summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2015-06-06CATEGORIES+= pythonpettai1-2/+2
2015-06-06Fix LDAP directory featuremanu2-3/+4
Add dependency on net/pear-Net_LDAP3 when ldap option is enabled, as the LDAP directory feature of Roundcube requires it.
2015-06-06Add Net_LDAP3 1.0.3, sucessor of Net_LDAP2 PEAR modulemanu6-2/+46
2015-06-06Note addition of www/contao35 package version 3.5.0.taca1-1/+2
2015-06-06Add Contao 3.5.0 package.taca8-2/+3925
Contao is an Open Source PHP Content Management System for people who want a professional website that is easy to maintain. Visit the https://contao.org for more information. This is new Long Term Support release which replase existing Contao 3.2 and the last stable release from Contao 3.x series. Please refer system/docs/CHANGELOG.md in detail.
2015-06-06Add small description about the status of this release.taca1-1/+1
2015-06-06Note update of www/contao32 package to 3.2.21 and www/contao34taca1-1/+3
package to 3.4.5nb1.
2015-06-06Add several security related fixes from Contao 3.2.21.taca6-2/+148
Bump PKGREVISION.
2015-06-06Update contao32 to 3.2.21.taca2-6/+6
Version 3.2.21 (2015-06-05) --------------------------- ### Fixed Back-ported two security related changes from the upstream versions.
2015-06-06Updated devel/p5-App-cpanminus to 1.7035wen1-1/+2
2015-06-06Update to 1.7035wen2-6/+6
Upstream changes: 1.7035 2015-06-05 10:51:17 PDT [Improvements] - Add a workaround for distributions with an old (buggy) Module::Install, now that the problems occur more frequently with 5.22.0 shipping with a dev version of ExtUtils::MakeMaker #463
2015-06-05Use PKGVERSION_NOREV and add bash:run, as noted by Kamil Krytarowski on IRCyouri1-3/+3
2015-06-05+ bspwmyouri1-1/+2
2015-06-05Added wm/bspwm version 0.9youri1-1/+2
2015-06-05Import bspwm-0.9 as wm/bspwm.youri4-0/+65
bspwm is a tiling window manager that represents windows as the leaves of a full binary tree. It is controlled and configured via bspc. ok khorben.
2015-06-05Added x11/sxhkd version 0.5.5youri1-1/+2
2015-06-05+ sxhkdyouri1-1/+2
2015-06-05Import sxhkd-0.5.5 as x11/sxhkd.youri4-0/+33
sxhkd is a simple X hotkey daemon with a powerful and compact configuration syntax. ok khorben
2015-06-05pass --configdir=${PKG_SYSCONFDIR:Q} so that the package and pkgsrcmrg1-1/+2
agree on where the wrong file is installed for fixing it. fixes builds when PKG_SYSCONFDIR not the default.
2015-06-05Updated security/stunnel to 5.17youri1-1/+2
2015-06-05Update stunnel to 5.17. Thanks Ben Gergely for the patch!youri4-15/+13
distfile was signed with: pub 4096R/DD3AAAA3 2015-02-06 Key fingerprint = AC91 5EA3 0645 D9D3 D4DA E4FE B104 8932 DD3A AAA3 uid [ unknown] MichaƂ Trojnara <Michal.Trojnara@stunnel.org>
2015-06-05Apply fixes from upstream for XSA-133khorben3-3/+135
XXX pull-ups
2015-06-05Apply fixes from upstream for XSA-133khorben3-3/+135
XXX pull-ups
2015-06-05Apply fixes from upstream for XSA-133khorben3-3/+135
The patch really belongs here rather than in sysutils/xenkernel45 (where it is already applied).
2015-06-05Apply fixes from upstream for XSA-133khorben3-3/+135
Privilege escalation via emulated floppy disk drive The code in qemu which emulates a floppy disk controller did not correctly bounds check accesses to an array and therefore was vulnerable to a buffer overflow attack. A guest which has access to an emulated floppy device can exploit this vulnerability to take over the qemu process elevating its privilege to that of the qemu process. All Xen systems running x86 HVM guests without stubdomains are vulnerable to this depending on the specific guest configuration. The default configuration is vulnerable. Guests using either the traditional "qemu-xen" or upstream qemu device models are vulnerable. Guests using a qemu-dm stubdomain to run the device model are only vulnerable to takeover of that service domain. Systems running only x86 PV guests are not vulnerable. ARM systems are not vulnerable.
