190 Commits

Author SHA256 Message Date
Dominique Leuenberger
ae0349678e Accepting request 507377 from server:mail
1

OBS-URL: https://build.opensuse.org/request/show/507377
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/exim?expand=0&rev=42
2017-07-01 12:06:08 +00:00
45d7c59c3b Accepting request 506440 from home:pwcau:branches:server:mail
cleanup changelog and properly reference the patch files to (hopefully) make the patch-reference checker in :Factory happy.

OBS-URL: https://build.opensuse.org/request/show/506440
OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=185
2017-06-30 13:40:09 +00:00
048e707927 Accepting request 504846 from home:msmeissn:branches:server:mail
- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).

  CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch

OBS-URL: https://build.opensuse.org/request/show/504846
OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=184
2017-06-22 14:02:16 +00:00
557870d382 Accepting request 490905 from home:pwcau:branches:server:mail
Corrections for inverted bcond

 import exim-4_86_2+fixes branch
    + fix CVE-2016-1531 
      when installed setuid root, allows local users to gain privileges via the perl_startup
      argument. 
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty

- fix CVE-2016-9963: DKIM information leakage

- conditionally disable DANE on SuSE versions with OpenSSL < 1.0
- disable i18n by default, utf8_downconvert seems to cause crashes

OBS-URL: https://build.opensuse.org/request/show/490905
OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=183
2017-04-25 09:33:40 +00:00
Dominique Leuenberger
06a7eb3f31 Accepting request 432978 from server:mail
1

OBS-URL: https://build.opensuse.org/request/show/432978
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/exim?expand=0&rev=41
2016-10-04 14:00:25 +00:00
Matthias Mailänder
bc1cae7e1a Accepting request 384144 from home:conecenter:rev5a1:ontology:services--c:mail--o:mta--f
- Makefile tuning:
    + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL

OBS-URL: https://build.opensuse.org/request/show/384144
OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=181
2016-10-03 16:20:54 +00:00
Dominique Leuenberger
9a88611332 Accepting request 365211 from server:mail
- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.
- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).

OBS-URL: https://build.opensuse.org/request/show/365211
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/exim?expand=0&rev=40
2016-03-07 12:26:55 +00:00
Lars Müller
3c53e92fc5 Polish change log reference slightly
OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=179
2016-03-03 10:50:30 +00:00
Lars Müller
8b1130d773 Accepting request 365192 from home:AndreasStieger:branches:server:mail
add bugzilla reference

OBS-URL: https://build.opensuse.org/request/show/365192
OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=178
2016-03-03 10:48:33 +00:00
Lars Müller
1fd26327cd Remove Exim-Maintainers-Keyring.asc
Was kept with intention as the file might be used with the next regular release.

OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=177
2016-03-02 21:36:27 +00:00
Lars Müller
a3749d19c0 - Update to 4.86.2
+ Fix minor portability issues for *BSD and OS/X.

- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531.

OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=176
2016-03-02 21:22:07 +00:00
Dominique Leuenberger
65b3e3aed6 Accepting request 357625 from server:mail
1

OBS-URL: https://build.opensuse.org/request/show/357625
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/exim?expand=0&rev=39
2016-02-08 08:47:35 +00:00
Lars Müller
a34acdddfe Accepting request 357608 from home:cboltz:branches:server:mail
- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9

Please forward this fix to Factory (and 42.1, if you ever have to do an
update for it).


BTW: If you need help with updating the profile (ideally with the goal
to enable it by default), just ask.

OBS-URL: https://build.opensuse.org/request/show/357608
OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=174
2016-02-03 21:09:03 +00:00
Dominique Leuenberger
99ce327db5 Accepting request 348366 from server:mail
- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.

- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {<variable>}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream

OBS-URL: https://build.opensuse.org/request/show/348366
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/exim?expand=0&rev=38
2015-12-16 16:42:34 +00:00
Lars Müller
fa5a3911df - Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.

OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=172
2015-12-11 10:54:04 +00:00
Lars Müller
d81193c317 Accepting request 335998 from home:-miska-:arm
- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {<variable>}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream

OBS-URL: https://build.opensuse.org/request/show/335998
OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=171
2015-10-12 20:32:07 +00:00
Dominique Leuenberger
08bad9a500 Accepting request 314522 from server:mail
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/314522
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/exim?expand=0&rev=37
2015-07-02 20:49:42 +00:00
Lars Müller
282a8d36e0 Add references to boo#935601
OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=169
2015-06-23 14:00:54 +00:00
Lars Müller
56a30e3bc5 Nuke dankling spaces at eol from the package change log
OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=168
2015-06-23 12:38:57 +00:00
Stephan Kulow
4edfa56abf Accepting request 305643 from server:mail
Fix the systemd service file by not passing EXIM_ARGS as one single
argument by removing the curly brackets (shell syntax).

OBS-URL: https://build.opensuse.org/request/show/305643
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/exim?expand=0&rev=36
2015-05-07 07:22:14 +00:00
Lars Müller
09a677d56a Fix the systemd service file by not passing EXIM_ARGS as one single
argument by removing the curly brackets (shell syntax).

OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=166
2015-05-06 21:33:08 +00:00
Dominique Leuenberger
93a253024a Accepting request 298514 from server:mail
- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.

OBS-URL: https://build.opensuse.org/request/show/298514
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/exim?expand=0&rev=35
2015-04-23 06:04:30 +00:00
Lars Müller
645ea49799 - Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.

OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=164
2015-04-17 16:29:46 +00:00
Dominique Leuenberger
999868937a Accepting request 292032 from server:mail
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/292032
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/exim?expand=0&rev=34
2015-03-23 11:17:44 +00:00
Lars Müller
719cba142c Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
/etc/sysconfig/exim; (bsc#922145).

OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=162
2015-03-13 12:28:55 +00:00
Dominique Leuenberger
0b06ad1250 Accepting request 282706 from server:mail
- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.

- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.

- Let ld know the path to mysqlclient.

- update to 4.85

  See doc/ChangeLog from the main tar ball or the exim file for
  more details.

- Enable SPF

- Fix service file
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default

OBS-URL: https://build.opensuse.org/request/show/282706
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/exim?expand=0&rev=33
2015-01-30 16:43:44 +00:00
Lars Müller
ca1e0198e0 Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.
OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=160
2015-01-24 23:07:35 +00:00
Lars Müller
e5a0307296 Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
build on RHEL 6 again.

OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=159
2015-01-24 22:36:10 +00:00
Lars Müller
9cbf4ddd30 Let ld know the path to mysqlclient.
OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=158
2015-01-24 22:17:02 +00:00
Lars Müller
4040bfe97f - update to 4.85
See doc/ChangeLog from the main tar ball or the exim file for
  more details.

OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=157
2015-01-24 19:56:27 +00:00
Tomáš Chvátal
8642790a1a Accepting request 280598 from home:-miska-:arm
Add support for spf, mysql and other small fixes

OBS-URL: https://build.opensuse.org/request/show/280598
OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=156
2015-01-12 16:44:39 +00:00
Dominique Leuenberger
174e71cdf7 Accepting request 264146 from server:mail
Removed executable permission bits from exim.service file.

OBS-URL: https://build.opensuse.org/request/show/264146
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/exim?expand=0&rev=32
2014-12-06 12:45:52 +00:00
Lars Müller
fa3c7698ca Removed executable permission bits from exim.service file.
OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=154
2014-12-05 12:49:45 +00:00
Dominique Leuenberger
eb449139e4 Accepting request 263136 from server:mail
- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.

- update to 4.84
  + Re-add a 'return NULL' to silence complaints from static checkers that
    were complaining about end of non-void function with no return;
	 (beo#1506); obsoletes silence-static-checkers.patch.
  + Fix parsing of quoted parameter values in MIME headers.
    This was a regression intruduced in 4.83 by another bugfix; (beo#1513).
  + Fix broken compilation when EXPERIMENTAL_DSN is enabled.
  + Fix exipick for enhanced spoolfile specification used when
    EXPERIMENTAL_DNS is enabled; (beo#1509).

OBS-URL: https://build.opensuse.org/request/show/263136
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/exim?expand=0&rev=31
2014-11-26 19:55:48 +00:00
Lars Müller
ba0024da3a Remove dependency on gpg-offline as signature checking is implemented in the
source validator.

OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=152
2014-11-26 14:42:09 +00:00
Lars Müller
4029445955 - update to 4.84
+ Re-add a 'return NULL' to silence complaints from static checkers that
    were complaining about end of non-void function with no return;
	 (beo#1506); obsoletes silence-static-checkers.patch.
  + Fix parsing of quoted parameter values in MIME headers.
    This was a regression intruduced in 4.83 by another bugfix; (beo#1513).
  + Fix broken compilation when EXPERIMENTAL_DSN is enabled.
  + Fix exipick for enhanced spoolfile specification used when
    EXPERIMENTAL_DNS is enabled; (beo#1509).

OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=151
2014-11-26 14:16:35 +00:00
9976186f9d Accepting request 244358 from server:mail
Use %insserv_cleanup only for openSUSE < 12.2

OBS-URL: https://build.opensuse.org/request/show/244358
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/exim?expand=0&rev=29
2014-08-13 06:49:19 +00:00
Lars Müller
ff1c93e649 Add an empty line to better visually separate %postun from %verifyscript.
OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=149
2014-08-12 14:45:40 +00:00
Lars Müller
9cfe82e2e1 Accepting request 244338 from home:posophe:branches:server:mail
OBS-URL: https://build.opensuse.org/request/show/244338
OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=148
2014-08-12 14:24:43 +00:00
Stephan Kulow
f25148eaa8 Accepting request 242388 from server:mail
- Add silence-static-checkers.patch; (beo#1506).

