Support staging.3484c27618
sylpheed -- MIME-encoded file name buffer overflow vulnerabilityentered 2005-07-31
Lightweight, featureful, and fast GTK based e-mail client
# pkg install sylpheedinstalls 3.7.0_9 from latest; from quarterly (2026Q4) 3.7.0_9# cd /usr/ports/mail/sylpheed && make install clean# make -C /usr/ports/mail/sylpheed config # change options first
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 3.7.0_9 | 3.7.0_9 | – |
| FreeBSD 15 | 3.7.0_9 | 3.7.0_9 | – |
| FreeBSD 14 | 3.7.0_9 | 3.7.0_9 | 3.7.0_9 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 3.7.0_9 | 3.7.0_9 | – |
| FreeBSD 14 | 3.7.0_9 | 3.7.0_9 | 3.7.0_9 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
The CVE record lists the packaged version 3.7.0_9 as affected, and no VuXML entry names the CVE. What does this mean?
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2021-37746 | 6.1 | 2021-07-30 | textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click. |
Listed in VuXML, the packaged version 3.7.0_9 is still in the affected range; pkg audit reports it. What does this mean?
Support staging.3484c27618
- Remove manual creation and removal of share/applications, as it's now in the mtree (categories starting with m) Approved by: portmgr (bdrewery)d46ccd7303
- Update security/gpgme to 1.4.3 - Use USE_GNOME= ltverhack to correct the library version number to what the author intended. This effectively rolls the version number backwards, but should prevent future unneccesary version bumps. - Support staging - Use options helpers - Use new LIB_DEPENDS syntax - Bump PORTREVISION on dependent ports784e4c52e1
Add NO_STAGE all over the place in preparation for the staging support (cat: mail)fd61959c15
- Make ports use the libc provided iconv implementation on 10-CURRENT after r254273 - Fix a bunch of ports to properly work after this - Mark converters/libiconv as IGNORE for systems with iconv in libc Reviewed by: bapt Approved by: portmgr (bapt) Discussed with: bapt, bsam (who both contributed ideas and code)642be1b81d
Add an explicit dependency on pkgconfdb7a56d5ed
Remove MAKE_JOBS_SAFE which is now default.ea0f02dfeb
- Since gtkspell uses enchant which supports several spellchecking backends the dependency on aspell isn't necessary anymore. - Also remove dependency on pinentry-gtk2 to allow users to install one of the other pinentry ports. - Remove bsd.openssl.mk hack. PR: 180716 Approved by: ehaupt (maintainer)050ec0e7de
- Convert USE_GMAKE to USES=gmake - Change pkgconfig:build to pkgconfig since it's the same and it's bad practice. It accidentally slipped in during the original introduction - Trim header6fe706fd4b
Mark MAKE_JOBS_SAFE1a90c9af17
- Convert USE_ICONV=yes to USES=iconv - Change USE_GNOME=pkgconfig|gnomehack to USES=pathfix|pkgconfig while here Reviewed by: zeisinga3a0715f38
Convert to USES=gettext79e6679346
This port now needs textproc/aspell to build.a868ff1b68
- Use DOC instead of NOPORTDOCS - Pacify portlint - Convert headerc4c14fd156
Update to 3.3.0 PR: 173510 Submitted by: Denis Generalov <gd@rambler-co.ru> Feature safe: yes0963105048
Restore 'Created by' header information. This has been removed during the first announcement of the new trimming rule and the finalized overworked version. Feature safe: yes00df1d9662
- Use OPTIONSng - Remove deprecated header information8eb033c5b4
Fix typos in COMMENT Approved by: portmgr@ (implicit)e9a2c0a4b1
Update to 3.2.083b472c277
- update png to 1.5.102b74a89bc8
Update to 3.1.4 PR: 167376 Submitted by: Denis Generalov <gd@rambler-co.ru>c1b4daa46f
Update to 3.1.3 PR: 165575 Submitted by: Denis Generalov <gd@rambler-co.ru>27dd44a063