2015-06-05githubify screenbrightnesswiedi2-10/+8
2015-06-05Updated databases/hiredis to 0.13.1wiedi1-1/+2
2015-06-05Update hiredis to 0.13.1wiedi5-67/+41
### 0.13.1 - May 03, 2015 This is a bug fix release. The new `reconnect` method introduced new struct members, which clashed with pre-defined names in pre-C99 code. Another commit forced C99 compilation just to make it work, but of course this is not desirable for outside projects. Other non-C99 code can now use hiredis as usual again. Sorry for the inconvenience. * Fix memory leak in async reply handling (Salvatore Sanfilippo) * Rename struct member to avoid name clash with pre-c99 code (Alex Balashov, ncopa) ### 0.13.0 - April 16, 2015 This release adds a minimal Windows compatibility layer. The parser, standalone since v0.12.0, can now be compiled on Windows (and thus used in other client libraries as well) * Windows compatibility layer for parser code (tzickel) * Properly escape data printed to PKGCONF file (Dan Skorupski) * Fix tests when assert() undefined (Keith Bennett, Matt Stancliff) * Implement a reconnect method for the client context, this changes the structure of `redisContext` (Aaron Bedra) ### 0.12.1 - January 26, 2015 * Fix `make install`: DESTDIR support, install all required files, install PKGCONF in proper location * Fix `make test` as 32 bit build on 64 bit platform ### 0.12.0 - January 22, 2015 * Add optional KeepAlive support * Try again on EINTR errors * Add libuv adapter * Add IPv6 support * Remove possiblity of multiple close on same fd * Add ability to bind source address on connect * Add redisConnectFd() and redisFreeKeepFd() * Fix getaddrinfo() memory leak * Free string if it is unused (fixes memory leak) * Improve redisAppendCommandArgv performance 2.5x * Add support for SO_REUSEADDR * Fix redisvFormatCommand format parsing * Add GLib 2.0 adapter * Refactor reading code into read.c * Fix errno error buffers to not clobber errors * Generate pkgconf during build * Silence _BSD_SOURCE warnings * Improve digit counting for multibulk creation
2015-06-05Updated mail/dcc to 1.3.158gdt2-3/+3
2015-06-05Simplify package, update to 1.3.158.gdt14-347/+205
Update prepared in wip by Petar Bogdanovic. * Remove INSTALL and add fix-map to rc-scripts instead (start_precmd). * Remove dccm option because it was never properly tested. If someone wants it back, let OWNER know. * Remove dcc-spamassassin.pre. DCC.pm will use cdcc in order to obtain homedir and therefore the location of the dccifd socket. * Add several minor build/install patches. * Remove do-install target since the default (DESTDIR-enabled) install now works well enough. CHANGES: 1.3.158 Do not flood any reports to peers with "leaf=0" Fix crash in dccm, dccifd, and dccproc when time jumps backwards by more than than 1 millisecond. Adjust Makefiles for recent NetBSD. 1.3.155 Fix `cdcc "help flood"` Try `cc -E -w` in ./configure to avoid fatal gcc warning about CPPFLAGS=-D_FORTIFY_SOURCE=2 that currently breaks DCC packaging on archlinux and will affect other systems. 1.3.154 Fix editline build problem in cdcc reported by Robert Pelletier. 1.3.153 Resolve confusion between dccifd ASCII protocol options "no-grey" and "grey-off" pointed out by Mark Thomas. 1.3.152 In `cdcc clients` output, suppress individual client addresses covered by an address block in the server /var/dcc/blacklist file except when explicitly requested as in `cdcc "clients 10.2.3.0/24"`. 1.3.151 Compress bad client addresses for `cdcc clients`. 1.3.148 Answer clients with bad client-IDs and passwords as if they were using the anonymous client-ID. Improve counting by dccd of clients in address blocks. 1.3.147 Fix missing clients in `cdcc clients`. Fix NetBSD threads problem 1.3.146 reported by Petar Bogdanovic. 1.3.146 Add -I to `cdcc clients` Reduce dccifd thread stack size to 512 KBytes for busy 32-bit systems Fix some problems in the Windows version of dccproc. 1.3.145 Suppress some error messages about broken DCC clients from dccd. Fix default start and stop Linux run levels in rcDCC as suggested by Herve Eychenne. Change start-dccifd to use `kill` instead of `/bin/kill` to accommodate Linux systems where /bin/kill does not understand `/bin/kill -9 -$PID` as the way to kill a process group. `cdcc src` now accepts a pair of IPv4,IPv6 addresses. Requests from anonymous DCC clients to the public DCC servers are grouped by IPv4 /24 or IPv6 /56 address blocks for inflating the delay. 