Security bump - bug #511760

Package-Manager: portage-2.2.10/cvs/Linux x86_64
Manifest-Sign-Key: 0x77F1F175586A3B1F

3 files changed, 225 insertions, 9 deletions

diff --git a/mail-mta/sendmail/ChangeLog b/mail-mta/sendmail/ChangeLog
index d7c94df7c4d2..cf3f305d651c 100644
--- a/mail-mta/sendmail/ChangeLog
+++ b/mail-mta/sendmail/ChangeLog
@@ -1,6 +1,11 @@
 # ChangeLog for mail-mta/sendmail
 # Copyright 1999-2014 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/mail-mta/sendmail/ChangeLog,v 1.125 2014/01/29 04:09:57 radhermit Exp $
+# $Header: /var/cvsroot/gentoo-x86/mail-mta/sendmail/ChangeLog,v 1.126 2014/05/30 15:15:31 eras Exp $
+
+*sendmail-8.14.9 (30 May 2014)
+
+  30 May 2014; Eray Aslan <eras@gentoo.org> +sendmail-8.14.9.ebuild:
+  Security bump - bug #511760
 
   29 Jan 2014; Tim Harder <radhermit@gentoo.org> -sendmail-8.14.4.ebuild,
   -sendmail-8.14.5.ebuild, -sendmail-8.14.5-r1.ebuild,
diff --git a/mail-mta/sendmail/Manifest b/mail-mta/sendmail/Manifest
index 56b35ece7563..64e483af3dce 100644
--- a/mail-mta/sendmail/Manifest
+++ b/mail-mta/sendmail/Manifest
@@ -14,18 +14,26 @@ AUX site.config.m4 564 SHA256 3a7d586f8dfc24f7ed53621c04374aeca91153ded80cf17411
 AUX sm-client.service 418 SHA256 c70560eb85b32895dcb36fd398b3066a39597e2def33e1eead4f55f3059c82d6 SHA512 26e5a64790fd7106e45de0f4dfafb3b648094953bd1831a223ca7c60b7cb75b673fb554b426a6aa0e7dc200a134fd042b4ecc6795641cfddd82bd04e4c7ea324 WHIRLPOOL e6b176381beb18fc240154696d8056b1483a2ff97bb7d012bece388087dcb16adf2db3b626a717b001cea8ffe8cb81e527e2174ecd463ed452fd68e2ad96e12f
 DIST sendmail.8.14.7.tar.gz 2112670 SHA256 fa4ff9e67d1e5a42f353eedb207e08b38c0ac31030f7165866de2c520f508710 SHA512 872fef1be984ae8aecdf4299459de50fea86a3b3758e0aac01ea4307fa936a03e66d3ef8d1352cd21afe588b53b04a1cea6e099ba64a5edab5a31e25fb8e0bd3 WHIRLPOOL 82d7b85a130900bd18e43df182850c1fd589caa21e90c055592ebd89e9da6a6dfa35b2baed87b56ca7772b24bb8567266cfad7352167068aad405e3fcfe9202e
 DIST sendmail.8.14.8.tar.gz 2114959 SHA256 02eb69125fc19890fa922496a5230ebb32faedc8da670d8500a8ff37e4fcb0fe SHA512 16cda9ff2af325e661d2be0008bed27e170cfe75aeab2b0a56e5579046309509bed4415494dbfb831cc723ab3ffab03dcef2748c16bb0b8f7fe9b4891467b425 WHIRLPOOL 5916e9667ee0df144d8b8c84e2c0a0a38a197b90e53c4ca02fe13d6e44e9bbf8987fcb036c42a1d43f7ab75a7cd8b68f746d5b90af727ca3788a047bd40eac0a
+DIST sendmail.8.14.9.tar.gz 2114293 SHA256 f5a497151abd8f341cca0736c3f9bd703d574d93146b2989689dff6d7a445d75 SHA512 a541fe687e9967fb87f2f6c6263ecc698aac42c6a52e81e7ee556f0c3d719b9c996dfccf10cc2e0e5c6d03dd8d3ce79b856b78ca049dd47665e38c77763fa424 WHIRLPOOL c1b290d66d9397bbe8041cd17cfc1fbc205c9d5439d89ee59c339e3febe605d964e7a50482101edec8f0b9cd6df38138e489869a5404dbfc2b7ba57dbeef1c55
