pkgsrc-WIP-changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Update wip/sendmail818 to v8.18.1 (release)



Module Name:	pkgsrc-wip
Committed By:	Hauke Fath <hauke%NetBSD.org@localhost>
Pushed By:	hauke
Date:		Wed Jan 31 20:27:30 2024 +0100
Changeset:	80a23be56646bfebefd1547b4ac30cdb0699e4d0

Modified Files:
	sendmail818/Makefile.common
	sendmail818/distinfo

Log Message:
Update wip/sendmail818 to v8.18.1 (release)

Upstream's changelog has:

8.18.1/8.18.1	2024/01/31
	sendmail is now stricter in following the RFCs and rejects
		some invalid input with respect to line endings
		and pipelining:
		- Prevent transaction stuffing by ensuring SMTP clients
		wait for the HELO/EHLO and DATA response before sending
		further SMTP commands.  This can be disabled using
		the new srv_features option 'F'.  Issue reported by
		Yepeng Pan and Christian Rossow from CISPA Helmholtz
		Center for Information Security.
		- Accept only CRLF . CRLF as end of an SMTP message
		as required by the RFCs, which can disabled by the
		new srv_features option 'O'.
		- Do not accept a CR or LF except in the combination
		CRLF (as required by the RFCs).  These checks can
		be disabled by the new srv_features options
		'U' and 'G', respectively.  In this case it is
		suggested to use 'u2' and 'g2' instead so the server
		replaces offending bare CR or bare LF with a space.
		It is recommended to only turn these protections off
		for trusted networks due to the potential for abuse.
	Full DANE support is available if OpenSSL versions 1.1.1 or 3.x
		are used, i.e., TLSA RR 2-x-y and 3-x-y are supported
		as required by RFC 7672.
	OpenSSL version 3.0.x is supported.  Note: OpenSSL 3 loads by
		default an openssl.cnf file from a location specified
		in the library which may cause unwanted behaviour
		in sendmail.  Hence sendmail sets the environment
		variable OPENSSL_CONF to /etc/mail/sendmail.ossl
		to override the default.  The file name can be
		changed by defining confOPENSSL_CNF in the mc file;
		using an empty value prevents setting OPENSSL_CONF.
		Note: referring to a file which does not exist does
		not cause an an error.
	Two new values have been added for {verify}:
		"DANE_TEMP": DANE verification failed temporarily.
		"DANE_NOTLS": DANE was required but STARTTLS was not
		offered by the server.
		The default rules return a temporary error for these
		cases, so delivery is not attempted.
	If the TLS setup code in the client fails and DANE requirements
		exist then {verify} will be set to "DANE_TEMP" thus
		preventing delivery by default.
	DANE related logging has been slightly changed for clarification:
		"DANE configured in DNS but no STARTTLS available"
		changed to
		"DANE configured in DNS but STARTTLS not offered"
	When the compile time option USE_EAI is enabled, vacation could
		fail to respond when it should (the code change in
		8.17.2 was incomplete).  Problem reported by Alex
		Hautequest.
	If SMTPUTF8 BODY=7BIT are used as parameters for the MAIL command
		the parsing of UTF8 addresses could fail (USE_EAI).
	If a reply to a previous RCPT was received while sending
		another RCPT in pipelining mode then parts of the
		reply could have been assigned to the wrong RCPT.
	New DontBlameSendmail option CertOwner to relax requirement
		for certificate public and private key ownership.
		Based on suggestion from Marius Strobl of the
		FreeBSD project.
	clt_features was not checked for connections via Unix domain
		sockets.
	CONFIG: FEATURE(`enhdnsbl') did not handle multiple replies
		from DNS lookups thus potentially causing random
		"false negatives".
		Note: the fix creates an incompatibility:
		the arguments must not have a trailing dot anymore
		because the -a. option has been removed (as it only
		applies to the entire result, not individual values).
	CONFIG: New FEATURE(`fips3') for basic FIPS support in OpenSSL 3.
	VACATION: Add support for Return-Path header to set sender
		to match OpenBSD and NetBSD functionality.
	VACATION: Honor RFC3834 and avoid an auto-reply if
		'Auto-Submitted: no' is found in the headers to
		match OpenBSD and NetBSD functionality.
	VACATION: Avoid an auto-reply if a 'List-Id:' is found in
		the headers to match OpenBSD functionality.
	VACATION: Add support for $SUBJECT in .vacation.msg which
		is replaced with the first line of the subject of the
		original message to match OpenBSD and NetBSD
		functionality.
	Portability:
		Add support for Darwin 23.
	New Files:
		cf/feature/fips3.m4
		devtools/OS/Darwin.23.x

