pkgsrc changes - add rc scripts and runtime checks for virus checkers
from Eric Schnoebelen in PR pkg/24295
- require native pthread library as pth doesnt work
Major changes from 2.39 to 2.40:
If multiple virus scanners are installed, they are all used.
Default action for viruses is now discard.
Added a new "notification" facility to allow external software to react
to changes in multiplexor state.
We now pass both the raw input message and the unpacked, decoded parts to
the virus scanner. This makes virus detection much more reliable.
Major changes from 2.38 to 2.39:
The multiplexor can be compiled with an embedded Perl interpreter to
significantly reduce the cost of starting a new slave
A memory leak in the status command was fixed.
A histo command was added so you can see how busy your installation
Major changes from 2.37 to 2.38:
The internal SMALLBUF constant was increased to handle larger SpamAssassin
reports produced by SpamAssassin version 2.60.
If a virus is found, action_notify_sender is disabled.
Major changes from 2.36 to 2.37:
Pure bug-fix release: A file descriptor leak was fixed, and we set the
close-on-exec flag on most file descriptors.
Major changes from 2.35 to 2.36:
Scalability enhancements for very busy servers.
Support for BitDefender's "bdc" virus scanner.
Other minor bug fixes.
--enable-ldap to --with-ldap.
While at it add add BUILD_DEFS for openldap and use pkgsrc intltool.
Bump PKGREVISION to 3, because of the openldap change.
and there are some incompatibilities, please look through ChangeLog
and Incompatibilities file.
pkgsrc changes:
- update HOMEPAGE and MASTER_SITES.
- remove dependency to ruby-amstd package.
Changes since 1.991
===================
1.994 Thu Feb 26 17:23:15 EST 2004
Bugfix for Net::CIDR::Lite --- we now recognize 1.2.3/0 syntax not just
1.2.3.4/0
1.993 added support for caller-id
1.992 minor bugfixes. added fallback and override logic.
This package is the snapshot from 20040209.
Postfix aims to be an alternative to the widely-used sendmail
program. Sendmail is responsible for 70% of all e-mail delivered
on the Internet. With an estimated 100 million users, that's an
estimated 10 billion (10^10) messages daily. A stunning number.
Although IBM supported the Postfix development, it abstains from
control over its evolution. The goal is to have Postfix installed
on as many systems as possible. To this end, the software is given
away with no strings attached to it, so that it can evolve with
input from and under control by its users.
Changes:
* Word wrapping on multibyte locales has been improved.
* The receive menu has been improved.
* The combo button for toolbar has been implemented.
* The download feature for IMAP / News folders has been implemented.
* URL is now shown on the toolbar when links are clicked, and put
warning in case of fake URL.
* JIS X 0201 Kana (hankaku kana) will be converted into JIS X 0208
when sending.
* Crashes on 64-bit environments has been fixed.
* Other bugfixes have been made.
Main changes are:
* A new folder can be created on the folder selection dialog now.
* The folder view is now updated progressively when receiving.
* Statasbar has been added to the message view window.
* The built-in image viewer has been improved, and its memory leaks
have been fixed.
* Ukrainian translation has been added.
* Other bugfixes have been made.
and we now change it. Unfortunately at the toplevel "Makefile" is passed
as the argument but config.status expects "./Makefile" so fails.
Patch the Makefile to not try and update Makefile in this case, as if it
worked it would make no functional change to the Makefile anyway so don't
bother.
Creates user and group now.
"make reinstall" works again.
No change of ownership of /usr/pkg/sbin anymore.
New RCD script (needs work on non-NetBSD platforms regarding "ps" command
options).
Bump revision.
http://www.securityfocus.com/archive/1/354362/2004-02-15/2004-02-21/2
* Bump PKGREVISION to 2.
