Changes (new this version)
Added -404 option to specify a "404 string" on the command line
Added plugin to chek for PUT and DELETE
Additional checks for HTTP methods
Additional checks for headers
Other bugfixes, please see the CHANGES file for more details
Pkgsrc changes:
- some cleanup of the Makefile to shut up a few pkglint notes and warnings
(USE_TOOLS, SUBST_CLASSES).
Changes since version 3.1.7:
============================
3.1.8 is a major bug-fix release, including a potential DoS. The major
highlights are:
- bug 5318: fix for CVE-2007-0451: possible DoS due to incredibly
long URIs found in the message content.
- bug 5240: disable perl module usage in update channels unless
--allowplugins is specified
- bug 5288: files with names starting/ending in whitespace weren't usable
- bug 5056: remove Text::Wrap related code due to upstream issues
- bug 5145: update spamassassin and sa-learn to better deal with STDIN
- bug 5140 and 5179: improvements and bug fixes related to DomainKeys
and DKIM support
- several updates for Received header parsing
- several documentation updates and random taint-variable related issues
This version (from 0.19 and up) also recognises DomainKeys signatures in
addition to DKIM signatures.
Pkgsrc changes:
- Converted the paths of script files to be skipped during
"check-interpreter" phase from absolute to relative paths, otherwise it
wouldn't work anymore.
Changes since version 0.18:
===========================
Version 0.22 - released 2007-01-19
* fixes a couple very minor bugs
* some cosmetic changes to error messages
Version 0.21 - released 2006-11-29
* fixes two bugs, see ChangeLog for details
Version 0.20 - released 2006-10-24
* now supports verifying multiple signatures (the result returned is based
on the "best" available signature)
* now supports adding multiple signatures in one pass (to use this, you
need to create a "signer policy"; see scripts/dkimsign.pl for an example)
* now supports signing/verifying signatures for the older DomainKeys standard
* now implements Internet Draft draft-ietf-dkim-base-05, including:
* support for the version (v=) tag
* eliminated "control character detected in message" error message
Version 0.19 - released 2006-06-15
* now supports earlier versions of Perl (5.6.1 and up).
Slightly adjust the logic as SuSE < 9 is not supported anymore
and all systems but Linux will need the emulation anyway. Still
messy, but better. Mark DragonFly as supported.
