Bug 273818 - mail/opensmtpd-filter-rspamd: update to 0.1.8
Summary: mail/opensmtpd-filter-rspamd: update to 0.1.8
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Some People
Assignee: Emmanuel Vadot
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-09-15 10:48 UTC by Omar Polo
Modified: 2023-10-02 15:04 UTC (History)
0 users

See Also:
bugzilla: maintainer-feedback? (manu)


Attachments
opensmtpd-filter-rspamd 0.1.8 (1.01 KB, patch)
2023-09-15 10:48 UTC, Omar Polo
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Omar Polo 2023-09-15 10:48:35 UTC
Created attachment 244876 [details]
opensmtpd-filter-rspamd 0.1.8

Hello,

this is a relatively important security update since anyone trying to do a login against an user with a '|' in it will crash opensmtpd-filter-rspamd, tearing down smtpd along the way too.  (opensmtpd dies when one of the filter quits.)

https://github.com/poolpOrg/filter-rspamd/releases/tag/v0.1.8
Comment 1 Omar Polo 2023-10-02 09:51:17 UTC
There's something I can do to help getting this committed?  It's a rather important security update IMHO and DOES NOT depend on the opensmtpd update (Bug 272047)

Thanks,
Comment 2 commit-hook freebsd_committer freebsd_triage 2023-10-02 11:23:08 UTC
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=1c76510b6a83b548141c7b49519c22c3b56a7c0c

commit 1c76510b6a83b548141c7b49519c22c3b56a7c0c
Author:     Omar Polo <freebsd@omarpolo.com>
AuthorDate: 2023-10-02 11:21:17 +0000
Commit:     Emmanuel Vadot <manu@FreeBSD.org>
CommitDate: 2023-10-02 11:21:17 +0000

    mail/opensmtpd-filter-rspamd: update to 0.1.8

    PR:     273818

 mail/opensmtpd-filter-rspamd/Makefile | 3 +--
 mail/opensmtpd-filter-rspamd/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 5 deletions(-)
Comment 3 Emmanuel Vadot freebsd_committer freebsd_triage 2023-10-02 11:58:46 UTC
Sorry, forgot about this, commited now.
Comment 4 Omar Polo 2023-10-02 15:04:22 UTC
Thanks!