* Make patches only modify one file each
* Fix some spelling errors
* Use ${SED} instead of sed, and ${CHMOD} instead of chmod
* Set CFLAGS.SunOS instead of doing the bsd.prefs.mk dance
Split sqwebmail into sqwebmail and sqwebmaild. sqwebmaild is now a
root daemon process that listens on a UNIX domain socket. sqwebmail
is a tiny, unprivileged cgi-bin stub that forwards the HTTP request
to the daemon process. The stub passes the client's file descriptor
to sqwebmaild, on platforms that support passing file descriptors,
else it proxies http traffic in both directions.
Replace GIFs with PNGs
Do GPG functions via a library instead of invoking mimegpg.
RFC 2231 support
addition of keywords on Maildir messages, use of FAM if it exists to
allow simultaneous access to the same Maildir from multiple clients,
and fixed handling of DELETEd messages and the Trash folder.
source distribution. Changes from version 0.37.1 include fixing minor
bugs, plugging memory leaks, and improving documentation. The
authentication daemons also have improved behaviour when idling.
The SPF (Sender Permitted From) protocol relies on sender domains to publish
a DNS whitelist of their designated outbound mailers. Given an envelope
sender, Mail::SPF::Query determines the legitimacy of an SMTP client IP.
and slightly modified by me.
A start for a more detailed data-structure to keep knowledge about
various data types are defined by MIME. Some basic treatments with
mime types are implemented.
and slightly modified by me.
User::Identity helps maintaining user information from various
sources. It abstracts the information used about a human begin
(usually configuration information) from its storage. It tries to be
smart in detecting defaults and such.
as PREFER_PKGSRC. Preferences are determined by the most specific
instance of the package in either PREFER_PKGSRC or PREFER_NATIVE. If
a package is specified in neither or in both variables, then PREFER_PKGSRC
has precedence over PREFER_NATIVE.
This version fixes a buffer overflow that can be triggered by incoming
messages. There are reports about spam that has actually triggered
this problem and crashed mutt.
This version is a response to the "clamav 0.65 remote DOS exploit"
information published on popular security-related mailing lists.
Other changes include: (see the README for a full list)
-) clamd:
+ fixed database timestamp handling (and a double reload problem reported
by Alex Pleiner and Ole Stanstrup)
+ new directive: ArchiveMaxCompressionRatio
+ new command: SESSION (starts a clamd session and allows to do multiple
commands per TCP session)
+ new directives: TemporaryDirectory, LogClean (Andrey V. Malyshev)
-) freshclam:
+ support for freshclam.conf (that may be optionally merged with
clamav.conf, command line options overwrite config settings)
+ work-around for potential database downgrade (subtle problem
in r-r dns handling) - reported by Daniel Mario Vega and patched
by Luca Gibelli
Fix build by rather patch "configure" directly instead of configure.in
(autoconf failed). Tested on NetBSD-current and Linux (some kind of Debian).
become available).
Changes since 0.4:
* New Features
We now support the notion of multiple identities per mail
account. This makes it easy to have several email addresses which end
up going into the same account. Read More about how to hook this up.
Thunderbird 0.5 includes Secure Password Authentication using a
new cross-platform NTLM authentication mechanism for POP3 and SMTP.
Option to turn on the Mozilla 1.x style folder columns in
Thunderbird (Tools / Options / Advanced / General Settings).
A new Palm Sync Address book conduit is now available for 0.5.
You can now do a one way sync, PC -> Palm or Palm -> PC, by changing
the hot sync conduit setup. We now prevent duplicate cards in
Thunderbird address books when syncing with Palm categories. Numerous
improvements with the initial sync.
A new, improved version of the offline extension is now
available for 0.5. Please read the installation notes in this document
about how to first uninstall old extensions.
Improved Spell Checker including a new US dictionary.
Ability to paste names or addresses from a spreadsheet directly
into the addressing widget of a new compose window.
Improved profile migration from Netscape 4.x.
* Recently Fixed Bugs
If a new message arrives while you are reading a message, we no
longer scroll the message body back to the top.
When saving an IMAP attachment, we no longer re-download the
attachment from the server.
Saving an attachment now brings up a standalone progress window.