1.3.144 Fix a rare crash of dccd, the server daemon. Allow "." in -B for dccifd, dccm, and dccproc as the base domain name of DNSBL to support detecting and rejecting mail containing URLs listed in a response policy zone (RPZ). 1.3.143 Fix `dccifd -V` broken in 1.3.142 reported by Chris Burton. Fix "incompatible whitelist" SMTP bug in dccifd introduced in 1.3.139. Deal with default -mstructure-size-boundary=8 in FreeBSD on ARM as suggested by Ronald Klop. However, intermittent failures of `cdcc "id 1; stats"` on FreeBSD 9.0-STABLE on a system with a "Feroceon 88FR131 rev 1 (Marvell core)" seem to be caused by broken consistency between write() and mmap(). That suggests that while the DCC client software should generally work, the DCC server will occassionally fail mysteriously. Fix dccm parsing of Received headers for MX and MXDCC whiteclnt lines that broke in verseion 1.3.139. 1.3.142 Improve physical page locality of the DCC server's use of the database hash table and so improve server performance. The nagios script in var/dcc/libexec/dcc-nagios now compares the clock on the DCC server with the local clock. `cdcc -VV` and other commands produce the ./configure parameters used to build them. Build cdcc with editline. Add -P to dccproc, dccifd, dccm, and dccsight. 1.3.141 Fix "MTA-last" in dcc man page as suggested by Bram Grietens. Fix no_forced-discard typo reported by Bram Grietens. Fix dccm to honor `hackmc -R` and discard relay attacks. misc/DCC.pm, which is generated from misc/DCC.pm.in, is now very similar to what will probably be in SpamAssassin 3.4. Fix problems finding native milter library for dccm pointed out by Kevin A. McGrail. Improve documentation or help output from the nagios plugin, /var/dcc/libexec/dcc-nagios Fix bug in misc/DCC.pm in dealing with mail that already has an X-DCC header found and diagnosed by Herbert J. Skuhra. 1.3.140 tweak some HTML in the whiteclnt proof-of-concept pages Fix bug in `wlist` display of address blocks reported by Rob McMahon. Fix missing IP address in log files for mail from (as opposed to relayed by) MX relays. 1.3.139 Give temporary rejections by dccm and dccifd for conflicting per-user thresholds a separate message. Add FreeBSD "faststart" to rcDCC. 1.3.138 Fix bad URL decoding reported by Kostik. 1.3.137 Fix some innocuous compilers warnings on Solaris and Ubuntu. 1.3.136 Fix dccd and cdcc for `cdcc clients` for large operation counts. Deal with trailing '.' and other punctuation URLs in dccm, dccifd, and dccproc as pointed out by Kostik. This changes the FUZ1 and FUZ2 checksums in some cases. Fix a free(0). 1.3.135 /var/dcc/map on 32 and 64 bit versions of a system are now the same. Dccproc, dccm, and dccifd decode HTML &#xxx character references in URLs. Dccproc, dccm, and dccifd convert UTF-8 domain names to Punycode before checking DNS blacklists. Deal with Linux `logger` bug that does the wrong thing with something like `logger message with -S dash S` as suggested by Leandro Santi. 1.3.134 Fix compile bug reported by Rob.McMahon involving old compilers without "inline" 1.3.133 Fix DNSBL bugs in parsing http://example.com?parameter and http://example.com:80 reported by Kostik Increase number of distinct kinds of local or "substitute" headers that can be locally white- or blacklisted to 8 1.3.132 Fix fstatfs() wrapper on Ubuntu and speed up dccd and dbclean when a memory file system is used with -H. 1.3.131 Fix minor bug in updatedcc and fetch-testmsg-whitelist as suggested by Taso N. Devetzis. Find in_port_t in sys/types.h as reported by Josh Allen. 1.3.130 Fix serious bug reported by Bart Dumon in DNS whitelists on systems without strlcpy(). 1.3.129 Adjust dnswl.org in the sample dcc_conf file. 1.3.128 Support DNS whitelists. An example using dnswl.org is in the sample homedir/dcc_conf file. Fix dccproc, dccifd, and dccm crash in parsing Received: fields with IPv6 addresses. Parse IPv6 address literals lacking the "IPv6:" tag in Received: headers. 1.3.127 Fix problem with `dbclean -H` after a system reboot reported by Gary Mills. Fix "duplicate symbol" problem on MacOS X or Darwin 10.3.0 reported by Robert Pelletier by removing the use of `ranlib -c`. I hope this does not break things on older versions of MacOS X or future DCC releases. Fix printf compiler warnings on MacOS X. 1.3.126 Fix another problem in flooding server-ID types past server-ID mappings. 1.3.125 Fix stack corruption in version *.3.124. 1.3.124 Fix reporting of rogue server-IDs. Remove vestiges of obsolete server-ID tracing. Flood server-ID types past flod file mappings.
