CVS log for pkgsrc/mail/qpopper/distinfo

Up to [cvs.NetBSD.org] / pkgsrc / mail / qpopper

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

qpopper: Include <fcntl.h> for open(2) and friends.

mail: Replace RMD160 checksums with BLAKE2s checksums

All checksums have been double-checked against existing RMD160 and
SHA512 hashes

The following distfiles were unfetchable (possibly fetched
conditionally?):

./mail/qmail/distinfo netqmail-1.05-TAI-leapsecs.patch

mail: Remove SHA1 hashes for distfiles

Regen.

Drop SSLv3-only support. Don't look into internals of SSL structures.

qpopper: add missing includes

Drop support for SSLv2. Bump revision.

Add SHA512 digests for distfiles for mail category

Problems found locating distfiles:
	Package mutt: missing distfile patch-1.5.24.rr.compressed.gz
	Package p5-Email-Valid: missing distfile Email-Valid-1.198.tar.gz
	Package pine: missing distfile fancy.patch.gz
	Package postgrey: missing distfile targrey-0.31-postgrey-1.34.patch
	Package qmail: missing distfile badrcptto.patch
	Package qmail: missing distfile outgoingip.patch
	Package qmail: missing distfile qmail-1.03-realrcptto-2006.12.10.patch
	Package qmail: missing distfile qmail-smtpd-viruscan-1.3.patch
	Package thunderbird24: missing distfile enigmail-1.7.2.tar.gz
	Package thunderbird31: missing distfile enigmail-1.7.2.tar.gz

Otherwise, existing SHA1 digests verified and found to be the same on
the machine holding the existing distfiles (morden).  All existing
SHA1 digests retained for now as an audit trail.

Update qpopper to 4.1.0.

4.1

* IPv6 support
* Significantly improved performance
* Cygwin compatibility (for use under Windows)
* Ability to execute arbitrary programs when users log in
* And lots more

some improvement and fixes for qpopper and poppassd.
qpopper:
* add user-destdir support
* add ${QPOPPER_USER}:${QPOPPER_GROUP} to PKG_USERS, fixes PR#28807.
* honor VARBASE.
common:
* update ipv6 patch to appropriate one for base version.
* some pkglint cleanup.

Bump PKGREVISION.

getline -> get_line

Update qpopper package to 4.0.9.

Changes from 4.0.8 to 4.0.9:
-----------------------------
 1.  Fix crash if too many MDEF commands entered.

Don't run qpopauth -init -safe during installation, it destroys the
symmetry between installation from source and from binary package.
Annoate MESSAGE accordingly, so that those using apop can do it
themselves.  Bump revision

Fix errno.

Pullup ticket 539 - requested by Adrian Portelli
security update for qpopper

Revisions pulled up:
- pkgsrc/mail/qpopper/Makefile		1.49-1.50
- pkgsrc/mail/qpopper/Makefile.common	1.14-1.15
- pkgsrc/mail/qpopper/PLIST		1.4
- pkgsrc/mail/qpopper/distinfo		1.12
- pkgsrc/mail/qpopper/options.mk	patched by hand (parts of 1.5-1.6)
- pkgsrc/mail/qpopper/patches/patch-am	1.4
- pkgsrc/mail/qpopper/patches/patch-ao	removed
- pkgsrc/mail/qpopper/patches/patch-ap	1.3

   Module Name:		pkgsrc
   Committed By:	taca
   Date:		Sat May 28 02:55:43 UTC 2005

   Modified Files:
   	pkgsrc/mail/qpopper: Makefile Makefile.common PLIST

   Log Message:
   - Sort PLIST.
   - Share MASTER_SITES and HOMEPAGE with poppassd package with introducing
     QPOPPER_MASTER_SITES and QPOPPER_HOMEPAGE in Makefile.common.

