summaryrefslogtreecommitdiff
path: root/mail/spamassassin/distinfo
AgeCommit message (Collapse)AuthorFilesLines
2007-02-23Pullup ticket 2031 - requested by tacaghen1-4/+4
security update for spamassassin - pkgsrc/mail/spamassassin/Makefile 1.78-1.79 - pkgsrc/mail/spamassassin/distinfo 1.43 Module Name: pkgsrc Committed By: ghen Date: Thu Feb 8 09:30:27 UTC 2007 Modified Files: pkgsrc/mail/spamassassin: Makefile Log Message: Put rule file updates in ${VARBASE}/spamassassin instead of ${VARBASE}. Bump PKGREVISION. --- Module Name: pkgsrc Committed By: heinz Date: Thu Feb 15 21:43:43 UTC 2007 Modified Files: pkgsrc/mail/spamassassin: Makefile distinfo Log Message: Updated to version 3.1.8. Pkgsrc changes: - some cleanup of the Makefile to shut up a few pkglint notes and warnings (USE_TOOLS, SUBST_CLASSES). Changes since version 3.1.7: ============================ 3.1.8 is a major bug-fix release, including a potential DoS. The major highlights are: - bug 5318: fix for CVE-2007-0451: possible DoS due to incredibly long URIs found in the message content. - bug 5240: disable perl module usage in update channels unless --allowplugins is specified - bug 5288: files with names starting/ending in whitespace weren't usable - bug 5056: remove Text::Wrap related code due to upstream issues - bug 5145: update spamassassin and sa-learn to better deal with STDIN - bug 5140 and 5179: improvements and bug fixes related to DomainKeys and DKIM support - several updates for Received header parsing - several documentation updates and random taint-variable related issues
2006-10-10Updated to version 3.1.7.heinz1-4/+4
Pkgsrc changes: - none Changes since version 3.1.6: ============================ 3.1.7 is a "quick-fix" release; it contains only a fix for one bug, introduced accidentally in 3.1.6: - bug 5119: if admins had set rule scores in the site configuration in /etc, sa-update would fail. Back out this change
2006-10-05update this to spamassassin 3.1.6. changes include:mrg1-4/+4
bug 5044: include local site config in sa-update lint checks bug 5048: --lint should not use network rules or AWL bug 5081: sometimes, SIGHUPing spamd would leave one child process still alive due to a race in the SIGHUP handler and the preforking code. fixed bug 5040: if in no-net scoreset, don't warn about net rules being zero-score dependencies of meta rules bug 5105: M::SA::Client doesn't always catch failed connection to spamd, fixed bug 5094: check for unit'd value used in AntiVirus.pm bug 5089: enable adding headers with single digit zero value bug 5077: fix false SPF_SOFTFAIL's when SPF queries timeout bug 5080: fix bug in update RCVD_ILLEGAL_IP evaltest to properly deal with 127/8 fix bug 5111: fix FORGED_JUNO_RCVD FP on webmail from untd.com's own systems bug 4940: _get_date_header_time() should try dates one at a time not all dates joined together bug 5098: add support for ecelerity Received headers, thanks to Joe Schaefer <joe+gmane at sunstarsys.com> bug 4975: (trivial) avoid use of unit'd value in prefork warning message bug 4418: remove no longer useful HTML_WEB_BUGS and HTML_LINK_IMAGE_BUG rules bug 5101: fix bug in mbx code introduced in a backport of 3.2 AICache code try to work around horribleness when checking in the entire built tree for the website update procedure bug 5076: unescape hash characters in the config add my nagios plugin for monitoring spamd to contrib/
2006-08-31update to spamassassin 3.1.5. relevant changes:mrg1-4/+4
bug 5018: update RegistrarBoundaries with new list of 2TLDs bug 5020: drop __OUTLOOK_DOLLARS_MSGID, replace with the superset rule __OE_MSGID_2 update replace_license_blocks, have it deal with C-style comments better, put a sample commandline in place bug 4492: bayes_ignore_header was case sensitive add logging, enable zmi and doc mass-checks bug 5049: allow commented lines in gpgkeyfile and channelfile files bug 4952: set a default value for DEF_RULES_DIR_, LOCAL_RULES_DIR, and LOCAL_STATE_DIR. this fixes an issue where third-party code which hasn't been updated to deal with LOCAL_STATE_DIR can still use updates. bug 4848: Pyzor, DCC, and SpamCop plugins weren't looking at the right place to see the 'dont_report_to_...' options bug 4843: skip text/calendar parts when generating the body text arrays bug 5013: deal octal obfuscation of IP addrs in URLs bug 5049: handle comments and whitespace in sa-update config files and fix an error in channel name validation bug 4981: remove broken urirhssub support for regexp subrule and make perldoc match the code bug 5060: backport ArchiveIterator changes for rule-QA system, namely: the AICache caching subsystem for faster mass-checks, support for combined --head/--tail semantics, more verbose 'showdots' to avoid buildbot timeouts, and a new intra-child IPC me chanism for multi-child mass-checks bug 5034: fix endless loop possible from bad input or network error bug 5065: implement whitelist_from_dk bug 4823: clarify M::SA::Plugin documentation
2006-07-31Updated to version 3.1.4.heinz1-4/+4
Pkgsrc changes: - Incorporated new version requirements for p5-Archive-Tar and p5-IO-Zlib. Relevant changes since version 3.1.3: ===================================== - bug 4941: if the first sa-update run failed and wasn't re-run to successful completion, the local state directory would exist, and therefore SA sees no rules. now, wait as long as possible to create the directory, and try to remove it on failure. - bug 4997: increase module version requirements for Archive::Tar to 1.23 and IO::Zlib to 1.04 - bug 4966: fix major BSMTP bug, which rendered SA unusable with exim4 when BSMTP is used. - bug 4899: Windows had issues with single quotes around filenames so certain things like pyzor, etc, wouldn't function. - bug 4958: sa-update should work on Windows - bug 4908: gtube.t test failed in non-english locales - bug 4488: deal with potential memory leak due to Bayes and BayesStore circular references - bug 4862: update macro values in update channels (ie: @@CONTACT_ADDRESS@@)
2006-06-05Updated to version 3.1.3.heinz1-5/+4
Pkgsrc changes: - patch-bb for no longer necessary (integrated upstream). Changes since version 3.1.2: ============================ - bug 4926: given a certain set of parameters to spamd and a specially formatted input message, users could cause spamd to execute arbitrary commands as the spamd user - bug 4932: the userstate dir and userprefs file would not be created under certain conditions.
2006-05-26Updated to version 3.1.2.heinz1-7/+6
Pkgsrc changes: - The updates for rule files go into $VARBASE/spamassassin/. - This above directory and the directory sa-update-keys for the GPG keys are now handled automatically by OWN_DIRS. - The growing number of *.pre files are managed in a loop in the Makefile. They are no longer contained in the static PLIST. - Removed some unnecessary trailing slashes. - Patching init.pre in order to disable the SPF plugin broke the spf.t test. This is now fixed, although in a rather ugly way :-/. - patch-ab no longer needs to use BSD_INSTALL_DATA_DIR because we create the directories through INSTALLATION_DIRS. - patch-ad and patch-az were removed (changes integrated upstream). - patch-bb fixes a small documentation error. - Fixed some warnings by pkglint about the SUBST framework in Makefile and options.mk. Relevant changes since version 3.1.1: ===================================== - bug 4802: implement DKIM plugin, including whitelist_from_dkim support - bug 3838: work