CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

mail/heirloom-mailx12.4_11

BSD mail utility with MIME, IMAP, POP3, SMTP, and S/MIME extensions

Maintainer
cy@FreeBSD.org
Packages
heirloom-mailx 12.4_11
Upstream
Higher version available: 12.5
CPE
heirloom:mailx from the port
WWW
https://heirloom.sourceforge.net/mailx.html
Links
cgit · VuXML

Unaddressed (1) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2004-27717.5published 2014-12-24

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (88)

Baptiste Daroussin (bapt) · 12.4_11
MAN?PREFIX: eleminate its usage  and move man to share/man
64631af5a7
Rodrigo Osorio (rodrigo) · 12.4_10
*/*: Update WWW to use HTTPS for sourceforge.net projects

Homepage link is permanent redirected to its HTTPS counterpart
Issue reported by repology : https://repology.org/repository/freebsd/problems

Approved by:	portmgr (blanket)
PR:		274888
06df180a9e
Stefan Eßer (se) · 12.4_10
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 12.4_10
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Cy Schubert (cy) · 12.4_10
mail/heirloom-mailx: Fix wrong UTC offset for Europe/Dublin

Somewhere around 2018, the tzdata maintainers (IANA) corrected a
historical mistake with the Europe/Dublin timezone. The mistake was
rooted in a misunderstanding of whether IST meant "Irish Summer Time"
or "Irish Standard Time".

The problem was discussed at great length
(http://mm.icann.org/pipermail/tz/2018-January/thread.html) and it was
concluded that IST really meant Irish *Standard* Time (in constrast with,
say, British *Summer* Time), and that this standard time is defined as
UTC+0100.

This corresponds to the article at
https://en.wikipedia.org/wiki/Time_in_the_Republic_of_Ireland and the
notes at https://en.wikipedia.org/wiki/Winter_time_(clock_lag); the
source archive of tzdata has a long section dedicated to this problem and
a large set of official references and links to www.irishstatutebook.ie.

Once the question was settled, the only possible solution for keeping
the Irish local time in sync with the rest of the world (timezones aside,
the local time in Ireland - as understood by common people - is the same
as in London and Belfast) was for IANA to _reverse_ the functioning of
the DST flag for Ireland. The result is that in the current IANA timezone
database (2021e), Europe/Dublin has DST applied in *winter*, with an
adjustment of -1h (that is, negative).

Digging deeper, one uncovers that there are a few other countries that
have (or once had) the same time-switch mechanism as Ireland; amongst
others, https://github.com/MenoData/Time4J/issues/742 also concedes that
negative DST is a reality.

In heirloom mailx, the logic that works out the UTC offset does the right
thing up to a point (November 2021, Ireland = UTC+0100), but then upon
inspecting tm->tm_isdst it sees that DST is in effect (remember, flag has
been reversed, so DST in Ireland is on in winter time) it adds one hour
(it should subtract one, because the adjustment is negative, but mailx
doesn't know).

PR:		260137
Submitted by:	Andrea Biardi <a.biardi@tiscali.it>
Reported by:	Andrea Biardi <a.biardi@tiscali.it>
MFH:		2022Q1
c4f80928ae
Cy Schubert (cy) · 12.4_9
mail/heirloom-mailx: Use the proper progname in argv[0]

When argv[0] does not match that af the program name passed to
execv(2), mailwrapper cannot determine which application to call
in its translation table resulting in:

mailwrapper: no mapping in /etc/mail/mailer.conf

MFH:		2022Q1
849299d0d6
Stefan Eßer (se) · 12.4_8
*/*: Remove redundant '-[0-9]*' from CONFLICTS

The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").

Many CONFLICTS definitions used patterns like "bash-[0-9]*" to filter
for the bash package in any version. But that pattern is functionally
identical with just "bash".

