Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
version) include:
============================================================================
2002/12/21 (2.5.14)
* Security patch release: This release fixes a cross-site scripting
(XSS) vulnerability in m2h_text_html::filter (the HTML filter).
A specially crafted HTML message can have scripting markup get
by the script filtering done by m2h_text_html::filter.
============================================================================
2002/10/21 (2.5.13)
* Bug Fixes: See
<http://savannah.gnu.org/bugs/index.php?group_id=1968
&set=custom&advsrch=0&msort=0&report_id=105&go_report=Go
&fix_release=2.5.13&chunksz=50>
* DBFILE resource can now be set to an absolute pathname. This
allows the database file to be located in a separate location than
in the archive directory. If not an absolute pathname, then
value is treated relative to OUTDIR.
* readmail.pl updated to handle MHTML messages better. mhtxthtml.pl
changed accordingly.
* readmail.pl handling of malformed multipart messages improved.
Cases were a the terminating boundary delimiter did not exist would
generate a warning message in the converted message body that data
could not be converted. This case should now be handled so that
end of entitiy implies a terminating boundary delimiter,
(Thanks goto Randy Blaustein for providing real-world test cases).
* Fixed problem where some message attachments were "lost". This
mainly occurs when using mha-decode with the -dcd-digest option,
or if you have registered the m2h_external::filter for message/*
data types.
(Thanks goto Steve Johnson for finding this problem.)
* m2h_external::filter will now include the subject of a message
in the attachment link if saving message/* data to a file.
* m2h_external::filter properly escapes the filename parameter
when displaying it in the attachment link. This is done to
avoid any possible XSS exploits. Note, no exploits have been
reported by using the filename parameter in messages, so this
change is more of a preemptive measure.
* m2h_external::filter will fall back to a "txt" extension for
unknown text types instead of a "bin" extension.
* m2h_text_plain::filter: Removed hardcoded 'as-is' for US-ASCII
data. This is so a user could define a converter if having to deal
with mislabeled character data.
(Thanks goto Mooffie for finally finding a real-world case to not
hardcode us-ascii).
============================================================================
2002/09/03 (2.5.12)
* Strip more tags and attributes that could potentially be used for
XSS exploits in the HTML filter. This is a more of a preemptive
change since no new exploits have been reported.
* DATEFIELDS resource now supports indexed field names. For example:
<DateFields>
received[1]:received[0]:date
</DateFields>
The example says that mhonarc should check the second received
field, then the first received field, and then the first date field
to determine the date of a message.
|
|
This just tightens up on security a bit more.
Note anyone using plugins may have to check if all their plugins will work
with register_globals off.
(I've been using this on a local squirrelmail box with 1.2.9 for over a
month with no issues)
|
|
|
|
0.8.8. Also fix binary packages for mime.types (do what we do in sylpheed)
|
|
Main changes are:
* The option to sort by recipient has been added.
* The performance of initial sorting when opening folders has been
improved.
* The bug which would run into infinite loop and eventual crash when
encountering invalid characters in header MIME encoding has been fixed.
|
|
has been a soname change. Pointed out by fredb.
|
|
CONF_FILES will work with binary packages. Bump PKGREVISION to 1.
|
|
|
|
Prayer is a small and fast HTTP to IMAP gateway written entirely in C.
* Uses persistent connections to IMAP server and support servers.
* Target folders remain SELECTed: not a simple-minded proxy.
* Full caching (including sort/thread cache) for each open folder.
* Up to five persistent IMAP connections (typically one or two in use):
o INBOX and one other folder
o Postponed message folder stream
o Preferences stream
o Folder transfer stream
o Various optimisations/sharing to minimise actual IMAP connections
* Directory cache: single round trip to IMAP server for directory listing.
* Works well with UW IMAP server (even using Unix format mail folders).
* Little discernible load on a Pentium III class system running Linux with
5,000 logins/day (400 logins/hour, 150 concurrent logins)
* Uses 10% to 20% of the CPU and 400 MBytes of RAM on a PIII class system
with 23,000 logins/day (1,700 logins/hour, 850 concurrent logins peak)
* Aggressive HTTP/1.0 and 1.1 connection caching to reduce SSL overhead.
* Optional gzip compression of pages tunable by IP address range.
|
|
case. Pointed out by Ken Nakajima.
|
|
detected, some extra files are installed. Addresses problems found in
Hubert's bulk build.
|
|
Fixes PR pkg/19463.
|
|
package and library major bumps therein.
Also match dependency in corresponding buildlink2.mk's for the same reason.
Mmmm, binary packages.
|
|
|
|
Changes are:
* 0.8.7
* The extended regular expression has been supported on filtering.
* The option to resize images to fit the size of view has been added.
* The previous account is now restored on reediting draft messages.
* The routine of MIME header encoding has been rewritten completely,
and Q-encoding for single-byte locales has been also implemented.