around Perl bug causing captured RE variables to become tainted -- thanks to Mark Martinec for pointing out the bug with Perl itself - bug 4850: re-enable the Razor2 plugin by default due to a service policy change - bug 4826: Razor2 plugin needs to load Mail::SpamAssassin::Timeout module - bug 4827: M::SA::first_existing_path() would return the last array entry passed in if none of the paths were found. Now return undef instead and handle the error when it happens. - bug 4813: generally open RE causes sendmail received header get read in as qmail in error - bug 4839: Logger.pm converts control chars including tab into underscores which confuses a bunch of users when checking debug output. Convert tab into space instead, etc. - bug 4884: if a null message is passed in, there are several variables which end up undefined causing warnings. fake an empty message if no input is given. - bug 4793: when replacing tags in a message (_TAG_), leave the tags that don't exist alone instead of just removing them - bug 4861, 4760: handle dccifd and dccproc failover properly, backport relays_internal and relays_external code, backport bug 4760 fix so that it's not possible to be in internal_networks without being in trusted_networks as well - bug 4901: deal more properly with failures in bgsend(). also, use the proper variable to show when errors occur. - bug 4867: fetchmail changed header formats at some point making Received parsing fail in certain conditions - bug 4699: use M::SA::Timeout for spamd copy_config call and allow for empty $@ values - bug 3754: if there's a problem opening a file via sa-learn or spamassassin, return an error exit value.
2006-03-24Fixed one forgotten case of variable with underscore. This fixes PRheinz1-2/+2
pkg/33139 by Ben Colver.
2006-03-13Updated to version 3.1.1.heinz1-5/+7
Pkgsrc changes: - Generic option "online-tests" replaces "spamassassin-test-net". - Removed underscore from package-internal variables (pkglint complained). - patch-ay disables the SPF plugin to avoid confusing warnings in the log files. - patch-az fixes http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4826. Relevant changes since version 3.1.0: ===================================== - better validate a number of different configuration options - support new Mail::DomainKeys API, which changed incompatibly between 0.18 and 0.80 without warning - more properly handle new Received header formats - bug 4788: backport sa-update from 3.2 along with the local_state_dir code, etc. - bug 4760: strictly validate trusted/internal network configurations - bug 4696: consolidated fixes for timeout bugs - bug 3710: add timeout to connect so spamc -t works - bug 4363: if a message uses CRLF for line endings, use it for header rewrites as well - bug 4748: add ExpressionEngine and Google redirector patterns - bug 3815: add _RELAYCOUNTRY_ tag so that the RelayCountry plugin can put in the list of countries relayed through - bug 4090: x86_64 platforms (linux specifically) have an issue compiling libspamc.so causing RPM build failures - bug 4791: fix issue where perl would throw a UTF-8 warning for certain messages - bugs 4606, 4609: Adjust MIME parsing limits - bug 4780: fix IP_ADDRESS & LOCALHOST regexes to correctly parse IPv6 addresses - bug 4728: DUL rules should only use the last external IP, not all but the first of the external IPs - bug 4700: certain privileged configuration settings can inject code, due to a bad fix for bug 3846. Back that out
2005-11-22Removed patch-ar again, as I have found a way to exploit it. Bumpedrillig1-2/+1
PKGREVISION.
2005-11-22Added patch-ar, which fixes a Perl error in tainted mode. Removed therillig1-2/+2
checksum of the non-existant patch-ax from distinfo.
2005-11-13Updated to version 3.1.0.heinz1-7/+8
Pkgsrc changes: - p5-Storable is no longer a necessary. - Let DragonFlyBSD also use the rc.d script (patch-ad). - Sa-update needs p5-libwww (for LWP::UserAgent, HTTP::Date), p5-Archive-Tar and p5-IO-Zlib. - Many of the plugins are available as pkgsrc packages (p5-Mail-SPF-Query, p5-IP-Country, p5-Net-Ident, ...) but are not required. - Renamed some options to follow the naming conventions described in the pkgsrc guide. - Removed patch-ax again; it is already incorporated in 3.1.0. - Reworked DESCR to use less than 25 lines. - Removed SPAMASSASSIN_VERSION for clarity of DISTNAME and PKGNAME. - Prepended variables internal to the package with an underscore. - Rearranged MAKE_PARAMS alphabetically. - Simplified some internal variables (concatenation instead of substitution: _EGDIR, _DOCDIR,...) - Loop variables use all lower-case now. - Added a rule to lower score for mail from pkgsrc-bugs in netbsd_lists.cf. - The test t/spf.t (fails for SPF_HELO_*) has a know problem (SA Bug 4685). Relevant changes since version 3.0.4: ===================================== - Apache preforking algorithm adopted; number of spamd child processes is now scaled, according to demand. This provides better VM behaviour when not under peak load. - Inclusion of sa-update script which will allow for updates of rules and scores in between code releases. - added PostgreSQL, MySQL 4.1+, and local SDBM file Bayes storage modules. SQL storage is now recommended for Bayes, instead of DB_File. NDBM_File support has been dropped due to a major bug in that module. - detect legitimate SMTP AUTH submission, to avoid false positives on Dynablock-style rules. - new Advance Fee Fraud (419 scam) rules. - removed use of the Storable module, due to several reported hangs on SMP Linux machines. - Converted several rule/engine components into Plugins such as: AccessDB, AWL, Pyzor, Razor2, DCC, Bayes AutoLearn Determination, etc. - new plugins: DomainKeys (off by default), MIMEHeader: a new plugin to perform tests against header in internal MIME structure, ReplaceTags: plugin by Felix Bauer to support fuzzy text matching, WhiteListSubject: plugin added to support user whitelists by Subject header. - TextCat language guesser moved to a plugin. (This means "ok_languages" is no longer part of the core engine by default.) - Razor: disable Razor2 support by default per our policy, since the service is not free for non-personal use. It's trivial to reenable. - DCC: disable DCC for similar reasons, due to new license terms. - Net::DNS bug: high load caused answer packets to be mixed up and delivered as answers to the wrong request, causing false positives. worked around. - DNSBL lookups and other DNS operations are now more efficient, by using a custom single-socket event-based model instead of Net::DNS. - add support for accreditation services, including Habeas v2. - better URI parsing -- many evasion tricks now caught. - URIBL lookups are prioritized based on the location in the message the URI was found. - mass-check now supports reusing realtime DNSBL hit results, and sample-based Bayes autolearning emulation, to reduce complexity. - sa-learn, spamassassin and mass-check now have optional progress bars. - modify header ordering for DomainKeys compatibility, by placing markup headers at the top of the message instead at the bottom of the list. - spamd/spamc now support remote Bayes training, and reporting spam. - spamc now supports reading its flags from a configuration file using the -F switch, contributed by John Madden. - added SPF-based whitelisting. - Polish rules contributed by Radoslaw Stachowiak. - many rule changes and additions.
2005-11-13Added a patch to fix a potential DoS vulnerability (CVE-2005-3351).heinz1-1/+2
See http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4570 http://secunia.com/advisories/17386
2005-06-19Update to version 3.0.4.heinz1-4/+4
This solves the update request in PR pkg/30452. No pkgsrc related changes. This release fixes a recently reported DoS vulnerability. Highlights of the release ------------------------- - Certain invalid "Content-Type" headers would cause SpamAssassin to incorrectly process parts of the message. - Certain long message headers could cause slowness when parsing the message. - Added in SURBL JP list. - URI anti-obfuscation updates. - Additional bug fixes.
2005-04-29Updated to version 3.0.3.heinz1-4/+4
Merged the two rules in netbsd_lists.cf into one because problem reports mostly do not contain "x-send-pr" anymore. Disabled installation of netbsd_lists.cf in PKGSYSCONFDIR (it is still included in the "examples" directory). Changes since 3.0.2 =================== - Fixed possible memory bloat from large AutoWhitelist db files - Fixed where user defined rules scores became ignored - Updated parsing code for several Received: header formats - Increased some BAYES_* scores for the network+bayes score set - Document set_tag for Plugin API and added get_tag - Additional bug fixes.
2005-02-24Add RMD160 digests.agc1-1/+2
2005-02-13After changing the SUBST-stage to 'pre-configure' for 3.0.2, Makefile.PL washeinz1-2/+2
changed after perl5-configure had been run and the Makefile created. For some people, this resulted in a message Makefile out-of-date with respect to Makefile.PL at the build stage. Omitting the first substitution (sa1) and the corresponding part of patch-ab solved this. This patch had been unnecessary for some time anyway. This should resolve pkg/29255.
2005-01-15Update to 3.0.2. From the changelog:schmonz1-6/+6
This release detects legitimate SMTP AUTH submission, to avoid false positives on Dynablock-style rules. The URIDNSBL plugin has been fixed to honor the uridnsbl_max_domains config option. Various documentation and rule fixes. The ability to deal with 'rewrite_header Subject' markup when no Subject header exists. 'make test' failure on Solaris has been fixed. pkgsrc changes: * Use subst.mk in pre-configure, rather than post-patch, for easier regeneration of patches. OK'd by heinz@.
2004-11-08Update to 3.0.1.mjl1-6/+3
This is a minor maintenance release to 3.0.0 and the old archive was no longer available on the primary sites.
2004-10-12Update to version 3.0.0. Tested on NetBSD 1.6.2, Solaris 9 and Debianheinz1-8/+9
3.0. Important changes since 2.64 (for details see the file 'Changes') - support for sender authentication using the Sender Policy Framework (SPF) - checking for web links of known spam advertisers (SURBL) - modular plugin architecture - improved SQL database support for storing user data in server installations - improved email classification - SpamAssassin is now part of the Apache Foundation
2004-08-10Update to 2.64.heinz1-3/+3
This also includes the fix for PR pkg/26386 (problems with PKG_CONFIG=no). Summary of major changes since 2.63 ----------------------------------- - Security fix prevents a denial of service attack open to certain malformed messages; this DoS affects all SpamAssassin 2.5x and 2.6x versions to date. - Backported several very reliable rules from the SpamAssassin 3.0.0 codebase.
2004-05-31Correct bad substitution of @PREFIX@ in spamd.rawheinz1-2/+2
2004-01-21Update to 2.63. Tested on NetBSD and Solaris 8.heinz1-4/+4
Summary of major changes since 2.62 ----------------------------------- - Fixed bug related to perl 5.005 which stopped SpamAssassin from being runnable - Fixed bug where "spamassassin -l" parameter wouldn't be untainted before being used - Added caching of body rendering results so that the message wouldn't be rendered the same way multiple times unnecessarily. Summary of major changes since 2.61 ----------------------------------- - Fixed two bugs related to Received line generation and parsing. - Modified two rules to reduce false positives. - Fixed bug where spamd temporary init directory wasn't removed in some situations. - Modified HABEAS_SWE to function even if the Habeas headers were out of their normal order. - Fixed bug where reporting wouldn't remove message markup before being learned by Bayes. - Fixed bug where report_safe_copy_headers would reverse the order of the Received headers. - Fixed several bugs in the Bayes system caused by DB_File oddities.
2003-12-27Update to version 2.61heinz1-10/+7
Summary of major changes since 2.60 ----------------------------------- - Dramatically reduced memory usage of Bayes expiry. - avoid false positives on Outlook 2003 messages, mails from Mac, Palm, and localized versions of Eudora, several AOL MUAs, and newer versions of The Bat! - new set of French translations from Michel Bouissou - updated to reflect new Dynablock DNSBL location - avoids a possible hole that was giving AWL bonuses to spammer forgeries on some networks - miscellaneous bug fixes
2003-12-02print correct path to config files in spamd usage message.grant1-2/+2
2003-12-01Remove DNSBL rules using *.easynet.nl (shut down today, see ↵heinz1-1/+4
http://abuse.easynet.nl/dynablocker.html
2003-11-03Update to version 2.60 (fixes PR pkg/23318):heinz1-19/+8
Summary of changes since 2.5x ----------------------------------- - spamd supports UNIX-domain sockets - SSL support for spamc/spamd now usable - improved Bayes text analysis - improved expiration of Bayes-DB - better detection of 'invisible text' and other obfuscation techniques in HTML - new RBL (eg SORBS, SpamCop, Osirusoft dropped) - better handling of RBL timeouts - support for Razor V1 dropped - more flexible header and report rewriting - Perl taint mode enabled by default - bug fixes - new rules
2003-09-03Since osirusoft is dead now, we should remove all reference to it fromatatat1-1/+9
spamassassin. These patches remove all references to osirusoft from the rules files (perhaps leaving some of the comments a tad stale), but leaving information about them in the stats files. This bumps us to 2.55nb2.
2003-06-08- include patch from SA CVS repository to fix a bug with 'spamassassin -r'heinz1-1/+2
learning a message without Message-Id as ham (see bugzilla #2030) - depend on p5-IO-Socket-SSL>=0.92 because of bugs in earlier versions - bump revision
2003-05-22Update spamassassin to 2.55abs1-11/+10
Many small changes since 2.53, but difficult to pick out anything significant.
2003-04-15 Update to version 2.53.heinz1-10/+11
This also closes PR pkg/21114 (thanks to Todd Vierling for dynamic PLIST) Most serious bugs since release of SA 2.50 fixed (hence the 'long' delay for the Pkgsrc package). Dependence on procmail removed. You still need a mail delivery agent but procmail is only a recommendation, not a prerequisite. Runs on Solaris (somewhat tested on Solaris 8, feedback welcome). Includes some SSL support for spamc/spamd. Not yet recommended due to lurking bug(s) (SA bugzilla ID 1751). Uses Perl module DB_File now instead of NDBM_File. This changes the name and format of the auto-whitelist database ('auto-whitelist' instead of 'auto-whitelist.db' on NetBSD). ! This release adds/changes/removes configuration options, PLEASE use ! ! 'perldoc Mail::SpamAssassin::Conf' and make sure your mail ! ! configuration still works as expected. ! ========================================================================== Changes since 2.52: - corruption of Bayes db where nspam/nham was getting zeroed, fixed. - Bayes now has much lower lock timeouts for opportunistic expiry and auto-learning, to avoid overloading busy servers with an expiry run. (This may result in occasional "lock failed" messages in the syslog while you're doing manual sa-learn ops, but those are not serious; it just means that an auto-learn could not take place because the dbs were opened by you in another process.) - NDBM_File does not provide an EXISTS method, worked around. - BSMTP support (spamc -B) fixed. - Bayes allowed the user to 'forget' messages they hadn't learned. - sa-learn broken when installed in a non-standard location. - spamc was failing to dump message if out of memory. - add-all-addrs-to-blacklist was a no-op, fixed. - syslog-socket support was broken, fixed. - sslspamc compilation fixed. - SIGCHLD handling in spamd was causing an ugly warning on Red Hat 8. - user_prefs were left world-writable after auto-whitelist use. - Razor was zeroing %ENV; protected against this. - some test failures on 5.005 and with Razor fixed; some tests were also still using the user's Bayes dbs. - Windows portability fix in new Bayes journal code. - dialup_codes now a privileged setting. - clean PATH env variable immediately upon spamd start; fixed problem with taint mode failures when getting hostname in Perl 5.005. - NetBSD: fixed SSL support, spamd start script. - single-Received-header mails were not getting DNSBL checks. - some doco fixes. Changes since 2.51: - bug 1664: expiry imposed way too much load when a single site-wide Bayes db was used, fixed - bug 1672: a typo in a backported patch for 2.51 caused Bayes to sometimes not unlock the db, fixed - INSTALL now strongly recommends using DB_File - some NetBSD support fixes - bug 1601: option --syslog-socket wasn't implemented - bug 1260: corrected description of --nocreate-prefs option Changes since 2.50: - Bayes locking and concurrency issues fixed - Bayes expiration was not working; fixed - spamd was not enabling Bayes after auto-learning without restart; fixed - safer way to attach spams, for broken mail clients, using 'report_safe 2' - a few doco cleanups Main changes since 2.4x: - Bayesian filtering, using a Bayesian-style form of probability-analysis classification. This uses an algorithm based on the one detailed in Paul Graham's 'A Plan For Spam' paper, along with aspects taken from Graham Robinson's work, and the chi-combining technique developed by the SpamBayes project. - Auto-learning. This trains the Bayesian filter automatically, based on the results from traditional SpamAssassin diagnosis. It uses a set of heuristics and separate thresholds to ensure (as much as is possible) that it trains on guaranteed non-spam and spam. Old, unused tokens are automatically expired. - much-improved rule set. A whole new set of rules based on Message-Id analysis is now in place, which accurately detects forged headers from a wide range of spamware. Many inaccurate rules have been dropped. HTML tests much improved, with a set to detect image-only spam. - new default format for detected-spam messages; the message is encapsulated as a MIME part, with a preview and the spam report in the main part of the message. - Score sets. Based on whether you are using just SpamAssassin rules, adding network tests, and using a trained Bayesian database, SpamAssassin will use a set of scores appropriately to gain the maximum degree of accuracy. - Italian, Polish, Spanish, French and German rule sets and translations. - Much improved reliability with spamd. The problems with signals have been cleared up thanks to a pipe-based child tracking system, and all spamd-hanging bugs reported have proved unreproducable. - Unicode problems with Red Hat 8 and perl 5.8 fixed. Works on Perl 5.005, 5.6.x, and 5.8.x. - Taint-safe. SpamAssassin runs with perl's taint-checking enabled for better security. - Razor 1 support is now officially deprecated. - "spamc -c" was not working, fixed. This fix required increasing the revision of the spamd protocol; only difference is that now more than one protocol header can appear in the reply from spamd. - all fixes from 2.44 included.
2003-02-09Remove incorrect 'free()' from libspamc.c (used in 'spamc'). Patch copiedheinz1-1/+2
from stable branch of SA CVS repository. On other operating systems 'spamc' was reported to cause a core dump if 'spamd' was not running. At least NetBSD/i386 1.5.3 seems not to be as severely affected, I only got 'spamc in free(): warning: junk pointer, too high to make sense.'.
2003-02-02Maintenance update to 2.44heinz1-7/+6
Parts of patch-ag and patch-ah as well as complete patch-aa could be removed again, they are now included in SA 2.44 (see below). #### official release announcement ############### This is a bug-fix release, which fixes the following bugs: - Backport fix for Bug 1306: Possible buffer overflow in libspamc when running in BSMTP mode (patch 1.15 -> 1.18) - Backport workaround from Bug 526: Failed sanity check because of clobbered STDOUT (patch 1.147 -> 1.148) - Backport fix for Debian Bug 160206: Insufficient buffer in libspamc (patch 1.8 -> 1.9) - Backport fix for warnings in sed_path (patch 1.141 -> 1.142) - Backport fix for Bug 1127: Existing lowercase x-spam-status header kills SpamAssassin (patch 1.40 -> 1.41) - localized %ENV to fix problem where Razor2 erases the PATH so DCC and pyzor don't work, etc. Note that this is *not* 2.50, which offers Bayesian filtering etc. These bugs are already fixed in the 2.50 CVS tree, but that is not yet ready for release. This is a stable maintainance release only.
2003-01-29Fix buffer overflow in "spamc" program can be remotely exploited.tron1-1/+2
Bump package revision.