   No functional change.
---
   Module Name:		pkgsrc
   Committed By:	adrianp
   Date:		Wed Jun  1 20:55:16 UTC 2005

   Modified Files:
   	pkgsrc/mail/qpopper: Makefile Makefile.common distinfo options.mk
   	pkgsrc/mail/qpopper/patches: patch-am patch-ap
   Removed Files:
   	pkgsrc/mail/qpopper/patches: patch-ao

   Log Message:
   - Update qpopper to 4.0.8
   - Thanks to taca@ and gavan@ for feedback and patch review
   - This also enables experimental PAM support (on platforms that support it)
   - Security fixes included
   - From the ChangeLog:
   > Changes from 4.0.7 to 4.0.8:
   > ---------------------------
   >  1.  Fix compilation error on HPUX.
   >  2.  Fix some compilation warnings.
   >  3.  Update man page with '-x' option.
   >  4.  Fix problems with 'make install'
   >
   >
   > Changes from 4.0.6 to 4.0.7:
   > ---------------------------
   >  1.  Fix '-V' for standalone.
   >  2.  Include 'man' directory in tarball.
   >
   >
   > Changes from 4.0.5 to 4.0.6:
   > ----------------------------
   >  1.  Minor fixes for true64.
   >  2.  Patch from Uli Zappe to fix SCRAM compilation bugs.
   >  3.  Minor fixes for true64.
   >  4.  poppassd now runs smbpasswd as user, not root, to avoid exploit
   >  5.  Remove -traditional-cpp from the compiler options for Darwin
   >      builds (otherwise build fails)
   >  6.  Open stdout and stderr as O_WRONLY instead of O_RDONLY so that
   >      should anything actually be written to them it will show up
   >  7.  When configured as --with-pam and required,
   >      include <pam/pam_appl.h> instead of <security/pam_appl.h>
   >      (otherwise build fails)
   >  8.  strdup the pw.pw_name field from getpwnam so that it's still
   >      valid by the time genpath is called; also added corresponding
   >      free (without this fix when the bug manifests, clients are
   >      erroneously told there are 0 messages in the mail drop
   >      regardless of the actual number)
   >  9.  Add a pam bug workaround at the beginning of main to do a
   >      pam_start and pam_end immediately when the program starts up
   >      in order to avoid bogus authentication failed messages from
   >      pam_authenticate later (only when configured as --with-pam)
   >      [ Thanks to Kyle McKay for changes 5-9 ]
   > 10.  Fixed error in configure script for Mac OS / Darwin.
   > 11.  Support chained certs for OpenSSL [from Daniel Senie].
   > 12.  Fixes to compile better on Linux [from Daniel Senie].
   > 13.  X-UIDL header no longer written when Update_status_hdrs is false
   >      [thanks to Helge Oldach]
   > 14.  Now calling SSL_shutdown() again if it fails the first time.
   > 15.  Now logging TLS errors when compiled with debugging and debug is
   >      enabled (instead of either) [thanks to Maks N. Polunin].
   > 16.  Config file now always closed (not just on error).
   > 17.  When using pam, Kerberos tickets are now destroyed.
   >      Otherwise dead tickets accumulate in cache directory which runs
   >      out of space quickly on busy server.  Problem noted by Rodney
   >      McDuff ITS UQ.   (Directory permissions on ticket cache dir need
   >      to be 1777).
   > 18.  Always log "Servicing request" (instead of just when debugging is
   >      on).   This allows start of pop sessions to be logged always which
   >      is useful for diagnosis of problems.
   > 19.  Worked around problem on some systems causing SIGALRM to be masked,
   >      leaving hung pop processes which should have timed out waiting
   >      for a command from the client.
   >      [ Thanks to David Shrimpton for changes 16-19 ]
   > 20.  Now defaulting to "EXPIRE NEVER" instead of "EXPIRE 0".
   > 21.  Fix core dump on 64-bit Solaris 2.8 [thanks to Kenny Nguyen]
   > 22.  Log facility set on command line now applies to daemon as well.
   >      [Thanks to Helge Oldach]
   > 23.  '-y' to set log facility on command line now works again.
   > 24.  Allow '-V' as synonym for '-v' (to see version).
   > 25.  Process user and spool config files as user, not as root (fix
   >      security hole reported by Jens Steube)
   > 26.  Added "xtnd_xmit" as a boolean option to permit/deny XTND XMIT
   >      and 'x' as a command-line option to disable it.  You should
   >      disable it unless you really need it, and even then it is better
   >      to move to SMTP AUTH.
   > 27.  popauth now opens trace file as user, not root (fix security
   >      hole reported by Jens Steube); also umask now set.
   > 28.  Fix race crash on FreeBSD (thanks to Martin Haller).
   > 29.  Resolve some compiler warnings.
   > 30.  Fix check for libcrypt on FreeBSD.
   > 31.  Added sample pam configuration file (also installed by 'make
   >      install')
   > 32.  Use generic error msg and sleep in more auth failure cases.
   > 33.  Added code to use mkstemp() instead of our perfectly safe usage
   >      of tempnam() because some compilers issue overly broad warnings
   >      implying that all uses of tempnam() are unsafe.  To bypass,
   >      use '--enable-tempnam' with ./configure.
---
   Module Name:		pkgsrc
   Committed By:	adrianp
   Date:		Wed Jun  1 21:09:02 UTC 2005

