pkgsrc-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[pkgsrc/pkgsrc-2005Q1]: pkgsrc/mail/poppassd Pullup ticket 540 - requested by...
details: https://anonhg.NetBSD.org/pkgsrc/rev/85931a82fa2d
branches: pkgsrc-2005Q1
changeset: 491098:85931a82fa2d
user: salo <salo%pkgsrc.org@localhost>
date: Sun Jun 05 18:40:05 2005 +0000
description:
Pullup ticket 540 - requested by Adrian Portelli
security update for poppassd
Revisions pulled up:
- pkgsrc/mail/poppassd/Makefile 1.15-1.16
- pkgsrc/mail/poppassd/MESSAGE 1.3
- pkgsrc/mail/poppassd/distinfo 1.11
Module Name: pkgsrc
Committed By: taca
Date: Sat May 28 02:57:22 UTC 2005
Modified Files:
pkgsrc/mail/poppassd: Makefile
Log Message:
- Share MASTER_SITES and HOMEPAGE with qpopper package using
QPOPPER_MASTER_SITES and QPOPPER_HOMEPAGE defined in
../qpopper/Makefile.common.
No functional change.
---
Module Name: pkgsrc
Committed By: adrianp
Date: Wed Jun 1 21:00:39 UTC 2005
Modified Files:
pkgsrc/mail/poppassd: MESSAGE Makefile distinfo
Log Message:
- Update poppassd to 4.0.8
- Thanks to taca@ and gavan@ for feedback and patch review
- This also enables experimental PAM support (on platforms that support it)
- Security fixes included
- From the ChangeLog:
Changes from 4.0.7 to 4.0.8:
> ---------------------------
> 1. Fix compilation error on HPUX.
> 2. Fix some compilation warnings.
> 3. Update man page with '-x' option.
> 4. Fix problems with 'make install'
>
>
> Changes from 4.0.6 to 4.0.7:
> ---------------------------
> 1. Fix '-V' for standalone.
> 2. Include 'man' directory in tarball.
>
>
> Changes from 4.0.5 to 4.0.6:
> ----------------------------
> 1. Minor fixes for true64.
> 2. Patch from Uli Zappe to fix SCRAM compilation bugs.
> 3. Minor fixes for true64.
> 4. poppassd now runs smbpasswd as user, not root, to avoid exploit
> 5. Remove -traditional-cpp from the compiler options for Darwin
> builds (otherwise build fails)
> 6. Open stdout and stderr as O_WRONLY instead of O_RDONLY so that
> should anything actually be written to them it will show up
> 7. When configured as --with-pam and required,
> include <pam/pam_appl.h> instead of <security/pam_appl.h>
> (otherwise build fails)
> 8. strdup the pw.pw_name field from getpwnam so that it's still
> valid by the time genpath is called; also added corresponding
> free (without this fix when the bug manifests, clients are
> erroneously told there are 0 messages in the mail drop
> regardless of the actual number)
> 9. Add a pam bug workaround at the beginning of main to do a
> pam_start and pam_end immediately when the program starts up
> in order to avoid bogus authentication failed messages from
> pam_authenticate later (only when configured as --with-pam)
> [ Thanks to Kyle McKay for changes 5-9 ]
> 10. Fixed error in configure script for Mac OS / Darwin.
> 11. Support chained certs for OpenSSL [from Daniel Senie].
> 12. Fixes to compile better on Linux [from Daniel Senie].
> 13. X-UIDL header no longer written when Update_status_hdrs is false
> [thanks to Helge Oldach]
> 14. Now calling SSL_shutdown() again if it fails the first time.
> 15. Now logging TLS errors when compiled with debugging and debug is
> enabled (instead of either) [thanks to Maks N. Polunin].
> 16. Config file now always closed (not just on error).
> 17. When using pam, Kerberos tickets are now destroyed.
> Otherwise dead tickets accumulate in cache directory which runs
> out of space quickly on busy server. Problem noted by Rodney
> McDuff ITS UQ. (Directory permissions on ticket cache dir need
> to be 1777).
> 18. Always log "Servicing request" (instead of just when debugging is
> on). This allows start of pop sessions to be logged always which
> is useful for diagnosis of problems.
> 19. Worked around problem on some systems causing SIGALRM to be masked,
> leaving hung pop processes which should have timed out waiting
> for a command from the client.
> [ Thanks to David Shrimpton for changes 16-19 ]
> 20. Now defaulting to "EXPIRE NEVER" instead of "EXPIRE 0".
> 21. Fix core dump on 64-bit Solaris 2.8 [thanks to Kenny Nguyen]
> 22. Log facility set on command line now applies to daemon as well.
> [Thanks to Helge Oldach]
> 23. '-y' to set log facility on command line now works again.
> 24. Allow '-V' as synonym for '-v' (to see version).
> 25. Process user and spool config files as user, not as root (fix
> security hole reported by Jens Steube)
> 26. Added "xtnd_xmit" as a boolean option to permit/deny XTND XMIT
> and 'x' as a command-line option to disable it. You should
> disable it unless you really need it, and even then it is better
> to move to SMTP AUTH.
> 27. popauth now opens trace file as user, not root (fix security
> hole reported by Jens Steube); also umask now set.
> 28. Fix race crash on FreeBSD (thanks to Martin Haller).
> 29. Resolve some compiler warnings.
