Update to 2.5.5, from Benedek Gergely on pkgsrc-users.
2015-05-23 iulius * innxmit: tidy up GetMessageID buffer handling In theory, if you could get a message with an empty message-id header through before anything else, it would call memcpy(NULL, p, 0) which (surprisingly) has undefined behavior. This doesn't seem a very likely contingency but I tidied up the code to avoid it and (hopefully) be clearer anyway. Thanks to Richard Kettlewell for the patch. * storage/cnfs/cnfs.c: don't read uninitialised cycbuffname Thanks to Richard Kettlewell for the patch. 2015-05-17 iulius * Fixed alignment issues when storing values 2015-05-14 iulius * Add Richard Kettlewell as a contributor * Correct remap check in tradindexed lookup The check was off by one; and when it happened, it invalidated the 'parent' pointer, causing a use-after-munmap (or use-after-free) condition. Thanks to Richard Kettlewell for the bug report. * Correctly flush CNFS buffers when nfswriter is true in inn.conf * Correct remap check in tradindexed group lookup Previously the remap check had an off-by-one bug and moreover would never be done due to the loop condition (making the off-by-one bug moot). This one could be a problem in real life; if creating a group causes innd to expand the index then an already-running nnrpd will not automatically notice, and so won't be able to find the group. Thanks to Richard Kettlewell for the patch. * nnrpd/commands.c: paranoid checking of AUTHINFO GENERIC reply Check the number of arguments returned by AUTHINFO GENERIC. Thanks to Richard Kettlewell for the patch. * innfeed/connection.c: avoid violating C aliasing rules The object was written as a 'struct sockaddr' but then read as a 'struct sockaddr_storage', which violates C99 s6.5#7. The fix is to always access it as a 'struct sockaddr' and use a union to ensure enough space for any possible address type. Thanks to Richard Kettlewell for the patch. * nnrpd/commands.c: correct sense of PERMgeneric reply The comment has always been wrong, as well as the return value for ~15 years... Thanks to Richard Kettlewell for the patch. * nnrpd/perm.c: don't dereference a null pointer if there are no access groups Thanks to Richard Kettlewell for the patch. * nnrpd/article.c: A wrong variable was used for vhost feature. Since these are created by the local innd, the error should not normally occur. Thanks to Richard Kettlewell for the patch. * Verify that setuid() and setgid() actually succeed See: https://lwn.net/Articles/451985/ for a discussion of the issues in this area. The checks in newuser.c are probably unnecessary due to the subsequent tests. rnews.c is straight-up broken though. Thanks to Richard Kettlewell for the patch. 2015-05-02 iulius * expire/fastrm.c: Fix a dereferencing issue * configure.ac: Build fix for current Mac OS X versions The build was failing with recent versions of Mac OS X: clang: error: no such file or directory: '/usr/local/news/lib/libinn.3.dylib' make[1]: *** [libinn.la] Error 1 make: *** [all-lib] Error 2 The reason is the '-multiply_defined'-part of the command line. This switch is marked as obsolete in ld(1): -multiply_defined treatment Previously provided a way to warn or error if any of the sym- bols used from a dynamic library were also available in another linked dynamic library. This option is obsolete. Thanks to Dennis Preiser for the report. * innfeed/imap_connection.c: fix support of Cyrus SASL 2.1.25 and later Fix how sasl_callback_ft, added with Cyrus SASL 2.1.25, was handled by innfeed. See revision [9381] for more information. Thanks to Dennis Preiser for the report. * innd/art.c: Fix a dereferencing issue when parsing Injection-Info: header field Thanks to David Binderman for the patch. 2015-05-01 iulius * Bump version number in FAQ for new INN 2.5.5 release Also remove link to Elena Samsonova's web site that appears to be defunct. 2015-04-23 iulius * mailpost: add new -t flag to specify the default temporary directory Check that the database directory and the temporary directory are writable when mailpost is run, and otherwise die with an error. Two paths are now tried by default for the temporary directory: pathtmp, and then /var/tmp if pathtmp is not writable. * Fix GCC 5.1.0 warning for incompatible pointer type Rename the "U" macro used by two tests to "SUC" (casting to String of Unsigned Chars) because it otherwise conflicts with how Unicode strings are declared in ISO C11, the new default mode for the GCC 5 series. 