Bug 189479

Summary: [PATCH] security/amavisd-new: update to 2.8.1,1
Product: Ports & Packages Reporter: Paul J Murphy <paul>
Component: Individual Port(s)Assignee: Gabor Kovesdan <gabor>
Status: Closed FIXED    
Severity: Affects Only Me CC: gabor
Priority: Normal    
Version: Latest   
Hardware: Any   
OS: Any   
Attachments:
Description Flags
amavisd-new-2.8.1.patch none

Description Paul J Murphy 2014-05-08 17:40:00 UTC
- Update to 2.8.1,1 (v2.8.1 was released on June 28, 2013)
- 2.8.0 has a nasty sounding bug which can cause silent loss of messages

http://www.amavis.org/release-notes.txt says for 2.8.1:
...
- fixed a bug in the SMTP client code, where the final SMTP status did
  not reflect a failure status of a DATA command from a back-end MTA.
  This caused a reception of a mail message to be confirmed but a message
  was then lost, as it could not be passed to a back-end MTA. The bug
  went unnoticed for years, as the commonly used MTAs normally reject
  either at the MAIL FROM, at RCPT TO, or at the data-dot stage, but not
  at the DATA command. Reported by Deniska-rediska;
...

Depends versions updated according to the obvious changes in the docs,
but it's possible that I may not have caught them all.  The original
docs are also vague in places over minimum versions, lots of refs to
"latest" or similar.  It seems to work nicely enough on 10.0 with all
relevant ports up to date with their stable branches/releases.

Depends version for "file" checked for the inconsistency between the
comment and the rule (> vs. >=).  According to info on the web, 4.21
should be the fix for the security hole in 4.20 and earlier - i.e. the
rule was correct, but the comment was wrong.

Port maintainer (gabor@FreeBSD.org) is cc'd.

Generated with FreeBSD Port Tools 1.02 (mode: update, diff: SVN)
Comment 1 Edwin Groothuis freebsd_committer freebsd_triage 2014-05-08 17:40:04 UTC
Responsible Changed
From-To: freebsd-ports-bugs->gabor

Over to maintainer (via the GNATS Auto Assign Tool)
Comment 2 Gabor Kovesdan freebsd_committer freebsd_triage 2014-07-18 05:30:28 UTC
Thank you for the submission. The port has been updated to a newer version.