Bug 274235 - mail/exim: update 4.96 -> 4.96.1 to fix several CVEs
Summary: mail/exim: update 4.96 -> 4.96.1 to fix several CVEs
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Many People
Assignee: Dima Panov
URL: https://www.exim.org/static/doc/secur...
Keywords: security
Depends on:
Blocks:
 
Reported: 2023-10-03 12:07 UTC by Kurt Jaeger
Modified: 2023-10-03 20:33 UTC (History)
4 users (show)

See Also:
bugzilla: maintainer-feedback? (fluffy)
grahamperrin: merge-quarterly?

Attachments
patch (58.16 KB, patch)
2023-10-03 12:07 UTC, Kurt Jaeger 		no flags Details | Diff
patch-v2 (18.63 KB, patch)
2023-10-03 15:29 UTC, Kurt Jaeger 		no flags Details | Diff
Show Obsolete (1) View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Kurt Jaeger freebsd_committer freebsd_triage 2023-10-03 12:07:12 UTC 
Created attachment 245401 [details]
patch

testbuilds fine. TODO: test-run
Comment 1 Kurt Jaeger freebsd_committer freebsd_triage 2023-10-03 14:47:55 UTC 
(In reply to Kurt Jaeger from comment #0)
Patch is not correct. Some patches from debian were not imported because
of minor issue. fix@work
Comment 2 Kurt Jaeger freebsd_committer freebsd_triage 2023-10-03 15:29:03 UTC 
Created attachment 245412 [details]
patch-v2

This has the debian patches without the changelogs.
Comment 3 Kurt Jaeger freebsd_committer freebsd_triage 2023-10-03 16:14:16 UTC 
(In reply to Kurt Jaeger from comment #2)
Testrun looks fine.
Comment 4 commit-hook freebsd_committer freebsd_triage 2023-10-03 20:30:47 UTC 
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=36fcd7174d1651f557875c1b57255faca3d27914

commit 36fcd7174d1651f557875c1b57255faca3d27914
Author:     Kurt Jaeger <pi@FreeBSD.org>
AuthorDate: 2023-10-03 20:27:51 +0000
Commit:     Dima Panov <fluffy@FreeBSD.org>
CommitDate: 2023-10-03 20:30:04 +0000

    mail/exim: update 4.96 -> 4.96.1 to fix several CVEs

    PR:     274235
    MFH:    2023Q4

 mail/exim/Makefile                                 |  4 ++--
 mail/exim/distinfo                                 |  6 ++---
 ...-attempt-to-rewrite-a-malformed-address.-.patch | 18 ---------------
 ...5_08-Fix-regex-n-use-after-free.-Bug-2915.patch | 26 ----------------------
 ...ix-for-clients-offering-no-TLS-extensions.patch | 18 ---------------
 ...-Build-with-libopendmarc-1.4.x-fixes-2728.patch | 17 --------------
 .../75_22-Fix-daemon-startup.-Bug-2930.patch       | 18 ---------------
 ..._23-Fix-reccipients-after-run.-.-Bug-2929.patch | 17 --------------
 ...substring-capture-variables-for-null-matc.patch | 19 ----------------
 .../75_50-Fix-logging-of-max-size-log-line.patch   | 19 ----------------
 ...ion-on-dns_again_means_nonexist.-Bug-2911.patch | 22 ------------------
 ...-tls_eccurve-setting-explicit-curve-group.patch | 18 ---------------
 ...-check-dns_again_means_nonexist-for-TLSA-.patch | 20 +----------------
 .../debian/75_66-Fix-crash-in-expansions.patch     | 18 ---------------
 14 files changed, 6 insertions(+), 234 deletions(-)
Comment 5 commit-hook freebsd_committer freebsd_triage 2023-10-03 20:32:48 UTC 
A commit in branch 2023Q4 references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=2e772d250e21beea9db7a23a2d04df59aa2a709b

commit 2e772d250e21beea9db7a23a2d04df59aa2a709b
Author:     Kurt Jaeger <pi@FreeBSD.org>
AuthorDate: 2023-10-03 20:27:51 +0000
Commit:     Dima Panov <fluffy@FreeBSD.org>
CommitDate: 2023-10-03 20:31:33 +0000

    mail/exim: update 4.96 -> 4.96.1 to fix several CVEs

    PR:     274235
    MFH:    2023Q4
    (cherry picked from commit 36fcd7174d1651f557875c1b57255faca3d27914)

 mail/exim/Makefile                                 |  4 ++--
 mail/exim/distinfo                                 |  6 ++---
 ...-attempt-to-rewrite-a-malformed-address.-.patch | 18 ---------------
 ...5_08-Fix-regex-n-use-after-free.-Bug-2915.patch | 26 ----------------------
 ...ix-for-clients-offering-no-TLS-extensions.patch | 18 ---------------
 ...-Build-with-libopendmarc-1.4.x-fixes-2728.patch | 17 --------------
 .../75_22-Fix-daemon-startup.-Bug-2930.patch       | 18 ---------------
 ..._23-Fix-reccipients-after-run.-.-Bug-2929.patch | 17 --------------
 ...substring-capture-variables-for-null-matc.patch | 19 ----------------
 .../75_50-Fix-logging-of-max-size-log-line.patch   | 19 ----------------
 ...ion-on-dns_again_means_nonexist.-Bug-2911.patch | 22 ------------------
 ...-tls_eccurve-setting-explicit-curve-group.patch | 18 ---------------
 ...-check-dns_again_means_nonexist-for-TLSA-.patch | 20 +----------------
 .../debian/75_66-Fix-crash-in-expansions.patch     | 18 ---------------
 14 files changed, 6 insertions(+), 234 deletions(-)
Comment 6 Dima Panov freebsd_committer freebsd_triage 2023-10-03 20:33:20 UTC 
Landed, thanks