Changes:
-) libclamav:
+ JPEG exploit detector now also checks embedded Photoshop thumbnail images
+ archive meta-data scanner (improves malware detection within encrypted
archives)
+ support for TNEF (winmail.dat) decoding
+ support for all tar archive formats
+ MD5 implementation replaced with a slightly faster one
+ improved database reloading with reference counter
+ database updateable false positive eliminator
+ speed improvements
+ various bugfixes
-) clamd:
+ VirusEvent now sets CLAM_VIRUSEVENT_FILENAME and CLAM_VIRUSEVENT_VIRUSNAME
environment variables
-) clamav-milter:
+ improved database update detection when not --external
-) clamscan:
+ new options --include-dir and exclude-dir
+ new option --max-dir-recursion
-) freshclam:
+ new directive LocalIPAddress
- SASL inter-operability problem causing Sendmail servers to hang up on Postfix.
- Panic when a fall-back relay could not be used for a variety of reasons.
And always is defined as share/examples/rc.d
which was the default before.
This rc.d scripts are not automatically added to PLISTs now also.
So add to each corresponding PLIST as required.
This was discussed on tech-pkg in late January and late April.
Todo: remove the RCD_SCRIPTS_EXAMPLEDIR uses in MESSAGES and elsewhere
and remove the RCD_SCRIPTS_EXAMPLEDIR itself.
- From the ChangeLog:
> ------
> v4.0.3
> ------
>
> [jan] Ignore quoted text if spellchecking with aspell (Bug 1673,
> kevin_myer@iu13.org).
> [cjh] Fix typo in attachment.php that caused a PHP warning
> (Xavier Montagutelli <xavier.montagutelli@unilim.fr>).
> [mms] Correctly store all data from the compose screen when spell checking a
> message (Bug 1425).
>
> ----------
> v4.0.3-RC1
> ----------
>
> [cjh] Validate outgoing email addresses before sending mail (Bug 1543).
> [mms] Added automatic detection of some mail server parameters to the test
> script.
> [mms] Fix Show/Hide Deleted links on search results screen (Bug 1587).
> [mms] Encode attachment parameters with the same character set used in the
> base message (Bug 1591).
> [mms] Correctly process 'Report and Spam' and Blacklist/Whitelist additions
> from a search results mailbox view.
> [mms] Correctly sort the contents of the Virtual Folder.
> [mms] Fix viewing mailboxes in shared hierarchies in subscribe mode in the
> IMAP_Tree lists (Bug 1550).
> [jan] Return to current folder after emptying the trash folder (Bug 1563).
> [mms] Display the attachment expiration date when sending linked attachments.
> [mms] Fix editing virtual folders from the mailbox screen (Bug 1490).
> [cjh] Log logouts at the same level Horde does (Bug 1499).
> [jan] Don't lose session if clicking on link after blacklisting or
> whitelisting addresses (Bug 1417).
> [mms] Fix refresh of folder screen when viewing unsubscribed folders.
> [mms] Added optional 'delimiter' parameter to servers.php to aid login times
> for certain IMAP servers (selsky@columbia.edu, Bug 1485).
> [mms] Don't link emails in HTML message compositions (Bug 1472).
> [mms] Make sure we can create thumbnails/convert images before prompting user.
> [mms] Ensure multipart/related and multipart/alternative messages can be viewed
> if not viewable inline or if they contain only one part;
> multipart/related parts are now viewed with their correct charset
> (Bug 1433).
> [mms] Fix display of IMAP hierarchies in the folder view (Bug 1403).
> [jan] Fix viewing of multipart S/MIME or PGP signed messages (Bug 1393).
> [jan] Mark sent-mail checkbox when changing the sent-mail folder in the
> compose screen.
> [mms] Be smarter about we we consider to be downloadable/forwardable.
> Make sure text isn't both forwarded and attached in a forward message.
> [jan] Fix success screen after redirecting a message (Bug 1374).
> [jan] Fix "undefined index" warning (Bug 1367).
- From the ChangeLog:
> ------
> v3.2.8
> ------
>
> [jan] Close XSS when setting the parent frame's page title by javascript (cjh).
