun Oct  4 15:56:09 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.44 2026/09/26 10:50:07 wiz Exp $
+@comment $NetBSD: PLIST,v 1.45 2026/10/04 15:56:09 wiz Exp $
 bin/mapstats
 bin/rspamadm
 bin/rspamadm-${PKGVERSION}
@@ -405,7 +405,7 @@ share/rspamd/www/css/icons.css
 share/rspamd/www/css/nprogress.css
 share/rspamd/www/css/prism.css
 share/rspamd/www/css/rspamd.css
-share/rspamd/www/css/tabulator_bs5.min.css
+share/rspamd/www/css/tabulator_bootstrap5.min.css
 share/rspamd/www/favicon-16x16.png
 share/rspamd/www/favicon-32x32.png
 share/rspamd/www/favicon.ico

Index: pkgsrc/mail/rspamd/distinfo
diff -u pkgsrc/mail/rspamd/distinfo:1.80 pkgsrc/mail/rspamd/distinfo:1.81
--- pkgsrc/mail/rspamd/distinfo:1.80    Sat Sep 26 10:50:07 2026
+++ pkgsrc/mail/rspamd/distinfo Sun Oct  4 15:56:09 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.80 2026/09/26 10:50:07 wiz Exp $
+$NetBSD: distinfo,v 1.81 2026/10/04 15:56:09 wiz Exp $
 
-BLAKE2s (rspamd-4.2.0.tar.gz) = d0be15d25ca4257c01170fe0c1e3ac3d89f0bb50d1d1e8fa21d3ba8e9e7a31f9
-SHA512 (rspamd-4.2.0.tar.gz) = bf4b8e4c8bf99a590b7a3f532424fb705a08c28e7e77b583e12b6f855896dd31c6f0ddc8443a899b08aa09bd80616978ac0208dd78000bcd3b5faeb67e9dfba0
-Size (rspamd-4.2.0.tar.gz) = 7393821 bytes
+BLAKE2s (rspamd-4.2.1.tar.gz) = 026f81da309408eb431313987b22a33323cb2dabf1bd2c125177faf5901ca38b
+SHA512 (rspamd-4.2.1.tar.gz) = 985f0afd4c7d3e71e02daee4c0d14236f582c9787dd1f8fd4a723076139b1ae1e1adea89460394bdb5403375500c9b18c791e84f6f586c19d583e903e43420a3
+Size (rspamd-4.2.1.tar.gz) = 7430978 bytes
 SHA1 (patch-CMakeLists.txt) = 25a1264b573d5a1f7ff9a1ac7b8453c5d9cb0a06
 SHA1 (patch-cmake_Toolset.cmake) = fbc4027fedb4261ce913701ebbb32d8395bc7783
 SHA1 (patch-contrib_fpconv_fpconv.c) = b1ec2b07570674458e69020ccbf25f0374d894f6