 EBUILD sendmail-8.14.7-r1.ebuild 7030 SHA256 cf9b7b855e017894df81158996c8208d31a7c59527cf4f8124bac9aed9f128d1 SHA512 471f72aadc886bb8d815d07f005dd5da2b8ce31d0d7fcb82c0104028c5286106000b4fca7515e23a2254301e5e2fc41a9e91010bfd6fae5cf0046a46cd0159a8 WHIRLPOOL ddb73da0d08f9af50b46126416598f29f05647eb13246f837f65d524fd8ebd58e4fd8f9d46a092c4375af9cd7bbe330ca60ca65cf7d39a4c5da3ace2dfd57ba7
 EBUILD sendmail-8.14.8.ebuild 7128 SHA256 58f92cb35a21d87e12665d03e4ddb1305e93fa043add19e1244fb29587ac01fa SHA512 1f4a5d3bed5b4028750a2a2f7d2074e1a51a04f7870e469cdcc5ffd8cca3d3f715ca9d07436eab0be57c7c2fdc6273fe64c81887a5e71ba962ede360446e298b WHIRLPOOL fbac9462df07630ea4d398b2ca09a24945795309332a4659af0dbc94829814245e8aa7986d37dbfe9369e1f09ec8ce7587ff383d3d3ecd62315d8568936c5926
-MISC ChangeLog 25366 SHA256 cd5e177e975f35a9e7af69b8f65c90f4dfd4c65f142c6c2660078eb401a72061 SHA512 68c1f691d0243cea096af0a89e3de464aacaf6f808e00ab430aca121782a6f8b4468fc06054d0d47818b4b7914af006f2aab77ffe1e0a261431b35af5ccd0181 WHIRLPOOL a4df21113f84a2d6a207fc6800ca2959754ae824e1ee2898ee359d373f99f7b2c97ec4447a3d172e88f29df330afa58c4dc1342a8b0f38c8988ef424fc573d11
+EBUILD sendmail-8.14.9.ebuild 7123 SHA256 4e201bae75a5ef9ad6a6c38672d9f4ea325aa1890c055d2f79ed2d53f6b57c20 SHA512 f1c3d9a2e5346e43048f0277d7e9bb3f25598337179486f46276309a48d8a6379e30e9b2b996ec0151af9f96cf9df7de7d13bec2e0fef0663dba515035e79520 WHIRLPOOL 2366bc5868367ae7a51a101443f90a52b1bddca87525463bc588aba0b72ae3ad8ad19f8c4b6903187b7e24962efe3f373a9dc2c670bff1dbbc8cb06460840b64
+MISC ChangeLog 25493 SHA256 338aba0e9847e91cdbfaeb13800d965203d21697aabc03893970897305d67934 SHA512 a18e37f35550aab7fcd1946f06845ef8c9e9fbb82d30928d101d04c74aea00275d8865e5d33ed294f8060fcf24d50cffc9acfe1efa413f3c8b94b1c820b2178f WHIRLPOOL b7310155b286ad3383094423c677406d60911060defd1ea75face38e19644a933155edf2416f71b7b8657da3e2298b9cb6b97ae14dcedadd3836f1f8ac38917a
 MISC metadata.xml 162 SHA256 569031668e39895fb20829fb17a49a91a83e8f41b2195b0f04825c4340d2af6b SHA512 b706438a0eda682ad16d8e2217bd54d5fa9f8b305efc6e009d0bf523df159162afee0fae9107c5887e12bb64951bbee4c36c8f4744d008ba8fc2db4c01504fa2 WHIRLPOOL d1196dde03902f1b7eee5c0ad8e30243470e014ec8b6d56fe556125f636872345f0dec41e45f39fa14993db3db78a782efdcf26c3d50cdccd88f4f7c8b7dc67a
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.22 (GNU/Linux)
 
-iQEcBAEBCAAGBQJS6H8XAAoJEEqz6FtPBkyjBIgIAKK3SUSljqVgd+nv91hMrPfR
-lIBg+iYldEX6Jc7sRYHCJ58cIo9GQazh0KvpO+DOR2FfB1gtNZrMGB7mMEM/eV5l
-Dey7QjnJpzGsMu68l27aH3kHtJ9KocYWLN4z6jEnZHyPXSdfV+fYLfVuuHXhHIOt
