Module Name:	pkgsrc
Committed By:	seb
Date:		Sat Mar 29 19:55:56 UTC 2003

Modified Files:
	pkgsrc/mail/sendmail: Makefile.common distinfo

Log Message:
Update to version 8.12.9.

This is mostly a security fix release.
See the list of changes since 8.12.8 below.

Package change: always put M4 in MAKE_ENV so we are sure of the one used.
Note: this also update mail/libmilter the same version.

8.12.9/8.12.9   2003/03/29
        SECURITY: Fix a buffer overflow in address parsing due to
                a char to int conversion problem which is potentially
                remotely exploitable.  Problem found by Michal Zalewski.
                Note: an MTA that is not patched might be vulnerable to
                data that it receives from untrusted sources, which
                includes DNS.
        To provide partial protection to internal, unpatched sendmail MTAs,
                8.12.9 changes by default (char)0xff to (char)0x7f in
                headers etc.  To turn off this conversion compile with
                -DALLOW_255 or use the command line option -d82.101.
        To provide partial protection for internal, unpatched MTAs that may be
                performing 7->8 or 8->7 bit MIME conversions, the default
                for MaxMimeHeaderLength has been changed to 2048/1024.
                Note: this does have a performance impact, and it only
                protects against frontal attacks from the outside.
                To disable the checks and return to pre-8.12.9 defaults,
                set MaxMimeHeaderLength to 0/0.
        Do not complain about -ba when submitting mail.  Problem noted
                by Derek Wueppelmann.
        Fix compilation with Berkeley DB 1.85 on systems that do not
                have flock(2).  Problem noted by Andy Harper of Kings
                College London.
        Properly initialize data structure for dns maps to avoid various
                errors, e.g., looping processes.  Problem noted by
                Maurice Makaay.
        CONFIG: Prevent multiple application of rule to add smart host.
                Patch from Andrzej Filip.
        CONFIG: Fix queue group declaration in MAILER(`usenet').
        CONTRIB: buildvirtuser: New option -t builds the virtusertable
                text file instead of the database map.
        Portability:
                Revert wrong change made in 8.12.7 and actually use the
                        builtin getopt() version in sendmail on Linux.
                        This can be overridden by using -DSM_CONF_GETOPT=0
                        in which case the OS supplied version will be used.


To generate a diff of this commit:
cvs rdiff -r1.5 -r1.6 pkgsrc/mail/sendmail/Makefile.common
cvs rdiff -r1.10 -r1.11 pkgsrc/mail/sendmail/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.