INSTALL/DEINSTALL script creation within pkgsrc.
If an INSTALL or DEINSTALL script is found in the package directory,
it is automatically used as a template for the pkginstall-generated
scripts. If instead, they should be used simply as the full scripts,
then the package Makefile should set INSTALL_SRC or DEINSTALL_SRC
explicitly, e.g.:
INSTALL_SRC= ${PKGDIR}/INSTALL
DEINSTALL_SRC= # emtpy
As part of the restructuring of the pkginstall framework internals,
we now *always* generate temporary INSTALL or DEINSTALL scripts. By
comparing these temporary scripts with minimal INSTALL/DEINSTALL
scripts formed from only the base templates, we determine whether or
not the INSTALL/DEINSTALL scripts are actually needed by the package
(see the generate-install-scripts target in bsd.pkginstall.mk).
In addition, more variables in the framework have been made private.
The *_EXTRA_TMPL variables have been renamed to *_TEMPLATE, which are
more sensible names given the very few exported variables in this
framework. The only public variables relating to the templates are:
INSTALL_SRC INSTALL_TEMPLATE
DEINSTALL_SRC DEINSTALL_TEMPLATE
HEADER_TEMPLATE
The packages in pkgsrc have been modified to reflect the changes in
the pkginstall framework.
Pkgsrc changes:
- Generic option "online-tests" replaces "spamassassin-test-net".
- Removed underscore from package-internal variables (pkglint
complained).
- patch-ay disables the SPF plugin to avoid confusing warnings in the log
files.
- patch-az fixes http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4826.
Relevant changes since version 3.1.0:
=====================================
- better validate a number of different configuration options
- support new Mail::DomainKeys API, which changed incompatibly between
0.18 and 0.80 without warning
- more properly handle new Received header formats
- bug 4788: backport sa-update from 3.2 along with the local_state_dir
code, etc.
- bug 4760: strictly validate trusted/internal network configurations
- bug 4696: consolidated fixes for timeout bugs
- bug 3710: add timeout to connect so spamc -t works
- bug 4363: if a message uses CRLF for line endings, use it for header
rewrites as well
- bug 4748: add ExpressionEngine and Google redirector patterns
- bug 3815: add _RELAYCOUNTRY_ tag so that the RelayCountry plugin can
put in the list of countries relayed through
- bug 4090: x86_64 platforms (linux specifically) have an issue compiling
libspamc.so causing RPM build failures
- bug 4791: fix issue where perl would throw a UTF-8 warning for certain
messages
- bugs 4606, 4609: Adjust MIME parsing limits
- bug 4780: fix IP_ADDRESS & LOCALHOST regexes to correctly parse IPv6
addresses
- bug 4728: DUL rules should only use the last external IP, not all but
the first of the external IPs
- bug 4700: certain privileged configuration settings can inject code,
due to a bad fix for bug 3846. Back that out
(we've patched them). Wanted to wait with this for dovecot1.0beta4 but this
takes longer than I thought. Not worth bumping PKGREVISION, IMO.
Ok with tv.
Changes 2.56:
An off-by-one error in the multiplexor that could restart slaves
unnecessarily was fixed. Compilation errors on some systems were fixed.
A handful of other minor bugs were fixed.
Changes 2.55:
A new option allows you to reserve some slaves for connections from
localhost; this helps clientmqueue runs to succeed on busy servers.
Modern Vexira anti-virus scanners are supported; versions older than
Spring 2005 are no longer supported. A new "filter_helo" callback lets
you take action in response to HELO/EHLO. A new "action_insert_header"
function lets you prepend headers (rather than just appending them).
A new function lets you reject mail from hosts with bogus MX records;
for example, MX records that resolve to private IP networks or the
loopback address.
20060217
Bugfix: don't terminate with a non-standard exit status
when the pipe-to-command feature has a problem before it
executes the command. File: global/pipe_command.c.
20060223
Bugfix: detect integer overflow when multiplying time values
with non-trivial time units. File: global/conv_time.c.
20060307
Bugfix: reset the msg_cleanup() fatal error handler in child
processes. See also change 20060217. Files: postlock/postlock.c,
master/multi_server.c, global/mail_run.c, util/vstream_popen.c.