Update to 3.1.2c0143089b9
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS) - Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead
PR: 157936
Submitted by: myself
Exp-runs by: pav
Approved by: pav6f6fbe4bdfMove mail/sylpheed3 to mail/sylpheed.e0ccf04e49
Mark DEPRECATED with an expiration time of one month.fc3566d988
Take maintainership. Approved by: oliver (maintainer)23f7c06087
- Chase gpgme shared lib bump. - Add an entry to UPDATING Reviewed by: tabthorpe2f634463b6
- remove MD5c5284f2b4e
Bounce PORTREVISION for gettext-related ports. Have fun, ya'll.8d837132c7
- update to 1.4.1 Reviewed by: exp8 run on pointyhat Supported by: miwide78af3ac5
- update to jpeg-8ca9c60461c
- Chase security/gpgme update. Most changes are just PORTREVISION and LIB_DEPENDS fixes. However, the following ports require a patch to use the new gpgme correctly: deskutils/kdepim3 deskutils/kdepim3 deskutils/kdepim3 deskutils/kdepim3 deskutils/kdepim4 deskutils/kdepim4 deskutils/kdepimlibs4 deskutils/kdepimlibs4 deskutils/kdepimlibs4 finance/qhacc mail/mutt-devel net-im/ayttm net-im/centericq net-im/centerim net-im/centerim-devel security/openvas-libnasl These patches were submitted by various people and documented in ports/135911. PR: ports/135911e6246d1055
fix NOPORTDOCS installation Noted by: itetcucf833a3b81
Bump portrevision due to upgrade of devel/gettext. The affected ports are the ones with gettext as a run-dependency according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT in Makefile (29 of them). PR: ports/124340 Submitted by: edwin@ Approved by: portmgr (pav)090059a210
- Remove unneeded dependency from gtk12/gtk20 [1] - Remove USE_XLIB/USE_X_PREFIX/USE_XPM in favor of USE_XORG - Remove X11BASE support in favor of LOCALBASE or PREFIX - Use USE_LDCONFIG instead of INSTALLS_SHLIB - Remove unneeded USE_GCC 3.4+ Thanks to all Helpers: Dmitry Marakasov, Chess Griffin, beech@, dinoex, rafan, gahr, ehaupt, nox, itetcu, flz, pav PR: 116263 Tested on: pointyhat Approved by: portmgr (pav)3e4ed01146
- Remove USE_XLIB/USE_X_PREFIX/USE_XPM in favor of USE_XORG - Bump PORTREVISION Approved by: portmgr (xorg cleanup)270a2cb06b
change MASTER_SITES73b38d3e63
Prefer the international version.904279bc94
- Welcome X.org 7.2 \o/. - Set X11BASE to ${LOCALBASE} for recent ${OSVERSION}. - Bump PORTREVISION for ports intalling files in ${X11BASE}.d4f0d0048aChase pilot-link's shared library version bump. Bump the PORTREVISION. As for the PRs, I shall chase and close a few of them. Pointyhat: ijliaoc6c660c9c8
Update gpgme to 1.1.2, chase dependencies.4dce0bd83b
Remove USE_REINPLACE from ports starting with Mefe7d5f7f4
fix MASTER_SITES8f0dcf6094
Bump PORTREVISION on glib12/gtk12 consumer ports to ease the upgrade path. Discussed with: kris Approved by: portmgr (implicit)fe279f0df8
Conversion to a single libtool environment. Approved by: portmgr (kris)8503536d38
SHA256ify Approved by: krion@80840e8dc5
Mass-conversion to the USE_AUTOTOOLS New World Order. The code present in bsd.autotools.mk essentially makes this a no-op given that all the old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in exactly the same way as USE_AUTOTOOLS itself. Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME team -- all GNOME 2.12.x ports use it. Preliminary documentation can be found at: http://people.FreeBSD.org/~ade/autotools.txt which is in the process of being SGMLized before introduction into the Porters Handbook. Light blue touch-paper. Run.54a0b86543
update to 1.0.6f637a54a40
Chase gpgme update Bump PORTREVISION Pointy hat to: lofi41686d8d65