> 30. Fix check for libcrypt on FreeBSD.
> 31. Added sample pam configuration file (also installed by 'make
> install')
> 32. Use generic error msg and sleep in more auth failure cases.
> 33. Added code to use mkstemp() instead of our perfectly safe usage
> of tempnam() because some compilers issue overly broad warnings
> implying that all uses of tempnam() are unsafe. To bypass,
> use '--enable-tempnam' with ./configure.
diffstat:
mail/poppassd/MESSAGE | 3 ++-
mail/poppassd/Makefile | 11 +++--------
mail/poppassd/distinfo | 14 +++++++-------
3 files changed, 12 insertions(+), 16 deletions(-)
diffs (64 lines):
diff -r 089418be7905 -r 85931a82fa2d mail/poppassd/MESSAGE
--- a/mail/poppassd/MESSAGE Sun Jun 05 18:35:25 2005 +0000
+++ b/mail/poppassd/MESSAGE Sun Jun 05 18:40:05 2005 +0000
@@ -1,5 +1,5 @@
===========================================================================
-$NetBSD: MESSAGE,v 1.2 2002/09/18 16:15:50 grant Exp $
+$NetBSD: MESSAGE,v 1.2.14.1 2005/06/05 18:40:05 salo Exp $
In order to enable poppassd service, you should add the following line
to your /etc/services:
@@ -9,5 +9,6 @@
And /etc/inetd.conf:
poppass stream tcp nowait root ${PREFIX}/libexec/poppassd poppassd
+ poppass stream tcp6 nowait root ${PREFIX}/libexec/poppassd poppassd
===========================================================================
diff -r 089418be7905 -r 85931a82fa2d mail/poppassd/Makefile
--- a/mail/poppassd/Makefile Sun Jun 05 18:35:25 2005 +0000
+++ b/mail/poppassd/Makefile Sun Jun 05 18:40:05 2005 +0000
@@ -1,18 +1,13 @@
-# $NetBSD: Makefile,v 1.13 2004/12/03 15:15:02 wiz Exp $
+# $NetBSD: Makefile,v 1.13.4.1 2005/06/05 18:40:05 salo Exp $
#
DISTNAME= qpopper${VERSION}
PKGNAME= poppassd-${VERSION}
-PKGREVISION= 3
CATEGORIES= mail
-MASTER_SITES= ftp://ftp.qualcomm.com/eudora/servers/unix/popper/
-
-PATCH_SITES= http://www.imasy.or.jp/~ume/ipv6/
-PATCHFILES= qpopper-4.0.5-ipv6-20030313.diff.gz
-PATCH_DIST_STRIP= -p1
+MASTER_SITES= ${QPOPPER_MASTER_SITES}
MAINTAINER= mellon%fugue.com@localhost
-HOMEPAGE= http://www.eudora.com/qpopper/
+HOMEPAGE= ${QPOPPER_HOMEPAGE}
COMMENT= Qualcomm's password change server mainly for Eudora
.include "../qpopper/Makefile.common"
diff -r 089418be7905 -r 85931a82fa2d mail/poppassd/distinfo
--- a/mail/poppassd/distinfo Sun Jun 05 18:35:25 2005 +0000
+++ b/mail/poppassd/distinfo Sun Jun 05 18:40:05 2005 +0000
@@ -1,11 +1,11 @@
-$NetBSD: distinfo,v 1.10 2005/02/24 09:59:26 agc Exp $
+$NetBSD: distinfo,v 1.10.2.1 2005/06/05 18:40:05 salo Exp $
-SHA1 (qpopper4.0.5.tar.gz) = 726d40da2210bf4b82541a28971986e6a3d9e1a5
-RMD160 (qpopper4.0.5.tar.gz) = e05c1b0823c8942d791c7b48af82e278a51591d2
-Size (qpopper4.0.5.tar.gz) = 2281284 bytes
-SHA1 (qpopper-4.0.5-ipv6-20030313.diff.gz) = 31858d41e1dab90019152d957a7ea3d69fe085b0
-RMD160 (qpopper-4.0.5-ipv6-20030313.diff.gz) = b9d4329496ed427ca46c8981a2888f4471269737
-Size (qpopper-4.0.5-ipv6-20030313.diff.gz) = 60773 bytes
+SHA1 (qpopper4.0.8.tar.gz) = 161038e6088b4952eedaf85fafa9f3b10eb40a01
+RMD160 (qpopper4.0.8.tar.gz) = 4a1dc2aaa6ef1330a76dfed5330d658a45e7d1d2
+Size (qpopper4.0.8.tar.gz) = 2766902 bytes
+SHA1 (qpopper4.0.8-ipv6-20050515.diff.gz) = 3ccd51fa8fb1633c34dee19e6d50351cb649a3c1
+RMD160 (qpopper4.0.8-ipv6-20050515.diff.gz) = 0ca9a8893e31933d8bf33a3cfa4d88fde511ed5e
+Size (qpopper4.0.8-ipv6-20050515.diff.gz) = 11479 bytes
SHA1 (patch-aa) = 0dd1bdc832d00bd640e7003afea28f0d90c2f975
SHA1 (patch-ab) = 713698d5834b569a0ee08088567a71e218d50550
SHA1 (patch-ac) = db8329f0937554be80a88f4754b37f3a69bd70aa
Home |
Main Index |
Thread Index |
Old Index