Bug 189479 - [PATCH] security/amavisd-new: update to 2.8.1,1
Summary: [PATCH] security/amavisd-new: update to 2.8.1,1
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: Gabor Kovesdan
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-05-08 17:40 UTC by Paul J Murphy
Modified: 2014-07-18 05:30 UTC (History)
1 user (show)

See Also:


Attachments
amavisd-new-2.8.1.patch (1.52 KB, patch)
2014-05-08 17:40 UTC, Paul J Murphy
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Paul J Murphy 2014-05-08 17:40:00 UTC
- Update to 2.8.1,1 (v2.8.1 was released on June 28, 2013)
- 2.8.0 has a nasty sounding bug which can cause silent loss of messages

http://www.amavis.org/release-notes.txt says for 2.8.1:
...
- fixed a bug in the SMTP client code, where the final SMTP status did
  not reflect a failure status of a DATA command from a back-end MTA.
  This caused a reception of a mail message to be confirmed but a message
  was then lost, as it could not be passed to a back-end MTA. The bug
  went unnoticed for years, as the commonly used MTAs normally reject
  either at the MAIL FROM, at RCPT TO, or at the data-dot stage, but not
  at the DATA command. Reported by Deniska-rediska;
...

Depends versions updated according to the obvious changes in the docs,
but it's possible that I may not have caught them all.  The original
docs are also vague in places over minimum versions, lots of refs to
"latest" or similar.  It seems to work nicely enough on 10.0 with all
relevant ports up to date with their stable branches/releases.

Depends version for "file" checked for the inconsistency between the
comment and the rule (> vs. >=).  According to info on the web, 4.21
should be the fix for the security hole in 4.20 and earlier - i.e. the
rule was correct, but the comment was wrong.

Port maintainer (gabor@FreeBSD.org) is cc'd.

Generated with FreeBSD Port Tools 1.02 (mode: update, diff: SVN)
Comment 1 Edwin Groothuis freebsd_committer freebsd_triage 2014-05-08 17:40:04 UTC
Responsible Changed
From-To: freebsd-ports-bugs->gabor

Over to maintainer (via the GNATS Auto Assign Tool)
Comment 2 Gabor Kovesdan freebsd_committer freebsd_triage 2014-07-18 05:30:28 UTC
Thank you for the submission. The port has been updated to a newer version.