CVS commit: pkgsrc/mail

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Thu Apr 30 11:25:01 UTC 2026

Modified Files:
        pkgsrc/mail/exim: Makefile distinfo
        pkgsrc/mail/exim-html: Makefile PLIST distinfo

Log Message:
exim exim-html: updated to 4.99.2

Exim version 4.99.2

This is a security release, addressing Exim-Security-2026-04.1, which
covers four CVEs:
  CVE-2026-40684  Possible crash with malicious DNS data when using musl libc
  CVE-2026-40685  Possible OOB read/write on corrupt JSON in header
  CVE-2026-40686  Possible OOB read with large UTF8 trailing characters
  CVE-2026-40687  Possible OOB read/write with SPA authenticator


To generate a diff of this commit:
cvs rdiff -u -r1.216 -r1.217 pkgsrc/mail/exim/Makefile
cvs rdiff -u -r1.93 -r1.94 pkgsrc/mail/exim/distinfo
cvs rdiff -u -r1.50 -r1.51 pkgsrc/mail/exim-html/Makefile
cvs rdiff -u -r1.26 -r1.27 pkgsrc/mail/exim-html/PLIST
cvs rdiff -u -r1.43 -r1.44 pkgsrc/mail/exim-html/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mail/exim/Makefile
diff -u pkgsrc/mail/exim/Makefile:1.216 pkgsrc/mail/exim/Makefile:1.217
--- pkgsrc/mail/exim/Makefile:1.216     Wed Jan  7 08:47:45 2026
+++ pkgsrc/mail/exim/Makefile   Thu Apr 30 11:25:01 2026
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.216 2026/01/07 08:47:45 wiz Exp $
+# $NetBSD: Makefile,v 1.217 2026/04/30 11:25:01 adam Exp $
 
-DISTNAME=      exim-4.99.1
-PKGREVISION=   1
+DISTNAME=      exim-4.99.2
 CATEGORIES=    mail net
 MASTER_SITES=  https://ftp.exim.org/pub/exim/exim4/
 MASTER_SITES+= https://ftp.exim.org/pub/exim/exim4/fixes/

Index: pkgsrc/mail/exim/distinfo
diff -u pkgsrc/mail/exim/distinfo:1.93 pkgsrc/mail/exim/distinfo:1.94
--- pkgsrc/mail/exim/distinfo:1.93      Thu Dec 18 15:19:40 2025
+++ pkgsrc/mail/exim/distinfo   Thu Apr 30 11:25:01 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.93 2025/12/18 15:19:40 adam Exp $
+$NetBSD: distinfo,v 1.94 2026/04/30 11:25:01 adam Exp $
 
-BLAKE2s (exim-4.99.1.tar.xz) = f81c2fd478a8d6a494e447fde11fed244d35f3adc4f02228b8779fb8ec8c1c85
-SHA512 (exim-4.99.1.tar.xz) = 41a280673b23a79684124dba9ba1db4da57047eefd7bac8560fab3e399659698160386c5369deb4aabdbcba1ba9278fb0a61fc1667dc2745c280b3004d02f45d
-Size (exim-4.99.1.tar.xz) = 1960984 bytes
+BLAKE2s (exim-4.99.2.tar.xz) = 6630a6f4d315e5435e88c46ce970843e90b6bc9b6499a66028ef55afb283cde9
+SHA512 (exim-4.99.2.tar.xz) = e5c80a77dca642c132dda82166c919ba9f553436038b734ef66ae41666b8c9f5818e2cd6080e4c7c8b52e866f7f89d271233fb183c7e405feb15536d507098a3
+Size (exim-4.99.2.tar.xz) = 1962424 bytes
 SHA1 (patch-Local_Makefile.pkgsrc) = 9414802bae7ca32eb0639058c5e77795c685f308
 SHA1 (patch-OS_Makefile-Default) = 32681d5114eef2da1f624127655edfdeaaa68d64
 SHA1 (patch-lookups_Makefile) = 96fa8cb8561e0d770a7eef91f6c6aa093d44aacd