Copying a message to a Sent Folder now shows progress in the
progress window.
When saving or opening an attachment, the progress dialog now
reports accurate progress information.
We now mark IMAP messages read in a folder if they are deleted
or moved to another folder. This fixes incorrect unread counts when
checking folders other than the Inbox for new messages.
LDAP searches now honor the directory search filter property.
Ability to paste a single cell of data from Microsoft Excel into
the compose window body.
Problems with IMAP folders three levels deep not showing up when
you are not using the IMAP subscription model.
Tools / Options / Attachments / Attachment Folder setting is now
remembered.
Linux builds no longer crash when viewing HTML messages
requiring a JAVA plugin.
Improved handling of apple double encoded attachments from OSX
clients.
No more new mail alert notifications when all incoming messages
are Junk.
"Remove from server after x days" has been implemented for POP3
mail accounts.
* Performance Improvements
Faster folder loading.
* Improved Stability and Polish
This release is based on the Mozilla App-Suite 1.6 final branch
and includes all of the stability work that went into Mozilla 1.6.
* the Icon Theme selector has been moved to the other preferences
window, '/Configuration/Other Preferences.../Display/Themes'. It
has also been completely redesigned and now displays the name of
the theme, the name of the author, the related URL, the current
status, and a preview of the theme. A theme can be installed or
removed using the respective buttons.
* the 'External Command' options have been moved to other
preferences window, '/Configuration/Other Preferences.../Message
View/External Programs', options for audio player and image viewer
have been added.
* the creation of 'SMTP only' accounts is now possible.
* the size and position of the Compose window is remembered
* GnuPG: on checking a signature if the key is untrusted the
signature icon displays a pen with an exclamation mark as a
warning.
* the SpamAssassin and Clam AntiVirus plugins now indicate their
operation via the status bar.
* updated translations: French, German, Polish, Serbian, Simplified
Chinese, Spanish,and Slovak
* Bug fixes
Changes since 0.15.7:
* Perl 5.6 fixes in bogoupgrade
* Install bogotune and bogotune man page
* The -q and -F flags (both unused) were removed
* Alpha/SH(3?) portability fixes
* Gobs and gobs of bugfixes
* The Graham and Robinson algorithms were removed
* Support for old style (separate good/bad) wordlists was removed
* Support for ignore lists was removed
BUILDLINK_PREFER_PKGSRC
This variable determines whether or not to prefer the pkgsrc
versions of software that is also present in the base system.
This variable is multi-state:
defined, or "yes" always prefer the pkgsrc versions
not defined, or "no" only use the pkgsrc versions if
needed by dependency requirements
This can also take a list of packages for which to prefer the
pkgsrc-installed software. The package names may be found by
consulting the value added to BUILDLINK_PACKAGES in the
buildlink[23].mk files for that package.
* New manual page
* spamprobe.cc (process_stream): Added -o tokenized option
to allow people to use an external tokenizer with spamprobe.
* SpamFilter.cc (scoreToken): Reduced sorting overhead by
pre-computing and integer sort value with sorting priorities
reflected in the value. This eliminates several calculations
inside of the sort routine.
* SpamFilter.cc (computeRatio): Capped ratios in calculations to
within MIN_PROB and MAX_PROB. Widened that range. This avoids
problems with div/0 and makes it easier to sort terms.
* spamprobe.cc (dump_words): dump command can now optionally
accept a regular expression as an argument and will only dump
terms matching the regular expression.
(purge_terms): Added purge-terms command to purge from the
database all terms matching a regular expression.
Patch submitted by Ossi Herrala <PGP: 0x78CD0337> in private email.
I will not patch multiple files with one patch file.
I will not patch multiple files with one patch file.
I will not patch multiple files with one patch file.
[...]
Somewhat based upon PR 24294 by Eric Schnoebelen.
While at it also fix configure to always install the example config file
to "examples".
Bump PKGREVISION to 1.
* Word wrapping on multibyte locales has been improved.
