outdated pgp helper filters. This was okay'd by maintainer,
Kimmo Suominen.
This fix will close my PR 22226.
The pgpdecode shell script has an insecure tmp file issue.
These pgp help scripts were rewritten in perl and the author no
longer uses pine and possibly the scripts may not work with new
pine versions.
So now MESSAGE suggests installing the security/pinepgp package
instead. Also available are wip/pgpenvelope and wip/pine-pgp-filters
and when they are available in regular pkgsrc these will be
suggested in the MESSAGE too.
Patch supplied by martti.kuparinen@iki.fi in PR pkg/12222
Changes in 4.33
* NNTP authentication causes crash
* Attachment viewing broken
* Display-Filters and Url-Viewers with quoted arguments in config
broken
* Reverse sorting doesn't work correctly with filters
* Some combinations of non-ascii characters in subject cause crash
* Add version information to PC-Pine
* Top line in news index was painted incorrectly at times
* Crash caused by debugging when > 1K config lines are present
* PC-Pine LDAP crash caused by using incorrect memory free routine
* Save size check was disabled in multi append
Changes in 4.32
* File attaching broken (double filename) in PC-Pine
* Postponing loses second reply-to address
* Obscure crash when sorting by Threads
* Temporary file vulnerabilities
* Crash when NNTP authentication aborted
* Make /secure work again (broken in 4.30)
* Setup printer list problems with $PRINTER
* Recognize Re[arbitrary stuff]: reply syntax
* Allow for attaching files on a Windows network drive
Changes in 4.31
* Crashes when sorting by Threads
* Text of last message could be invisible with header larger than 4096
bytes
* Fixed a few buffer overflow possibilities
* Many problems if compiled without -DDEBUG
* Eliminated length restriction on address book comments
* Couldn't expand collections when selecting if combined-folder-display
set
* List options set only in fixed config didn't work
* Filtering based solely on scores didn't work
* Filtering to non-existent folder didn't ask to create the folder
* Save to default folder didn't work if the folder didn't already exist
* Crash when using WhereIs in Setup/Kolor with color turned off
* News collections would sometimes show up doubled until restarting
* Crash when accepting default in shuffle folder list command
* PC-Pine didn't always save window position
* Last-folder-used rule didn't always save the name of first saved
folder
* Rule editor address selector should allow multiple addresses
* Added Replicate command for Rules
* News validation doesn't validate against multiple news servers
* Reply to some text/html messages with attachments incorrectly set
content-type to text/html
* mail-directory setting in pine.conf doesn't work
with libimapuw (at least on ELF) _need_ to explicitly bring in -lssl -lcrypto.
In the future, when updating a package, _please_ check any packages which depend
on that package to make sure they aren't broken by the change. It took a _long_
time to find out that pine was broken on this machine (a SparcClassic).
Fixes another security hole...
Full list of changes:
* Configuration flexibility
+ pine configurations can now be stored remotely on an imap
server for access from different locations without the need
to configure for each location.
+ configuration may be split into two parts: generic
configuration and exceptional, per-platform configuration.
+ signatures can now be stored remotely or as part of the
pinerc file
+ for configuration options which are lists, inheritance is
supported
* New security features
+ SSL support for Unix Pine (source code only)
+ SSL enhancements for PC-Pine
* Minor rule enhancements
+ status of a message (New, Deleted, etc.) can now be used as
criteria for pattern matching.
+ "move-only-if-not-deleted" option in filtering to lessen the
chance of messages being filtered more than once when running
multiple pine sessions.
+ ability to set arbitrary headers in roles.
+ news filtering made more efficient.
* Basic threaded sorting (Expanded functionality to be added in a
future version).
* Enhanced MAPI support for PC-Pine
* Various other new features and configuration options
+ alternate-compose-menu
+ by-replyto for saved-msg-name-rule
+ check-newmail-when-quitting
+ continue-tab-without-confirm
+ expose-hidden-config
+ expunge-only-manually
+ incoming-startup-rule additions
+ literal-signature
+ mark-for-cc
+ prefer-plain-text
+ pruning-rule, for monthly sent-mail renaming and deleting
+ quell-extra-post-prompt
+ hidden feature allow-changing-from defaults to on
* New command line options:
+ -p , pinerc can now refer to a remote mailbox which
contains the configuration file
+ -x , is how you override your default
pinerc settings with exceptions for a particular platform,
may be local or remote
+ -aux , allows you to tell
Pine the local directory to use for auxiliary files when
pinerc is remote (PC-Pine only)
+ -copy_pinerc and -copy_abook options
+ -v option
Bugs that have been addressed in this release include:
* Incoming mail with an extremely long From address can cause a
buffer overflow on the stack (security)
* X-Keywords crash for unix formatted mailboxes
* Composer word wrapping needlessly wraps words
* New messages appear in zoomed view
* "Bad msgno 0" filtering crash
* "+" during login doesn't always mean that SSL is being used
* news filtering refilters messages that had already been filtered
* Goto and Save can't access folders that are readable but not
listable
* Goto doesn't allow access of folders outside of a Collection List
* PC-Pine SSL functionality broken in Windows 2000/Millennium
* FromOrTo and To in index-format don't work for newsgroups
* Sorting by score doesn't always work
* Viewing of very large messages uses more memory than is need
* Loss of body for reply to multipart/signed mime messages
* Pine crashes when replying to or forwarding messages with certain
types of attachments
* Brackets are falsely recognized as url characters
* Crash when enclosing options in quotes for PC-Pine
* Newsgroup posting doesn't allow posting to additional news servers
New in Pine
Version is mainly intended to fix bugs introduced in previous
versions.
Bugs that have been addressed in this release include:
* 'N' flag not preserved across sessions
* 'N' flag not cleared when messages containing non-text pieces
viewed
* Sort failure using non-UW IMAP servers
* Linux port: failure to recognize resized display
* Problems with quoted /user= argument in smtp-server config
* Transient (e.g., mistyped password) authentication failures not
reported
* Rare cases of deleted header lines reappearing after ^X in
Composer
* Customized headers Bcc, To, Cc and Lcc not shown when posting news
* Problem with role pattern vs. color patterns in a file
* Problem with color display vs. single line scrolling
* Last line of one-page message not displayed in rare cases
* Text in Reply/Forward of encapsulated multipart/alternative and
signed missing
* Failure to recognize list management headers in sorted folder
* Attachments sometimes marked for deletion when scoring in use
* Delayed notification of messages filtered from Inbox to current
folder
* WhereIs to start or end of Folder List screen didn't
* PC-Pine crash selecting text from secondary window
* PC-Pine instances of "FOLDER CLOSED DUE TO ACCESS ERROR"
General improvements include:
* Filter performance and interface tuning:
+ User-Interface changes to avoid accidental deletion of mail
+ Action Folders local to PC-Pine no longer require
double-backslashes
+ Improved expunge performance with filters enabled
* NNTP performance improvements in MESSAGE INDEX screen
* Role Command (#) improvements
* Improved display of addresses containing comma in personal name
* Numerous Text/HTML parser improvements
* Continued help text improvements