> [mms] Fix display of MIME parts less than 1K when local number format uses
> ',' as the decimal separator.
> [jan] Don't use trash folder on POP3 servers under certain circumstances
> (Bug 1373).
> [jan] Fix "Save as" link to save message sources (Bug 1233).
>
>
> ------
> v3.2.7
> ------
>
> [mms] Determine the default IMAP delimiter according to RFC 3501.
> [mms] Fix the folders screen hanging if there was only one folder (Bug 504).
> [jan] Correctly cancel messages composition in all cases (Rich Bartell
> <rwb@bartellonline.com).
> [mms] Don't convert colons in user-defined headers to underscores (Bug 676).
> [jan] Don't blacklist already blacklisted addresses again (Bug 530).
-add error message for missing mboxrd file. Thanks: Marco Ferra.
-change handling of connection that dies vs. deleted messages.
Thanks: Thomas Schwinge.
Merged the two rules in netbsd_lists.cf into one because problem reports
mostly do not contain "x-send-pr" anymore.
Disabled installation of netbsd_lists.cf in PKGSYSCONFDIR (it is still
included in the "examples" directory).
Changes since 3.0.2
===================
- Fixed possible memory bloat from large AutoWhitelist db files
- Fixed where user defined rules scores became ignored
- Updated parsing code for several Received: header formats
- Increased some BAYES_* scores for the network+bayes score set
- Document set_tag for Plugin API and added get_tag
- Additional bug fixes.
- Remove old patch-ai
- From the ChangeLog:
> The bug fixes in 8.13.3 for connection handling uncovered a
> different error which could result in connections that
> stay in CLOSE_WAIT state due to a variable that was not
> properly initialized. Problem noted by Michael Sims.
> Deal with empty hostnames in hostsignature(). This bug could lead
> to an endless loop when doing LMTP deliveries to another
> host. Problem first reported by Martin Lathoud and
> tracked down by Gael Roualland.
> Make sure return parameters are initialized in getmxrr(). Problem
> found by Gael Roualland using valgrind.
> If shared memory is used and the RunAsUser option is set, then the
> owner and group of the shared memory segment is set to
> the ids specified RunAsUser and the access mode is set
> to 0660 to allow for updates by sendmail processes.
> The number of queue entries that is (optionally) kept in shared
> memory was wrong in some cases, e.g., envelope splitting
> and bounce generation.
> Undo a change made in 8.13.0 to silently truncate long strings
> in address rewriting because the message can be triggered
> for header checks where long strings are legitimate.
> Problem reported by Mary Verge DeSisto, and tracked
> down with the help of John Beck of Sun Microsystems.
> The internal stab map did not obey the -m flag. Patch from
> Rob McMahon of Warwick University, England.
> The socket map did not obey the -f flag. Problem noted by
> Dan Ringdahl, forwarded by Andrzej Filip.
> The addition of LDAP recursion in 8.13.0 broke enforcement of
> the LDAP map -1 argument which tells the MTA to only
> return success if and only if a single LDAP match is found.
> Add additional error checks in the MTA for milter communication
> to avoid a possible segmentation fault. Based on patch
> by Joe Maimon.
> Do not trigger an assertion if X509_digest() returns success but
> does not assign a value to its output parameter. Based
> on patch by Brian Kantor.
> Add more checks when resetting internal AUTH data (applies only
> to Cyrus SASL version 2). Otherwise an SMTP session might
> be dropped after an AUTH failure.
> Portability:
> Add LA_LONGLONG as valid LA_TYPE type for systems that use
> "long long" to read load average data, e.g.,
> AIX 5.1 in 32 bit mode. Note: this has to be set
> "by hand", it is not (yet) automatically detected.
> Problem noted by Burak Bilen.
> Use socklen_t for accept(), etc. on AIX 5.x. This should
> fix problems when compiling in 64 bit mode.
> Problem first reported by Harry Meiert of
> University of Bremen.