* The receive menu has been improved.
* The combo button for toolbar has been implemented.
* The download feature for IMAP / News folders has been implemented.
* URL is now shown on the statusbar when links are clicked, and
warning is displayed in case of fake URL.
* JIS X 0201 Kana (hankaku kana) will be converted into JIS X 0208
when sending.
* Crashes on 64-bit environments has been fixed.
* Other bugfixes have been made.
working on the issue.
Changes:
-) clamd:
+ fixed a race condition in database reloading code (random crashes
under high load)
+ fixed a race condition with the improperly initialized session start time
(thanks to Michael Dankov)
+ fixed PidFile permissions (Magnus Ekdahl, bug reported by Tomasz Papszun)
+ fixed LogFile permissions (Magnus Ekdahl)
+ new directive ScanRAR (bacause RAR support is now disabled by default)
+ new directive VirusEvent
+ new directive FixStaleSocket (Thomas Lamy and Mark Mielke)
+ new directive TCPAddr (Bernard Quatermass, fixed by Damien Curtain)
+ new directive Debug
-) clamav-milter: (Nigel Horne <njh*clamav.net>)
+ new --force-scan flag
+ new -P and -q flags by Nicholas M. Kirsch
WARNING: clamav-milter and our mail scanner are still in high development
and may be unstable. You should always use the CVS version.
-) libclamav:
+ support for a new database container format (CVD) - compressed and
digitally signed
+ better protection against malformed zip archives (such as Mimail)
+ mail decoder fixes (thanks to Rene Bellora, Bernd Kuhls, Thomas Lamy,
Tomasz Papszun) (Nigel Horne)
+ memory leak fixes (Thomas Lamy)
+ new scan option CL_DISABLERAR (disables built-in RAR unpacker)
-) freshclam:
+ fixed --on-error-execute behaviour (David Woakes)
+ new option --user (-u) USER - run as USER instead of the default user.
Patch by Damien Curtain.
+ rewritten to use database.clamav.net and CVD
-) documentation:
+ new Spanish documentation on ClamAV and Sendmail integration by
Erick Ivaan Lopez Carreon
+ included clamdoc.pdf Turkish translation by yavuz kaya and Ýbrahim erken
+ included clamav-mirror-howto.pdf by Luca Gibelli
+ included clamd+daemontools HOWTO by Jesse D. Guardiani
+ included signatures.pdf
+ man pages: updated
+ clamdoc.pdf: rewritten
- Catch child process exit.
- Add "-o" option which provides compatibility with older poppassd,
returning authentication error after "PASS" command not "NEWPASS"
for some broken clients.
Change pgp_timeout so that the timeout counter is reset every
time mail is sent. This makes pgp_timeout much more useful;
rather than prompting you every pgp_timeout seconds for the
passphrase, you only get prompted if pgp_timeout seconds have
elapsed since you last sent email.
From Ben Elliston.
patch-bb:
Add new boolean option - change_folder_next. If set, the `c'
(change-folder) command selects the next unread mailbox in the
mailboxes list from the current folder, rather than always
going back to the start of the mailboxes list.
From Simon Burge, with the buffy.c::mutt_buffy() fixes from me.
Bump PKGREVISION.
(ok-ed by agc@)
The major highlights of this release are:
* update GPGME support: 124905. GPGME-0.4.3 or better is required.
* libgtkhtml3 support added.
* use bonobo to avoid running of multiple balsa instances.
* fix bugs: 103639, 124550, 127422, 129316 and number of others.
- A change in the line reading routines caused unexpected results
with lines ending in EOF. This change is undone.
- A portability problem with the test command ("test -e" is not
supported on older systems, while "test -f" does the job).
Summary of major changes since 2.62
-----------------------------------
- Fixed bug related to perl 5.005 which stopped SpamAssassin from being
runnable
- Fixed bug where "spamassassin -l" parameter wouldn't be untainted before
being used
- Added caching of body rendering results so that the message wouldn't
be rendered the same way multiple times unnecessarily.