2015-06-05Updated databases/postgresql-postgis2 to 2.1.7nb2gdt1-1/+2
2015-06-05Update to 2.1.7.gdt3-8/+19
Upstream changes (plus many bug fixes): PostGIS 2.1.7 2015/03/30 PostGIS 2.1.6 2015/03/20 - #3000, Ensure edge splitting and healing algorithms use indexes - #3048, Speed up geometry simplification (J.Santana @ CartoDB) - #3050, Speep up geometry type reading (J.Santana @ CartoDB) PostGIS 2.1.5 2014/12/18 - #2933, Speedup construction of large multi-geometry objects
2015-06-05Updated www/p5-Plack to 1.0036wen1-1/+2
2015-06-05Update to 1.0036wen2-6/+8
Add missing DEPENDS Upstream changes: 1.0036 2015-06-03 12:01:53 PDT [BUG FIXES] - Fix CGIBin test to not use CGI.pm #509 1.0035 2015-04-16 10:08:21 CEST [BUG FIXES] - Fixed parsing of empty query string pairs (aristotle) #500 [IMPROVEMENTS] - Documentation updates for FCGI (otrosien) #494 - Use HTTP::Headers::Fast in Plack::Request - Big performance optimizations on Plack::Util::header_* (aristotle) #498 - Added .webm to Plack::MIME (marlencrabapple) #503 - Use Cookie::Baker to bake cookies in Plack::Response (oalders) - reduced the size of distribution by making binary files smaller
2015-06-05Added www/p5-HTTP-Headers-Fast version 0.17wen1-1/+2
2015-06-05Add p5-HTTP-Headers-Fastwen1-1/+2
2015-06-05Import HTTP-Headers-Fast-0.17 as www/p5-HTTP-Headers-Fast.wen3-0/+28
HTTP::Headers::Fast is a perl class for parsing/writing HTTP headers. The interface is same as HTTP::Headers.
2015-06-05Back out previous commit as it is the wrong approach on feedback from joerg@sevan2-41/+1
2015-06-05Retain libgettextsrc.a, it's needed.sevan2-1/+41
Remove install-exec-hook target which becomes redundant. Resolves build issue on Bitrig
2015-06-05Add support for Bitrigsevan3-3/+12
2015-06-05Updated misc/mbuffer to 20150412wiedi1-1/+2
2015-06-05Update mbuffer to 20150412wiedi3-10/+10
20150412: - fix: watchdog cannot do its job if it is cleaned up to early - fix: clear sa_flags and sa_mask before use, although ignored 20141227: - added option --pid to print PID of current process - updated usage to include option -W - man page formatting fixes - configure updates - support compiling on systems that do not define PATH_MAX
2015-06-05Updated lang/vala to 0.28.0nb1wiz1-1/+2
2015-06-05Now that we're down to one vala version again, install the unversionedwiz4-18/+17
files again. Requested with patch by Kamil Rytarowski in PR 49946.
