Commit graph

9 commits

Author SHA1 Message Date
taca
0829f1a8aa Update poppassd package to 4.0.5nb1.
Fix security problem, local root exploit.  It is no need to install
poppassd as setuid.  Noted on bugtraq mailing list.

http://www.securityfocus.com/archive/1/319811/2003-04-26/2003-05-02/0
2003-04-29 14:22:45 +00:00
taca
c57da3b401 Catch up to qpopper 4.0.5
Changes from 4.0.4 to 4.0.5:
----------------------------
 1.  Add debug trace call with OpenSSL library version.
 2.  Added 'tls-options' configuration file option.
 3.  Added 'tls-workarounds' boolean option.
 4.  STLS errors (except for timeout) no longer fatal.
 5.  Added sample xinetd configuration file.
 6.  Additional checks for networking libraries.
 7.  Pick up LDFLAGS from environment, if set.
 8.  Added '--enable-32-bit' and '--enable-64-bit'
 9.  Applied patch from Jeremy Chadwick to fix pathname trimming in
     standalone mode.
10.  Fixed (non-root) buffer overflow.
11.  Fixed '-no-mime' appended to user name (reported by Florian
     Heinz).
12.  Fixed response message when identical MDEFs defined multiple
     times (reported by Florian Heinz).
2003-03-13 14:11:24 +00:00
jlam
9b1b4a1493 * buildlink1 --> buildlink2.
* Pass the LDFLAGS through to the build process so that the final binaries
  are built with the appropriate -Wl,-R flags.  This should fix pkg/18054.
* Use ROOT_{USER,GROUP} instead of hardcoding "root" and "wheel" when
  installing poppassd.
2002-09-09 19:25:26 +00:00
taca
ad351a9bdd Make it work smbpassword update function.
It seems that there was some deadlock between pty and child exiting.

Bump PKGREVISION to 1.
2002-07-16 15:01:49 +00:00
taca
6e3cc19bff - replace using INSTALL with MESSAGE.
- Share version with ../qpopper/Makefile.common.
2002-05-03 15:11:05 +00:00
martti
0667cbf3f9 Updated poppassd to 4.0.4
* Fixed DOS attack seen on some systems.
* Fixed "noop has null function" log entry.
* Allow '-p' to be used when APOP not defined (noted by Daniel Senie).
* Enforce ClearTextPassword even without APOP (noted by Daniel Senie).
* Restrict clear-text-password=never to APOP.
* Restrict clear-text-password=tls to QPOP_SSL.
* Fixed qpopper hanging on I/O error on some platforms.
2002-05-02 16:16:55 +00:00
jlam
99c293f270 Move USE_BUILDLINK_ONLY definition out of Makefile.common and into the
individual package Makefiles.
2001-09-09 03:37:00 +00:00
taca
cbea40733a Some style clean up as qpopper package. 2001-07-26 15:44:44 +00:00
taca
d3f52582d8 Importing poppassd included in qpopper 4.0.3 now. 2001-06-10 15:15:06 +00:00