opensmtpd: 6.6.4p1 -> 6.7.0p1 #88640
Conversation
ofborg
bot
added
10.rebuild-darwin: 0
10.rebuild-linux: 1-10
10.rebuild-linux: 1
labels
|
Seeing the changelog, I'm not sure whether this should be backported — I've asked |
|
I've received confirmation that the vulnerabilities were also fixed in 6.6.4p1, so there's no need for backport :) |
|
After this update error work smtpctl: |
|
Hmm… that looks weird, it wasn't in the release notes, and making it setgid smtpq sounds like it'd allow every user on the system to run it, which we definitely don't want to do. I've just asked on the opensmtpd IRC whether that's expected as well as the correct way forward on this matter :) |
Have you got any answer? |
|
There is an issue for this in the archlinux bug tracker. |
|
Indeed, sorry for having forgotten to report here. yesterday, I got the answer that the setgid is currently required for offline enqueuing, and unfortunately smtpctl is currently not split from sendmail so there's little running around it. Meaning that we'll have to add a setgid wrapper for smtpctl, I'll try to get to it when I get some spare time, but if someone beats me to it (and I'd love someone to beat me to it :p), feel free to ping me for review :) |
Semi-automatic update generated by nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/opensmtpd/versions.
meta.description for opensmtpd is: "A free implementation of the server-side SMTP protocol as defined by\nRFC 5321, with some additional standard extensions\n"
meta.homepage for opensmtpd is: "https://www.opensmtpd.org/"
Updates performed
To inspect upstream changes
Impact
Checks done (click to expand)
built on NixOS
The tests defined in
passthru.tests, if any, passed0 of 0 passed binary check by having a zero exit code.
0 of 0 passed binary check by having the new version present in output.
found 6.7.0p1 with grep in /nix/store/14730j4q4561w3x9lzf6h8v3wyk6ijck-opensmtpd-6.7.0p1
directory tree listing: https://gist.github.com/2c08105d7e930a754eb906d703af18f1
du listing: https://gist.github.com/1519b178bd0a84e7cb5b452d54607cd8
Rebuild report (if merged into master) (click to expand)
Instructions to test this update (click to expand)
Either download from Cachix:
(r-ryantm's Cachix cache is only trusted for this store-path realization.)
For the Cachix download to work, your user must be in the
trusted-userslist or you can usesudosince root is effectively trusted.Or, build yourself:
After you've downloaded or built it, look at the files and if there are any, run the binaries:
Pre-merge build results
We have automatically built all packages that will get rebuilt due to
this change.
This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.
Result of
nixpkgs-review11 package built:
- opensmtpd
Maintainer pings
cc @rickynils @obadz @Ekleog for testing.