aboutsummaryrefslogtreecommitdiff
path: root/mail
Commit message (Collapse)AuthorAge
* alpine: fix old URLRosen Penev2023-01-14
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* opendkim: use pkgconfig for libbsdRosen Penev2023-01-13
| | | | | | Allows using the overlay. Also remove the outdated uClibc patch. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* pigeonhole: update to 0.5.19W. Michael Petullo2022-12-22
| | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* emailrelay: update to v2.4.1Sergey Ponomarev2022-12-20
| | | | | | | The patch seems not needed anymore. Also remove deprecated PKG_RELEASE:=$(AUTORELEASE) Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* postfix: Fix compile against glibc 2.36Hauke Mehrtens2022-12-19
| | | | | | | | This backports a change from postfix 3.8, I do not know exactly why it detects Linux 6 here, but this is needed to fix compilation with glibc 2.36. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* exim: update to version 4.96Daniel Golle2022-09-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Exim version 4.96 ----------------- JH/01 Move the wait-for-next-tick (needed for unique message IDs) from after reception to before a subsequent reception. This should mean slightly faster delivery, and also confirmation of reception to senders. JH/02 Move from using the pcre library to pcre2. The former is no longer being developed or supported (by the original developer). JH/03 Constification work in the filters module required a major version bump for the local-scan API. Specifically, the "headers_charset" global which is visible via the API is now const and may therefore not be modified by local-scan code. JH/04 Fix ClamAV TCP use under FreeBSD. Previously the OS-specific shim for sendfile() didi not account for the way the ClamAV driver code called it. JH/05 Bug 2819: speed up command-line messages being read in. Previously a time check was being done for every character; replace that with one per buffer. JH/06 Bug 2815: Fix ALPN sent by server under OpenSSL. Previously the string sent was prefixed with a length byte. JH/07 Change the SMTP feature name for pipelining connect to be compliant with RFC 5321. Previously Dovecot (at least) would log errors during submission. JH/08 Remove stripping of the binaries from the FreeBSD build. This was added in 4.61 without a reason logged. Binaries will be bigger, which might matter on diskspace-constrained systems, but debug is easier. JH/09 Fix macro-definition during "-be" expansion testing. The move to write-protected store for macros had not accounted for these runtime additions; fix by removing this protection for "-be" mode. JH/10 Convert all uses of select() to poll(). FreeBSD 12.2 was found to be handing out large-numbered file descriptors, violating the usual Unix assumption (and required by Posix) that the lowest possible number will be allocated by the kernel when a new one is needed. In the daemon, and any child procesees, values higher than 1024 (being bigger than FD_SETSIZE) are not useable for FD_SET() [and hence select()] and overwrite the stack. Assorted crashes happen. JH/11 Fix use of $sender_host_name in daemon process. When used in certain main-section options or in a connect ACL, the value from the first ever connection was never replaced for subsequent connections. Found by Wakko Warner. JH/12 Bug 2838: Fix for i32lp64 hard-align platforms. Found for SPARC Linux, though only once PCRE2 was introduced: the memory accounting used under debug offset allocations by an int, giving a hard trap in early startup. Change to using a size_t. Debug and fix by John Paul Adrian Glaubitz. JH/13 Bug 2845: Fix handling of tls_require_ciphers for OpenSSL when a value with underbars is given. The write-protection of configuration introduced in 4.95 trapped when normalisation was applied to an option not needing expansion action. JH/14 Bug 1895: TLS: Deprecate RFC 5114 Diffie-Hellman parameters. JH/15 Fix a resource leak in *BSD. An off-by-one error resulted in the daemon failing to close the certificates directory, every hour or any time it was touched. JH/16 Debugging initiated by an ACL control now continues through into routing and transport processes. Previously debugging stopped any time Exim re-execs, or for processing a queued message. JH/17 The "expand" debug selector now gives more detail, specifically on the result of expansion operators and items. JH/18 Bug 2751: Fix include_directory in redirect routers. Previously a bad comparison between the option value and the name of the file to be included was done, and a mismatch was wrongly identified. 