Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

opensmtpd-filter-rspamd: update to 0.1.8 #46426

Merged

Conversation

omar-polo
Copy link
Contributor

@omar-polo omar-polo commented Oct 4, 2023

  • I tested the changes in this PR: NO
  • I built this PR locally for my native architecture, (amd64-musl)

This brings in a rather important IMHO security fix: it's possible to crash filter-rspamd by attempting to log in as a user with a "|" character in it. Doing so will also quit opensmtpd since it dies once a filter exits.

Furthermore, this update will also be needed for the next opensmtpd version since it'll bump the protocol version.

I haven't actually run this on void linux, but I'm using it on other systems and the diff is quite small, I don't expect actual breakages.

(edit: I've mailed the maintainer since I don't know their github account)

@mithodin
Copy link
Contributor

mithodin commented Oct 4, 2023

Cheers, thanks for the email. It looks straightforward enough, I'd prefer to give it a test run on my server first, though.

@omar-polo
Copy link
Contributor Author

friendly ping :)

OpenSMTPD 7.4.0p0 was released today and will need this to not break the update for users.

@mithodin
Copy link
Contributor

Hi, sorry, I'm really quite busy so I haven't gotten around to it. In any case, I don't have merge permissions. So if anyone can merge this, don't wait on my accord.

@leahneukirchen leahneukirchen merged commit 1cc3b40 into void-linux:master Nov 7, 2023
8 checks passed
@omar-polo omar-polo deleted the opensmtdp-filter-rspamd-0.1.8 branch November 7, 2023 19:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants