Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
- ok'ed recht@
- Addresses a few recent security issues:
http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&msg=33723
http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&msg=33733
Changes to the Cyrus IMAP Server since 2.2.10
* Fix possible single byte overflow in mailbox handling code.
* Fix possible single byte overflows in the imapd annotate extension.
* Fix stack buffer overflows in fetchnews (exploitable by peer news
server), backend (exploitable by admin), and in imapd (exploitable
by users though only on platforms where a filename may be larger
than a mailbox name).
|
|
|
|
|
|
under share/examples/rc.d. The variable name already was named
RCD_SCRIPTS_EXAMPLEDIR.
This is from ideas from Greg Woods and others.
Also bumped PKGREVISION for all packages using RCD_SCRIPTS mechanism
(as requested by wiz).
|
|
dependencies is not affected, as noticed by Jukka Salmi in PR#28470.
|
|
Patch by adrianp@.
While at it also make it build on OSX.
Changes to the Cyrus IMAP Server since 2.2.9
Fix 0 termination in mysasl_canon_user.
Check for imap magic plus buffer overflow in proxyd also (CAN-2004-1015).
Changes to the Cyrus IMAP Server since 2.2.8
Change ACLs correctly when renaming a user
Do not abandon std{in,out,err} file descriptors; syslog assumes it can
use stderr if syslogd isn't running.
Clean up imap magic plus to avoid buffer overrun (CAN-2004-1011)
Fix lack of bounds checking in PARTIAL and FETCH (CAN-2004-1012, CAN-2004-10
13)
Do not attempt to reuse a freed connection in lmtpproxyd.
Allow login without authentication with -N switch in proxyd.
Fix use of xrealloc and fold pointers in lmtpengine.
|
|
that use pthreads already implement their own probes for pthreads, so
we don't need to auto-add the compiler/linker flags.
|
|
enable it via patches for just that one program.
|
|
threads, and any dependencies that need it will include it themselves
in their own buildlink3.mk files.
|
|
* Add a db1.builtin.mk file that detects whether DB-1.85 functionality
exists in the base system, and remove the distinction between
"native" and the other Berkeley DB packages -- we now refer to
db[1234]. This paves the way for any future databases/db1 package.
* USE_DB185 shouldn't need to be set by any packages -- its correct
value is now automatically determined by bdb.buildlink3.mk depending
on whether we explicitly request db1 or not. By default, if you
include bdb.buildlink3.mk, you want DB-1.85 functionality and
USE_DB185 defaults to "yes", but if you explicitly remove db1 from
the list of acceptable DBs, then USE_DB185 defaults to "no".
* Set BDB_LIBS to the library options needed to link against the DB
library when bdb.buildlink3.mk is included.
* We only add the DB library to the linker command automatically if
we want DB-1.85 functionality; otherwise assume that the package
configure process can figure out how to probe for the correct
headers and libraries.
Edit package Makefiles to nuke redundant settings of USE_DB185.
|
|
to RFC 2822).
Patches forwarded by Jukka Salmi in PR 27239
Bump PKGVERSION to 4.
|
|
in the process. (More information on tech-pkg.)
Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and
installing .la files.
Bump PKGREVISION (only) of all packages depending directly on the above
via a buildlink3 include.
|
|
debugging Cyrus services.
Bump PKGREVISION.
|
|
into the bsd.options.mk framework. Instead of appending to
${PKG_OPTIONS_VAR}, it appends to PKG_DEFAULT_OPTIONS. This causes
the default options to be the union of PKG_DEFAULT_OPTIONS and any
old USE_* and FOO_USE_* settings.
This fixes PR pkg/26590.
|
|
fixed in the main Cyrus sources. Fix from <seb>.
|
|
for each package can be determined by invoking:
make show-var VARNAME=PKG_OPTIONS_VAR
The old options are still supported unless the variable named in
PKG_OPTIONS_VAR is set within make(1) (usually via /etc/mk.conf).
|
|
This release corrects a minor issue found with the handling of Sieve
notifications in 2.2.7.
|
|
Noted by Jukka Salmi in private mail.
bump PKGREVISION to 1
|
|
Changes to the Cyrus IMAP Server since 2.2.6:
- Fix handling of PARTIAL command and partial body fetches
- A large number of portability fixes supplied by Albert Chin
- Added client_timeout option to control connect() timeouts
for proxy code
- Added popuseacl option
- Fix a number of issues with the quota -f tool
- Fix thread safety issue in saslserver()
- Fix possible stage file leak in append code
- Fix bugs in handling of MULTIAPPEND introduced in 2.2.3
- Fixed regression bug in Sieve vacation
|
|
to match the default value from the cyrus-imapd configure script.
|
|
Changes to the Cyrus IMAP Server since 2.2.5
- Fix a bug in the proxy code where a backend connection might get
closed twice
- Improved consistancy checking in chk_cyrus
- Fix segfault in APPEND code
- Fix a bug with an interaction between sieve and unixhierarchysep
- Fix a file descriptor leak in the quotadb code
- Fix a triggered assertation in service-thread services
- Add a number of internal consistancy checks to the skiplist code
- Allow mbpath to handle virtual domains
- Fix various MANAGESIEVE client authentication issues
- Other minor fixes
|
|
Changes to the Cyrus IMAP Server since 2.2.4
- Bug fixed in hash table code that could sometimes cause crashes with
the quotalegacy database
- Net-SNMP compatibility
- Significantly improved com_err detection
- Assorted minor NNTP improvements
- Assorted other minor bugfixes
|
|
- allow deletions in the middle of a hash_enumerate
- typo
Posted by Jukka Salmi on tech-pkg@.
While at it add a knob for changing cyrus' default idle method.
# CYRUS_IDLE
# use METHOD for IMAP IDLE
# METHOD is poll, idled or no
# Default: not defined
(Idea from FreeBSD)
Bump PKGREVISION to 2.
|
|
that have been prepended with "cyrus-". Prepend a few more manpages with
"cyrus-" to prevent any likely future collisions with other packages.
Bump the PKGREVISON to 1.
|
|
changes:
- Quota now uses the cyrusdb interface (quotalegacy by default).
- All incoming messages are now staged to disk before locking the
destination mailbox (locks are no longer held during a network read).
- Fixed off-by-one error in fetchnews (articles are no longer skipped).
nntpd now uses the Followup-To: header (if exists) instead of the
Newsgroups: header when constructing post address(es) and adds them to
the Reply-To: header instead of the To: header.
- Added berkeley_locks_max, berkeley_txns_max and berkeley_cachesize options.
- Added imapmagicplus option.
- Substantial work on afspts/ptloader canonicalization code
- Much improved LDAP ptloader code (no more internal OpenLDAP dependencies)
- Fixed a number of IPv6 related bugs
|
|
Patch provided from Cyrus's CVS by Jukka Salmi in PR pkg/25256.
Details: https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/cyrus/lib/auth_krb5.c.diff?r1=1.2&r2=1.3
|
|
from the Makefile.
Pointed out by Jukka Salmi.
|
|
Fixes pkg/25247 by Jukka Salmi.
|
|
|
|
Buildlink files: RECOMMENDED version changed to current version.
|
|
script. Okayed by wiz.
|
|
|
|
IMAP (Internet Message Access Protocol) is an Internet standards-track
protocol for accessing messages (mail, bboards, news, etc). The Cyrus
IMAP server differs from other IMAP server implementations in that it
is generally intended to be run on "sealed" servers, where normal users
are not permitted to log in. The mailbox database is stored in parts of
the filesystem that are private to the Cyrus IMAP system. All user
access to mail is through the IMAP, POP3, or KPOP protocols.
|