4.88 to 4.95 are affected. JH/19 Support for Berkeley DB versions 1 and 2 is withdrawn. JH/20 When built with NDBM for hints DB's check for nonexistence of a name supplied as the db file-pair basename. Previously, if a directory path was given, for example via the autoreply "once" option, the DB file.pag and file.dir files would be created in that directory's parent. JH/21 Remove the "allow_insecure_tainted_data" main config option and the "taint" log_selector. These were previously deprecated. JH/22 Fix static address-list lookups to properly return the matched item. Previously only the domain part was returned. JH/23 Bug 2864: FreeBSD: fix transport hang after 4xx/5xx response. Previously the call into OpenSSL to send a TLS Close was being repeated; this resulted in the library waiting for the peer's Close. If that was never sent we waited forever. Fix by tracking send calls. JH/24 The ${run} expansion item now expands its command string elements after splitting. Previously it was before; the new ordering makes handling zero-length arguments simpler. The old ordering can be obtained by appending a new option "preexpand", after a comma, to the "run". JH/25 Taint-check exec arguments for transport-initiated external processes. Previously, tainted values could be used. This affects "pipe", "lmtp" and "queryprogram" transport, transport-filter, and ETRN commands. The ${run} expansion is also affected: in "preexpand" mode no part of the command line may be tainted, in default mode the executable name may not be tainted. JH/26 Fix CHUNKING on a continued-transport. Previously the usabliility of the the facility was not passed across execs, and only the first message passed over a connection could use BDAT; any further ones using DATA. JH/27 Support the PIPECONNECT facility in the smtp transport when the helo_data uses $sending_ip_address and an interface is specified. Previously any use of the local address in the EHLO name disabled PIPECONNECT, the common case being to use the rDNS of it. JH/28 OpenSSL: fix transport-required OCSP stapling verification under session resumption. Previously verify failed because no certificate status is passed on the wire for the restarted session. Fix by using the recorded ocsp status of the stored session for the new connection. JH/29 TLS resumption: the key for session lookup in the client now includes more info that a server could potentially use in configuring a TLS session, avoiding oferring mismatching sessions to such a server. Previously only the server IP was used. JH/30 Fix string_copyn() for limit greater than actual string length. Previously the copied amount was the limit, which could result in a overlapping memcpy for newly allocated destination soon after a source string shorter than the limit. Found/investigated by KM. JH/31 Bug 2886: GnuTLS: Do not free the cached creds on transport connection close; it may be needed for a subsequent connection. This caused a SEGV on primary-MX defer. Found/investigated by Gedalya & Andreas. JH/32 Fix CHUNKING for a second message on a connection when the first was rejected. Previously we did not reset the chunking-offered state, and erroneously rejected the BDAT command. Investigation help from Jesse Hathaway. JH/33 Fis ${srs_encode ...} to handle an empty sender address, now returning an empty address. Previously the expansion returned an error. HS/01 Bug 2855: Handle a v4mapped sender address given us by a frontending proxy. Previously these were misparsed, leading to paniclog entries. Also contains commit 51be321b27 "Fix PAM auth. Bug 2813" addressing CVE-2022-37451. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* mutt: add PKG_CONFIG_DEPENDSRosen Penev2022-07-20
| | | | | | Should fix missing dependencies when manupulating options. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* postfix: fix download failureMichal Vasilek2022-07-17
| | | | | | | cdn.postfix.johnriley.me serves a certificate for a different domain name. Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
* pigeonhole: update to 2.3.18W. Michael Petullo2022-05-11
| | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* dovecot: update to 2.3.18W. Michael Petullo2022-05-11
| | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* Revert "postfix: fix build on macos"Sergey V. Lobanov2022-02-11
| | | | This reverts commit 9d8171aa0647a0e4c5f27004d3f4c982ac0d1ebe.
* emailrelay: don't disable fortify sourceRosen Penev2022-02-04
| | | | | | GCC8 and 9 are gone. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* mutt: update to 2.1.5Matthew Hagan2022-02-02
| | | | Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
* mutt: add header caching support via libgdbmMatthew Hagan2022-02-02
| | | | | | Add header caching option to mutt, using the libgdbm database routines. Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
* mutt: move configurables to Config.inMatthew Hagan2022-02-02
| | | | Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
* postfix: fix build on macosSergey V. Lobanov2022-01-25
| | | | | | | | | | | | | macos build fails due to two reasons: 1. using build host ar and ranlib tools 2. using uname -r to get kernel version First issue is fixed by specifying ar and ranlib from toolchain Second issue is fixed by specifying kernel release major version=5 Using 'uname -r' from build host for cross-compiling is not a good idea even for Linux build host Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
* mblaze: fix build on macosSergey V. Lobanov2022-01-11
| | | | | | redefine OS=Linux due to OpenWrt is always Linux Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
* postfix: Fix compile with glibc 2.34Hauke Mehrtens2022-01-09
| | | | | | | | | | | | | | | | | | This adds a patch from Open embedded to fix compilation with glibc 2.34. This patch was taken from here: https://github.com/openembedded/meta-openembedded/blob/master/meta-networking/recipes-daemons/postfix/files/0007-correct-signature-of-closefrom-API.patch It fixes the following build problem: /builder/shared-workdir/build/sdk/staging_dir/toolchain-arc_arc700_gcc-11.2.0_glibc/include/unistd.h:366:13: error: conflicting types for 'closefrom'; have 'void(int)' 366 | extern void closefrom (int __lowfd) __THROW; | ^~~~~~~~~ In file included from attr_clnt.c:87: ./sys_defs.h:1511:12: note: previous declaration of 'closefrom' with type 'int(int)' 1511 | extern int closefrom(int); | ^~~~~~~~~ make: *** [Makefile:192: attr_clnt.o] Error 1 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* alpine: update to 2.25Rosen Penev2021-12-17
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* mblaze: update to 1.2Rosen Penev2021-12-16
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* msmtp: update to version 1.8.1.9Josef Schlehofer2021-12-04
| | | | | | | Changelog: https://marlam.de/msmtp/news/msmtp-1-8-19/ Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* postfix: prevent displaying config options when not enabledMatthew Hagan2021-11-08
| | | | | | | | | | Postfix's options should not be visible in the config when Postfix is not enabled. Secondly, place the config option menu behind the Postfix option rather than underneath. Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
* mutt: prevent exposing mutt config options when not enabledMatthew Hagan2021-11-08
| | | | | | | | Ensure Mutt's configuration options do not appear in the config when Mutt is not enabled. Reported-by: Stijn Segers <foss@volatilesystems.org> Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
* msmtp: update to version 1.8.17Josef Schlehofer2021-10-17
| | | | | | | - Use AUTORELEASE fce It helps when someone forgets to bump PKG_RELEASE Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* exim: update to version 4.95Daniel Golle2021-10-09
| | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* mutt: add smtp, sasl, gnutls, menuconfig optionsMatthew Hagan2021-10-08
| | | | | | | | | | Compile tested: bcm53xx, MX65, master Add support for SMTP, SASL, GnuTLS and POP, IMAP, OpenSSL in the menuconfig. The SMTP/SASL configurable was required to successfully send email on GMail. Tested separately using OpenSSL and GnuTLS. Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
* Merge pull request #16679 from paper42/mutt-2.1.3Alexandru Ardelean2021-09-28
|\ | | | | mutt: update to 2.1.3
| * mutt: update to 2.1.3Michal Vasilek2021-09-21
| | | | | | | | Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
* | pigeonhole: update to 0.5.16Rosen Penev2021-09-25
|/ | | | | | Update URL. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* dovecot: update to 2.3.16Lucian Cristian2021-09-19
| | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* mutt: update to 2.1.2, switch to AUTORELEASEMichal Vasilek2021-08-26
| | | | Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
* Merge pull request #16322 from paper42/mblazeRosen Penev2021-08-18
|\ | | | | mblaze: new package
| * mblaze: new packageMichal Vasilek2021-08-11
| | | | | | | | Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
* | exim: some clean upsDaniel Golle2021-08-13
| | | | | | | | | | | | | | | | * use username/group 'exim' instead of mail * register configuration file * make sure /usr/lib/exim/lookups exists Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | exim: add default config and init script, enable lmtpDaniel Golle2021-08-12
