freebsd-ports/mail
Cy Schubert 3689883c38 MFH: r569156
mail/spamassassin: Update 3.4.4 --> 3.4.5, fixing CVE-2020-1946

According to https://s.apache.org/ng9u9, 3.4.5 fixes CVE-2020-1946.
The announce text:

Apache SpamAssassin 3.4.5 was recently released [1], and fixes an issue
of security note where malicious rule configuration (.cf) files can be
configured to run system commands.

In Apache SpamAssassin before 3.4.5, exploits can be injected in a number
of scenarios. In addition to upgrading to SA 3.4.5, users should only use
update channels or 3rd party .cf files from trusted places.

Apache SpamAssassin would like to thank Damian Lukowski at credativ for
ethically reporting this issue.

This issue has been assigned CVE id CVE-2020-1946 [2]

To contact the Apache SpamAssassin security team, please e-mail
security at spamassassin.apache.org. For more information about Apache
SpamAssassin, visit the https://spamassassin.apache.org/ web site.

Apache SpamAssassin Security Team

[1]: https://s.apache.org/ng9u9

[2]: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-1946

PR:		254526
Submitted by:	cy
Reported by:	cy
Approved by:	maintainer (zeising)
Security:	https://s.apache.org/ng9u9
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-1946
2021-03-24 20:05:31 +00:00
..
abook
adcomplain
addresses
addresses-goodies
aerc MFH: r565829 2021-02-18 00:01:18 +00:00
akpop3d
alpine Fix distinfo for maildir.patch. 2020-10-25 16:54:51 +00:00
amavis-logwatch
anomy-sanitizer
antivirus-milter
anubis
archiveopteryx
archiveopteryx-devel
archivesmtp
archmbox
ask
asmail
assp
astroid
automx
autorespond
avenger
balsa
batv-milter
bayespam
bbmail
biabam
bincimap
bmf
bogofilter
bogofilter-kc
bogofilter-lmdb
bogofilter-sqlite
bsfilter
bsmtp
bulk_mailer
c-sig
cclient mail/cclient: Unbreak in 11.4 and 12.2 2020-11-12 11:18:34 +00:00
claws-mail Update to 3.17.8 2020-11-26 17:18:52 +00:00
claws-mail-address_keeper
claws-mail-archive
claws-mail-att_remover
claws-mail-attachwarner
claws-mail-bogofilter mail/claws-mail-bogofilter: remove optional dependency on expired mail/bogofilter-tc 2020-12-31 14:53:04 +00:00
claws-mail-bsfilter
claws-mail-clamd
claws-mail-dillo
claws-mail-fetchinfo
claws-mail-gdata
claws-mail-libravatar
claws-mail-litehtml_viewer
claws-mail-mailmbox
claws-mail-managesieve
claws-mail-newmail
claws-mail-notification
claws-mail-pdf_viewer graphics/poppler: update to 20.12.0 2020-12-11 20:10:03 +00:00
claws-mail-perl
claws-mail-pgp
claws-mail-plugins Bump version to flush out old packages using a bogus pkg-descr. (for real now) 2020-11-29 13:24:45 +00:00
claws-mail-rssyl
claws-mail-spam_report
claws-mail-spamassassin
claws-mail-tnef_parse
claws-mail-vcalendar
clawsker
cone Upgrade from 1.0 to 1.1. 2020-10-29 04:14:38 +00:00
coolmail
courier
courier-analog
courier-authlib-vchkpw
courier-imap
couriergraph
crm114
cvsmail
cyrus2courier
cyrus2dovecot
cyrus-imapd23
cyrus-imapd24
cyrus-imapd25
cyrus-imapd30 devel/icu: update to 68.1 2020-11-03 00:56:26 +00:00