Version 3.4.5-STABLE
This version is a maintenance release and contains bug fixes only
BUGFIX: First run / first spam notifications don't send for users in groups
BUGFIX: Permissions on dspam.sock are wrong mode
BUGFIX: Bogus signature retrieval errors in logs
BUGFIX: LMTP error codes reporting permanent errors for temporary failures
BUGFIX: ParseToHeaders' notspam- alias fails to change user correctly
first set of patches
- Many updates and bugfixes, in summary:
- better OpenSSL detection
- update c-client support
- use legacy flock() only on linux
- cope with out-of-disk-space halfways gracefully
various kinds of e-mail. It can be used to construct messages, send them,
access various kinds of message folders, filter spam and virussen, and so on.
The MailBox distribution is quite large, with about 140 related modules.
serialmail is a collection of tools for passing mail across serial
links. It works with qmail: you use qmail to deliver messages to
a maildir, and then serialmail to deliver messages out of the
maildir.
serialmail is designed to handle three common types of mail delivery
between a dialup computer and an ISP:
* Delivery to the ISP. The dialup computer sends all outgoing mail
to the ISP.
* AutoTURN delivery from the ISP. After the dialup computer makes
an SMTP connection to the ISP, it automatically receives an
SMTP connection back from the ISP if there is any new mail for
it. This provides the same power as ETRN but does not require
a special client.
* User-controlled delivery from the ISP. A user with a shell account
can switch from qmail-pop3d to serialmail without pestering the
sysadmin. The user can also decide whether undeliverable messages
should be left for POP retrieval or bounced back to the sender.
--
Changes since 1.3.1
===================
* tests/cmdline/maxsize.test, tests/cmdline/maxsize.baseline:
Changing initial tests from 23 bytes to 25 bytes because on 64 bit
systems the sizeof(Attr) is 24 bytes itself, was causing the test to
fail due to different output (but not incorrect program
operation). [Bug# 1121539]
* src/main.c (parse_cmdline):
ignoring negative values to maxsize option. [Bug# 1121539]
* tnef.c (copy_guid_from_buf):
[Bug# 1117373]. New function to parse a GUID
from a character buffer correctly; big endian machines interpreted it
incorrectly, forcing to be dealt with as little endian number.
(decode_mapi): Use of new function
(dump_mapi_attr): Fixing compiler warnings
* configure.in: adding stroul to checked functions
* configure.in, src/basename.h, src/basename.c:
[Bug# 1109683] - fixing declaration of basename
This also fixes PR pkg/29991.
--
Changes since 2.40:
===================
2.67 (December 03, 2004)
+ This is a patch release that fixes a bug in the
Whiplash signature scheme. The bug was in the new code
added to support canonicalization of domains. It
caused the signature algorithm to generate no signa-
tures on valid content.
2.66 (December 02, 2004)
+ Introduced support for country domain canonicalization
in the Whiplash signature scheme. This means domains
like foo.co.uk would be extracted correctly by
Whiplash. This change affords a considerable improve-
ment in accuracy.
+ Modified the revocation logic to do signature-only
communications with the server. All versions of
razor-agents prior to this sent the entire message on
razor-revoke, and even though the backend would drop
the messages after computing signatures, this entailed
a privacy risk. From this version on razor-agents will
_never_ send the contents of a revoked message to the
backend servers.
+ Fixed a bug in "se" (supported engines) computation,
which was broken when the "se" mask was larger than 8
bits. This would sometimes disable the use of engine 4
(ehash). This fix would also afford an increase in
accuracy due to ehash being used everytime.
+ Fixed a bug in report by message. Version 2.61 would
drop MIME headers on certain spam messages which would
cause the backend to ignore these messages as mal-
formed.
2.61 (July 06, 2004)
+ Introduced the Whiplash signature scheme. Whiplash
signatures are based on canonical domain names present
in URLs embedded in spam messages. A Whiplash signa-
ture is also a function of the length of the spam mes-
sage. It's important to note that not all whiplashes
are used as classifiers. The Whiplash engine is aug-
mented by sophesticated logic on the Razor2 backend to
select the Whiplashes that are used to filter spam.