2015-06-05Updated www/p5-Dancer2 to 0.160002wen1-1/+2
2015-06-05Update to 0.160002wen2-6/+6
Upstream changes: 0.160002 2015-06-04 13:03:38+02:00 Europe/Amsterdam [ BUG FIXES ] * GH #920: Sanitize session IDs in file-based sessions. (Russell Jenkins, Andrew Beverley) [ DOCUMENTATION ] * GH #908: Cleanup Dancer references in DBIC section of cookbook (Julien Fiegehenn) * GH #910: Misc spelling and grammar fixes (Gregor Herrmann) * GH #916: Fix test example. (Peter Mottram - @SysPete) * GH #912, #913: Fix documentation on when stacks are printed. (Andrew Solomon)
2015-06-05Updated editors/nano to 2.4.1wiedi2-3/+3
2015-06-05Update nano to 2.4.1wiedi5-18/+30
2015.04.14 - GNU nano 2.4.1 "Glitch Gremlin" is released. This release includes several fixes for issues with the file browser menu, linter and formatter functions, spell checker, undo/redo with some specific marked-cutting situations, and some small improvements to the color syntax highlighting definitions. There are also various documentation and code comment updates included, and finally, fixes for compilation on non-GNU/Linux systems and certain configure combinations. Toasters! 2015.03.22 - GNU nano 2.4.0 "lizf" is released. This is the first stable release in many years, and brings together many new features from the 2.3 series, including: a fully functional undo system (now enabled by default), vim-compatible file locking, linter support, formatter support, syntax highlighting flexibility, and many fixes for issues reported since 2.2. Many sincere thanks to all of the bug reports, patches, well wishes and contributions from everyone who has continued to support us. Thank you for using nano! 2015.02.27 - GNU nano 2.3.99pre3 "Ashley" is released. This is likely to be the last release before the next major (2.4.0) release. Please test it out and send us any feedback via the Savannah bug page for nano (https://savannah.gnu.org/bugs/?group=nano). This release includes fixes for rebinding toggles via nanorc, several memory alignment fixes, and documentation and build updates. As always thank you for using nano - Share and Enjoy! 2015.02.06 - GNU nano 2.3.99pre2 "Snowblind" is released. This release contains only fixes, including: a long-standing problem with cutting in nano-tiny, several memory alignment improvements, and issues with leftover file locks. Please keep reporting bugs so we can get a happy and healthy 2.4.0 soon. Thanks for using nano! 2015.01.06 - GNU nano 2.3.99pre1 "Junior" is released. As the first 2.4 release candidate there will be fewer new features but many bugfixes going forward. This release contains new support for language reformatters like Go's gofmt command which takes the place of the spelling checker. Fixes in this release include many syntax highlighting fixes and improvements, and documentation formatting updates. As always please report bugs via the Savannah bug page for nano (https://savannah.gnu.org/bugs/?group=nano), so we can release a super awesome and bug-free 2.4.0 soon! 2014.07.17 - GNU nano 2.3.6 "Columbo" is released. This release contains a fix for installing internationalization files. Also included are scattered documentation (in particular man page) fixes, and a few touch ups to syntax highlighting definitions. Oh, just one more thing, thanks for using nano! 2014.07.11 - GNU nano 2.3.5 "lucky day" is released. This release contains many visible and under-the-hood fixes for components such as file locking, more fixes to the undo system, and you no longer have to explicitly ask nano to have undo/redo support as it now defaults to being enabled. Other notable fixes include a better handling of --tempfile mode, and better handling of command line arguments when also attempting to specify +<line number>. As always, please file any bugs you find at the Savannah page for nano, at https://savannah.gnu.org/bugs/index.php?42639 and thanks for using nano. 2014.06.02 - GNU nano 2.3.4 won't leave you high, won't leave you dry. This release contains only a small number of fixes, but in particular allows nano to compile on non-UTF8 curses implementations (i.e. libncursesw). Other small fixes to the undo implementation and the default syntax config are also included. As always, Share and Enjoy! 2014.05.28 - GNU nano 2.3.3 is in its right place. This release contains many many improvements to the core system, including substantial improvements to the undo/redo code, UTF-8 handling, the configure script, and display of shortcuts on very wide terminals, New features include the ability to write to named pipes (--noread), as well as linter support (see the nanorc man page for details). Also included are much improved syntax highlighting code, and configurations for JSON, texinfo, Go, and a default syntax for catch all highlighting. Finally, nano now has the ability to set the color of the title bar, status bar, and shortcut keys (e.g. "^X") and their descriptions. Again see the nanorc page for details. There's much more, too much to include here, but please keep those reports and general feedback coming! Thank you for helping us help you help us all. 2013.03.22 - GNU nano 2.3.2 "Annoy your coworkers for fun and profit" is released. This release introduces vim-style file locking (though not backup/restore), useful when using nano in a multi-editor environment. Feedback is welcome if you run into any issues with this new code. Other new features include additional support for word boundary checking when cross compiling, fixes for trying to go to an invalid line number, and the usual documentation tweaks. 2011.05.10 - GNU nano 2.3.1 "I'm in space" is released. This release includes some fixes for the new libmagic code, as well as a fix for improper character counts when using auto-indent. Also included are new syntax highlighting definitions for RPM spec and lua files. Thanks for using nano and keep circulating the tapes. 2011.02.26 - GNU nano 2.3.0 "Septic surprise" is released. This first release in the 2.3 unstable series brings several new features. First, libmagic support for syntax highlighting has been added on top of the existing file extension and header support already available. Secondly, cursor position can be saved between editing sessions with the -P or --poslog command-line flag, or via "set poslog" in your .nanorc. Also included are some fixes for compilation with g++, and better handling of issues writing the backup file, which should reduce the need for the 'set allow_insecure_backup" nanorc option. Don't stop, get it get it, don't stop, get it get it.