Index: pkgsrc/mail/exim-html/Makefile
diff -u pkgsrc/mail/exim-html/Makefile:1.50 pkgsrc/mail/exim-html/Makefile:1.51
--- pkgsrc/mail/exim-html/Makefile:1.50 Thu Dec 18 15:19:40 2025
+++ pkgsrc/mail/exim-html/Makefile      Thu Apr 30 11:25:01 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.50 2025/12/18 15:19:40 adam Exp $
+# $NetBSD: Makefile,v 1.51 2026/04/30 11:25:01 adam Exp $
 
-DISTNAME=      exim-html-4.99.1
+DISTNAME=      exim-html-4.99.2
 CATEGORIES=    mail net
 MASTER_SITES=  ftp://ftp.exim.org/pub/exim/exim4/
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/mail/exim-html/PLIST
diff -u pkgsrc/mail/exim-html/PLIST:1.26 pkgsrc/mail/exim-html/PLIST:1.27
--- pkgsrc/mail/exim-html/PLIST:1.26    Thu Dec 18 15:19:40 2025
+++ pkgsrc/mail/exim-html/PLIST Thu Apr 30 11:25:01 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.26 2025/12/18 15:19:40 adam Exp $
+@comment $NetBSD: PLIST,v 1.27 2026/04/30 11:25:01 adam Exp $
 share/doc/exim/html/spec_html/ch-access_control_lists.html
 share/doc/exim/html/spec_html/ch-adding_a_local_scan_function_to_exim.html
 share/doc/exim/html/spec_html/ch-adding_new_drivers_or_lookup_types.html
@@ -189,7 +189,4 @@ share/doc/exim/html/static/doc/security/
 share/doc/exim/html/static/doc/security/CVE-2023-zdi.txt
 share/doc/exim/html/static/doc/security/CVE-2025-26794.txt
 share/doc/exim/html/static/doc/security/CVE-2025-30232.txt
-share/doc/exim/html/static/doc/security/cve-2025-26794.eml
-share/doc/exim/html/static/doc/security/cve-2025-26974/mail-to-distros
-share/doc/exim/html/static/doc/security/cve-2025-26974/mail-to-oss
 share/doc/exim/html/static/js/common.js

Index: pkgsrc/mail/exim-html/distinfo
diff -u pkgsrc/mail/exim-html/distinfo:1.43 pkgsrc/mail/exim-html/distinfo:1.44
--- pkgsrc/mail/exim-html/distinfo:1.43 Thu Dec 18 15:19:41 2025
+++ pkgsrc/mail/exim-html/distinfo      Thu Apr 30 11:25:01 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.43 2025/12/18 15:19:41 adam Exp $
+$NetBSD: distinfo,v 1.44 2026/04/30 11:25:01 adam Exp $
 
-BLAKE2s (exim-html-4.99.1.tar.xz) = 4728d82675511bbb6c2369041948d1bc450aac28057882b63122aa20c47d706c
-SHA512 (exim-html-4.99.1.tar.xz) = ad5775d2655137b9594113828d9d0f8f7bd1a23c5d75ae83bc3bcd0bb71df44843dda96fc2d30ecdc07064d78ffa6107de4ddf318857c5ad4652bc0c91dde054
-Size (exim-html-4.99.1.tar.xz) = 584952 bytes
+BLAKE2s (exim-html-4.99.2.tar.xz) = 312890bc222b3646e04aeec0eccd736168de45ce7360eb4eb6025422e01db758
+SHA512 (exim-html-4.99.2.tar.xz) = 000f10d22d96a5cdb91be84c19b28ed2f696596904f3da40c8df8759ae6705b1ae4a6fa5cdba159eaa7a0d728d8aa4496e82961b8e8074dc7697091b89b8ea93
+Size (exim-html-4.99.2.tar.xz) = 584464 bytes