- update to 4.83
  This release of Exim includes one incompatible fix:
  + the behavior of expansion of arguments to math comparison functions
    (<, <=, =, =>, >) was unexpected, expanding the values twice;
    CVE-2014-2972; (bnc#888520)
  This release contains the following enhancements and bugfixes:
  + PRDR was promoted from Experimental to mainline
  + OCSP Stapling was promoted from Experimental to mainline
  + new Experimental feature Proxy Protocol
  + new Experimental feature DSN (Delivery Status Notifications)
  + TLS session improvements
  + TLS SNI fixes
  + LDAP enhancements
  + DMARC fixes (previous CVE-2014-2957) and new $dmarc_domain_policy
  + several new operations (listextract, utf8clean, md5, sha1)
  + enforce header formatting with verify=header_names_ascii
  + new commandline option -oMm
  + new TLSA dns lookup
  + new malware "sock" type
  + cutthrough routing enhancements
  + logging enhancements
  + DNSSEC enhancements
  + exiqgrep enhancements
  + deprecating non-standard SPF results
  + build and portability fixes
  + documentation fixes and enhancements
- Verify source tar ball gpg signature.
- Refresh exim-enable_ecdh_openssl.patch and strip version number from the
  patch filename.

The next two are a change log merge only.  These two references got
somehow lost in the past.

- Fixed another remote code execution issue (CVE-2011-1407 / bnc#694798)
- Fixed STARTTLS command injection (bnc#695144)

OBS-URL: https://build.opensuse.org/request/show/242388
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/exim?expand=0&rev=28
2014-07-26 07:42:13 +00:00
Lars Müller
2c1ef50fea Remove duplicate _beo1506 from the patch filename.
OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=146
2014-07-25 13:32:59 +00:00
Lars Müller
4d1e7f3bb4 Reduce the silence-static-checkers_beo1506.patch change log entry to one line.
OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=145
2014-07-25 13:28:47 +00:00
Lars Müller
5dbc2fc4cc Add patch file name to peace the adminsitration.
OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=144
2014-07-25 11:58:15 +00:00
Lars Müller
8e2f8090b1 Merge lost package change log hunks.
- Fixed another remote code execution issue (CVE-2011-1407 / bnc#694798)
- Fixed STARTTLS command injection (bnc#695144)

OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=143
2014-07-24 10:06:05 +00:00
Lars Müller
0ec4735cff Merge feedback from upstream and modify the package change log to:
Silence static checkers; (beo#1506).

OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=142
2014-07-23 18:20:48 +00:00
Lars Müller
72254c2535 Add no-return-in-find_variable.patch; (beo#1506).
OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=141
2014-07-23 13:19:52 +00:00
Lars Müller
399233b85e - update to 4.83
This release of Exim includes one incompatible fix:
  + the behavior of expansion of arguments to math comparison functions
    (<, <=, =, =>, >) was unexpected, expanding the values twice;
    CVE-2014-2972; (bnc#888520)
  This release contains the following enhancements and bugfixes:
  + PRDR was promoted from Experimental to mainline
  + OCSP Stapling was promoted from Experimental to mainline
  + new Experimental feature Proxy Protocol
  + new Experimental feature DSN (Delivery Status Notifications)
  + TLS session improvements
  + TLS SNI fixes
  + LDAP enhancements
  + DMARC fixes (previous CVE-2014-2957) and new $dmarc_domain_policy
  + several new operations (listextract, utf8clean, md5, sha1)
  + enforce header formatting with verify=header_names_ascii
  + new commandline option -oMm
  + new TLSA dns lookup
  + new malware "sock" type
  + cutthrough routing enhancements
  + logging enhancements
  + DNSSEC enhancements
  + exiqgrep enhancements
  + deprecating non-standard SPF results
  + build and portability fixes
  + documentation fixes and enhancements
- Verify source tar ball gpg signature.
- Refresh exim-enable_ecdh_openssl.patch and strip version number from the
  patch filename.

OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=140
2014-07-23 12:09:00 +00:00
Stephan Kulow
11549b84fe Accepting request 215028 from server:mail
- exim482-enable_ecdh_openssl.patch: Enable ECDH (elliptic curve diffie
  hellman) support, taken from http://bugs.exim.org/show_bug.cgi?id=1397 (forwarded request 215000 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/215028
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/exim?expand=0&rev=27
2014-01-30 13:54:31 +00:00
Lars Müller
59830b8282 Accepting request 215000 from home:msmeissn:branches:server:mail
- exim482-enable_ecdh_openssl.patch: Enable ECDH (elliptic curve diffie
  hellman) support, taken from http://bugs.exim.org/show_bug.cgi?id=1397

OBS-URL: https://build.opensuse.org/request/show/215000
OBS-URL: https://build.opensuse.org/package/show/server:mail/exim?expand=0&rev=138
2014-01-24 12:22:44 +00:00
Stephan Kulow
035f5303bc Accepting request 209689 from server:mail
- BuildRequire libopenssl-devel only on SUSE systems.
- Fix suse_version condition of the pre- and postun scriptlets.

- Call service_add_pre from pre scriptlet on post-12.2 systems.

- update to 4.82 (cf the package change log for all details)

OBS-URL: https://build.opensuse.org/request/show/209689
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/exim?expand=0&rev=26
2013-12-08 18:26:29 +00:00