Changes from 4.0.4 to 4.0.5:
----------------------------
1. Add debug trace call with OpenSSL library version.
2. Added 'tls-options' configuration file option.
3. Added 'tls-workarounds' boolean option.
4. STLS errors (except for timeout) no longer fatal.
5. Added sample xinetd configuration file.
6. Additional checks for networking libraries.
7. Pick up LDFLAGS from environment, if set.
8. Added '--enable-32-bit' and '--enable-64-bit'
9. Applied patch from Jeremy Chadwick to fix pathname trimming in
standalone mode.
10. Fixed (non-root) buffer overflow.
11. Fixed '-no-mime' appended to user name (reported by Florian
Heinz).
12. Fixed response message when identical MDEFs defined multiple
times (reported by Florian Heinz).
- Remove extra rule line in install target. (It tried to do make on
password directory.)
- Solaris's /usr/ucb/install dosen't accept number with -g option.
* Fixed DOS attack seen on some systems.
* Fixed "noop has null function" log entry.
* Allow '-p' to be used when APOP not defined (noted by Daniel Senie).
* Enforce ClearTextPassword even without APOP (noted by Daniel Senie).
* Restrict clear-text-password=never to APOP.
* Restrict clear-text-password=tls to QPOP_SSL.
* Fixed qpopper hanging on I/O error on some platforms.
It would never adds /usr/local/include to include path.
Address to pkg/13558. This change dosen't solve pkg/13558, but it solve
the problem when /usr/local/include/gdbm.h exists (by installing gdbm without
pkgsrc or with pkgsrc setting PREFIX=/usr/local.)
Release note.
4.0
Supports TLS/SSL security.
'-p' option now has value '4' to permit plain-text passwords
under TLS/SSL.
Now uses a cache file to retain spool index across sessions.
This dramatically speeds up session start when no new mail has
arrived.
'-l' option added to specify TLS/SSL support.
Lots of TLS/SSL options added. See the Administrator's Guide
for details.
'-v' option added to report current version and exit.
'make install' added.
Lots of compile-time options now available at run-time. See
the Administrator's Guide for details.
Integrated poppassd into build.
And here is changes from 4.0.
Changes from 4.0.2 to 4.0.3:
----------------------------
1. Don't call SSL_shutdown unless we tried to negotiate an
SSL session. (As suggested by Kenneth Porter.)
2. Fix buffer overflow (reported by Gustavo Viscaino).
3. Fixed empty password treated as empty command (patch
submitted by Michael Smith and others).
4. Added patch by Carles Xavier Munyoz to fix erroneous
scanning for \n in getline().
5. Fix from Arvin Schnell for warnings on 64-bit systems.
6. Added patch by Clifton Royston to change error message
for nonauthfile and authfile tests.
7. Added 'uw-kludge' as synonym for 'uw-kluge'.
Changes from 4.0.1 to 4.0.2:
----------------------------
1. Added fix for XTND XMIT (sent in by Jacques Distler and
others).
2. Fixed makefile problems with poppassd compile and install
(sent in by Steven Champeon).
3. Increased maximum spool path length from 64 to 256.
4. Added more debug code when genpath() runs out of room.
5. Changed C++ style comments to C style in poppassd.c
6. Changed poppassd's UID check to be the same as Qpopper's
(which is that if BLOCK_UID is defined we use that value,
otherwise it defaults to 10).
7. Added poppassd expect strings for DEC True 64 (sent in by
Andres Henckens).
Changes from 4.0.1b1 to 4.0.1 (final):
--------------------------------------
1. Fixed typo in popper/pop_init.c if DONT_CHECK_HASH_SPOOL_DIR
defined.
Changes from 4.0 to 4.0.1b1:
----------------------------
1. Messages with lines longer than 512 characters are no longer
garbled when sent to the client.
2. Added patches from Michael C Tiernan to fix makefile problems.