Approved by:	portmgr (blanket)
819f25b36d
Bernhard Froehlich (decke) · 12.4_8
mail/heirloom-mailx: Add CPE information

Approved by:    portmgr (blanket)
cb3fe262a8
Mathieu Arnold (mat) · 12.4_8
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 12.4_8
Remove # $FreeBSD$ from Makefiles.
305f148f48
Baptiste Daroussin (bapt) · 12.4_8
Drop the ipv6 virtual category for m* category as it is not relevant anymore
0be2ce42f1
Cy Schubert (cy) · 12.4_8
Jettison SSLv2 support. Not only does this allow mail/mailx to build using openssl111 in base but SSLv2 is insecure.
ba57152ddc
Cy Schubert (cy) · 12.4_7
Switch to USES=localbase.
24b35f84c9
Cy Schubert (cy) · 12.4_7
Assume maintainership.

PR:		210762
98fea67e93
Bernard Spil (brnrd) · 12.4_7
mail/heirloom-mailx: Fix build without EGD

- Add patch for building without EGD (OpenSSL 1.1/LibreSSL)
  - Move from USE_OPENSSL to USES=ssl

PR:		205540
Approved by:	Maintainer timeout
1993b11516
Pawel Pekala (pawel) · 12.4_7
Fix path to sendmail binary that was accidentally removed during a previous update

PR:		196082
Submitted by:	Jamie Landeg-Jones <jamie@dyslexicfish.net> (maintainer)
f72f765aae
Tijl Coosemans (tijl) · 12.4_6
Fix build when OpenSSL doesn't support SSL2/SSL3

PR:		195796
04a50bd182
Kurt Jaeger (pi) · 12.4_6
mail/heirloom-mailx: remove SENDMAIL option, wrapper is sufficient

PR:		190134
Approved by:	jamie@dyslexicfish.net (maintainer)
775ade6acb
Kurt Jaeger (pi) · 12.4_5
mail/heirloom-mailx: add option to use sendmail from ports, and take ownership

PR:		190134
Submitted by:	Jamie Landeg-Jones <jamie@dyslexicfish.net>
743d1f51c0
Vanilla I. Shu (vanilla) · 12.4_4
1: Stagify. 2: due pkg-plist changed, bump version.
97c2d0c507
Baptiste Daroussin (bapt) · 12.4_3
Add NO_STAGE all over the place in preparation for the staging support (cat: mail)
fd61959c15
Marcus von Appen (mva) · 12.4_3
- Convert USE_ICONV=yes to USES=iconv - Change USE_GNOME=pkgconfig|gnomehack to USES=pathfix|pkgconfig while here

Reviewed by:	zeising
a3a0715f38
Baptiste Daroussin (bapt) · 12.4_3
Convert to new options framework
72eda7b693
Dima Panov (fluffy) · 12.4_3
- Reassign ports from avl@ back to pool at his request.

Submitted by:	avl via IM
Approved by:	avl via IM
1a267d63c3
Carlo Strub (cs) · 12.4_3
Fix typos in COMMENT

Approved by:	portmgr@ (implicit)
e9a2c0a4b1
Alexander Logvinov (avl) · 12.4_3
- Fix build with OpenSSL 1.x

PR:		ports/158933
Submitted by:	D'Arcy Cain <darcy at Vex.Net>
Obtained from:	heirloom-mailx CVS
710519d786
Dmitry Marakasov (amdmi3) · 12.4_3
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS) - Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:		157936
Submitted by:	myself
Exp-runs by:	pav
Approved by:	pav
6f6fbe4bdf
Olli Hauer (ohauer) · 12.4_3
- remove MD5
c5284f2b4e
Alexander Logvinov (avl) · 12.4_3
- Add a patch to fix "unignore" and similar commands - Bump PORTREVISION

PR:		ports/146280
Submitted by:	B. Smith <anon_101100 at yahoo.com>
Obtained from:	developers cvs
0ccc4f6767
Alexander Logvinov (avl) · 12.4_2
- Fix wrong PKGNAME