   Modified Files:
   	pkgsrc/mail/qpopper: options.mk

   Log Message:
   - Add a note for PAM

- Update qpopper to 4.0.8
- Thanks to taca@ and gavan@ for feedback and patch review
- This also enables experimental PAM support (on platforms that support it)
- Security fixes included
- From the ChangeLog:
> Changes from 4.0.7 to 4.0.8:
> ---------------------------
>  1.  Fix compilation error on HPUX.
>  2.  Fix some compilation warnings.
>  3.  Update man page with '-x' option.
>  4.  Fix problems with 'make install'
>
>
> Changes from 4.0.6 to 4.0.7:
> ---------------------------
>  1.  Fix '-V' for standalone.
>  2.  Include 'man' directory in tarball.
>
>
> Changes from 4.0.5 to 4.0.6:
> ----------------------------
>  1.  Minor fixes for true64.
>  2.  Patch from Uli Zappe to fix SCRAM compilation bugs.
>  3.  Minor fixes for true64.
>  4.  poppassd now runs smbpasswd as user, not root, to avoid exploit
>  5.  Remove -traditional-cpp from the compiler options for Darwin
>      builds (otherwise build fails)
>  6.  Open stdout and stderr as O_WRONLY instead of O_RDONLY so that
>      should anything actually be written to them it will show up
>  7.  When configured as --with-pam and required,
>      include <pam/pam_appl.h> instead of <security/pam_appl.h>
>      (otherwise build fails)
>  8.  strdup the pw.pw_name field from getpwnam so that it's still
>      valid by the time genpath is called; also added corresponding
>      free (without this fix when the bug manifests, clients are
>      erroneously told there are 0 messages in the mail drop
>      regardless of the actual number)
>  9.  Add a pam bug workaround at the beginning of main to do a
>      pam_start and pam_end immediately when the program starts up
>      in order to avoid bogus authentication failed messages from
>      pam_authenticate later (only when configured as --with-pam)
>      [ Thanks to Kyle McKay for changes 5-9 ]
> 10.  Fixed error in configure script for Mac OS / Darwin.
> 11.  Support chained certs for OpenSSL [from Daniel Senie].
> 12.  Fixes to compile better on Linux [from Daniel Senie].
> 13.  X-UIDL header no longer written when Update_status_hdrs is false
>      [thanks to Helge Oldach]
> 14.  Now calling SSL_shutdown() again if it fails the first time.
> 15.  Now logging TLS errors when compiled with debugging and debug is
>      enabled (instead of either) [thanks to Maks N. Polunin].
> 16.  Config file now always closed (not just on error).
> 17.  When using pam, Kerberos tickets are now destroyed.
>      Otherwise dead tickets accumulate in cache directory which runs
>      out of space quickly on busy server.  Problem noted by Rodney
>      McDuff ITS UQ.   (Directory permissions on ticket cache dir need
>      to be 1777).
> 18.  Always log "Servicing request" (instead of just when debugging is
>      on).   This allows start of pop sessions to be logged always which
>      is useful for diagnosis of problems.
> 19.  Worked around problem on some systems causing SIGALRM to be masked,
>      leaving hung pop processes which should have timed out waiting
>      for a command from the client.
>      [ Thanks to David Shrimpton for changes 16-19 ]
> 20.  Now defaulting to "EXPIRE NEVER" instead of "EXPIRE 0".
> 21.  Fix core dump on 64-bit Solaris 2.8 [thanks to Kenny Nguyen]
> 22.  Log facility set on command line now applies to daemon as well.
>      [Thanks to Helge Oldach]
> 23.  '-y' to set log facility on command line now works again.
> 24.  Allow '-V' as synonym for '-v' (to see version).
> 25.  Process user and spool config files as user, not as root (fix
>      security hole reported by Jens Steube)
> 26.  Added "xtnd_xmit" as a boolean option to permit/deny XTND XMIT
>      and 'x' as a command-line option to disable it.  You should
>      disable it unless you really need it, and even then it is better
>      to move to SMTP AUTH.
> 27.  popauth now opens trace file as user, not root (fix security
>      hole reported by Jens Steube); also umask now set.
> 28.  Fix race crash on FreeBSD (thanks to Martin Haller).
> 29.  Resolve some compiler warnings.
> 30.  Fix check for libcrypt on FreeBSD.
> 31.  Added sample pam configuration file (also installed by 'make
>      install')
> 32.  Use generic error msg and sleep in more auth failure cases.
> 33.  Added code to use mkstemp() instead of our perfectly safe usage
>      of tempnam() because some compilers issue overly broad warnings
>      implying that all uses of tempnam() are unsafe.  To bypass,
>      use '--enable-tempnam' with ./configure.

Add RMD160 digests.

Update qpopper package to 4.0.5nb7.

- Explicitly add "--disable-ipv6" when inet6 is disabled.
- Fix compile error when inet6 is disabled.  This should fix PR pkg/28805.

Install stand-alone qpopper to ${PREFIX}/sbin.
Bump PKGREVISION.

TODO: support libwrap(tcpwrappers) in stand-alone qpopper.

upgrade to 4.0.5.  includes security fix.

Changes from 4.0.4 to 4.0.5:

Make qpopper build on Solaris.

- Remove extra rule line in install target.  (It tried to do make on
  password directory.)
- Solaris's /usr/ucb/install dosen't accept number with -g option.

- add a patch for fixing bulldir vulnerability with "-u" option.
- update PKGREVISION to 1.

Updated qpopper to 4.0.4

* Fixed DOS attack seen on some systems.
* Fixed "noop has null function" log entry.
* Allow '-p' to be used when APOP not defined (noted by Daniel Senie).
* Enforce ClearTextPassword even without APOP (noted by Daniel Senie).
* Restrict clear-text-password=never to APOP.
* Restrict clear-text-password=tls to QPOP_SSL.
* Fixed qpopper hanging on I/O error on some platforms.

Remove checking of /usr/local/include/gdbm.h from configure script and
It would never adds /usr/local/include to include path.

Address to pkg/13558.  This change dosen't solve pkg/13558, but it solve
the problem when /usr/local/include/gdbm.h exists (by installing gdbm without
pkgsrc or with pkgsrc setting PREFIX=/usr/local.)

Update qpopper to 4.0.3 from 3.1.2.  Here is brief new feature from
Release note.

4.0
           Supports TLS/SSL security.
           '-p' option now has value '4' to permit plain-text passwords
        under TLS/SSL.
           Now uses a cache file to retain spool index across sessions.
        This dramatically speeds up session start when no new mail has
        arrived.

           '-l' option added to specify TLS/SSL support.
           Lots of TLS/SSL options added.  See the Administrator's Guide
        for details.
           '-v' option added to report current version and exit.
           'make install' added.
           Lots of compile-time options now available at run-time.  See
        the Administrator's Guide for details.
           Integrated poppassd into build.

And here is changes from 4.0.

Changes from 4.0.2 to 4.0.3:

Compare program name in "popauth" with "qpopauth" because that is the
name under which it is installed. Fixes PR pkg/12628 by
Jun-ichiro itojun Hagino.

+ move the distfile digest/checksum value from files/md5 to distinfo
+ move the patch digest/checksum values from files/patch-sum to distinfo