Update to 3.3.10 Security fix for a clickjacking vulnerability. See: https://huntr.dev/bounties/872e57e6-f7ab-4f9b-aa0c-209c8a3f499e/
Created attachment 227195 [details] Patch to update to 3.3.10 Patch tested with portlint and poudriere. See attached log.
Created attachment 227196 [details] Test log for provided patch
Created attachment 227370 [details] Revised patch updating 3.2.4 -> 3.3.10 Update to 3.3.10 Security fix for a clickjacking vulnerability. See: https://huntr.dev/bounties/872e57e6-f7ab-4f9b-aa0c-209c8a3f499e/ 3.2->3.3 requires generating a new setup hash. The post-ugprade visit to setup.php will walk you through this. Other changes: -XMLRPC support is moribund, so drop it from USE_PHP -Virtual vacation scripts are now optional, making building without perl5 possible -Optionally add imap to USE_PHP module for completeness -Default options changed for maximal out-of-the-box support
Created attachment 227371 [details] Portlint and poudriere testport log for revised patch
A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=65e5396ecad56fcb6a5d726493e44d5041688d8e commit 65e5396ecad56fcb6a5d726493e44d5041688d8e Author: Dima Panov <fluffy@FreeBSD.org> AuthorDate: 2021-08-23 12:59:05 +0000 Commit: Dima Panov <fluffy@FreeBSD.org> CommitDate: 2021-08-23 12:59:05 +0000 mail/postfixadmin: Update to 3.3.10 release (+) Upgrade from 3.2.x to 3.3+ requires generating a new setup hash. The post-ugprade visit to setup.php will walk you through this. Other changes: -XMLRPC support is moribund, so drop it from USE_PHP -Virtual vacation scripts are now optional, making building without perl5 possible -Optionally add imap to USE_PHP module for completeness -Default options changed for maximal out-of-the-box support PR: 257845 UPDATING | 11 ++ mail/postfixadmin/Makefile | 67 ++++++------ mail/postfixadmin/distinfo | 6 +- mail/postfixadmin/files/patch-config.inc.php (new) | 18 ++++ mail/postfixadmin/pkg-plist | 116 ++++++++++++--------- 5 files changed, 136 insertions(+), 82 deletions(-)
A commit in branch 2021Q3 references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=f3d1646dc10206e9b5c4c2f2a7af0bd6d61ae2bb commit f3d1646dc10206e9b5c4c2f2a7af0bd6d61ae2bb Author: Dima Panov <fluffy@FreeBSD.org> AuthorDate: 2021-08-23 12:59:05 +0000 Commit: Dima Panov <fluffy@FreeBSD.org> CommitDate: 2021-08-23 13:06:12 +0000 mail/postfixadmin: Update to 3.3.10 release (+) Upgrade from 3.2.x to 3.3+ requires generating a new setup hash. The post-ugprade visit to setup.php will walk you through this. Other changes: -XMLRPC support is moribund, so drop it from USE_PHP -Virtual vacation scripts are now optional, making building without perl5 possible -Optionally add imap to USE_PHP module for completeness -Default options changed for maximal out-of-the-box support PR: 257845 (cherry picked from commit 65e5396ecad56fcb6a5d726493e44d5041688d8e) UPDATING | 11 ++ mail/postfixadmin/Makefile | 67 ++++++------ mail/postfixadmin/distinfo | 6 +- mail/postfixadmin/files/patch-config.inc.php (new) | 18 ++++ mail/postfixadmin/pkg-plist | 116 ++++++++++++--------- 5 files changed, 136 insertions(+), 82 deletions(-)
Committed, with new checksums (github tarball rerolled). Pushed to 2021Q3 too.