packages/mail, branch master

tree-wide: remove redundant test.sh files

2026-07-04T20:42:46Z

Generic version checks were introduced in actions-shared-workflows, making these individual test.sh files obsolete. Signed-off-by: Josef Schlehofer

exim: update to version 4.99.4

2026-06-10T20:28:20Z

Maintenance release on the 4.99 stable series. https://github.com/Exim/exim/blob/exim-4.99.4/doc/doc-txt/ChangeLog Signed-off-by: Daniel Golle

exim: update to 4.99.3 (security release)

2026-05-14T22:13:25Z

4.99.3 (security release): * Addresses EXIM-Security-2026-05-01.1: a remotely reachable Use-After-Free vulnerability in Exim's BDAT (binary data transmission) body parsing path when using the GnuTLS backend. This can lead to heap corruption and potential code execution. Affects 4.97 through 4.99.x when built with GnuTLS support AND with STARTTLS and CHUNKING advertised. Reported by xbow security. Previous security releases folded into this bump: 4.99.2 (security release): * Addresses Exim-Security-2026-04.1, covering 4 CVEs: - CVE-2026-40684: Possible crash with malicious DNS data (musl libc) - CVE-2026-40685: Possible OOB read/write on corrupt JSON in header - CVE-2026-40686: Possible OOB read with large UTF8 trailing characters - CVE-2026-40687: Possible OOB read/write with SPA authenticator 4.99.1 (security release): * Re-incarnation of CVE-2025-26794, ports fixes from 4.98.1/4.98.2. Link: https://exim.org/static/doc/security/EXIM-Security-2026-05-01.1/ Link: https://git.exim.org/exim.git/blob/refs/tags/exim-4.99.3:/doc/doc-txt/ChangeLog Signed-off-by: Daniel Golle

treewide: cleanup URLs

2026-05-08T20:28:27Z

This commit converts plain HTTP URLs to HTTPS, and updates old or outdated URLs. Signed-off-by: Yanase Yuki

treewide: set me where PKG_MAINTAINER empty

2026-04-16T18:48:36Z

Seems a lot of packages are just getting abandoned by people. Will pick these up and see them through. Signed-off-by: Alexandru Ardelean

mail/bogofilter: fix PKG_CPE_ID

2026-03-20T13:54:46Z

cpe:/a:bogofilter_project:bogofilter is the correct CPE ID for bogofilter: https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:bogofilter_project:bogofilter Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage) Signed-off-by: Fabrice Fontaine

mail/opendkim: assign PKG_CPE_ID

2026-03-15T07:21:15Z

cpe:/a:opendkim:opendkim is the correct CPE ID for opendkim: https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:opendkim:opendkim Signed-off-by: Fabrice Fontaine

mailsend: fix ssl variant to use opensssl

2026-02-04T05:39:56Z

As described in #28261 Not compiled with OpenSSL, the SSL variant of the mailsend package is not actually being compiled with OpenSSL. This is due to an upstream configure check borrowed from an ancient version of BIND, which no longer works. As a workaround we add `-DHAVE_OPENSSL=1` to the `TARGET_CFLAGS` when building the SSL variant. This results in a complaint about COPTS not being honoured correctly, but results in `mailsend` compiled with OpenSSL (i.e. works). Signed-off-by: Daniel F. Dickinson

sendmail: update to 8.18.2

2026-01-09T09:52:21Z

Remove two patches no longer needed due to changes upstream. Signed-off-by: W. Michael Petullo

pigeonhole: update to version 0.5.21.1

2026-01-01T14:27:12Z

Release notes: ``` v0.5.21.1 2024-08-14 Aki Tuomi - sieve: When saving to local storage failed after a successful action in sieve (e.g. redirect, vacation), the mail was reported as successfully delivered, although it was lost locally. ``` Copy&pasted from https://raw.githubusercontent.com/dovecot/pigeonhole/0.5.21.1/NEWS Signed-off-by: Josef Schlehofer