2015-06-05Updated mail/rspamd to 0.9.5wiedi2-3/+3
2015-06-05Update rspamd to 0.9.5wiedi3-29/+27
0.9.5: * Avoid double free when extending HTTP message. * Fix double free if multiple classifiers are defined. * Fix misprint in spamassassin plugin. * Fix cpuid invocation on i386. * Fix ownership issues for zero-copy decode. * Allow __len metamethod on rspamd{text}. * Add base64 decoding lua utility. * Fix build on FreeBSD * Skip spaces at the beginning of mime messages. * DBL_ABUSE_REDIR should not have significant weight. * Allow to split by lua_regexp rspamd{text} objects. * Allow to specify custom stop pattern for lua_tcp. 0.9.4: * Fix critical bugs in tokenization algorithm * Write unit tests for tokenization * Add documentation for lua_tcp * Switch off legacy tokenization by default. * Fix critical bugs in words normalization * Add lua bindings to tokenizer. * Implement storing of HTTP headers inside task * Add lua API to accerss HTTP headers data * Implemented base64 encoding suitable for MIME * Use caseless hash and equal functions for HTTP request headers. * Improve debian architectures support (by @dottedmag) 0.9.3: * Revert incorrect regexp change that broke the default rules * Fix lua_tcp module 0.9.2: * Fix error on spawning unique workers. * Add preliminary version of generic LUA TCP requests API. * Use lua 5.1 if luajit is not available (Arm64, PowerPC, s390x etc) * Fix fuzzy mime strings with only type. * Improve thunderbird sanity checks. * Fix critical bug on matching regular expressions. * Make hiredis optional dependency. * Fix multiple bugs in daemon reloading 0.9.1: * Restore utf8 validation for regular expressions to avoid crashes * Fix symbols displaying in the interface * Add symbol groups to the interface * Fix maps ID parsing in the controller * Add multimap and regexp modules documentation * Backport fixes from libucl * Fix debian package (by @dottedmag) * Rework XXH32 invocations 0.9.0: * Add support of the fast and secure protocol level encryption: - curve25519 is used for key exchange; - chacha20/poly1305 cryptobox construction for bulk encryption; - zero latency overhead; - encrypting and balancing HTTP proxy worker * Rework expressions and create new expressions library: - aggressive optimizations based on the abstract syntax tree; - abstract expressions support (regular expressions, functions, lua modules composites and so on) - New comparision and '+' operators support - New greedy algorithm to minimize execution time of expressions and all symbols - Dynamic expressions benchmark and reoptimizations * Many improvements to the LUA API: - reworked logger module allowing to do pretty print of the most of lua types (including tables and userdata classes) - reworked lua redis and lua HTTP to support more features - added opaque type for passing large text chunks without copying - new regexp module with many auxiliary functions (e.g. `re:split`) * LuaJIT is now the default requirement for rspamd allowing to speed up lua execution by a large margin (however, plain lua is still supported) * New plugins: - spamassassin rules plugin that allows to load and re-use the most of SA rules natively - DMARC plugin that evaluates SPF and DKIM policies to the domain policies - many old plugins has been reworked to implement new features and improve stability * New aho-corasic trie implementation from @mischasan that allows to load and use hundreds of thousands of patterns with no influence on load * Support of PCRE JIT and PCRE JIT fast path modes that significantly improves the performance of regular expressions if supported by PCRE * New URLs parser and extractor: - removed legacy code that was useless for url finding - reworked algorithms of URL parsing for more precise and accurate results - added top-level-domains tree from http://publicsuffix.org - improved emails parsing - removed many phishing false positives due to TLD tree check * New