to trigger/signal a rebuild for the transition 5.8.8 -> 5.10.0.
The list of packages is computed by finding all packages which end
up having either of PERL5_USE_PACKLIST, BUILDLINK_API_DEPENDS.perl,
or PERL5_PACKLIST defined in their make setup (tested via
"make show-vars VARNAMES=...").
Pkgsrc changes:
- p5-Net-DNS not needed anymore.
Changes since version 2.82:
===========================
2.83 (May 8, 2007)
* Remove all uses of $' from code. This removes a global regex engine
slowdown. [issues.apache.org #5312]
* Comment out or replace shell commands with Perl equivalents. This
removes the prerequisites of uname(1) and GNU mkdir(1).
Pkgsrc changes:
- Added CHECK_INTERPRETER_SKIP to disable checks of some *.pm files.
Relevant changes since version 2.77:
====================================
2.82 (May 26, 2006)
· Always disconnect from discovery server after performing discovery.
This fixes a long standing bug wherein razor-report and razor-check
would attempt to report to or check against the discovery servers.
2.81 (Mar 16, 2006)
· Update service policy.
2.80 (Feb 27, 2006)
· Untaint filenames loaded from the config file. [Bug #1395719]
2.78 (Oct 01, 2005)
· When registering with a username and password, accept existing cre-
dentials if they authenticate successfully.
· When autoregistering, attempt to write a test identity before
attempting to register credentials.
· Always remove the existing identity symlink before overwriting, as
-e $fn can return false for a symlink that still exists.
· Ensure that checks and reports are sent to the appropriate servers.
[Bug #1267559]
Pkgsrc changes:
- Archive is only available as .tar.bz2.
Changes since version 2.72:
===========================
2.77 (Aug 15, 2005)
* Fix to a broken bunzip archive.
2.76 (Aug 15, 2005)
* When no reporter identity is found, attempt to register
automatically.
* When -home is specified on the command line, default
"global_razorhome" to the provided value. [Gentoo #101070]
2.75 (July 6, 2005)
* Removed two debugging statements accidentally checked into 2.74.
* Applied syslog patch from Debian bug #295727 to reintroduce support
for 'sys-syslog' and 'syslog' log targets. [Feature #1229433]
* Modified Makefile.PL to honor DESTDIR when installing section 5 man
pages. [Bug #1227167]
* Fixed failure for razor-agents to exit with error when unknown
parameters were specified. [Bug #1229450]
* Fixed bug for when razor-agents was invoked without ``-f'' but
reading from STDIN, causing the shell to be unusable until the
forked background process was killed off. [Bug #1229887]
2.74 (June 28, 2005)
* Fixed handling of configuration options; under certain
circumstances, neither the defaults nor the configuration file would
set necessary variables such as "listfile_discovery".
* Fixed handling of -home option; when provided, it will be accepted
without further checks.
* Fixed installation of man(5) pages by non-root users to local man
directories. [Patch #1227162]
* Reverted a patch that was intended to add support for overriding
razorhome under certain circumstances. The patch introduced new
issues with external program integration (eg. Amavis). [Bug
#1074391]
* Corrected a spelling error in a debug message.
* Added several defined checks to avoid unnecessary warnings when
manipulating server lists.
* Corrected the preprocessing fix shipped with 2.70 and updated the
test suite to match. [Bug #1001417]
* Updated preproc implementation (deHTMLxs) to match other clients.
Patch-aa is no longer necessary (creation of correct symlinks to
"razor-client").
This release fixes two recently discovered DoS vulnerabilities: Certain
HTML messages could crash the process and a bug sometimes caused server
discovery to go into an infinite loop.
Changes since version 2.67
==========================
2.72 (June 16, 2005)
+ "razor-client" no longer creates symlinks to itself
upon installation; four new scripts have been added to
the distribution to replace this functionality
("razor-admin", "razor-check", "razor-report",
"razor-revoke").
2.71 (June 15, 2005)
+ A fix to Makefile.PL script to correctly invoke
"razor-client" after installation. Thanks to Liam
Quinn for the patch.