2015-04-20 iulius * Update TODO with references to existing patches 2015-04-05 iulius * Mention required TLS ciphers for interoperability * Update TODO with current state of INN 2.6.0 2015-04-02 iulius * Update changelog to mention other changes for INN 2.5.5 * Use Sys::Hostname Perl core module instead of calling /bin/hostname 2015-03-24 iulius * Add two missing contrib programs in the exceptions of mkmanifest * Typo in POD formatting * Update copyright years (add 2015) * Update config.guess and config.sub to upstream versions from 2015-03-08 * Update control.ctl to upstream version from 2014-06-17 2015-03-21 iulius * scanlogs: Limit the number of lines to show from error log files When lots of lines are present in error log files, they appear in the news.daily verbatim, and the resulting email is so large it is bouncing. Restrict the number of lines to 50 (the default value for unknown lines from news.notice). Thanks to Jeffrey M. Vinocur for the bug report. * nnrpd: Count write time stats when using SASL * Improve the count of sleeping channels The highest file descriptor of sleeping channels was not always properly updated. A new CHANresetlastsleeping() function now does the job when called. Also prevent innd from crashing if a channel is supposed to sleep but does not have a Waker set. Thanks to Petr Novopashenniy for the bug report. * readers.conf: improve the first example to disambiguate its effect against loca l connections 2015-03-18 iulius * pullnews: when giving a port along with a server name, check there is only one ":" Otherwise, it is very likely that the given server name is an IPv6 address, and therefore its end should not be interpreted as a port. 2015-01-21 iulius * Fix the unsignedness of TMRgettime when printed 2015-01-10 eagle * http://www.imc.org/ietf-usefor/ appears to be gone Replace this link in HACKING with a link to the usefor mailing list archives and to my Usenet article format pages. 2015-01-10 iulius * Do not mention that TLS compression will be disabled in the next INN release As the CRIME attack is not exploitable in NNTP, disabling TLS compression by default is pointless. No vulnerability in TLS compression is currently known as far as NNTP is concerned. * Add a cast to fix a gcc warning 2015-01-07 iulius * Regenerate Makefile dependencies with gcc 4.7.2 Also adapt support/makedepend to keep the two leading spaces, as in previous versions of gcc. Backport commit [9566]. * Cleanup in include stuff - Add missing BEGIN_DECLS/END_DECLS, and also use them instead of their expansion. - Add missing inclusion of <inn/defines.h>. 2015-01-04 eagle * Remove dead link to nnrpkrb5auth 2014-12-16 iulius * nnrp.access2readers.conf: add default username when none is specified 2014-12-14 iulius * Add new contrib/nnrp.access2readers.conf.in script This script converts old-style nnrp.access to readers.conf. Thanks to Jeffrey M. Vinocur for his contribution. 2014-12-07 iulius * Update Russ's mail address * Fix typos 2014-12-01 iulius * Add support for choosing the elliptic curve to use with TLS support The new tlseccurve parameter in inn.conf takes the name of a curve OpenSSL knows about, to use for ephemeral key exchanges. Thanks to Christian Mock for the patch. 2014-11-23 iulius * m4/sendmail.m4: add missing brackets The configure script was failing when running that part of code. 2014-11-12 iulius * inn.conf: Improve documentation about tlsprotocols and tlscompression 2014-11-11 iulius * Improve tuning of the SSL/TLS configuration nnrpd's TLS support is basically using OpenSSL's defaults WRT issues such as protocol support and cipher suites. In these days of POODLEs and other vulnerabilities, it should be useful to be able to have better control over what's offered. So this patch adds a few options to inn.conf: - tlsprotocols: allows to select the SSL/TLS versions that are supported - tlsciphers: allows to give an OpenSSL cipher string to tailor the cipher suites that are offered to clients - tlspreferserverciphers: switches on the server-side selection of the cipher suite (TLS default is "client chooses") - tlscompression: allows to turn off TLS compression (because of the CRIME attack) if the OpenSSL version supports this. Many thanks to Christian Mock for his patch. 2014-11-09 iulius * Mention PyClean as a Python-based variant of Cleanfeed. 