I don't quote changelogs for release 3.00 and 3.01, because those entry
only mention taking over maintainership.
Version 2.117 (2001/08/20)
The terms-of-use have been placed in the distribution file "COPY-
ING". Also, small documentation tweaks were made.
Version 2.116 (2001/08/17)
Added long-overdue patch which makes the instance method form of
send() do the right thing when given HOW... arguments. Thanks to
Casey West for the patch.
Version 2.114 (2001/08/16)
New special 'AUTO' content type in new()/build() tells MIME::Lite
to try and guess the type from file extension. To make use of
this, you'll want to install MIME::Types. The "AUTO" setting can
be made the default default (instead of "TEXT") if you set
"$AUTO_CONTENT_TYPE = 1, $PARANOID = 0". Thanks to Ville
SkyttE<#228> for these patches.
File::Basename is used if it is available. Thanks to Ville
SkyttE<#228> for this patch.
SMTP failures (in send_by_smtp) now add the $smtp->message to the
croak'ed exception, so if things go wrong, you get a better idea of
what and why. Thanks to Thomas R. Wyant III for the patch.
Made a subtle change to "as_string" which supposedly fixes a failed
MIME data.t test with Perl 5.004_04 on NT 4 sp6. The problem might
only exist in this old perl, but as the patch author says, not
everyone has climbed higher on the Perl ladder. Thanks to John
Gotts for the patch.
Added "contrib" directory, with MailTool.pm. Thanks to Tom Wyant
for this contribution.
Improved HTML documentation (notice the links to the individual
methods in the top menu).
> Major changes compared to the Turba H3 (2.0) versions are:
> * Submenu with address books and "Add" and "Search" entries in sidebar.
> * Distribution lists can contain contacts from multiple sources.
> * Shared address books.
> * Paged browse view.
> * Add files and threaded comments to contacts.
> * Edit several contacts at once.
> * Improved CSV import.
> * Keep names optionally unformatted.
> * Export more than one vCard at once.
> * New language: Icelandic.
> * Drop cached searches.
> * Compatible with PHP 5.1.
> * Improved MS-SQL support.
> * Permissions managed completely though administration interface.
> * Permission to restrict number of contacts.
> * Command line script to batch import vCards.
> Major changes compared to the IMP H3 (4.1-RC3) version are:
> * Small bugfixes.
>
> Major changes compared to the IMP H3 (4.0) versions are:
> * User changes:
> - Virtual Inbox and Virtual Trash folder.
> - "Empty Spam" menu item.
> - Stationery and form responses.
> - Not necessary to click on "Attach" button when attaching files.
> - Play sound on new mail.
> - Multiple message view.
> - Ability to create notes from email messages.
> - Improved message previews.
> - Import of photo attachments into a gallery application.
> - Send notification when linked attachments are downloaded.
> - Graphical representation of thread on thread view screen.
> - Less intrusive notifications when expanding addresses.
> - Encrypt PGP messages for all recipients in one message.
> - Always send new messages in "flowed" format.
> - Added Hebrew and Khmer translation.
> * Administrator changes:
> - Compatible with PHP 5.1.
> - Auto-detection of namespace information from IMAP server.
> - Permission to restrict folder creation.
> - Support for changing SMTP server/port on login.
> - More flexible custom email headers.
- More fixes for the state machine.
- Dealing with multi-message connections.
"pkgsrc" related changes:
- Honor ${PKG_SYSCONFDIR} and ${VARBASE}.
- Provide an "rc.d" script.
Changes:
- Sync with OpenBSD 3.9 branch.
No new functionality, only a few bug/documentation fixes.
- All major BSDs are supported now (NetBSD, OpenBSD, FreeBSD and DragonFly).
Thanks to Jeremy C. Reed for providing patches for DragonFly.
- remove patch-af, as it is already in the release
- take maintainership.
Changelog:
* src/compat/main.c: fix 'isync -w' writing .mbsyncrc to a wrong directory
* src/sync.c: less confusing uid ranges in debug
* src/sync.c: - sanitize flag handling of expired messages
- don't record we synced flags if we didn't
- remove now superfluous temporary rflags
* src/drv_maildir.c: less confusing error message on invalid mailbox.