PR:		ports/139577
Submitted by:	Jamie Landeg Jones <jamie at bishopston.net>
1eb2cea06a
Dmitry Marakasov (amdmi3) · 12.4_1
- Switch SourceForge ports to the new File Release System: categories starting with M
a13d9a603d
Alexander Logvinov (avl) · 12.4_1
Change MAINTAINER on my ports to my FreeBSD email address

Approved by:	tabthorpe (mentor)
9463ff6e5b
Martin Wilke (miwi) · 12.4_1
- Make MAKE_JOBS_UNSAFE

PR:		133125
Submitted by:	Alexander Logvinov <ports@logvinov.com> (maintainer)
b945ff2f90
Dmitry Marakasov (amdmi3) · 12.4_1
- Add mutual conflicts to mail/heirloom-mailx and mail/mailx: both install bin/mailx

PR:		129332
Submitted by:	Alexander Logvinov <ports at logvinov dot com> (maintainer of mail/heirloom-mailx)
Reported by:	Evgeniy Pismenchuk <evpian at gmail dot com>
fda38ac69b
Edwin Groothuis (edwin) · 12.4
[maintainer update] mail/heirloom-mailx: update to 12.4

Update to 12.4
	See http://heirloom.sourceforge.net/mailx/ChangeLog

	Add option for IPv6 Support

PR:		ports/126293
Submitted by:	Alexander Logvinov <ports@logvinov.com>
d5d8070b22
Martin Wilke (miwi) · 12.3
- Update to 12.3

PR:		114608
Submitted by:	Alexander Logvinov <ports@logvinov.com> (maintainer)
b83a73bdeb
Cheng-Lung Sung (clsung) · 12.2
- Update to 12.2

PR:		ports/107670
Submitted by:	maintainer (Alexander Logvinov)
bf23c2dac2
Gabor Kovesdan (gabor) · 12.1
- Add ipv6 to CATEGORIES

PR:		ports/106893
Submitted by:	Janos Mohacsi <janos.mohacsi@bsd.hu>
Approved by:	erwin (mentor),
		Alexander Logvinov <ports@logvinov.com> (maintainer)
e14d7fcdd8
Alejandro Pulver (alepulver) · 12.1
- Complete repocopy of mail/nail to mail/heirloom-mailx.

PR:		ports/104693
Submitted by:	Alexander Logvinov <ports@logvinov.com> (maintainer)
0602fe2559
Cheng-Lung Sung (clsung) · 11.25
- take maintainership

PR:		ports/104951
Submitted by:	Alexander Logvinov <ports_AT_logvinov dot com>
d8a74353c8
Emanuel Haupt (ehaupt) · 11.25
Drop maintainer-ship

PR:		94136
8ed4d77676
Emanuel Haupt (ehaupt) · 11.25
Add SHA256 hashes to my ports
6229fea156
Emanuel Haupt (ehaupt) · 11.25
Change MAINTAINER address for my ports.

Approved by:	novel (mentor)
4e74162b8b
Sergey Matveychuk (sem) · 11.25
- Update to 11.25 - Preserve config on deinstall - Pass maintainership to submitter

PR:		ports/85045
Submitted by:	Emanuel Haupt <ehaupt@critical.ch>
1f4e10b1c1
Pav Lucistnik (pav) · 11.24
- Update to 11.24

PR:		ports/83458
Submitted by:	Vsevolod Stakhov <vsevolod@highsecure.ru>
174983b9ca
Jean-Yves Lefort (jylefort) · 11.23
Update to 11.23

PR:		ports/82745
Submitted by:	Vsevolod Stakhov <vsevolod@highsecure.ru>
30a6cbe269
Kirill Ponomarev (krion) · 11.22
Update to 11.22
f82c591249
Michael Johnson (ahze) · 11.21
- Update to 11.21

PR:		ports/78314
Submitted by:	Ports Fury
b11967a74b
Kirill Ponomarev (krion) · 11.20
Update to 11.20
c287abdaa1
Kirill Ponomarev (krion) · 11.19
Update to version 11.19

PR:		ports/75953
Submitted by:	Ports Fury
5382df1cc2