|/ | | | | | | | Ship default configuration /etc/exim/exim.conf as well as a simple procd init script. Enable building with LMTP for better integration with dovecot. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* emailrelay: fix compilation with GCC11Rosen Penev2021-07-07
| | | | | | Missing header. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* msmtp: update to version 1.8.15Josef Schlehofer2021-06-01
| | | | Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* exim: update to version 4.94.2Daniel Golle2021-05-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Several exploitable vulnerabilities in Exim were reported to us and are fixed. Local vulnerabilities - CVE-2020-28007: Link attack in Exim's log directory - CVE-2020-28008: Assorted attacks in Exim's spool directory - CVE-2020-28014: Arbitrary PID file creation - CVE-2020-28011: Heap buffer overflow in queue_run() - CVE-2020-28010: Heap out-of-bounds write in main() - CVE-2020-28013: Heap buffer overflow in parse_fix_phrase() - CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase() - CVE-2020-28015: New-line injection into spool header file (local) - CVE-2020-28012: Missing close-on-exec flag for privileged pipe - CVE-2020-28009: Integer overflow in get_stdinput() Remote vulnerabilities - CVE-2020-28017: Integer overflow in receive_add_recipient() - CVE-2020-28020: Integer overflow in receive_msg() - CVE-2020-28023: Out-of-bounds read in smtp_setup_msg() - CVE-2020-28021: New-line injection into spool header file (remote) - CVE-2020-28022: Heap out-of-bounds read and write in extract_option() - CVE-2020-28026: Line truncation and injection in spool_read_header() - CVE-2020-28019: Failure to reset function pointer after BDAT error - CVE-2020-28024: Heap buffer underflow in smtp_ungetc() - CVE-2020-28018: Use-after-free in tls-openssl.c - CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash() The update to 4.94.2 also integrates a fix for a printf format issue previously addressed by a local patch which is removed. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* mutt: don't use host mailpath definitionEneas U de Queiroz2021-04-19
| | | | | | | | Use configure --with-mailpath=/var/mail instead of letting it guess the value base on the host path. If configure can't find it, the package will fail to build. The path was taken from the current bot build. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* fdm: don't use host headersAlexander Ryzhov2021-04-14
| | | | Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>
* exim: fix compilation without deprecated OpenSSL APIsRosen Penev2021-03-26
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* emailrelay: update to 2.2Rosen Penev2021-03-12
| | | | | | | | Remove upstreamed patch. Switch to AUTORELEASE for simplicity. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* pigeonhole: bump to 0.5.14Eneas U de Queiroz2021-03-04
| | | | | | | | ChangeLog: - IMAP FILTER command: cmd-filter-sieve - Do not allow NIL as script name argument. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* pigeonhole: update to 0.5.13Rosen Penev2021-03-01
| | | | | | Switch to AUTORELEASE for simplicity. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* dovecot: update to 2.3.13Rosen Penev2021-02-22
| | | | | | | | Fixed and refreshed patches. Switched to AUTORELEASE for simplicity. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* treewide: Run refresh on all packagesIlya Lipnitskiy2021-02-20
| | | | | | | | | The crude loop I wrote to come up with this changeset: find -L package/feeds/packages/ -name patches | \ sed 's/patches$/refresh/' | sort | xargs make Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
* alpine: try to make reproducibleRosen Penev2021-02-02
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* msmtp: update to version 1.8.14Josef Schlehofer2021-01-18
| | | | | | | | | | Release notes for 1.8.1.3: https://marlam.de/msmtp/news/msmtp-1-8-13/ Release notes for 1.8.1.4: https://marlam.de/msmtp/news/msmtp-1-8-13/ Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* exim: fix compilation with CentOS 7Rosen Penev2021-01-11
| | | | | | CentOS 7 has an old GCC that does not default to c11. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* exim: add packageDaniel Golle2021-01-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add Exim MTA variants: * exim plain variant without any TLS library which hence comes without TLS, DANE and DKIM. * exim-openssl linked against libopenssl * exim-gnutls linked against libgnutls * exim-ldap linked against libopenssl, libopenldap and libsasl2 Provide packages for lookup modules * cdb * dbmdb * dnsdb * json (depends on jansson) * mysql (depends on libmariadb) * passwd * pgsql (depends on libpq) * redis (depends on libhiredis) * sqlite (depends on libsqlite3) Note: As gnutls requires libunbound which depends on libopenssl to provide libgnutls-dane, disable DANE by default when building with gnutls. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Powered by cgit, Themed by Ted Yin.