* src/drv_imap.c:
revert 1.8 - what was i smoking?! the CREATE argument is already quoted;
we just extracted it from the previous command. ( that was patch-af )
* src/drv_maildir.c:
make flag changes unset "new" status - unless a ghost is acting in the
background, a flag change indicates that the message was at least
noticed.
makeinfo if no native makeinfo executable exists. Honor TEXINFO_REQD
when determining whether the native makeinfo can be used.
* Remove USE_MAKEINFO and replace it with USE_TOOLS+=makeinfo.
* Get rid of all the "split" argument deduction for makeinfo since
the PLIST module already handles varying numbers of split info files
correctly.
NOTE: Platforms that have "makeinfo" in the base system should check
that the makeinfo entries of pkgsrc/mk/tools.${OPSYS}.mk are
correct.
developer is officially maintaining the package.
The rationale for changing this from "tech-pkg" to "pkgsrc-users" is
that it implies that any user can try to maintain the package (by
submitting patches to the mailing list). Since the folks most likely
to care about the package are the folks that want to use it or are
already using it, this would leverage the energy of users who aren't
developers.
* 2.2.2 (stable)
* The crash bug that occurred when trying to move IMAP4 folders right
under the root folder was fixed.
* The crash bug that occurred after a message window was closed while the
search dialog was still open was fixed.
* Win32: The console window is newly created if --debug or --help option
is specified.
* Win32: The non-ASCII filename encoding problem on executing external
commands was fixed.
* Win32: The bug that the main window became not responsive when an error
occurred on automatic receiving while the window was minimized was fixed.
* Win32: Spanish translation was added for the installer.
* Win32: The installer was fixed so that it selects correct language on
environments other than Japanese.
16/09/2005 : V 1.6
- Removed the algorithm lightgreydomain as the new mxgrey
does better and simpler
- Removed the UPDATE option, now gld always update triplets.
- Fixed a minor flaw in the MXGREY algorithm.
- Now you can configure MXGREY to consider an ip as a safe
MX after X succesful greylists instead of only 1 . (read
gld.conf for details)
- Now gld updates the counters only when mail is not
greylisted
- Added Training mode, read gld.conf for details
- Now gld verify that if you supply a custom smtp code,
it's a 4XX code otherwise gld discard it and use 450 .
- If gld cannot connect to MySQL server on startup
it will not refuse to run anymore, but will set keepdbopen
to 0 and accept to run .
- The sample config file provided now only listen to loopback
only accept connection from localhost and runs as nobody/
nobody.
WARNING: if you were using lightgreydomain algorithm, it
has been discontinued use MXGREY in place, please read
gld.conf for details.
relevant changes:
-The bug that account names with filename-unsafe characters couldn't be
used was fixed
-The crash bug that occurred if non-ascii newsgroup names appeared while
getting newsgroup list was fixed
-The performance problem of the quick search while the summary was sorted
by thread date with descending order was fixed
This release is very important, and we strongly advise everybody to
update to the latest release.
Security Update
===============
This version contains a number of security updates that were brought
to our attention via a number of sources.
- In webmail.php, the right_frame parameter was not properly sanitized
to deal with very lenient browsers, which allowed for cross site
scripting or frame replacing. [CVE-2006-0188]
- In the MagicHTML function, some very obscure constructs were
discovered to be exploitable: 'u\rl' was interpreted as 'url' (privacy
concern), and comments could be inside keywords (allows for cross site
scripting). Both only affect Internet Explorer users. Found by Martijn
Brinkers and Scott Hughes. [CVE-2006-0195]
- The function sqimap_mailbox_select did not strip newlines from the
mailbox parameter, and thereby allowed for IMAP command injection.
Found by Vicente Aguilera. [CVE-2006-0377]
- install PREFIX/sbin/qshape
Updated postfix to 2.2.9
Most of this patch hardens the TLS implementation against DNS-based
attacks, and eliminates some anomalies from the TLS per-site policy
engine. See the TLS_README document for tips on how to avoid
DNS-based attacks that can change the server hostname that Postfix
uses for logging, for TLS per-site policies, and for server
certificate verification.
The patch also adds a workaround that prevents Postfix from repeatedly
trying to deliver mail to domains with a malformed MX record (for
example, with a null MX hostname). Postfix 2.2.9 bounces such mail
immediately.