cyrus-imapd32 Update to 3.2.5. 2020-11-30 12:51:16 +00:00
davmail
dbmail
dcc-dccd
deforaos-mailer
delatt
dk-milter
dkfilter
dkimproxy
dma MFH: r563805 2021-02-02 13:07:00 +00:00
dot-forward
dovecot MFH: r563184 2021-01-29 09:31:21 +00:00
dovecot-fts-xapian MFH: r568444 2021-03-15 09:05:20 +00:00
dovecot-pigeonhole MFH: r560527 2021-01-06 15:02:15 +00:00
dspam
ecartis
elm
elmo
emailrelay MFH: r559767 r560752 2021-01-09 15:07:18 +00:00
emil
enma
eps For ports on riscv64 that fail the same (or similar ways) to aarch64, mark 2021-01-02 01:46:08 +00:00
epstools
esmtp
evolution mail/evolution(-ews) & databases/evolution-data-server: Update to 3.38.2 2020-12-08 10:25:22 +00:00
evolution-ews mail/evolution(-ews) & databases/evolution-data-server: Update to 3.38.2 2020-12-08 10:25:22 +00:00
exilog
exim mail/exim: import exim-4.94+fixes branch as state of 2020.11.25 2020-11-25 12:36:05 +00:00
exim-doc-html
exim-doc-pdf
exim-doc-postscript
exim-ldap2
exim-monitor
exim-mysql
exim-postgresql
exim-sa-exim
exim-sqlite
exipick
exmh2
ez-pine-gpg
ezmlm
ezmlm-idx
faces
fastforward
fdm
fetchmail MFH: r564925 r568138 2021-03-11 22:20:22 +00:00
fetchmailconf
filtermail
findmaildirs
geary security/gcr: Update to 3.38.0 2020-10-31 07:11:54 +00:00
gensig
getmail6 mail/getmail6: Update to 6.12 2021-01-02 02:46:46 +00:00
gmime2
gmime2-sharp
gmime24
gmime24-sharp
gmime26
gmime26-sharp
gmime30
gnarwl
gnubiff
gnumail
gotmail
grepmail
greyfix
greylite fix build on CURRENT 2020-12-12 19:32:14 +00:00
gubby
hashcash
hbiff
heirloom-mailx
horde-imp
horde-ingo
horde-turba
horde-webmail
ifile
im
imap-uw
imapdedup
imapfilter
imapsync
imaptools
imaputils
isbg Drop python 2.7 support from a few ports 2020-12-28 23:02:12 +00:00
isoqlog
isync
james
jamlib
jmba
junkfilter
jwsmtp
lbdb
lens
libcmime MFH: r559767 r560752 2021-01-09 15:07:18 +00:00
libdkim
libdomainkeys
libesmtp Garbage-collect BROKEN_SSL=openssl, this had been fixed in r541412. 2020-11-08 07:52:38 +00:00
libetpan
libmilter
libpst
libsieve
libspamtest
libspf
libspf2
libsrs2
libsrs_alt
libvmime devel/icu: update to 68.1 2020-11-03 00:56:26 +00:00
listadmin
lmtp2nntp
lookout
lurker
mail2sms
mailagent Use @rmempty 2020-10-22 08:32:06 +00:00
maildrop
mailest
mailfromd - Update to the latest version 8.9 2020-12-30 15:04:04 +00:00
mailfront Return araujo@'s ports to the pool after his commit bit was safekept. 2020-11-03 20:51:34 +00:00
mailgraph
mailhog
mailman
mailman3
mailscanner
mailsync mail/mailsync: Undo r554904. 2020-11-12 11:20:04 +00:00
mailutils - Update `mail/mailutils' to version 3.11 2020-12-25 08:17:49 +00:00
mailx
mairix
masqmail
mb2md
mblaze
mbox2imap
mbox2mdir
mboxgrep
mboxstats
mbx2mbox
mdpop3d
mess822
meta1
metamail
mew
milter-bogom
milter-callback
milter-greylist
milter-manager
milter-regex - add patch for enabling foreground operation without debug 2020-12-31 12:14:42 +00:00
milter-skem
mime4j
mime-construct
mimedefang
mini_sendmail
minimalist
missey
mlmmj
mls
mmh
mmr