-wcNvKsjmtp0IzQ4fcpupUylta+wmPfsqcJWM/ilOdF+W4QEmmLdxGp6mmOvF7sp1
-tiwDIFxiKZqHpecVF21I5oQiGK+6T1Tgpus7GQeHF5BkUOMMvBz5SW5/99ixVhGX
-GA/zbGdONfudLlsQ/1ZbpVQmYx6ev4eCYigfUEpwSP4eKd+RnxYh6/nxwqAIQtw=
-=WeMo
+iQIcBAEBCAAGBQJTiKCdAAoJEHfx8XVYajsfBSEP/jHvsSKdf2EiUXoqiEY53CLJ
+2Zpmbo6we5IueL7SvJVnWJrKV9IblVgPJa1Z5R9LqZ51Nnwg6oCgevBfliF1dbig
+rftx2kF901QhImyzR2c4ay0YSygdJ3SS4zj9U52pP7u2i201bjj4chR9V+Qf1OPp
+QiCHtZ1XF2f8/oO5gGBVZwm4bdsTO2lN471JOiNzugui8AL0GkFfv6q1j6d8kpa0
+LXPqCazyT15DZJGswUlPvZUh2JqsAi9sugIccFEW0vhEtuBOohAdSvGLCYH+Mybe
+L22mq31PKFVRdchG9sJiIc2mmWam4gSwWOeK5Bm2Qh/IJvgXhDFgUcuFjMm+DsVN
+I2UejatmQnB+mWbGb15wnYLCte0b7FfS93vKe4jKw3x5cVf+Se7OfMfuIVM+X4b6
+P1eXfdDlJkxKfi++/HUZSeG31NbFlV4bQCN9JjrH6XFVWspt08t3XuUUoA6+5zie
+h0+NZ9n9oaq+9D/ZtQMydUgPVaqcbPXVeSpsGR/W1eBCuS9nWmX35O9X0XWx8WGa
+AYrJhQtLJ9ypMx+rGnY99nkTcBsGH50B0Ggjy9x8g6DXahobBIirmjAg34duS3D5
+sOj/Teff+9QqawQ7CxHlWDwx5NfK7L9xPP6Rs54R2vwoLBodqfU5yLiFF5jxyrYo
+MKu60Co99Gyg4Hp+dIi0
+=Ky3Q
 -----END PGP SIGNATURE-----
diff --git a/mail-mta/sendmail/sendmail-8.14.9.ebuild b/mail-mta/sendmail/sendmail-8.14.9.ebuild
new file mode 100644
index 000000000000..ea536458664f
--- /dev/null
+++ b/mail-mta/sendmail/sendmail-8.14.9.ebuild
@@ -0,0 +1,203 @@
+# Copyright 1999-2014 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/mail-mta/sendmail/sendmail-8.14.9.ebuild,v 1.1 2014/05/30 15:15:31 eras Exp $
+
+EAPI="5"
+inherit eutils multilib systemd toolchain-funcs user
+
+DESCRIPTION="Widely-used Mail Transport Agent (MTA)"
+HOMEPAGE="http://www.sendmail.org/"
+SRC_URI="ftp://ftp.sendmail.org/pub/${PN}/${PN}.${PV}.tar.gz"
+
+LICENSE="Sendmail"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86"
+IUSE="ssl ldap sasl tcpd mbox ipv6 nis sockets"
+
+DEPEND="net-mail/mailbase
+	sys-devel/m4
+	sasl? ( >=dev-libs/cyrus-sasl-2.1.10 )
+	tcpd? ( sys-apps/tcp-wrappers )
+	ssl? ( dev-libs/openssl )
+	ldap? ( net-nds/openldap )
+	>=sys-libs/db-3.2
+	!net-mail/vacation
+	"
+RDEPEND="${DEPEND}
+	>=net-mail/mailbase-0.00
+	!mail-mta/courier
+	!mail-mta/esmtp
+	!mail-mta/exim
+	!mail-mta/mini-qmail
+	!mail-mta/msmtp[mta]
+	!mail-mta/netqmail
+	!mail-mta/nullmailer
+	!mail-mta/postfix
+	!mail-mta/opensmtpd
+	!mail-mta/qmail-ldap
+	!<mail-mta/ssmtp-2.64-r2
+	!>=mail-mta/ssmtp-2.64-r2[mta]"
+
+PDEPEND="!mbox? ( mail-filter/procmail )"
+
+# libmilter library is part of sendmail, but it does not share the version number with it.
+# In order to find the right libmilter version number, check SMFI_VERSION definition
+# that can be found in ${S}/include/libmilter/mfapi.h (see also SM_LM_VRS_* defines).
+# For example, version 1.0.1 has a SMFI_VERSION of 0x01000001.
