This seems to fix the security problem with '\0' in domain names which
was also present in openssl and nss. (CVE-2010-1192)
(The bundled changelog does only beat around the bush.)
can be simply turned on by setting USE_OLD_DES_API=yes. Modify
references to <openssl/des.h> to refer to <openssl/des_old.h> where
the old DES interface is expected. This is forward compatible with
future versions of OpenSSL.
in the process. (More information on tech-pkg.)
Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and
installing .la files.
Bump PKGREVISION (only) of all packages depending directly on the above
via a buildlink3 include.
Changes:
2004-04-20 Stable Version 1.0.3 released
----------------------------------------
2004-04-20 Brian Stafford <brian@stafford.uklinux.net>
* memrchr.c configure.in
Added memrchr() implementation for systems that don't have one.
* smtp-tls.c
Applied patches from Pawel Salek to check subjectAltName for
wildcarded domain name when validating server certificate.
Changes:
2002-09-12 Stable Version 1.0.1 released
--------------------------------------
* protocol.c smtp-auth.c smtp-bdat.c smtp-etrn.c smtp-tls.c
More thoroughly check return value from read_smtp_response().
* libesmtp.h errors.c
Added new "Client error" error code. This is just a cop-out,
used when an API called by libesmtp fails.
* base64.c
Make conversions immune to NULL source data,
* examples/mail-file.c
Cleaned up some compiler warnings
* siobuf.[hc]
Added a few extra sio_ calls. Not actually used in libESMTP though.
* concatenate.c errors.c getaddrinfo.c headers.c htable.c
* protocol.c siobuf.c
Don't perform zero length operations using the memxxx() functions.
This may avoid segfaults on some platforms or libraries.
* siobuf.c
Improved handling of flushes in sio_write() particularly in the
case where data would exactly fill remaining space in the buffer.
* rfc2822date.c
Correct leap year compensation for January and February in
libesmtp_mktime().
* examples/Makefile
Changed compiler flags from -ansi to -std=c99 and added -W
* headers.c
Eliminated bug where find_header() could pass -1 to the length
argument of memchr() causing a core dump on some architectures.
* libesmtp-private.h protocol.c smtp-bdat.c
M$ Exchange does not accept a chunk size of 0 in BDAT 0 LAST as
explicitly permitted by RFC 3030, *sigh*. Hackish workaround
implemented.
* configure.in Makefile.am
Added DIST_SUBDIRS macro to make sure tarball gets built properly.
This one slipped past 'make distcheck' last time for some reason
but then autoconf & friends are totally inscruitable.
* ntlm/ntlmdes.c
OpenSSL 0.9.7 changes some typedefs. Changed to suit, should
still be compatible with previous OpenSSL versions.
systems: if no /usr/include/des.h is present, symlink
${BUILDLINK_DIR}/include/openssl/des.h to ${BUILDLINK_DIR}/include/des.h,
so the code can always see the old interface as <des.h>.
changes:
-bugfixes
-build framework modifications
-USE_LIBTOOL instead of .include libtool/buildlink
-add a patch to include <des.h> instead of <openssl/des.h> to make it
build with openssl-0.97 -- don't know whether this works with non-NetBSD
systems; if needed, a link into .buildlink/include should help
as mail/libesmtp.
Originally in PR#16146 from Alex Newman.
libESMTP is a library to manage posting (or submission of) electronic
mail using SMTP to a preconfigured Mail Transport Agent (MTA).
It may be used as part of a Mail User Agent (MUA) or another program that
needs to post electronic mail but where mail functionality is not
the program's primary purpose.