mpop mail/mpop: Update to 1.4.12 2020-12-27 07:11:03 +00:00
msglint
msmtp mail/msmtp: update to 1.8.14 2021-01-01 06:40:05 +00:00
mu
mu4e
mu4e-maildirs
mulberry
mutt MFH: r562418 2021-01-23 21:21:08 +00:00
mutt_vc_query
nbsmtp
neomutt Update to 20201127 2020-11-30 08:37:18 +00:00
nextcloud-mail mail/nextcloud-mail: Update to 1.7.2 2020-12-07 17:33:14 +00:00
nmh
noattach
nocc Update to 1.9.9 release. 2020-11-04 14:13:23 +00:00
normalizemime
notmuch MFH: r560645 2021-01-06 22:52:52 +00:00
notmuch-emacs mail/notmuch: Update to 0.31.2 2020-11-16 23:29:12 +00:00
notmuch-mutt
nullmailer mail/nullmailer: update to 2.2 2020-11-13 07:12:18 +00:00
opendkim
opendmarc
opensmtpd mail/opensmtpd: update to 6.8.0p2 portable release 2020-12-24 16:31:48 +00:00
opensmtpd-devel
opensmtpd-extras mail/opensmtpd-extras-table-python: remove port 2020-12-31 11:50:16 +00:00
opensmtpd-extras-queue-ram
opensmtpd-extras-scheduler-ram
opensmtpd-extras-table-ldap
opensmtpd-extras-table-mysql
opensmtpd-extras-table-passwd
opensmtpd-extras-table-postgresql
opensmtpd-extras-table-redis
opensmtpd-extras-table-socketmap
opensmtpd-extras-table-sqlite
opensmtpd-filter-rspamd
opensmtpd-filter-senderscore
openwebmail This software is unfortunately no longer developed 2020-11-08 13:33:04 +00:00
osbf-lua
ovs
p5-CGP-CLI
p5-Clamd
p5-Dancer2-Plugin-Email
p5-Dancer-Plugin-Email Cosmetic change 2020-11-06 11:27:40 +00:00
p5-Data-Validate-Email
p5-Email-Abstract
p5-Email-Address
p5-Email-Address-List
p5-Email-Address-Loose
p5-Email-Address-UseXS
p5-Email-Address-XS Cosmetic change 2020-11-06 11:27:44 +00:00
p5-Email-AddressParser
p5-Email-Date
p5-Email-Date-Format
p5-Email-Delete
p5-Email-Filter
p5-Email-Find
p5-Email-Folder
p5-Email-Folder-IMAP
p5-Email-Folder-IMAPS
p5-Email-Folder-POP3
p5-Email-FolderType
p5-Email-FolderType-Net
p5-Email-LocalDelivery
p5-Email-LocalDelivery-Ezmlm
p5-Email-MessageID
p5-Email-MIME
p5-Email-MIME-Attachment-Stripper
p5-Email-MIME-ContentType
p5-Email-MIME-CreateHTML
p5-Email-MIME-Creator-ISO_2022_JP
p5-Email-MIME-Encodings
p5-Email-MIME-RFC2047
p5-Email-Outlook-Message
p5-Email-Reply
p5-Email-Send
p5-Email-Sender
p5-Email-Sender-Transport-SMTP-TLS
p5-Email-Sender-Transport-SMTPS
p5-Email-Sender-Transport-SQLite
p5-Email-Simple
p5-Email-Simple-FromHandle
p5-Email-Stuffer
p5-Email-Valid
p5-Email-Valid-Loose
p5-FuzzyOcr-devel
p5-GMail-IMAPD
p5-IMAP-Admin
p5-IMAP-Client
p5-IMAP-Sieve
p5-LMAP-CID2SPF
p5-Log-Procmail
p5-Mail-Address-MobileJp
p5-Mail-Alias
p5-Mail-Audit
p5-Mail-Audit-Attach
p5-Mail-AuthenticationResults
p5-Mail-Box
p5-Mail-Box-IMAP4
p5-Mail-Box-IMAP4-SSL
p5-Mail-Box-Parser-C
p5-Mail-Box-POP3
p5-Mail-Bulkmail
p5-Mail-CheckUser
p5-Mail-DeliveryStatus-BounceParser
p5-Mail-DKIM
p5-Mail-DMARC
p5-Mail-DomainKeys
p5-Mail-Ezmlm
p5-Mail-Field-Received
p5-Mail-FilterXML
p5-Mail-Folder
p5-Mail-Freshmeat
p5-Mail-GnuPG
p5-Mail-Graph
p5-Mail-IMAPClient
p5-Mail-IMAPTalk
p5-Mail-ListDetector
p5-Mail-LMLM
p5-Mail-Mbox-MessageParser
p5-Mail-MboxParser
p5-Mail-Message
