This update fixes among many other tiny bugs one security bug that
allows a remote attacker to cause a denial of service in bogofilter,
by crashing it; a malformatted (non-conformant) RFC-2047 encoded
word triggers an attempt to write a terminating NUL byte past the
end of a buffer or (more commonly) into the zero-page, which causes
a segfault.
Depending on the exact MTA/MDA configuration on the receiving
machine, this can cause a denial of service of the mail system.
PR: ports/73144
Submitted by: maintainer
Fix SIGSEGV (NULL dereferenced pointer read) when %I is used
and no IP address had been found (reported by Clemens Fischer)
Fix data base shutdown in multiple-wordlists mode
when BOGOFILTER_CONCURRENT_DATA_STORE is set in the environment
PR: ports/68455
Submitted by: maintainer
- Add a WITHOUT_BASH install-time option that will remove the
bash2 dependency and the bash-dependent contrib/ scripts and
documentation (randomtrain, scramble, trainbogo.sh)
- Bump PORTREVISION
PR: ports/67303
Submitted by: maintainer
- will only use DB 4.2, no configuration possible
As we don't use the Berkeley DB environment stuff (for
concurrent or transactional libdb use - __db.NNN and log.NNNNNNNNNN files),
DB 4.2 will deal with DB 4.0-created data base files just
fine. This is a migration aid for future bogofilter versions that
depend on DB 4.1 or newer.
- INSTALL_MAN -> INSTALL_DATA
- ECHO -> ECHO_MSG
PR: ports/65382
Submitted by: maintainer
- Clean up pkg-plist, use PORTDOCS instead
- Clean up Makefile a bit.
- convert do-install: to INSTALL_TARGET
- use some wildcard patterns to keep RELEASE.NOTES/CHANGES file lists concise.
- Use SIZE in distinfo.
PR: 62206
Submitted by: Matthias Andree <matthias.andree@gmx.de> (maintainer)
- Support WITH_DB_VER=42 to build against db42 rather than
default db4
- Switch to bz2 to reduce download time and data volume.
- Fix up forgotten src/version.c update to 0.15.13.2
PR: 61284
Submitted by: maintainer
* trivial patch to fix build with TDB (merged to bogofilter
upstream CVS)
* bogominitrain.pl - removed email 'cruft' and revised format
of verbose output.
* Fixed parameter type error in dbh_print_names() that causes
segfault.
* Fixed parsing error that treated "^From " in encoded text as
a message separator. <<****** THIS IS THE SERIOUS PART ******
* Enhanced verbose output of bogominitrain.pl
* Fixed defect in bogominitrain.pl's norepetition mode.
* Documented '-T' option in man page.
* Revised format for '-T'.
PR: 55914
Submitted by: maintainer
bogofilter-tdb port)
* bogofilter now supports a (faster) "combined data base"
* (single file) for
fresh installs, but continues to support the former "separate
data base" (two files) format.
* WARNING: the exit code for "error" has changed from 2 to 3
Update your scripts to use -T or to use the new exit codes.
* bugfixes
* new -T fixed-formatting terse mode for scripts
* documentation updates (FAQ)
* bogofilter can now degenerate tokens before looking them up
* support for encoded tokens was enhanced
* bogoutil error reporting improved
* new bogominitrain.pl script
PR: 55660
Submitted by: maintainer
* Fix the "extra files" complaints from bento.
* The diagnosis patch committed recently is no longer needed, the sparc build
appears to be OK.
PR: ports/50906
Submitted by: maintainer
2003-03-28
* Bogofilter now frees all memory that it allocates.
* FAQ reorganized and info added on asian spam, the format of verbose output,
and using SpamAssassin to train bogofilter.
* Fixed processing of '-o' option.
PR: 50439
Submitted by: Matthias Andree <matthias.andree@web.de>