Summary of major changes since 2.61
-----------------------------------
- Fixed two bugs related to Received line generation and parsing.
- Modified two rules to reduce false positives.
- Fixed bug where spamd temporary init directory wasn't removed in some
situations.
- Modified HABEAS_SWE to function even if the Habeas headers were out of
their normal order.
- Fixed bug where reporting wouldn't remove message markup before being
learned by Bayes.
- Fixed bug where report_safe_copy_headers would reverse the order of the
Received headers.
- Fixed several bugs in the Bayes system caused by DB_File oddities.
- Portability to MacOSX: Bind8 compatibility, core dumps in mailq
and postdrop, and changes in netinfo support.
- Elimination of some DNS lookup problems in third-party library
routines (typically resulting in localhost not being found).
- More agressive delivery to sites that defer a lot of mail.
- Correction of a few obscure error messages.
- Several small documentation fixes.
- Minor fixes for robustness problems that no-one has experienced.
Patch provided by Ossi Herrala <$MAINTAINER> in private mail.
CHANGED:
* This release moves from Paul's original formula to a slightly modified
one that yields more evenly distributed scores. To continue using old
formula, use -o orig-score command line option.
ADDED:
* -C <number> command line option. This tells SpamProbe to assign a default,
somewhat neutral, probability to any term that does not have a weighted
(good count doubled) count of at least specified number in the database.
This prevents terms which have been seen only a few times from having
an unreasonable influence on the score of an email containing them.
Default count have changed. It is now 5. Old was 3.
* Added -o <option_name> command line option to specify alternate way of
scoring. Consult README.txt for more info.
* Added -l <number> command line option. Changes the spam probability
threshold for emails from the default (0.7) to <number>.
* Added tokenize command. Prints the tokens found in the file one word
per line in human readable format with spam probability, good count,
spam count, message count, and word in columns separated by whitespace.
IMPROVED:
* -H command line option to add more headers to scan.
* Improved performance by removing some redundant calculations and
reducing the amount of I/O in train-* mode.
fix in patch-af.
Without that patch, the example procmail rules in spamprobe's manual
page will cause procmail to eat your mail, so we should make it obvious...
- fix issue with "all mail gets deleted", which was caused by looking at
Content-ID for filenames (new feature in 1.61); this resulted in mail
from ".com" domains to be considered ".com" attachments (patch-aa)
- fixes "PDF corruption problem" (1.64)
IMAP (Internet Message Access Protocol) is an Internet standards-track
protocol for accessing messages (mail, bboards, news, etc). The Cyrus
IMAP server differs from other IMAP server implementations in that it
is generally intended to be run on "sealed" servers, where normal users
are not permitted to log in. The mailbox database is stored in parts of
the filesystem that are private to the Cyrus IMAP system. All user
access to mail is through the IMAP, POP3, or KPOP protocols.
1) s/USE_X11BASE/USE_X11/
2) Enable IPv6 if USE_INET6 is enabled.
3) Use GConf2 schemas.mk framework, and GCONF2_SCHEMAS pointing to the
schemas files.
4) There's no need to depend on gnome1-dirs, we'll use gnome2-dirs instead.
5) Use PKGCONFIG_OVERRIDE poiting to pkgconfig's files.
6) Previous buildlink2 file had gnome1 dependencies...
7) There's no need to depend on net/soup package...
so bump PKGREVISION.
Changes:
- Close some cross-site scripting vulnerabilities in the admin pages
(CAN-2003-0965).
- New languages: Catalan, Croatian, Romanian, Slovenian.
- New mm_cfg.py/Defaults.py variable PUBLIC_MBOX which allows the site
administrator to disable public access to all the raw list mbox files
(this is not a per-list configuration).
- Expanded header filter rules under Privacy -> Spam Filters. Now you can
specify regular expression matches against any header, with specific
actions tied to those matches.