+LIBMILTER_VER=1.0.2
+
+pkg_setup() {
+	enewgroup smmsp 209
+	enewuser smmsp 209 -1 /var/spool/mqueue smmsp
+}
+
+src_prepare() {
+	epatch "${FILESDIR}"/"${PN}"-8.14.6-build-system.patch
+	epatch "${FILESDIR}"/sendmail-delivered_hdr.patch
+	epatch "${FILESDIR}"/libmilter-sharedlib.patch
+	epatch "${FILESDIR}"/"${PN}"-8.14.5+db-5.0.patch
+	epatch "${FILESDIR}"/sendmail-starttls-multi-crl.patch
+
+	local confCC="$(tc-getCC)"
+	local confCCOPTS="${CFLAGS}"
+	local confLDOPTS="${LDFLAGS}"
+	local confMAPDEF="-DMAP_REGEX"
+	local conf_sendmail_LIBS=""
+	use sasl && confLIBS="${confLIBS} -lsasl2"  \
+		&& confENVDEF="${confENVDEF} -DSASL=2" \
+		&& confCCOPTS="${confCCOPTS} -I/usr/include/sasl" \
+		&& conf_sendmail_LIBS="${conf_sendmail_LIBS} -lsasl2"
+	use tcpd && confENVDEF="${confENVDEF} -DTCPWRAPPERS" \
+		&& confLIBS="${confLIBS} -lwrap"
+	use ssl && confENVDEF="${confENVDEF} -DSTARTTLS -D_FFR_DEAL_WITH_ERROR_SSL" \
+		&& confENVDEF="${confENVDEF} -D_FFR_TLS_1" \
+		&& confLIBS="${confLIBS} -lssl -lcrypto" \
+		&& conf_sendmail_LIBS="${conf_sendmail_LIBS} -lssl -lcrypto"
+	use ldap && confMAPDEF="${confMAPDEF} -DLDAPMAP" \
+		&& confLIBS="${confLIBS} -lldap -llber"
+	use ipv6 && confENVDEF="${confENVDEF} -DNETINET6"
+	use nis && confENVDEF="${confENVDEF} -DNIS"
+	use sockets && confENVDEF="${confENVDEF} -DSOCKETMAP"
+	sed -e "s:@@confCCOPTS@@:${confCCOPTS}:" \
+		-e "s/@@confLDOPTS@@/${confLDOPTS}/" \
+		-e "s/@@confCC@@/${confCC}/" \
+		-e "s/@@confMAPDEF@@/${confMAPDEF}/" \
+		-e "s/@@confENVDEF@@/${confENVDEF}/" \
+		-e "s/@@confLIBS@@/${confLIBS}/" \
+		-e "s/@@conf_sendmail_LIBS@@/${conf_sendmail_LIBS}/" \
+		"${FILESDIR}"/site.config.m4 > devtools/Site/site.config.m4
+}
+
+src_compile() {
+	sh Build AR="$(tc-getAR)" RANLIB="$(tc-getRANLIB)" || die "compilation failed in main Build script"
+	pushd libmilter
+	sh Build AR="$(tc-getAR)" RANLIB="$(tc-getRANLIB)" MILTER_SOVER=${LIBMILTER_VER} || die "libmilter compilation failed"
+	popd
+}
+
+src_install () {
+	local MY_LIBDIR=/usr/$(get_libdir)
+	local MY_OBJDIR="obj.`uname -s`.`uname -r`.`uname -m`"
+	dodir /usr/bin ${MY_LIBDIR} /usr/include/libmilter
+	dodir /usr/share/man/man{1,5,8} /usr/sbin /var/log /usr/share/sendmail-cf
+	dodir /var/spool/{mqueue,clientmqueue} /etc/conf.d
+	keepdir /var/spool/{clientmqueue,mqueue}
+	for dir in libsmutil sendmail mailstats praliases smrsh makemap vacation editmap
+	do
+		make DESTDIR="${D}" LIBDIR="${MY_LIBDIR}" MANROOT=/usr/share/man/man \
+			SBINOWN=root SBINGRP=root UBINOWN=root UBINGRP=root \
+			MANOWN=root MANGRP=root INCOWN=root INCGRP=root \
+			LIBOWN=root LIBGRP=root GBINOWN=root GBINGRP=root \
+			MSPQOWN=root CFOWN=root CFGRP=root \
+			install -C "${MY_OBJDIR}/${dir}" \
+			|| die "install failed"
+	done
+	for dir in rmail mail.local
+	do
+		make DESTDIR="${D}" LIBDIR="${MY_LIBDIR}" MANROOT=/usr/share/man/man \
+			SBINOWN=root SBINGRP=root UBINOWN=root UBINGRP=root \
+			MANOWN=root MANGRP=root INCOWN=root INCGRP=root \
+			LIBOWN=root LIBGRP=root GBINOWN=root GBINGRP=root \
+			MSPQOWN=root CFOWN=root CFGRP=root \
+			force-install -C "${MY_OBJDIR}/${dir}" \
+			|| die "install failed"
+	done
+
+	make DESTDIR="${D}" LIBDIR="${MY_LIBDIR}" MANROOT=/usr/share/man/man \
+		SBINOWN=root SBINGRP=root UBINOWN=root UBINGRP=root \
+		MANOWN=root MANGRP=root INCOWN=root INCGRP=root \
+		LIBOWN=root LIBGRP=root GBINOWN=root GBINGRP=root \
+		MSPQOWN=root CFOWN=root CFGRP=root \
+		MILTER_SOVER=${LIBMILTER_VER} \
+		install -C "${MY_OBJDIR}/libmilter" \
+		|| die "install failed"
+
+	fowners root:smmsp /usr/sbin/sendmail
+	fperms 2555 /usr/sbin/sendmail
+	fowners smmsp:smmsp /var/spool/clientmqueue
+	fperms 770 /var/spool/clientmqueue
+	fperms 700 /var/spool/mqueue
+	dosym /usr/sbin/makemap /usr/bin/makemap
+	dodoc FAQ KNOWNBUGS README RELEASE_NOTES doc/op/op.ps
+	newdoc sendmail/README README.sendmail
+	newdoc sendmail/SECURITY SECURITY
+	newdoc sendmail/TUNING TUNING
+	newdoc smrsh/README README.smrsh
+	newdoc libmilter/README README.libmilter
+
+	newdoc cf/README README.cf
+	newdoc cf/cf/README README.install-cf
+	cp -pPR cf/* "${D}"/usr/share/sendmail-cf
+
+	docinto contrib
+	dodoc contrib/*
+
+	insinto /etc/mail
+	if use mbox
+	then
+		newins "${FILESDIR}"/sendmail.mc-r1 sendmail.mc
+	else
+		newins "${FILESDIR}"/sendmail-procmail.mc sendmail.mc
+	fi
+	m4 "${D}"/usr/share/sendmail-cf/m4/cf.m4 "${D}"/etc/mail/sendmail.mc \
+		> "${D}"/etc/mail/sendmail.cf
+	echo "include(\`/usr/share/sendmail-cf/m4/cf.m4')dnl" \
+		> "${D}"/etc/mail/submit.mc
+	cat "${D}"/usr/share/sendmail-cf/cf/submit.mc >> "${D}"/etc/mail/submit.mc
+	echo "# local-host-names - include all aliases for your machine here" \
+		> "${D}"/etc/mail/local-host-names
+	cat <<- EOF > "${D}"/etc/mail/trusted-users
+		# trusted-users - users that can send mail as others without a warning
+		# apache, mailman, majordomo, uucp are good candidates
+	EOF
+	cat <<- EOF > "${D}"/etc/mail/access
+		# Check the /usr/share/doc/sendmail/README.cf file for a description
+		# of the format of this file. (search for access_db in that file)
+		# The /usr/share/doc/sendmail/README.cf is part of the sendmail-doc
+		# package.
+		#
+
+	EOF
+	cat <<- EOF > "${D}"/etc/conf.d/sendmail
+		# Config file for /etc/init.d/sendmail
+		# add start-up options here
+		SENDMAIL_OPTS="-bd -q30m -L sm-mta" # default daemon mode
+		CLIENTMQUEUE_OPTS="-Ac -q30m -L sm-cm" # clientmqueue
+		KILL_OPTS="" # add -9/-15/your favorite evil SIG level here
+
+	EOF
+	if use sasl; then
+		dodir /etc/sasl2
+		cat <<- EOF > "${D}"/etc/sasl2/Sendmail.conf
+		pwcheck_method: saslauthd
+		mech_list: PLAIN LOGIN
+
+		EOF
+	fi
+
+	doinitd "${FILESDIR}"/sendmail
+	systemd_dounit "${FILESDIR}"/sendmail.service
+	systemd_dounit "${FILESDIR}"/sm-client.service
+
+	keepdir /usr/adm/sm.bin
+}