summaryrefslogtreecommitdiff
path: root/chat/jabberd2
AgeCommit message (Collapse)AuthorFilesLines
2006-06-11Update to 2.0s11:xtraeme2-7/+6
* Sending a stanza before a stanza during a SASL negotiation can cause a c2s segfault. Leading to a remote DoS.
2006-05-31The databases/openldap package has been split in -client and -server componentghen1-2/+2
packages. Convert LDAP-based applications to depend on openldap-client, and bump PKGREVISION for those that depend on it by default.
2006-04-21Fixed pkglint warnings.rillig3-10/+11
2006-04-06Over 1200 files touched but no revisions bumped :)reed1-2/+2
RECOMMENDED is removed. It becomes ABI_DEPENDS. BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo. BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo. BUILDLINK_DEPENDS does not change. IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS which defaults to "yes". Added to obsolete.mk checking for IGNORE_RECOMMENDED. I did not manually go through and fix any aesthetic tab/spacing issues. I have tested the above patch on DragonFly building and packaging subversion and pkglint and their many dependencies. I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I have used IGNORE_RECOMMENDED for a long time). I have been an active user of IGNORE_RECOMMENDED since it was available. As suggested, I removed the documentation sentences suggesting bumping for "security" issues. As discussed on tech-pkg. I will commit to revbump, pkglint, pkg_install, createbuildlink separately. Note that if you use wip, it will fail! I will commit to pkgsrc-wip later (within day).
2006-02-05Recursive revision bump / recommended bump for gettext ABI change.joerg1-2/+2
2006-01-08Bump PKGREVISION due to mysql.buildlink3.mk changes (default mysqlxtraeme1-1/+2
pkg has been changed to 5.x). Reminded by wiz... thanks.
2005-12-29Remove USE_PKGINSTALL from pkgsrc now that mk/install/pkginstall.mkjlam1-2/+1
automatically detects whether we want the pkginstall machinery to be used by the package Makefile.
2005-12-05Ran "pkglint --autofix", which corrected some of the quoting issues inrillig1-2/+2
CONFIGURE_ARGS.
2005-12-05Fixed pkglint warnings. The warnings are mostly quoting issues, forrillig1-12/+6
example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some other changes are outlined in http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html
2005-10-20Update to 2.0s10xtraeme2-6/+6
* fixed SASL anonymous * fixed edge cases with new dynamic jid code * fixed incorrect free order in c2s * corrected debug logging * fixed s2s bus error on 64-bit architectures * fixed c2s collisions due to long jids * fixed error response to iq result * fixed roster pushing packets without id * applied new dynamic jid patch * fixed double free of nad in c2s and s2s * major memory enhancement, made jid structure dynamically allocated * fixed glibc error with custom sql statements * fixed segfault with keepalives
2005-08-19Merge CONF_FILES/SUPPORT_FILES and CONF_FILES_PERMS/SUPPORT_FILES_PERMSjlam1-2/+2
as the INSTALL and DEINSTALL scripts no longer distinguish between the two types of files. Drop SUPPORT_FILES{,_PERMS} and modify the packages in pkgsrc accordingly.
2005-08-03Update to 2.0s9.xtraeme2-6/+6
The jabberd project team is pleased to announce the release of jabberd 2.0s9. This is a security release. There is a buffer overflow that could be used to perform a DoS attack and possible code execution. It is *HIGHLY* recommended that you upgrade! ChangeLog: * fixed only one user is loaded correctly for each router acl * fixed s2s segfault under particular connection timeout conditions * fixed id is being case sensitive * fixed Users cannot login after a long period of server inactivity * fixed handling of stream errors * fixed version attribute reply in stream * fixed c2s glibc abort and mysql option flags * fixed sx io mem leak * fixed Incorrect SASL error message defined in sx/sasl.c * fixed 3 buffer overflows in jid.c * fixed second log-in in with similar resource breaks routing for first login
2005-06-02use option groupsdillo1-6/+4
2005-05-31Rename option PAM to pam (so all options are lower case). Backwardsdillo1-3/+3
compatibility provided via PKG_OPTIONS_LEGACY_OPTS.