+ Fixed a bug in MIME parser whereby some broken MIME
mails were invisible to the system. [Bug #788723]
+ We override the "use_engines" parameter in the config
file because this version supports different engines
but leaves the config file untouched. [Bug #984374]
+ Engine 1 support completely removed. Engine 1 was a
signature scheme compatible with the old razor v1 sig-
natures, which is no longer supported on the backend.
[Bug #975490]
Mb2md.pl is a Perl script that takes one or more Mbox format mailbox
files in a directory and convert them to Maildir format mailboxes.
Mb2md.pl does not only convert mailbox files into a Maildir but
also the /var/spool/mail/$USER mailspool file. It is smart enough
to not transfer a dummy message such as the UW IMAPD puts at the
start of Mbox mailboxes - and you could add your own search terms
into the script to make it ignore other forms of dummy first message.
* The memory usage when sending messages was reduced.
* The crash when ~/.gnupg not exist was fixed.
* A compile error with GTK+ 2.4 was fixed.
* Some bugs of the folder view were fixed.
* A problem that the Emacs gtk-key-theme didn't work on composition
was fixed.
2.1 - Tue Jan 15 17:59:46 EST 2002
- Meng Weng Wong made some edits.
(1) ~username and strftime interpolation into accept() arguments.
$mail->accept("~/Mail/In/%Y%m%d");
260(accept): accepting to /home/matest/Mail/In/20020115
(2) multiple-argument accept() will deliver to multiple
maildirs using single-inode multiple-hardlink style.
$mail->accept("~/maildir1/", "~/maildir2/");
20020115-01:55:31 matest@dumbo:~% ll maildir?/*/*
-rw------- 2 matest matest 416 Jan 15 01:55 maildir1/new/1011077720.13062_0.dumbo
-rw------- 2 matest matest 416 Jan 15 01:55 maildir2/new/1011077720.13062_1.dumbo
(3) emergency mailbox support if none of the accept()s work.
$mail->accept("/etc/bogus");
296(accept): calling accept handler accept_to_mbox(/etc/bogus)
359(accept_to_mbox): Couldn't open /etc/bogus: Permission denied
319(accept): unable to write to /etc/bogus; wrote to emergency mailbox /var/spool/mail/matest.
(4) deferral back to mailqueue if emergency couldn't get delivered.
296(accept): calling accept handler accept_to_mbox(/etc/bogus)
359(accept_to_mbox): Couldn't open /etc/bogus: Permission denied
359(accept_to_mbox): Couldn't open /etc/emergency: Permission denied
320(accept): unable to write to /etc/bogus or to emergency mailbox /etc/emergency either; exiting EX_TEMPFAIL
(5) fixed the From header bug http://rt.cpan.org/NoAuth/Bug.html?id=118
(6) fixed the user method override bug with (@_) argument passing
(7) autocreation of parent and maildir cur/new/tmp dirs as necessary.
260(accept): accepting to /home/mengwong/tmp/blah/some/really/deep/directory/
761(mkdir_p): /home/mengwong/tmp/blah/some/really/deep/directory/tmp doesn't exist, creating.
761(mkdir_p): /home/mengwong/tmp/blah/some/really/deep/directory doesn't exist, creating.
761(mkdir_p): /home/mengwong/tmp/blah/some/really/deep doesn't exist, creating.
761(mkdir_p): /home/mengwong/tmp/blah/some/really doesn't exist, creating.
761(mkdir_p): /home/mengwong/tmp/blah/some doesn't exist, creating.
761(mkdir_p): /home/mengwong/tmp/blah/some/really/deep/directory/new doesn't exist, creating.
761(mkdir_p): /home/mengwong/tmp/blah/some/really/deep/directory/cur doesn't exist, creating.
492(accept_to_maildir): maildir: hardlinking to /home/mengwong/tmp/blah/some/really/deep/directory/new/1011077537.12691_3.dumbo
304(accept): delivered successfully to 1 destinations.
(8) support for MIME, with direct inheritance from
Mail::Internet and MIME::Entity (as appropriate) instead
of containment in ->{obj}. added ->is_mime method.
(9) added "reply" method. uses Mail::Mailer::sendmail.
(10) STDERR is directed to the logfile.
(11) added test infrastructure.