p5-Mail-OpenDKIM
p5-Mail-OpenRelay-Simple
p5-Mail-POP3Client
p5-Mail-Procmail
p5-Mail-Procmailrc
p5-Mail-RBL
p5-Mail-RFC822-Address
p5-Mail-SendEasy Cosmetic change 2020-11-06 11:27:48 +00:00
p5-Mail-Sender
p5-Mail-Sendmail
p5-Mail-SPF
p5-Mail-Spool
p5-Mail-SRS
p5-Mail-Tools
p5-Mail-Transport
p5-Mail-Transport-Dbx
p5-Mail-Verify
p5-Mail-Verp
p5-Mail-Webmail-Gmail
p5-MIME-AltWords
p5-MIME-Charset
p5-MIME-EcoEncode
p5-MIME-EncWords
p5-MIME-Explode
p5-MIME-Fast
p5-MIME-Lite
p5-MIME-Lite-HTML
p5-MIME-Lite-TT
p5-MIME-Lite-TT-HTML
p5-MIME-Tools
p5-MIME-Types Update to 2.18 2020-12-19 20:19:56 +00:00
p5-Mojolicious-Plugin-Mail
p5-Net-IMAP-Client
p5-Net-IMAP-Server
p5-Net-IMAP-Simple
p5-Net-IMAP-Simple-SSL
p5-Net-LMTP
p5-Net-ManageSieve
p5-Net-POP3-SSLWrapper
p5-Net-QMTP
p5-Net-SenderBase
p5-Net-Server-Mail
p5-Net-SMTP_auth
p5-Net-SMTP-Server
p5-Net-SMTP-TLS Cosmetic change 2020-11-06 11:27:52 +00:00
p5-Net-SMTP-TLS-ButMaintained
p5-Net-SMTPS
p5-Parse-MIME
p5-Parse-Syslog-Mail
p5-POE-Component-Client-POP3
p5-POE-Component-Client-SMTP
p5-POE-Component-SMTP
p5-POE-Filter-Transparent-SMTP
p5-Qmail-Envelope
p5-qpsmtpd
p5-Sendmail-AccessDB
p5-Sendmail-Milter
p5-SES
p5-Sisimai
p5-Test-Email
p5-URI-imap
p5-URI-imaps
p5-WWW-GMail
p5-WWW-Hotmail
panda-cclient
panda-imap
pantomime
pathalias
pear-Contact_Vcard_Build
pear-Contact_Vcard_Parse
pear-Horde_Imap_Client
pear-Horde_Kolab_Storage
pear-Horde_ListHeaders
pear-Horde_Mail
pear-Horde_Mail_Autoconfig
pear-Horde_Mapi
pear-Horde_Mime
pear-Horde_Mime_Viewer
pear-Horde_Smtp
pear-Mail
pear-Mail_Mbox
pear-Mail_Mime
pear-Mail_mimeDecode
pear-Mail_Queue
pear-MIME_Type
pear-Net_Cyrus
pear-Net_IMAP
pear-Net_LMTP
pecl-mailparse
perdition
pflogsumm
pfqueue
php73-imap
php74-imap
php80-imap
phplist Update to 3.5.7 2020-10-26 11:47:48 +00:00
phpmailer
phpmailer6 Update to 6.2.0 2020-12-06 10:00:57 +00:00
pine-pgp-filters
pm-lib
policyd2
popa3d
popa3d-before-sendmail
popcheck
popfile
poppwd
popular
postfinger
postfix - update to 3.5.8 2020-11-09 06:26:11 +00:00
postfix-current - update to 3.6-20201212 2020-12-15 05:46:57 +00:00
postfix-current-sasl
postfix-ldap-sasl
postfix-logwatch
postfix-policyd-sf
postfix-policyd-spf-perl
postfix-policyd-weight
postfix-postfwd
postfix-sasl
postfixadmin mail/postfixadmin: unbreak build with php80 2020-12-28 15:52:44 +00:00
postgrey
postsrsd mail/postsrsd: update to 1.10 2020-12-25 11:41:37 +00:00
prepflog
procmail
proxsmtp
py-afew
py-aiosmtpd
py-alot
py-authheaders Drop python 2.7 support from a few ports 2020-12-28 23:02:12 +00:00
py-authres Drop python 2.7 support from a few ports 2020-12-28 23:02:12 +00:00
py-django-mailman3 Add dependencies required for mail/mailman3 2020-11-26 23:22:11 +00:00
py-dkimpy Drop python 2.7 support from a few ports 2020-12-28 23:02:12 +00:00
py-email_reply_parser Drop python 2.7 support from a few ports 2020-12-28 23:02:12 +00:00
py-email-validator Drop python 2.7 support from a few ports 2020-12-28 23:02:12 +00:00
py-flanker