2005-05-31Packages have no business modifying PKG_DEFAULT_OPTIONS -- it's adillo1-2/+3
user settable variable. Set PKG_SUGGESTED_OPTIONS instead. Also, make use of PKG_OPTIONS_LEGACY_VARS. Reviewed by wiz.
2005-05-24Update to 2.0.8, lots of bugs were fixed. Looks like they stoppedxtraeme5-41/+25
updating the Changelog file for changes (why??).
2005-05-03Sort.wiz1-5/+5
2005-05-02RCD_SCRIPTS_EXAMPLEDIR is no longer customizable.reed1-1/+7
And always is defined as share/examples/rc.d which was the default before. This rc.d scripts are not automatically added to PLISTs now also. So add to each corresponding PLIST as required. This was discussed on tech-pkg in late January and late April. Todo: remove the RCD_SCRIPTS_EXAMPLEDIR uses in MESSAGES and elsewhere and remove the RCD_SCRIPTS_EXAMPLEDIR itself.
2005-04-11Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.tv1-2/+1
2005-02-15Fixed a quoting error ($ => $$) in a sed expression. Bumped PKGREVISION.rillig1-2/+3
Approved by xtraeme.
2005-01-20Update to 2.0s6.xtraeme6-63/+44
Changes: * Fix base64 encoding length in authreg_pipe.c Stephen Marquard, Diagnosed by Jerome Vandenabeele * Fixes segfault on s2s startup on some platforms when ssl is enabled (local pemfile defined in s2s.xml), Stephen Marquard * mod_offline handling of jabber:x:event client requests (JEP-0022) can lead to a loop repeatedly adding duplicates to the offline queue under certain race conditions. Correctly detect jabber:x:event notifications and do not respond to them as requests, Stephen Marquard * Check for invalid jids in directed presence packets, Stephen Marquard, Based on bug report by Christopher Zorn * Fixes minor memory leaks in authreg_ldap, Ilja Booij * Fixes error in storage filter code using bdb storage causing sm crash, Stephen Marquard * Changes incorrectly indexed primary keys to non-unique indexes, adds other indexes for efficiency, and changes type of xml field to increase max allowed length, Stephen Marquard * Include sys/types.h if available in util.h inter alia for FreeeBSD, Stephen Marquard * Minor code cleanups for compilation on HP-UX, Christof Meerwald * Fix configure.in for correct handling of resolv.h, Magnus Henoch * Include resquery checks from MAIN cvs branch in 2.0, Christof Meerwald * Allows jabberd to start new components and place itself in the background, Richard Bullington-McGuire (original ver), Additional components defined in jabberd.cfg get started as long as they are in the same directory as the jabberd script (useful for mu-conference installed through jcr) The script can daemonize itself with the "-b" switch after starting the various programs it watches over, unless the debug option is set. * Paranoia, ensure than srv->name is nul terminated., Jedi/Sector One And more, please see the Changelog file.
2005-01-14Create a pam.buildlink3.mk file that is used by PAM-using packages.jlam1-2/+2
It includes the correct buildlink3.mk file from either Linux-PAM (security/PAM) or OpenPAM (security/openpam) and eventually will support solaris-pam. pam.buildlink3.mk will: * set PAMBASE to the base directory of the PAM files; * set PAM_TYPE to the PAM implementation used. There are two variables that can be used to tweak the selection of the PAM implementation: PAM_DEFAULT is a user-settable variable whose value is the default PAM implementation to use. PAM_ACCEPTED is a package-settable list of PAM implementations that may be used by the package. Modify most packages that include PAM/buildlink3.mk to include pam.buildlink3.mk instead.
2004-12-28The default location of the pkgsrc-installed rc.d scripts is nowreed1-2/+2
under share/examples/rc.d. The variable name already was named RCD_SCRIPTS_EXAMPLEDIR. This is from ideas from Greg Woods and others. Also bumped PKGREVISION for all packages using RCD_SCRIPTS mechanism (as requested by wiz).