2005-01-20 David F. Skoll
* VERSION 5.417 RELEASED
* Require MIME::QuotedPrint 3.03 to use the three-argument
"encode_qp" function. If we have an earlier version of
MIME::QuotedPrint, fall back to the one-argument version.
* Field/ParamVal.pm: The patch to strip trailing whitespace on
parameters was buggy and caused decoding errors. This has been
fixed.
2005-01-03 David F. Skoll
* VERSION 5.416 RELEASED
* Allow MIME::Tools to work with MIME::QuotedPrint 2.20 again.
The Makefile.PL will warn about potential problems, but will allow you
to proceed.
* Field/ParamVal.pm: Strip trailing whitespace when extracting
parameters. Apparently, not doing so can cause Perl to core dump
on certain badly-formed messages.
0.19 Wed Jan 02 20:59:19 2002
- assimilate Mail::ListDetector::Detector::Fml
0.21 Mon May 06 22:19:00 2002
- unassimilate Fml
- Patch from Peter Oliver for list owner messages
0.22 Thu Jun 27 21:15:00 2002
- Cleanup documentation to fix rt.cpan.org ticket 62
- Finally assimilate Mail::ListDetector::Detector::Fml properly
- Import into CVS
0.24 Sun Jul 06 2003
- I've lost the CVS repository, oh well, that's what CPAN's for.
- Add recognition for some mailman lists with minimal headers.
0.25 Mon Jul 21 2003
- Add mention of mailing list to README file.
- Integrate cleanup and new detector from Matthew Walker <matthew@walker.wattle.id.au>
0.28 26 Aug 2003
- Add Patch from Mik Firestone for Mailman on freebsd mailing lists (
and probably others).
0.29 13 Oct 2003
- Add patch from Matthew Walker for Communigate.
0.30 28 May 2004
- Add patch from Simon Cozens for use of Email::Abstract.
0.31 8 June 2004
- Add correction to previous patch from Simon Cozens.
- Add the following from Matthew Walker:
- tweak docs for Listbox
- for RFC2369 List-Post has URI in <>'s but may have comments, now extract
text from within <>'s to give to URI
- Majordomo now recognises lists using domo as unix user not just majordomo
- added new detectors for AutoShare, Google Groups, LetterRip, ListSTAR,
Lyris and Onelist
- added tests for all changes and additions
"Email::Abstract" provides module writers with the ability to write
representation-independent mail handling code. For instance, in
the cases of "Mail::Thread" or "Mail::ListDetector", a key part of
the code involves reading the headers from a mail object. Where
previously one would either have to specify the mail class required,
or to build a new object from scratch, "Email::Abstract" can be
used to perform certain simple operations on an object regardless
of its underlying representation.
"Email::Abstract" currently supports "Mail::Internet", "MIME::Entity",
"Mail::Message", "Email::Simple" and "Email::MIME". Other
representations are encouraged to create their own "Email::Abstract::*"
class by copying "Email::Abstract::EmailSimple". All modules
installed under the "Email::Abstract" hierarchy will be automatically
picked up and used.
"Email::Simple" is the first deliverable of the "Perl Email Project", a
reaction against the complexity and increasing bugginess of the
"Mail::*" modules. In contrast, "Email::*" modules are meant to be
simple to use and to maintain, pared to the bone, fast, minimal in their
external dependencies, and correct.
version 1.67: Thu Mar 31 12:05:31 CEST 2005
- Mail::Mailer unfolded the header before sending, which is
incorrect. Reported by [Byron Jones]
- Mail::Header refolded already folded lines destroying
blanks. Signaled by [Byron Jones]
Closes PR 29995.
-Wrote a script to automatically generate the Makefile and TARGETS.
-Fixed a problem with handling text files with no final newline.
-Added a new program, ezmlm-dispatch, to be run from a global
.qmail-default file
-Removed support for qmail older than version 1.02.
-Removed all references to "inhost" and "inlocal" which were completely
unused but still referenced in documentation and tests.
* Add "foo_log" booleans to enable or disable logging (enabled by default).
* Always run loggers as the "qmaill" user. This makes it simpler
to define alternate loggers.