- Rework the SMTP error handling in SMTPDirect.py to avoid scoring bounces
for all recipients when a permanent error code is returned by the mail
server (e.g. because of content restrictions).
- Promoted SYNC_AFTER_WRITE to a Default.py/mm_cfg.py variable and
make it control syncing on the config.pck file. Also, we always flush
and sync message files.
- Reduce archive bloat by not storing the HTML body of Article objects in
the Pipermail database. A new script bin/rb-archfix was added to clean
up older archives.
- Proper RFC quoting for List-ID descriptions.
- PKGDIR can be passed to the make command in order to specify a different
directory to unpack the distutils packages in misc. (SF bug 784700).
- Improved logging of the origin of subscription requests.
- Misc bugfixes.
Changes:
* 0.9.8a
* The bug that caused the failure of cache data read has been fixed.
* 0.9.8
* The offline mode has been implemented.
* The performance of the scanning of MH folders has been improved on
the platforms which support d_type in 'struct dirent'.
* The error checking on moving/deleting messages has become strict.
* When getting IMAP4 message list, it now fallbacks to FETCH command
if server doesn't fully support SEARCH command.
* Outbox for accounts are now correctly chosen when sending from queue.
* Gettext has been upgraded to 0.12.1.
* IPv6 support is now enabled by default.
* Other bugfixes have been made.
* 0.9.7
* The vulnerability in SMTP response handling, which is exploitable by
a malicious SMTP server, has been fixed.
* The structure of folder system has been sorted out.
* The checking of the existence of IMAP root directory has been
modified.
* Pre-processing and post-processing rules can now be specified.
* A 'Clone Account' function has been added.
* a new Folder Property has been added, 'Scan for new mail'
* the Extended 'Quick-search' has a new symbol
* fast Folder Processing rule creation based on a message
* a new pixmap has been added for use with a 'Check spelling' button
* updated translations: British English, French, German Japanese,
Polish, Spanish, Simpilified Chinese, and Slovak
* Bug fixes
Allow for not using a CGI extension (no extension was the pkgsrc default
for the previous mailman version, and forcing to add one seems like just
a gratuitous change).
Record BUILD_DEFS. (XXX: All these should be documented, too.)
"Package Makefiles should refer to PKG_SYSCONFBASEDIR instead of
PKG_SYSCONFBASE when they want PKG_SYSCONFDIR stripped of
PKG_SYSCONFSUBDIR. This makes PKG_SYSCONFBASE=/etc work with pkgviews by
installing all config files into /etc/packages/<pkg> instead of
occasionally putting some directly into /etc."
mozilla-bin/Makefile.common and mozilla-bin-nightly/Makefile.common.
the result is much less duplication and more consistent installations.
tested on NetBSD-current only (for now).
NetBSD Package Collection.
The ghostscript-viewer plugin allows Sylpheed-claws to display PostScript and
PDF attachments in the visualisation panel.
You must manually load the plugin through Configuration/Plugins.
Package Collection.
With the trayicon plugin, Sylpheed-claws will display an icon in the system
tray. The desktop environment must be compatible with the system tray
protocol specification from http://www.freedesktop.org/standards/. GNOME 2
and KDE 3.1.1 are known to follow it.
You must manually load the plugin through Configuration/Plugins.
NetBSD Package Collection.
Using Dillo, a very light web browser, the dillo-viewer plugin allows
Sylpheed-claws to render HTML attachments. Note that it is done in a somewhat
secure way, by passing the -s argument to Dillo, which prevents it from making
any Internet connection.
You must manually load the plugin through Configuration/Plugins.
NetBSD Package Collection.
Using imlib, image-viewer allows Sylpheed-claws to display attached images in
the visualisation panel.
You must manually load the plugin through Configuration/Plugins.
found in sylpheed-claws distribution. Note that this is _only_ meant for
included plugins. The image-viewer and dillo-viewer packages are in the
pipe.
From the sylpheed-claws package point of view, this is just a reordering
of the Makefile. It breaks pkglint'ing, but it's not like there really is
a choice.