2004-11-29Use PKG_DEFAULT_OPTIONS.xtraeme2-4/+3
2004-11-29Update jabberd2 to jabberd-2.0s4nb1, by pulling in patches fromabs2-4/+37
http://www.marquard.net/jabber/#recommended, specifically patch 58 which fixes the remote exploit listed at: http://www.securityfocus.com/archive/1/382250 Patches included: 28* patch-jedi8-sm-object_c Remove incorrect semicolumn from os_object_free() in sm/object.c 29* patch-jedi-mysql-storage Fixes to mysql storage for boundary conditions 30* patch-base64 Fix length-related issues in base64 decoding routines 31* patch-sm-storage_db Fixes to storage_db.c to avoid roster corruption: "sm/storage_db inserts items in the filter hash table with keys which are located on the stack. This creates confusion when the code later tries to compare with these keys." 32* patch-nad-escape Fixes bug in _nad_escape() where escaping ]]> can cause a segfault when handling large messages where nad_realloc is called. 38* patch-jedi-pgsql-storage Fixes to pgsql storage for boundary conditions and incorrect buffer length calculation 46* patch-memleaks Fix minor memory leaks in digest-md5 authentication and nad_free() 47* patch-ns-fix Fixes omission of namespace declaration where a namespace has already been used in the XML stanza 48* patch-sm-nad-triplet Fixes omission of prefix on attributes processed by nad_parse (e.g. in queue storage) 49* patch-mod_disco_publish Corrects check for deleting previously published disco items from "delete" to "remove" (as per JEP-0030). 50* patch-sm-filter Alters filter handling and adds mysql/pgsql escaping on filter strings to allow brackets and apostrophes in resource names that form part of JIDs stored as roster entries 58* patch-c2s-buffers Fixes buffer overflow that can lead to segfault in c2s mysql and pgsql auth modules - see report by icbm (www.venustech.com.cn)
2004-11-18The universal option to enable PAM support is "PAM" not "pam". We strivejlam1-3/+3
to use common option names were possible, so change these instances of "pam" to "PAM" to match existing usage.
2004-11-10s/mysql4/mysql/xtraeme1-2/+2
2004-10-29Use mk/mysql.buildlink3.mk instead of databases/mysql-client/buildlink3.mk,xtraeme1-9/+3
so that we'd not force dependance on specific MySQL version, and instead pick the currently installed mysql*-client (or install the default if there is no mysql-client package installed yet) this makes package buildable with arbitrary MySQL version, such as 3.23.x, 4.0.x or 4.1.x
2004-10-27Update chat/jabberd2 to 2.0s4.xtraeme2-6/+5
Changes: * Fixed race condition allowing c2s to be killed, Stephen Marquard * Fixed off-by-one bug in s2s/main.c leading to segfault on startup in some environmentsp * Fixed memory leak in sm, Michal Kera * Fixed problem relating to SSL connections not being closed correctly, Nathan Christiansen * Fixed 3 problems in mod_announce: (a) NAD freed before use, (b) struct tm not initialised correctly on some platforms, and (c) time not initialised for broadcast motd messages delivered to online users, Stephen Marquard * Fixed insertion of extra namespace in element in some types of messages retrieved from offline queue, which causes a parse error in the router, Matthew Buckett * Fixed off-by-one bug in PLAIN SASL authentication code. May also resolve a number of other bugs relating to c2s authentication, Robert Theisen * Fixed return value of jid_new() in pkt.c to avoid sm segfault from dereferencing NULL pointer, triggered by a message with a to JID of the form "@some.server@", Stephen Marquard * Avoided adding nads to the cache that are created through nad_copy(), Stephen Marquard * Fixed bug in retrieving hash values, Stephen Marquard * Improved performance of pool cleanup function, Stephen Marquard * Corrected handling of EMAIL, TEL and ADR/CTRY elements in vcards for JEP-0054 compliance, Stephen Marquard * Optimised sm algorithm for announcing presence to skip presence announcements and probes for users on the same server who are not online, Stephen Marquard * Checked that storage drivers are initialised correctly; if not, abort, Stephen Marquard * Fixed file descriptor leak in storage_fs * Allowed c2s to supply a certificate chain to clients, Iain MacDonnell
2004-10-03Libtool fix for PR pkg/26633, and other issues. Update libtool to 1.5.10tv1-1/+2
in the process. (More information on tech-pkg.) Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and installing .la files. Bump PKGREVISION (only) of all packages depending directly on the above via a buildlink3 include.
