git: cc92cc42fd96 - main - mail/spamassassin*: Remove the environment ENV from the environment

Cy Schubert <[email protected]>
Newsgroups gmane.os.freebsd.devel.cvs.ports
Message-ID <[email protected]>
The branch main has been updated by cy:

URL: https://cgit.FreeBSD.org/ports/commit/?id=cc92cc42fd962b8ff6805ac4ba46884e8c35c7dd

commit cc92cc42fd962b8ff6805ac4ba46884e8c35c7dd
Author:     Cy Schubert <[email protected]>
AuthorDate: 2026-08-12 18:25:33 +0000
Commit:     Cy Schubert <[email protected]>
CommitDate: 2026-08-13 14:25:46 +0000

    mail/spamassassin*: Remove the environment ENV from the environment
    
    The Perl taint module flags the ENV environment variable as insecure
    because it cannot assume the file it points to is safe.
    
    PR:             297394
    MFH:            2026Q3
---
 mail/spamassassin-devel/Makefile                  |  2 +-
 mail/spamassassin-devel/files/patch-sa-update.raw | 10 ++++++++++
 mail/spamassassin/Makefile                        |  2 +-
 mail/spamassassin/files/patch-sa-update.raw       | 10 ++++++++++
 4 files changed, 22 insertions(+), 2 deletions(-)

diff --git a/mail/spamassassin-devel/Makefile b/mail/spamassassin-devel/Makefile
index 8d065abb0740..8f92b9d911db 100644
--- a/mail/spamassassin-devel/Makefile
+++ b/mail/spamassassin-devel/Makefile
@@ -1,6 +1,6 @@
 PORTNAME=	spamassassin
 PORTVERSION=	${SA_COMMIT_DATE}
-PORTREVISION=	2
+PORTREVISION=	3
 CATEGORIES?=	mail perl5
 PKGNAMESUFFIX=	-devel
 
diff --git a/mail/spamassassin-devel/files/patch-sa-update.raw b/mail/spamassassin-devel/files/patch-sa-update.raw
new file mode 100644
index 000000000000..f475e6917531
--- /dev/null
+++ b/mail/spamassassin-devel/files/patch-sa-update.raw
@@ -0,0 +1,10 @@
+--- sa-update.raw.orig	2025-08-27 06:17:52.000000000 -0700
++++ sa-update.raw	2026-08-12 11:20:04.390250000 -0700
+@@ -60,6 +60,7 @@
+ POSIX::setlocale(LC_TIME,'C');
+ 
+ BEGIN {                          # see comments in "spamassassin.raw" for doco
++  delete $ENV{'ENV'};
+   my @bin = File::Spec->splitpath($0);
+   my $bin = ($bin[0] ? File::Spec->catpath(@bin[0..1], '') : $bin[1])
+             || File::Spec->curdir;
diff --git a/mail/spamassassin/Makefile b/mail/spamassassin/Makefile
index 86b19a77ad39..b5a7baee18f6 100644
--- a/mail/spamassassin/Makefile
+++ b/mail/spamassassin/Makefile
@@ -1,6 +1,6 @@
 PORTNAME=	spamassassin
 PORTVERSION=	4.0.2
-PORTREVISION=	3
+PORTREVISION=	4
 CATEGORIES?=	mail perl5
 MASTER_SITES=	https://archive.apache.org/dist/${PORTNAME}/source/ CPAN/Mail
 DISTNAME=	Mail-SpamAssassin-${PORTVERSION}
diff --git a/mail/spamassassin/files/patch-sa-update.raw b/mail/spamassassin/files/patch-sa-update.raw
new file mode 100644
index 000000000000..f475e6917531
--- /dev/null
+++ b/mail/spamassassin/files/patch-sa-update.raw
@@ -0,0 +1,10 @@
+--- sa-update.raw.orig	2025-08-27 06:17:52.000000000 -0700
++++ sa-update.raw	2026-08-12 11:20:04.390250000 -0700
+@@ -60,6 +60,7 @@
+ POSIX::setlocale(LC_TIME,'C');
+ 
+ BEGIN {                          # see comments in "spamassassin.raw" for doco
++  delete $ENV{'ENV'};
+   my @bin = File::Spec->splitpath($0);
+   my $bin = ($bin[0] ? File::Spec->catpath(@bin[0..1], '') : $bin[1])
+             || File::Spec->curdir;
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.