statistics infrastructure: - created a separate layer of statistic library - improved OSB-Bayes by re-weighting tokens according to the original academic paper and `crm114` implementation, which reduced false positives rate significantly - created learn cache to avoid double learning of statistics and providing an efficient way to re-learn class for a message - created abstract layers for different statistics backends - implemented new tokenization algorithms with fast or secure (siphash) hashes to generate statistics features * Reworked utf8 tokenization that previously corrupted all UTF8 words (minor incompatibility with old fuzzy hashes with utf-8 symbols) * SPF module has been completely rewritten to support complex cases of `include` and `redirect` within SPF records * DKIM module now supports multiple signatures * Controller passwords can now be stored encrypted by `PBKDF2-HMAC` in the configuration file * Many hand-written HTTP clients has been replaced with the common rspamd http module * New test framework: - import lua `telescope` test framework - add unit tests for many rspamd modules and routines - create a unit test for each possible bug found - use luajit ffi for testing C code - added preliminary support of functional testing by creating tasks from lua * Randomize hash seed to avoid certain hash tables vulnerabilities * Documentation improvements: - added documentation for the vast majority of rspamd modules - added documentation for rspamd protocol - added documentation for the most of rspamd LUA extensions * Fixed tonns of bugs and memory leaks * Added tonns of minor features 0.8.3: * Various critical fixes in distribution (by @dottedmag and @fatalbanana) * Fixed bugs in url detector to parse certain patterns * Add default host and helo for a client * Some sanity checks for tokenizer and classifier * Reiterate on systemd support * Fix missing symbol registration * Add support of spamc compatible output * Filter double-dots in rbl.lua validate_dns (by @fatalbanana) * Update ucl submodule due to critical bugfix 0.8.2: * Create fuzzy db if it does not exist * Fix: Centos init script: configtest() (by @AlexeySa) * Enable one_shot for RECEIVED_SPAMHAUS_XBL - Fixes #102 (by @fatalbanana) * Update Exim patch (by @fatalbanana) * Fix processing of unix sockets. * Allow applying settings to authenticated users (by @fatalbanana) * Make settings priorities work as documented (by @fatalbanana) * Fix race condition in symbols planner * Add DNSWL_BLOCKED symbol (by @fatalbanana) * Make Exim pass usernames to rspamd (by @fatalbanana) * Update RBL module (by @fatalbanana): - fix indentation; - collapse loops; - avoid calling for un-needed information; - allow disabling RBLs for authenticated users * once_received.lua: Fix indentation & add exclusion for authenticated users (by @fatalbanana) * hfilter.lua: Add exclusion for authenticated users (by @AlexeySa) * Updates to hfilter rules (by @AlexeySa) * Set empty <> user or addr for msgs without FROM (by @eneq123) * Fix: attempt to index field '?' (a nil value) (by @eneq123) * Fix: if not exist Date-header (by @AlexeySa) * Add task:get_content() method. * rbl.lua: Ignore private IP space (by @fatalbanana) * Allow to check radix maps from lua by rspamd{ip} * Make local exclusions configurable per-RBL (by @fatalbanana) * Add rspamd_config:radix_from_config() (by @fatalbanana) * Support emails dnsbl in rbl (by @fatalbanana) * Complete rework of url extraction logic * Allow customizations for unix sockets. (fixes #182) * Set lua path according to rspamd settings. * Import lua-functional for plugins stuff. * Completely rewrite multimap plugin in functional style. * Fix FORGED_MUA_THUNDERBIRD_MSGID (fixes #186) * Check IPv6 addresses at dnswl.org and Spamhaus whitelist (by @fatalbanana) * Add lowercase utility for utf8 strings. * Various fixes to build system * Updated debian configuration infrastructure (by @dottedmag)