2.70 (June 10, 2005)
+ Fixed preprocessing of unusual HTML messages. This
resolves the segfault issue in razor-agents. [Bug
#1001417]
+ Fixed handling of certain malformed headers.
+ Explicitly specify the record separator as "\n" when
reading files, to ensure that someone else hasn't set
it to undef. [Patch #537813]
+ "razorzone" is no longer supported and has been
removed from the documentation.
+ Allow the config file to set razorhome. [Bug
#1074391]
+ Razor Agents no longer go into an infinite loop when
discovery fails. [Bug #1016039]
+ Properly creates "razor-*" symlinks after installa-
tion. [Bug #874468]
+ Default to PERLPREFIX instead of PREFIX when
installing man5 pages. [Bug #1001320]
+ Removed a call to $sha1->reset() which was breaking
SHA1 calculation. [Bug #1004858]
+ "use_engines" is no longer supported and has been
removed from the documentation. [Bug #1120311]
+ Shuffle the discovery, catalogue, and nomination
server lists after loading them from disk; this pre-
vents razor-agents from always starting with the same
catalogue server.
+ Replace the complex DNS lookup logic for discovery
servers with a single DNS round robin. [Bug #604679]
+ Remove the ICMP ping logic for finding the "fastest"
catalogue server; the configuration option for this
logic is now ignored. [Support #739464]
+ Removed stale engine code for various signature types
that are no longer used.
This also fixes PR pkg/29991.
--
Changes since 2.40:
===================
2.67 (December 03, 2004)
+ This is a patch release that fixes a bug in the
Whiplash signature scheme. The bug was in the new code
added to support canonicalization of domains. It
caused the signature algorithm to generate no signa-
tures on valid content.
2.66 (December 02, 2004)
+ Introduced support for country domain canonicalization
in the Whiplash signature scheme. This means domains
like foo.co.uk would be extracted correctly by
Whiplash. This change affords a considerable improve-
ment in accuracy.
+ Modified the revocation logic to do signature-only
communications with the server. All versions of
razor-agents prior to this sent the entire message on
razor-revoke, and even though the backend would drop
the messages after computing signatures, this entailed
a privacy risk. From this version on razor-agents will
_never_ send the contents of a revoked message to the
backend servers.
+ Fixed a bug in "se" (supported engines) computation,
which was broken when the "se" mask was larger than 8
bits. This would sometimes disable the use of engine 4
(ehash). This fix would also afford an increase in
accuracy due to ehash being used everytime.
+ Fixed a bug in report by message. Version 2.61 would
drop MIME headers on certain spam messages which would
cause the backend to ignore these messages as mal-
formed.
2.61 (July 06, 2004)
+ Introduced the Whiplash signature scheme. Whiplash
signatures are based on canonical domain names present
in URLs embedded in spam messages. A Whiplash signa-
ture is also a function of the length of the spam mes-
sage. It's important to note that not all whiplashes
are used as classifiers. The Whiplash engine is aug-
mented by sophesticated logic on the Razor2 backend to
select the Whiplashes that are used to filter spam.
+ Fixed a bug in MIME parser whereby some broken MIME
mails were invisible to the system. [Bug #788723]
+ We override the "use_engines" parameter in the config
file because this version supports different engines
but leaves the config file untouched. [Bug #984374]
+ Engine 1 support completely removed. Engine 1 was a
signature scheme compatible with the old razor v1 sig-
natures, which is no longer supported on the backend.
[Bug #975490]
module directory has changed (eg. "darwin-2level" vs.
"darwin-thread-multi-2level").
binary packages of perl modules need to be distinguishable between
being built against threaded perl and unthreaded perl, so bump the
PKGREVISION of all perl module packages and introduce
BUILDLINK_RECOMMENDED for perl as perl>=5.8.5nb5 so the correct
dependencies are registered and the binary packages are distinct.
addresses PR pkg/28619 from H. Todd Fujinaka.
No longer dependent on Digest::Nilsimsa
External taint patches no longer necessary.
Changes since 2.36
* Applied another Makefile.PL patch from Michael Schwern to correctly
install manpages in part 5 of the manual set in various versions of
perl.
* Applied patch from Mark Martinec and Vivek Khera of Amavisd to
untaint various file targets obtained from user input. This is the
same patch pointed to by the SpamAssassin FAQ
[http://www.spamassassin.org/released/Razor2.patch]
* Support for HTTP 1.1 tunneling [SF patch #821324] by Jon Schewe.
* Applied Anne Bennett's patch to Logger.pm to introduce a new log
target, "syslog-sys", that talks to Syslog over a Unix socket rather
than a TCP socket.
* Applied Anne Bennett's patch to deHTML.xs to get rid of the type
mismatch warning.
* Removed computation of signatures that are no longer supported by
the backend -- engines 1, 2 and 3. Digest::Nilsimsa no longer
required by Razor Agents.
Beattie encountered on Linux.
Relevant changes sinc 2.22:
o Better compatibility of Makefile.PL with new MakeMaker
o C Code compiles with C compilers other than GCC.
o Detect and skip body parts that only contain MIME headers.
o Fixed a bug where razor-check would terminate prematurely
on messages for which it could not compute a signature.
o Introduced SOCKS support. Net::SOCKS is required in
order to use SOCKS. Specify socks_server in the config file.
o Fixed a bug where the MIME boundary was being spuriously set
in certain cases.
o A bug in the selection of zone prefixes in bootstrap
discovery was fixed.
o Razorhome is gleaned from the config file passed to
razor-agents, if all else fails. "razor-report
-conf=/etc/razor/razor.conf spam" will use /etc/razor
as its home if no other home is found (eg in
$HOME/.razor). To force a particular Razorhome value,
use the -home=path option.
o Force bootstrap discovery when all discovery servers are
unavailable. This fixes a bug where by razor-agents would
try to connect to the old Razor2 discovery server found in
servers.discovery.lst.
Fixes come from the SpamAssassin 2.60 release (originally from
http://www.ijs.si/software/amavisd/ (Thanks to amavisd-new, Mark
Martinec, and Vivek Khera!))
Fixes come from the SpamAssassin 2.60 release (originally from
http://www.ijs.si/software/amavisd/ (Thanks to amavisd-new, Mark Martinec,
and Vivek Khera!))
======== Changes since v 2.14 =========================================
2.22 (Nov 21 2002)
* Turned off verbose logging in ehash that was left on by mistake.
[vipul]
* Some user contributed additions to the FAQ.
2.21 (Nov 19 2002)
* Ephemeral Hash reverts to the entire content when both sections are
composed of whitespace. This makes a certain type of false positives
go away. [vipul]
* Razor2::Client::Core skips whitespace only message parts. [vipul]
* DebugLevel 15 prints out the content after preprocessing, just
before the signatures are computed. [vipul]
2.20 (Oct 15, 2002) (First Stable Version)
* If log file isn't writable for whatever reason, we write logs to
/dev/null. [vipul]
* We look for stray "\r"'s in the split_mime function. Thanks to Jim
<jim@ironchicken.org> for pointing this out. [vipul]
* Added a significantly faster XS version of deHTML code. [vipul]
* Made ::Agent taint friendly. [vipul]
* Added support for passing an already open filehandle to
"::Agent::checkit()" and "::Agent::parse_mbox()" [vipul]
* Made logic_method 4 the default. [vipul]
* Added Razor2::Syslog to the package. [vipul]
Changes:
- almost a complete (compatible) rewrite of Razor v1.
- uses new (fuzzy) signature algorithms to better spot 'mutating'
messages
- Spam reports are now validated based on 'reputation' of the submitter
in order to make it easier to eliminate false positives.
- Registration for submitters required.
- Revocation of spam reports is now possible.
Vipul's Razor is a distributed, collaborative, spam detection and
filtering network. Razor establishes a distributed and constantly
updating catalogue of spam in propagation. This catalogue is used
by clients to filter out known spam.
