7914 Commits

Author SHA1 Message Date
ajacoutot
745db970ca Update to sendmail-8.16.0.45. 2020-05-02 08:04:48 +00:00
tb
2776d09f08 Add workarounds to fix alpine with TLSv1.3
Servers enforcing that clients send an SNI become more common.
Backport the mechanism for sending SNI from alpine 2.22.
Our new TLSv1.3 stack requires more retries than the old one
so retry SSL_write() if the API tells us to do so.

Issue reported, fix tested and "ok" procter.
ok jca sthen
2020-05-01 09:09:14 +00:00
sthen
afc6e67e39 update rcube-contextmenu to 3.2 following CSRF change in roundcube 2020-04-29 23:23:02 +00:00
sthen
218211c334 security update to roundcubemail-1.4.4
Security fixes:
- Cross-Site Scripting (XSS) via malicious HTML content
- CSRF attack can cause an authenticated user to be logged out
- Remote code execution via crafted config options
- Path traversal vulnerability allowing local file inclusion via crafted
'plugins' option

The latter two vulnerabilities are classified minor because they only
affect Roundcube installations with public access to the Roundcube
installer. That’s generally a high-risk situation and is expected to be
rare or practically non-existent in productive Roundcube deployments.
However, the fixes are done in core in order to also prevent from future
and yet unknown attack vectors.

Changelog at https://github.com/roundcube/roundcubemail/releases/tag/1.4.4
2020-04-29 23:15:11 +00:00
schwarze
77ef99ead5 Delete mail/akpop3d.
Alexei dot Malinin at mail dot ru reported a compiler warning that,
in my opinion, probably indicates a security vulnerability, but due
to an incomplete description of the affected feature in the
documentation, it is unclear how it should be fixed.  The program
appears to be sloppily written, sloppily documented, and abandoned
upstream 15 years ago.

OK ajacoutot@ for deleting it.
2020-04-29 15:25:45 +00:00
okan
c870daa8fd Update to 2.1.30; includes fix for CVE-2020-12137.
ok sthen, jca
2020-04-27 12:27:49 +00:00
afresh1
aabc7c0c86 Update mail/p5-Email-Sender to 1.300034
From wen heping <wenheping2000 () hotmail ! com>
2020-04-25 17:59:42 +00:00
afresh1
9d3794884a Update mail/p5-Mail-AuthenticationResults to 1.20200331.1
From MAINTAINER wen heping <wenheping2000 () hotmail ! com> MAINTAINER
2020-04-25 17:43:09 +00:00
sthen
1052ceed02 update to pecl-mailparse-3.1.0 2020-04-23 13:29:12 +00:00
landry
f9708065c8 Remove dspam, dead upstream since ~2014. For something like an antispam
software, this is like 'last millenium', so better rely on something
else like rspamd..

cf https://sourceforge.net/p/dspam/mailman/message/32585111/

ok jca@ sthen@ cwen@
2020-04-22 06:35:08 +00:00
sthen
4797d5f7dc build PHP 7.4 versions of the pecl-* ports 2020-04-21 20:42:00 +00:00
robert
016d31a7ef add missing run dependency for py-tzlocal 2020-04-20 15:31:47 +00:00
giovanni
4f6c175cab update to 6.7.1
fixes a disconnection problem when using MySQL backend
remove Python run dependency (fix by kn@)
ok jung@
2020-04-20 06:13:11 +00:00
robert
5116fb3259 update to 10.0.4 2020-04-19 12:44:21 +00:00
jung
d543c7438a update to 0.7 to follow filter protocol bump 2020-04-17 23:28:30 +00:00
sthen
0468f9e1b7 update to fetchmail-6.4.3 2020-04-15 19:48:39 +00:00
giovanni
59b009da14 update to 1.20200214 from Wen Heping 2020-04-15 09:32:57 +00:00
martijn
dd55f25fbf Add support for smtpd filter protocol v0.6, which is imminent. 2020-04-13 19:14:28 +00:00
eric
caf1894f22 update to 0.1.6
from maintainer Gilles Chehade
2020-04-11 16:01:46 +00:00
espie
7bd6e62370 as usual, any added check will catch errors
in that case, install -d with no directory names is now an error, as it
should be.
2020-04-08 18:25:48 +00:00
landry
999ce65171 Update to thunderbird 68.7.0.
See https://www.thunderbird.net/en-US/thunderbird/68.7.0/releasenotes/ (not there yet)
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-14/ (not there yet)
2020-04-08 12:28:53 +00:00
bentley
e9af93138a Move openwall to https. 2020-04-07 13:29:52 +00:00
sthen
cf2c54664a add --debug to neomutt CONFIGURE_ARGS to debug configure checks, which
also logs "ok" checks to config.log. investigating strange occurrence of
fgetc_unlocked being detected when we don't have it ...
2020-04-03 19:22:56 +00:00
danj
115ad83426 Switch homepage to https as pointed out by rsadowski 2020-04-02 22:50:17 +00:00
danj
fbf6237f70 Drop maintainership 2020-04-02 22:49:32 +00:00
sthen
2f5e60f48d update to rspamd-2.5 2020-04-02 16:33:41 +00:00
kn
3095cc9a3b Don't include build date in museragent
Update MASTER_SITES while here (not distinfo change).