py-flask-mail Drop python 2.7 support from a few ports 2020-12-28 23:02:12 +00:00
py-flufl.bounce
py-fuglu
py-mail-parser Drop python 2.7 support from a few ports 2020-12-28 23:02:12 +00:00
py-mailmanclient Add dependencies required for mail/mailman3 2020-11-26 23:22:11 +00:00
py-managesieve3 Drop python 2.7 support from a few ports 2020-12-28 23:02:12 +00:00
py-milter Drop python 2.7 support from a few ports 2020-12-28 23:02:12 +00:00
py-notmuch Drop python 2.7 support from a few ports 2020-12-28 23:02:12 +00:00
py-notmuch2 Relax hardcoded paths to fix build with Python 3.8.7 2020-12-24 13:46:01 +00:00
py-postfix-mta-sts-resolver
py-premailer Drop python 2.7 support from a few ports 2020-12-28 23:02:12 +00:00
py-Products.SecureMailHost Drop python 2.7 support from a few ports 2020-12-28 23:02:12 +00:00
py-pymailq Drop python 2.7 support from a few ports 2020-12-28 23:02:12 +00:00
py-pyspf Drop python 2.7 support from a few ports 2020-12-28 23:02:12 +00:00
py-pyzmail Drop python 2.7 support from a few ports 2020-12-28 23:02:12 +00:00
py-spf-engine
py-validate_email Drop python 2.7 support from a few ports 2020-12-28 23:02:12 +00:00
pymsgauth
pyzor Drop python 2.7 support from a few ports 2020-12-28 23:02:12 +00:00
qconfirm
qmail MFH: r565379 2021-02-18 21:19:13 +00:00
qmail-activedir
qmail-autoresponder
qmail-conf
qmail-contrib
qmail-dk
qmail-mysql MFH: r565379 2021-02-18 21:19:13 +00:00
qmail-notify
qmail-qfilter
qmail-rblchk
qmail-remove
qmail-spamcontrol MFH: r565379 2021-02-18 21:19:13 +00:00
qmail-tls MFH: r565379 2021-02-18 21:19:13 +00:00
qmailadmin
qmailanalog
qmhandle
qpopper
qsf
qsheff delete a misleading informations. 2020-10-22 08:45:47 +00:00
qtools
queue-fix
queue-repair
rainloop MFH: r560266 2021-01-04 08:46:45 +00:00
rainloop-community
ratelimit-policyd
raysfilter
razor-agents
rbl-milter
rblcheck
renattach
ripmime
rlytest
rmilter
roundcube
roundcube-automatic_addressbook
roundcube-carddav mail/roundcube-carddav: fix unparenthesized deprecation warn in php74 2020-12-10 10:41:36 +00:00
roundcube-contextmenu mail/roundcube-contextmenu: Update to 3.2.1 2020-12-21 12:52:58 +00:00
roundcube-html5_notifier
roundcube-identity_smtp
roundcube-login_info
roundcube-mobilecube
roundcube-mvision2
roundcube-sauserprefs
roundcube-thunderbird_labels
roundcube-umich
roundcube-veximaccountadmin
roundcube-yubikey_auth
rspamd - Run main process as root and drop worker privileges 2020-11-06 18:53:51 +00:00
rspamd-devel - Run main process as root and drop worker privileges 2020-11-06 18:53:51 +00:00
rss2email3
rubygem-actionmailbox60
rubygem-actionmailer4
rubygem-actionmailer5
rubygem-actionmailer50
rubygem-actionmailer52
rubygem-actionmailer60
rubygem-email_reply_parser
rubygem-email_reply_parser-discourse
rubygem-email_reply_trimmer
rubygem-exception_notification
rubygem-gitlab-mail_room Update to 0.0.8 which is required for gitlab 13.7. 2020-12-22 16:35:55 +00:00
rubygem-mail
rubygem-mail_room
rubygem-mailboxer
rubygem-mailfactory
rubygem-mini_mime