2004-08-07Move Makefile.options to options.mk (to follow jlam@'s changes),xtraeme2-3/+5
by default we'll use PKG_OPTIONS.jabberd2?=mysql4 (which is the default for jabberd2).
2004-08-07Remove unused JABBERD_METHOD, it was replaced by PKG_OPTIONS.jabberd2.xtraeme1-3/+2
2004-07-31Welcome to the new world: bsd.options.mk.xtraeme2-21/+42
2004-07-18Make sure the configure script finds the mysql includes.kristerw1-1/+2
2004-07-14Remove JABBERD_METHOD, which is already defined in bsd.pkg.defaults.mk.xtraeme1-3/+1
2004-07-14Update chat/jabberd2 to 2.0s3.xtraeme6-99/+67
Changes: 2004-06-25 jabberd 2.0s3 * Fixed several memory leaks and overruns <karsten.petersen@hrz.tu-chemnitz.de> * Fixed XMPP session replacement [rob] * Added support for Win32 platforms <peter@cerebus.co.za> [rob] * Added support for requiring SSL/TLS before auth <deryni@eden.rutgers.edu> * Added support for LDAPv3 (including channel encryption) [rob] * Added workaround to make large presence broadcasts more efficient [rob] * Generate random dialback key if none provided [rob] * Rewrote configure script (+ many code tweaks to support this) [rob] * Remove build requirement for Libidn and OpenSSL [rob] * Removed bundled Libidn due to licensing issues [rob] * Bugfixes: 3059, 3174, 3343, 3368, 3480, 3481, 3594
2004-07-06Simplify pre-configure target, fix a typo in a comment and remove thextraeme1-8/+3
option --enable-debug (which was disabled).
2004-06-26Update jabberd2 to jabberd-2.0s2nb1abs6-7/+43
Since the various jabber daemons need to write their pid files as the jabberd user, ensure a jabberd owned /var/run/jabberd is created by rc.d files
2004-06-03Fix small typo in commentabs1-2/+2
2004-05-24Change JABBERD_PIDDIR to /var/run instead of /var/run/jabberd,xtraeme1-2/+2
because with the previous way, /etc/rc.d/mouncritlocal removes all the files/dirs in /var/run every time the machine is rebooted... from David Brownlee in private email.
2004-04-23mk/bsd.pkg.install.mk now automatically registersreed1-7/+1
the RCD_SCRIPTS rc.d script(s) to the PLIST. This GENERATE_PLIST idea is part of Greg A. Woods' PR #22954. This helps when the RC_SCRIPTS are installed to a different ${RCD_SCRIPTS_EXAMPLEDIR}. (Later, the default RCD_SCRIPTS_EXAMPLEDIR will be changed to be more clear that they are the examples.) These patches also remove the etc/rc.d/ scripts from PLISTs (of packages that use RCD_SCRIPTS). (This also removes now unused references from openssh* makefiles. Note that qmail package has not been changed yet.) I have been doing automatic PLIST registration for RC_SCRIPTS for over a year. Not all of these packages have been tested, but many have been tested and used. Somethings maybe to do: - a few packages still manually install the rc.d scripts to hard-coded etc/rc.d. These need to be fixed. - maybe remove from mk/${OPSYS}.pkg.dist mtree specifications too.
2004-03-28Initial import of jabberd2 (2.0s2) from pkgsrc-wip.xtraeme17-0/+700
Jabber is an open XML protocol for real-time exchange of messages and presence notification between any two points on the Internet. The first application of Jabber technology is an asynchronous, extensible instant messaging platform, and an IM network that offers functionality similar to legacy IM systems such as AIM, ICQ, MSN, and Yahoo. This is a complete rewrite of the original jabberd.