2014-10-28 iulius * Update default paths for Debian and Fedora * Fix a dependency in a build rule 2014-10-03 iulius * innwatch: report an error when the control file is missing 2014-09-24 iulius * rc.news: no longer explicitly sleep before starting innwatch and cnfsstat Instead, make these two scripts sleep by themselves. Also update documentation: improve the list of actions done by rc.news, and no longer mentions that innd should be throttled before being stopped (this is not true - the shutdown process already does the actions throttling does). * innwatch: add -i flag to specify how many seconds to sleep at startup - Also fix previous commit [9651] that did not totally fix the issue it was supposed to fix. - Fix the behaviour of the -f flag (it wasn't doing anything). - Fix how the -l flag was parsed (a space was required between -l and its argument, whils it should not have been required). - Add new POD documentation for innwatch, and update it at the same time: document new -i flag, and document already existing -f flag. * cnfsstat: add -i flag to specify how many seconds to sleep at startup Update documentation, and homogenize POD syntax at the same time. 2014-09-24 eagle * Re-add second $(LIBSTORAGE) when linking backends Backend commands (such as nntpget) linked with both history and storage libraries list $(LIBSTORAGE) in the link line twice. This isn't a mistake; there are some unfortunate circular dependencies that require listing $(LIBSTORAGE) both before and after $(LIBINNHIST) in the link line or static linking will fail. 2014-09-22 iulius * Fix build issues on AIX 7.1 mmap is redefined to mmap64 when large file support is enabled. 2014-09-21 iulius * Fixed a warning and an unnecessary sys/stropts.h header * Typos * Fix build of contrib/respool.c Remove an unused variable. Add a link to libhistory. * Fix build of contrib/reset-cnfs.c Add correct include header files. Use the right DO_LARGEFILES variable instead of LARGE_FILES. Reformat the code (remove tabulations). Properly exit with the right status code. * Fix a few warnings, and update svn:ignore for contrib * Fix build of contrib/expirectl.c Add correct include header files, and fix a few warnings in printf() calls. Add portability code for statfs/statvfs support. * Add compilation rules for contrib/auth_pass.c and contrib/expirectl.c Use the right socklen_t type, and add crypt.h header if available. * FAQ: add how to feed articles arrived between two dates to another server 2014-09-11 iulius * innupgrade: fix its execution On a few systems like AIX, innupgrade failed to run during an upgrade because "perl -T" was not explicitly called. Failure was: "-T" is on the #! line, it must also be used on the command line Thanks to The Doctor for his bug report. 2014-09-07 iulius * Add missing dependency for libtest.o during the build of nnrpd/auth-ext.t 2014-09-05 iulius * Fix typos in INN_HAVE_SYS_BITYPES_H and INN_MACRO_IN6_ARE_ADDR_EQUAL names 2014-08-30 iulius * libinn documentation: update the name of the fdflag functions * pullnews: improve logging when an error occurs during GROUP Also rewrite a ternary condition to improve readability. Patch from Geraint A. Edwards. * pullnews: new -a flag (hashfeed ability) Add a new feature to pullnews: hashfeed to split feeds. It uses MD5 and is Diablo-compatible. Thanks to Geraint Edwards for the patch. * pullnews: new -B flag (header-only feeding) Add a new feature to pullnews: header-only feeding. If the article does not already have a Bytes: header field, one is added. Bodies are kept only for control articles. Thanks to Geraint Edwards for the patch. * pullnews: bug fix to rnews when -O; improved rnews reporting Thanks to Geraint Edwards for the patch. * pullnews: improve wording * When pullnews runs for the first time against a newsgroup, say "never" instead of January, 1st 1970 as the last run date. * Improve spaces, uppercase characters and singular forms when 1 article is retrieved. * Update the config file even when the group is empty. * pullnews: remove headers matching (or not) a given regexp Enable the -m flag to remove headers matching (or not) a given regexp. Thanks to Geraint Edwards for the patch. 2014-08-09 iulius * innwatch: no longer creates a child process for sleeping innwatch creates a child process only for sleeping and then waits on that process. The forked-off process is not killed by 'rc.news stop' (only its parent is), and will only die after it's done sleeping. If running under SMF on illumos/Solaris, this causes the service to likely drop into maintenance state (since not all processes die within timeout). Thanks to Lauri Tirkkonen for the patch. 2014-06-04 iulius * Bump version number to 2.5.5 for STABLE.
