Subject: CVS commit: pkgsrc/news/leafnode
To: None <>
From: Lubomir Sedlacik <>
List: pkgsrc-changes
Date: 06/09/2005 18:21:23
Module Name:	pkgsrc
Committed By:	salo
Date:		Thu Jun  9 18:21:23 UTC 2005

Modified Files:
	pkgsrc/news/leafnode: Makefile distinfo

Log Message:
Update to version 1.11.3


- Fetchnews did not detect timeouts while it was downloading an article
  header, which malicious upstream servers could exploit to mount
  a denial of service attack against the fetchnews client. See
  leafnode-SA-2005-02.txt.  CVE Name: CAN-2005-1911

- Bugfix sed expression in makesubst script.  (Reported by Jeff Zacharias.)

- texpire now tags the expired count with "" rather
  than "total:" to avoid misleading the user who assumes that "total:"
  would have to be the sum of the group counts. See also the FAQ change
  below.  SourceForge bug #1215453.
- When debugmode and verbose mode are set, leafnode programs now print a
  warning to stdout that the user should check syslog.conf and the
  syslog output rather than the screen print for debugging and sleeps for
  three seconds.

- Add FAQ entry to explain discrepancies between texpire group counts
  and expired articles counts.
- Add FAQ entry to explain influence of Gnus' gnus-read-active-file
  setting on lost subscriptions, and extend stop fetchnews from
  unsubscribing FAQ.  Debian bug #307685.
- Drop FAQ entry on license issues as some parts of leafnode are in fact
- Drop FAQ entry on why old articles aren't posted, obsolete since
- INSTALL and INSTALL_de have been polished.
- Add a hint that syslog.conf must be edited to config.example.
- leafnode(8) mentions that LIST ACTIVE keeps an existing subscription
  fresh.  CVS:
distinfo CVS:

To generate a diff of this commit:
cvs rdiff -r1.25 -r1.26 pkgsrc/news/leafnode/Makefile
cvs rdiff -r1.14 -r1.15 pkgsrc/news/leafnode/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.