rubygem-pony
rubygem-premailer
rubygem-premailer-rails
rubygem-premailer-rails-rails5
rubygem-premailer-rails-rails52
rubygem-premailer-rails-rails60
rubygem-rmail
rubygem-roadie
rubygem-roadie3
rubygem-roadie-rails-rails4
rubygem-roadie-rails-rails52
rubygem-ruby-qmail
rubygem-tmail Marked it as broken for ruby 2.7. 2020-11-24 16:05:01 +00:00
rubygem-valid_email
rubygem-vmail
s-nail
sa-stats
sa-utils
scam-backscatter
sendmail devel/icu: update to 68.1 2020-11-03 00:56:26 +00:00
sendmail-devel devel/icu: update to 68.1 2020-11-03 00:56:26 +00:00
sendok
sentinel
serialmail
sgwi
sid-milter Patents are a complicated topic, and their regulation varies depending on 2020-11-12 16:11:37 +00:00
sieve-connect
sigrot
simscan
slapd-cyrus
sma
smfsav
smfsav-devel
smtp-cli
smtpfeed
smtpmail
smtprc
smtprelay
smtptrapd
sortmail
spamass-ixhash
spamass-milter
spamass-rules
spamassassin MFH: r569156 2021-03-24 20:05:31 +00:00
spamassassin-dqs
spambnc
spamcup
spamd
spamdyke
spamguard
spamilter
spampd
spamprobe
spamstats
spfmilter
spfval
spmfilter
spmfilter-clamav
sqlgrey
squirrelmail
squirrelmail-abook_import_export-plugin
squirrelmail-askuserinfo-plugin
squirrelmail-avelsieve-plugin
squirrelmail-calendar_file_backend-plugin
squirrelmail-change_ldappass-plugin
squirrelmail-change_sqlpass-plugin
squirrelmail-check_quota-plugin
squirrelmail-compatibility-plugin
squirrelmail-decode
squirrelmail-email_footer-plugin
squirrelmail-login_auth-plugin
squirrelmail-login_notes-plugin
squirrelmail-mark_read-plugin
squirrelmail-multilogin-plugin
squirrelmail-notes-plugin
squirrelmail-notify-plugin
squirrelmail-password_forget-plugin
squirrelmail-plugins
squirrelmail-pupdate-plugin
squirrelmail-qmailadmin_login-plugin
squirrelmail-quota_usage-plugin
squirrelmail-sasql-plugin
squirrelmail-secure_login-plugin
squirrelmail-shared_calendars-plugin
squirrelmail-spam-buttons-plugin
squirrelmail-squirrel_logger-plugin
squirrelmail-timeout_user-plugin
squirrelmail-translations
squirrelmail-unsafe_image_rules-plugin
squirrelmail-user_special_mailboxes-plugin
squirrelmail-vlogin-plugin
squirrelmail-websearch-plugin
squirrelmail-wetteronline-plugin
sqwebmail
ssmtp Clean up patches 2020-10-22 11:10:17 +00:00
surblhost
swaks
sylpheed
sympa MFH: r560539 2021-01-06 16:17:24 +00:00
t-prot
textmail graphics/poppler: update to 20.12.0 2020-12-11 20:10:03 +00:00
thunderbird MFH: r568868 r568985 2021-03-24 18:01:49 +00:00
thunderbird-dictionaries
tlb
tmpmail
tpop3d
trojita
tumgreyspf
up-imapproxy
usendmail For ports on riscv64 that fail the same (or similar ways) to aarch64, mark 2021-01-02 01:46:08 +00:00
vacation
vbsfilter
vexim
vmailmgr
vpopmail
vqadmin
vrfy
wanderlust Update to the snapshot on 2020-11-15. 2020-11-15 13:39:20 +00:00
websieve
whoson
wmbiff
wmmaiload
x-face-e21
xbuffy
xcite
xfaces
xfce4-mailwatch-plugin Welcome XFCE 4.16 to the FreeBSD ports tree! 2021-01-02 16:36:33 +00:00
xmail
xmailbox
xmailwatcher
xpbiff
Makefile Remove expired ports: 2021-01-02 14:52:12 +00:00