2002-11-06Changed the rc.d script to account for different behaviour ofheinz1-4/+4
load_rc_config in NetBSD 1.6. This resolves PR pkg/18928 by Frank Cusack (fcusack at fcusack com). The rc.d script is now called on 'shutdown'. Included fixes from SA CVS repository (2002-10-21) to minimize impact of Razor2 on the environment vector, especially PATH. Bumped PKGREVISION.
2002-10-20Update to 2.43heinz1-6/+7
Item 1) was already provided by 'inofficial' patch-af for 2.42 (now removed). Two new patches (-ag and -ah) from the SpamAssassin-current repository work around a roblem with razor2 timeouts. Logo 'ninjabutton.png' is now in the correct html directory. Official changes: 1) AWL change reverted; instead of decreasing the AWL bias gradually to allow frequently-seen addresses to get into the "nonspam" area, it now behaves like 2.31 did, in that the AWL simply represents the long-term average score from that correspondent. 2) core-dump bug in spamd worked around, _except for the "-m" switch_. The "-m" switch relies on signal handling in the Perl interpreter, which seems to have some bugs we cannot work around reliably on some platforms, so its use is no longer recommended. 3) some portability fixes for SunOS.
2002-10-08- Setting PKG_SYSCONFBASE in /etc/mk.conf works now (Thanks to Urbanheinz1-1/+2
Boquist). - Included fix for bad AWL behaviour which will also be in 2.50 (maybe 2.43) (ie AWL works the same again as in SA 2.31). This causes revision bump.
2002-10-08Update to 2.42.heinz1-4/+7
Uses buildlink2 and module.mk. Some perl scripts for rule developers (in PREFIX/share/doc/spamassassin/{masses,tools}/) and a small SpamAssassin logo (PREFIX/share/doc/spamassassin/html/) are now included. New netbsd_lists.cf file to reduce false positives on NetBSD lists (so far, only some rules for netbsd-bugs). Changes: - bug fixes - new, better scores (intensive testing was done to improve on 2.40 and 2.41) - netbsd rc.d script works now with NetBSD 1.5 and 1.6 - management of addresses in the automatic whitlist now easier with dedicated options (--add-addr-to-whitelist, --remove-addr-from-whitelist)
2002-09-29Update spamassassin to 2.41.simonb1-3/+3
Major changes include: - SpamAssassin now *REQUIRES* procmail for local delivery support; "-P" option is now the default. Unless you use procmail, Mail::Audit, KMail, or an MTA-level integration, do not upgrade blindly, your mail *WILL* spill all over the floor in a big mess. - significant speed increases, mostly from Matt Sergeant and Dan Quinlan - bugs in whitelist_to, all_spam_to and friends fixed - rules which were causing too many false-positives removed or fixed: DOUBLE_CAPSWORD, UPPERCASE_25_50, PARTIAL_RFC_2369, MSGID_CHARS_SPAM, many others - lots of rule fixes, and lots of new rules
2002-08-26Rename pkgsrc/mail/p5-Mail-Spamassassin to pkgsrc/mail/spamassassin.hubertf1-1/+1
2002-08-26Rename pkgsrc/mail/p5-Mail-Spamassassin to pkgsrc/mail/spamassassin.hubertf1-0/+5
2002-08-25spamassassin is already present as p5-Mail-SpamAssassinhubertf1-4/+0
(how obvious... NOT!)
2002-08-24Add spamassassin-2.31: Spam identifier and blockerhubertf1-0/+4
SpamAssassin is a mail filter which attempts to identify spam using text analysis and several internet-based realtime blacklists. Using its rule base, it uses a wide range of heuristic tests on mail headers and body text to identify "spam", also known as unsolicited commercial email. Once identified, the mail can then be optionally tagged as spam for later filtering using the user's own mail user-agent application. In its most recent test, SpamAssassin differentiated between spam and non-spam mail correctly in 99.94% of cases. Since then, it's just been getting better and better!