From Lucas (Maintainer), thanks.
2020-03-30 14:08:46 +00:00
sthen
32997cdfed update to mutt-1.13.5 2020-03-29 15:36:45 +00:00
kmos
2964251e0a kopanocore steadfastly refuses to build on sparc64.
Mark it BROKEN-sparc64

ok robert@
2020-03-27 19:04:07 +00:00
espie
52e706b9fd neuter dwz preventively since it doesn't work with those 4 ports
(it's likely the debug info is bogus)
2020-03-26 14:52:38 +00:00
ajacoutot
95b34e9a4f Fix after removal of misc/rpm. 2020-03-23 19:17:38 +00:00
naddy
f88a93d598 * Combine and tweak some find(1) invocations.
* Use the -delete operator to remove files.
2020-03-22 18:13:35 +00:00
robert
7489e1b62a update to 4.0.2676 2020-03-22 11:41:28 +00:00
robert
93f585b4d5 update to 10.0.3 2020-03-22 11:22:37 +00:00
robert
51db9fae17 update to 10.0.3 2020-03-22 11:20:34 +00:00
ajacoutot
f9354013de Update to gmime30-3.2.7. 2020-03-21 13:39:24 +00:00
naddy
d159f8d1ad Make use of "find -exec {} +" (which is POSIX) and "find -delete"
(which is not) throughout the ports Makefiles.

* Replace find|xargs with find -exec {} +
* Replace -exec {} \; with -exec {} + if applicable.
* Use the -delete operator to remove files and empty directories.
* Combine and tweak some find(1) invocations while here.

ok kn@ rsadowski@ espie@
2020-03-20 16:44:21 +00:00
sthen
cef096fe06 update to neomutt-20200320 2020-03-20 14:30:21 +00:00
sthen
48519a1771 update postfix-snapshot to 3.6-20200312, from Brad 2020-03-19 17:08:04 +00:00
sthen
5be6b13c3c update postfix-stable to 3.5.0, from Brad 2020-03-19 17:07:42 +00:00
anton
8c72ce8d6b Update to mdsort-5.2.2. 2020-03-17 14:56:59 +00:00
ajacoutot
9abfcf8525 Regen WANTLIB to unbreak after libgdata update. 2020-03-14 13:04:14 +00:00
sthen
f7787a19b7 update to neomutt-20200313 2020-03-14 12:41:45 +00:00
jca
ebe06207fa Fix possible crash when downloading attachments
frm maintainer Caspar Schutijser
2020-03-14 01:17:13 +00:00
jasper
db70b5bcb1 regen WANTLIB after libgdata update 2020-03-12 20:08:56 +00:00
landry
d03f16dbf4 Update to thunderbird 68.6.0.
See https://www.thunderbird.net/en-US/thunderbird/68.6.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-10 (not
yet up)
2020-03-12 18:31:47 +00:00
robert
76a7052aa3 substitute all /usr/bin/python paths to ${MODPY_BIN}; from Eric JACQUOT 2020-03-08 09:22:39 +00:00
robert
907727df15 update to 10.0.2 and apply fix from Eric JACQUOT to fix python dependencies 2020-03-08 08:17:57 +00:00
sthen
db4c50aa44 dovecot: sync PLIST closer to what Brad had (I was confused as I had a local
update before he sent his). Keep dovecot-sysreport commented for now as it
requires GNU grep options.
2020-03-07 11:36:52 +00:00
sthen
ecf1463242 update to Dovecot-pigeonhole 0.5.10, from Brad 2020-03-07 09:53:47 +00:00