This commit is contained in:
wiz
parent
c1d7db6460
commit
569b9b4c01
2 changed files with 8 additions and 7 deletions
|
|
@ -1,7 +1,6 @@
|
||||||
# $NetBSD: Makefile,v 1.119 2015/06/12 10:50:54 wiz Exp $
|
# $NetBSD: Makefile,v 1.120 2015/08/22 19:10:50 wiz Exp $
|
||||||
|
|
||||||
DISTNAME= inn-2.5.4
|
DISTNAME= inn-2.5.5
|
||||||
PKGREVISION= 1
|
|
||||||
CATEGORIES= news
|
CATEGORIES= news
|
||||||
MASTER_SITES= ftp://ftp.isc.org/isc/inn/ \
|
MASTER_SITES= ftp://ftp.isc.org/isc/inn/ \
|
||||||
ftp://ftp.fu-berlin.de/unix/news/inn/
|
ftp://ftp.fu-berlin.de/unix/news/inn/
|
||||||
|
|
@ -169,6 +168,8 @@ GCC_REQD+= 2.95.3
|
||||||
|
|
||||||
.include "options.mk"
|
.include "options.mk"
|
||||||
|
|
||||||
|
TEST_TARGET= tests
|
||||||
|
|
||||||
pre-install:
|
pre-install:
|
||||||
.for file in ${CFILES} active.minimal newsgroups.minimal
|
.for file in ${CFILES} active.minimal newsgroups.minimal
|
||||||
${INSTALL_DATA} ${WRKSRC}/site/${file} ${DESTDIR}${EXAMPLEDIR}
|
${INSTALL_DATA} ${WRKSRC}/site/${file} ${DESTDIR}${EXAMPLEDIR}
|
||||||
|
|
|
||||||
|
|
@ -1,8 +1,8 @@
|
||||||
$NetBSD: distinfo,v 1.33 2014/08/03 17:33:34 spz Exp $
|
$NetBSD: distinfo,v 1.34 2015/08/22 19:10:50 wiz Exp $
|
||||||
|
|
||||||
SHA1 (inn-2.5.4.tar.gz) = 6bac5aee105dbed9b96ba112783ddb7b254ea197
|
SHA1 (inn-2.5.5.tar.gz) = aef9be9d7e6089ef1c463a11f255e53ea1fed433
|
||||||
RMD160 (inn-2.5.4.tar.gz) = 18b165d3aca8f6221b945b38d5eab84a3198f6fe
|
RMD160 (inn-2.5.5.tar.gz) = fc16cc76cc95e64868a6cc2cce8a44cd1806afee
|
||||||
Size (inn-2.5.4.tar.gz) = 2408600 bytes
|
Size (inn-2.5.5.tar.gz) = 2419841 bytes
|
||||||
SHA1 (patch-aa) = 1801206391e5f37e75edad0955cfc426d4701e45
|
SHA1 (patch-aa) = 1801206391e5f37e75edad0955cfc426d4701e45
|
||||||
SHA1 (patch-ab) = 28b341559ba7d132e8a6dbb0989e964b1d5849fd
|
SHA1 (patch-ab) = 28b341559ba7d132e8a6dbb0989e964b1d5849fd
|
||||||
SHA1 (patch-ac) = edb03ca5998873627278764ed4e528f13f3f74fd
|
SHA1 (patch-ac) = edb03ca5998873627278764ed4e528f13f3f74fd
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue