INSTALL/DEINSTALL script creation within pkgsrc.
If an INSTALL or DEINSTALL script is found in the package directory,
it is automatically used as a template for the pkginstall-generated
scripts. If instead, they should be used simply as the full scripts,
then the package Makefile should set INSTALL_SRC or DEINSTALL_SRC
explicitly, e.g.:
INSTALL_SRC= ${PKGDIR}/INSTALL
DEINSTALL_SRC= # emtpy
As part of the restructuring of the pkginstall framework internals,
we now *always* generate temporary INSTALL or DEINSTALL scripts. By
comparing these temporary scripts with minimal INSTALL/DEINSTALL
scripts formed from only the base templates, we determine whether or
not the INSTALL/DEINSTALL scripts are actually needed by the package
(see the generate-install-scripts target in bsd.pkginstall.mk).
In addition, more variables in the framework have been made private.
The *_EXTRA_TMPL variables have been renamed to *_TEMPLATE, which are
more sensible names given the very few exported variables in this
framework. The only public variables relating to the templates are:
INSTALL_SRC INSTALL_TEMPLATE
DEINSTALL_SRC DEINSTALL_TEMPLATE
HEADER_TEMPLATE
The packages in pkgsrc have been modified to reflect the changes in
the pkginstall framework.
backslashes anymore. A single backslash is enough. Changed the
definition in all affected packages. For those that are not caught, an
additional check is placed into bsd.pkginstall.mk.
Changes:
### SECURITY BUGFIXES
- Fetchnews did not detect timeouts while it was downloading an article
header, which malicious upstream servers could exploit to mount
a denial of service attack against the fetchnews client. See
leafnode-SA-2005-02.txt. CVE Name: CAN-2005-1911
### BUGFIXES
- Bugfix sed expression in makesubst script. (Reported by Jeff Zacharias.)
### CHANGES
- texpire now tags the message.id expired count with "message.id" rather
than "total:" to avoid misleading the user who assumes that "total:"
would have to be the sum of the group counts. See also the FAQ change
below. SourceForge bug #1215453.
- When debugmode and verbose mode are set, leafnode programs now print a
warning to stdout that the user should check syslog.conf and the
syslog output rather than the screen print for debugging and sleeps for
three seconds.
### DOCUMENTATION
- Add FAQ entry to explain discrepancies between texpire group counts
and message.id expired articles counts.
- Add FAQ entry to explain influence of Gnus' gnus-read-active-file
setting on lost subscriptions, and extend stop fetchnews from
unsubscribing FAQ. Debian bug #307685.
- Drop FAQ entry on license issues as some parts of leafnode are in fact
GPLd.
- Drop FAQ entry on why old articles aren't posted, obsolete since
1.9.33.
- INSTALL and INSTALL_de have been polished.
- Add a hint that syslog.conf must be edited to config.example.
- leafnode(8) mentions that LIST ACTIVE keeps an existing subscription
fresh. CVS:
----------------------------------------------------------------------
----------------------------------------------------------------------
distinfo CVS:
----------------------------------------------------------------------
* Fix segfault when timeout or connection reset encountered while
article header is read.
* fetchnews will no longer re-fetch the active file for a server if it
has been completely received even if fetching articles from this server
encounters a problem. Long-standing bug. Debian bug #70052.
* fetchnews will now properly mark the active for complete re-fetch if
it says so. Previously, it forgot the mark in some circumstances. A
problem fetching the active file or descriptions for a newly added
server will now mark the active for re-fetch even if articles have
successfully been retrieved from the same server.
* Fix use-after-free segfault when server dies while body is being
received.
* Support quoted strings on the right hand side of configuration lines.
* Support IPv6 in fetchnews as well.
* In LIST ACTIVE/GROUP, keep group interesting in spite of being
pseudo (which includes empty) as long as it is interesting. Avoids
unsubscription of low-traffic groups that fall empty.
in the process. (More information on tech-pkg.)
Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and
installing .la files.
Bump PKGREVISION (only) of all packages depending directly on the above
via a buildlink3 include.
LEAFNODE_DATA_DIR, LEAFNODE_USER and LEAFNODE_GROUP, to be used by leafnode
to specify the data dir, the user and the group, defaulting to 'news'.
Note: the default is the same as for inn.
Pointed out by Georg Schwarz in mail to tech-pkg.
* nntpd will now disable ln_log()'s sending its logging to the
console (stderr usually), to prevent them from being seen by the
newsreader, which then gets confused.
* Usage fixes and usage info update
* Fix memory leaks
* Other bug fixes
For a full listing, please see the ChangeLog supplied with the source
code.
Pkgsrc changes since previous version:
* Add the news user if necessary (and be compatible with the INN package).
* Use bsd.pkg.install.mk.
Vendor changes since previous version:
(see the Changelog for more details)
* Security fix. Do not lock up when the news header ends prematurely.
* Revise some memory handling and catch out-of-memory conditions.
* Fixes to syslog handling.
* Support XOVER without argument.
* Fix SEGV in fetchnews.c.
==============================================================================
* 1.9.43, 2003-09-04
### INCOMPATIBLE CHANGE
- In the traditional spool, newsgroups with all-numeric components show up
with a - (minus, hyphen) prefixed to the number, the newsgroup example.1234
will be stored as /var/spool/news/example/-1234.
It is believed this change does not cause troubles because news systems that
offered the traditional spool have been incapable of providing news access,
and because the count of news groups with such names is way below 0.1% on
the news servers I have access to. The gain in functionality justifies the
incompatibility.
NOTE: this only affects newsreaders that directly access the spool.
NNTP-based newsreaders will see no difference.
### BUGFIXES
- Fix leafnode.8 manual pages (EN and DE languages) to explain 0 and negative
values for expire/groupexpire.
- Avoid premature abort (that causes .overview and groupinfo files to become
stale) when the stdout becomes disconnected. Reported by Sytse van Slooten.
- Make sure that texpire fixes the groupinfo lines of groups in "archive mode"
(groupexpire -1). Reported by Sytse van Slooten.
- Repair groupexpire 0 (= use global default, rather than expire immediately).
Broken since 1.9.23.
- Make sure that fetchnews complains when a timeout happens while reading
newsgroups lists ("active file") or newsgroup descriptions. Found after a
related report from Tim Daneliuk.
- Use different fix for newsgroup names with all-numeric components that does
not require two stat() calls in XOVER handling. Tracked down and reported by
Rein Klazes.
- Remove bogus error messages "article * is below/above the *-water mark" that
occur when reading a group that fetchnews is fetching into. Reported by Rein
Klazes.
- Make sure XOVER related error messages don't show up in the NNTP client.
### CHANGES
- fetchnews puts stdout into line buffered, or -- failing that -- unbuffered
mode (Patch by Mark Brown, Debian maintainer).
- leafnode processes warn (syslog and stderr) when a groupexpire is set to 0
(which means "use the default", which some users may not be aware of).
### DOCUMENTATION
- Added FAQ item on running leafnode as nntps server.
- Mention SuSEconfig difficulties with /etc/hosts in README-FQDN*
- Clarify item #13 in INSTALL.
==============================================================================
* 1.9.42, 2003-06-27
### SECURITY RELEVANT BUGFIXES
- Fix hang when trying to download an article that lacked mandatory headers.
(Very old bug, recently found by Joshua Crawford)
NOTE: this assertion that the bug is security relevant (denial of service)
has been made after 1.9.42 release.
### BUGFIXES
- Check lastreply() against NULL, in an effort to fix obscure sporadic and
non-reproducable crashes on OpenBSD sparc64. (Reported by Bruno Rohee)
- Fix bogus "Cannot open .../interesting.group/group.name for reading" when a
group subscription has expired. (Reported by Andreas Muck)
### CHANGES
- The ChangeLog file has been split, older parts (leafnode 1.9.31.rel and
before) have moved to the "new" ChangeLog.old file.
==============================================================================
* 1.9.41, 2003-05-22
### BUGFIXES
- Fix the "leafnode keeps fetching a group I've unsubscribed from long ago"
bug that haunted leafnode since 1.9.18 at the latest and that was more
prominent with the delaybody migration fixes of 1.9.33. Reported by Andreas
Muck and Gerry Doris.
- "make clean" no longer erases t.pcre_extract
### CHANGES
- Add an EXPERIMENTAL feature, delaybody_in_situ. This may work around
problems with particular newsreaders in delaybody mode. Do not rely on this
feature for now, and do send feedback if you use it, regardless of whether
it works or not. Defaults to off (compatible with previous versions). If you
don't know what it is about, leave it off.
- Some messages in fetchnews have been reworded to make them clearer and more
helpful.
### PORTABIILTY
- Find tcpd on OpenBSD at build time. Patch by Bruno Rohee.
==============================================================================
* 1.9.40, 2003-05-08
### BUGFIX
- Leafnode no longer aborts when using the replacement snprintf function
(FreeBSD) and is about to display a pseudo article.
Summary of changes since 1.9.31:
Bug and documentation fixes including:
* fetchnews_check_date.c: Portability: don't pass time_t to
syslog(...%ld...), sizeof time_t != sizeof long on 64bit FreeBSD,
reported by Christian Weisgerber <naddy@mips.inka.de>.
* fetchnews_check_date.c: Check for overflow of time difference.
Paranoia mode, someone needs to hose his clock by at least 68 years
to run into this.
* miscutil.c, TODO: Change to spooldir at the end of initvars()
(after changing uid/gid) to avoid barfing when run from
misconfigured cron.
* pcre_extract.c: Fix abort when extracting string, introduced with
previous strlcpy -> xstrlcpy commit. Reported by Joshua Crawford
<mortarn@softhome.net> Add debug variable to conditional TEST part
to use this code standalone.
* fetchnews.c: Several bug fixes
Please see the ChangeLog file in the source distribution for more details.
Summary of changes since 1.9.27 (please see the ChangeLog):
* Add leafnode-version.
* Various changes to fetchnews.c including:
+ In verbose mode, print if we're using the STAT
command or the HEAD workaround.
+ nntpactive: cache current time, saves time() calls and gives a
consistent 'age' for the newsgroups.
+ Avoid duplicate articles that raced from another server
against our fetchnews from ending up in failed.postings. We
assume that a server that refuses a posting with 441 435
Duplicate can at the same time deliver it to STAT (or HEAD if
the workaround is in effect).
+ Only touch active.read if the active has been successfully written.
+ Also apply only_groups_pcre when updating the active, to avoid
presenting groups that are not really fetched.
+ Bugfix: cope with multiple upstreams that have the same server name
but different ports.
* Various changes to nntpd.c including:
+ Point to syslog when reading the configuration fails.
+ Fix very subtle and intricate infinite loop bug
* Various changes to nntputil.c. Blacklist STAT for "NNTP news cache."
Whitelist NewsCache 1.1.*. Whitelist NewsCache 0.99.18, 0.99.19, 0.99.2?.
* Changes to activutil.c including:
+ Check for duplicate newsgroups after reading, before writing and after
merging the active file.
* Fixs for SEGV problems to activutil.c and artutil.c
Differences to Leafnode version 1.9.26:
* Bug fixes and changes including:
+ checkpeerlocal.c:
% Fix infinite loop problem when interface list is longer than
2 kB (reported by Brian Somers).
% Fix for non-IPv6 compilation on Solaris
% Fix compiler warnings
+ Portability fixes for 64bit platforms in activutil.c, nntpd.c
and texpire.c
+ nntpd.c: if allowstrangers is set, don't call checkpeerlocal
at all.k
(For more details, please see the Leafnode ChangeLog file)
Differences to previous NetBSD package:
* Use devel/pcre rather than the one supplied with Leafnode.
Differences to Leafnode version 1.9.22:
* Bug fixes and changes including:
+ No longer install lsort
+ Merge in timeout_client patch from Jonathan Larmour
+ Fix file descriptor leak in markdownload()
+ No longer emit "400 Service discontinued" to clients.
+ Drop connection when the upstream server runs NNTPcache 2.3.x
+ More verbose POST reject messages.
+ Fix two filtering bugs in fetchnews.
+ Expire groups that are not in group.info
+ Fix several memory leaks (e.g. in fetchnews.c, newsq.c &
artutil.c)
+ Fix possible overflow in nntpd.c
+ Some speed improvements (e.g. in getline.c and mastring.c)
+ Fix bogus error messages.
+ Several documentation fixes.
+ Various fixes from Leafnode 2.
(For more details, please see the Leafnode ChangeLog file)
as news/leafnode.
Leafnode is a USENET software package designed for small sites, with a
few tens of readers and only a slow link to the net.
The work in this package is based on that of Ingolf Steinbach
in PR#13830. wiz@ made some suggestions as well. Thanks to both of them.