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=80a23be56646bfebefd1547b4ac30cdb0699e4d0

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 sendmail818/Makefile.common | 9 ++++-----
 sendmail818/distinfo        | 6 +++---
 2 files changed, 7 insertions(+), 8 deletions(-)

diffs:
diff --git a/sendmail818/Makefile.common b/sendmail818/Makefile.common
index 0f3b30d1c8..55604277b3 100644
--- a/sendmail818/Makefile.common
+++ b/sendmail818/Makefile.common
@@ -8,10 +8,9 @@
 
 DISTNAME=	sendmail.${DIST_VERS}
 CATEGORIES=	mail
-#MASTER_SITES=	ftp://ftp.sendmail.org/pub/sendmail/
-#MASTER_SITES+=	ftp://ftp.sendmail.org/pub/sendmail/past-releases/
-#MASTER_SITES+=	ftp://ftp.fu-berlin.de/pub/unix/mail/sendmail/
-MASTER_SITES=	ftp://ftp.sendmail.org/pub/sendmail/snapshots/
+MASTER_SITES=	ftp://ftp.sendmail.org/pub/sendmail/
+MASTER_SITES+=	ftp://ftp.sendmail.org/pub/sendmail/past-releases/
+MASTER_SITES+=	ftp://ftp.fu-berlin.de/pub/unix/mail/sendmail/
 
 # John has timed out?
 #OWNER?=		jnemeth%NetBSD.org@localhost
@@ -29,7 +28,7 @@ PATCHDIR=	${.CURDIR}/../../wip/sendmail818/patches
 
 USE_LANGUAGES=	c99
 
-DIST_VERS=	8.18.0.9
+DIST_VERS=	8.18.1
 
 MAKE_ENV+=	BSD_BINOWN=${BINOWN} BSD_BINGRP=${BINGRP} \
 		BSD_MANOWN=${MANOWN} BSD_MANGRP=${MANGRP} \
diff --git a/sendmail818/distinfo b/sendmail818/distinfo
index fe59e49946..b7cbcce9e7 100644
--- a/sendmail818/distinfo
+++ b/sendmail818/distinfo
@@ -1,8 +1,8 @@
 $NetBSD: distinfo,v 1.69 2023/01/12 11:09:34 markd Exp $
 
-BLAKE2s (sendmail.8.18.0.2.tar.gz) = 21d4c4834abc4026463ec4f26f323c2f7c51f07eaf8ee8f834f263fe0f8a9fcb
-SHA512 (sendmail.8.18.0.2.tar.gz) = b2ee60595285bf79e5216fcc039c3b321f4719311f6ab3fbd6ad787254b17997639ca9f709036d6a5b552ffc573d22efbc392fafba5952bf77b8b9c1f55edc70
-Size (sendmail.8.18.0.2.tar.gz) = 2330539 bytes
+BLAKE2s (sendmail.8.18.1.tar.gz) = 959e83d47978867cf89f817e51ce16a834998ef94a417ead59ddfdfdf0debff0
+SHA512 (sendmail.8.18.1.tar.gz) = 9ce713b44439d4de6faa9e3cdfa2226b44b4fbeb352a5f81584c062570e9472da244158287e489aabe258d28fe54ca4964565c7b0adc7e1763d212be42f98061
+Size (sendmail.8.18.1.tar.gz) = 2401566 bytes
 SHA1 (patch-cf_README) = 9a1daac264aba6c4fc39a63a464b942dd25b06eb
 SHA1 (patch-cf_cf_Makefile) = e65e6fe44380de2f9c397c1a97677eb4ad285433
 SHA1 (patch-cf_m4_cfhead.m4) = 548bf6d373cb49958437548a65803b6f3c6b35d2


Home | Main Index | Thread Index | Old Index