* Strings beginning with "www." are now treated as URI.
* The default WWW browser has been changed to Mozilla.
* The common preferences dialog has been reorganized a bit.
* The remote command operation can be executed without X now.
* Code cleanups for the implementation of SMTP has been made.
* Autotools and libtool have been updated.
* A fix for font loading problem has been made.
* Other minor bugfixes have been made.
For the complete list see ChangeLog.
|
|
|
|
|
|
changes since version 4.44 is available here:
http://www.washington.edu/pine/changes/4.44-to-4.50.html
http://www.washington.edu/pine/changes/4.50-to-4.51.html
Among the numerous bug fixes is a security fix for CAN-2002-1320.
This fixes PR pkg/19239 by reed@reedmedia.net.
|
|
are insecure and "pine" 4.5x needs this version.
|
|
to comprehend in the little time I have. Sorry.
|
|
Should fix Huberts bulk-build error.
|
|
Changes since version 6.1.2:
- Applied Steffen Esser's fix for a buffer-overflow bug in rfc822.c
- Updated Danish, German, and Turkish translation files.
- Sunil Sheye's SMTP timeout patch.
- Updated Turkish, Danish, German, Spanish, Catalan po files.
- Added Slovak support.
- Configure.in update for autoconf 2.5 (Art Haas).
- Be case-insensitive when looking for IMAP responses.
- Fix logout-after-idle-delivery bug (Sunil Shetye).
- Sunil Shetye's patch to bulletproof end-of-header detection.
- Sunil's fix for the STARTTLS problem -- repoll if TLS nabdshake
fails. The attenmpt to set up STARTTLS can be suppressed with 'sslproto ""'.
|
|
|
|
This package contains shell scripts that allows ifile to be used in standard
UNIX e-mail environment with procmail and mbox mailboxes.
|
|
ifile is a general mail filtering system which uses a modern-day text learning
algorithm to intelligently filter mail according to the way the user tends to
organize mail.
ifile is different from other mail filtering programs in three major ways:
1. ifile does not require the user to generate a set of rules in order to
successfully filter mail
2. ifile uses the entire content of messages for filtering purposes
3. ifile learns as the user moves incorrectly filtered messages to new
mailboxes
ifile is not dependent upon any specific mail system and should be adaptable
to any system which allows an outside program to perform mail filtering.
|
|
What's new?
* New feature: A new header called ``X-Primary-Address'' is now
supported in order to reduce the amount of thinking and planning
ahead you need to do when sending mail to a new correspondent who
may or may not use a challenge/response system like
TMDA. Essentially, this header allows a sender to specify the
address he prefers be whitelisted once he confirms his first
message.
For more information, see the following URLs:
<URL:http://tmda.net/config-vars.html#PRIMARY_ADDRESS_MATCH>
<URL:http://tmda.net/faq.cgi?req=show&file=faq04.005.htp>
* New feature. You can customize the header lines displayed by
tmda-pending in interactive mode by setting SUMMARY_HEADERS. See
<URL:http://tmda.net/config-vars.html#SUMMARY_HEADERS> for more
information.
* New version of Josh Huber's tmda.el.
* Bugfixes.
Here are the new additions to UPGRADE:
* If you are using customized templates, you should replace
%(envelope_sender)s with %(confirm_append_address)s in your
confirm_request.txt. This is to support the new
<URL:http://tmda.net/config-vars.html#PRIMARY_ADDRESS_MATCH>
feature.
* When doing program deliveries to procmail, you should no longer be
using the ``-f'' option. e.g,
DELIVERY = "|/usr/bin/procmail -f $SENDER ~/.procmailrc-tmda"
becomes
DELIVERY = "|/usr/bin/procmail ~/.procmailrc-tmda"
* contrib/sample.tmdarc has been renamed contrib/sample.config.
|
|
|
|
version 2002a). This version fixes a buffer overflow described
in Cert Vulnerability Note VU#961489.
|
|
latest bulk-build.
|
|
|
|
|
|
with some additions by me. Those running exim are advised to update.
Highlights from ChangeLog
1. Added HAVE_SA_LEN=YES to the OS/Makefile-Darwin file.
3. The code for computing load averages was broken in 64-bit Solaris.
10. Tidies to code for calls to fork(); some failures not logged.
26. Fixed some problems with retrying address errors in remote deliveries.
Local changes (will make next release):
Undo the OS/Makefile-NetBSD split that made it into the main tree. This
causes all manner of breakage.
|
|
|
|
mail/nail.
Nail is a mail user agent derived from Berkeley Mail 8.1. It is
intended to provide the functionality of the POSIX.2 mailx command
with built-in support for MIME messages. This means it can handle
international character sets as well as attachments. In recent
system environments, nail is Unicode/UTF-8 capable. It further
contains some minor enhancements like the ability to set a "From:"
Address.
Supplied (for nail 10.1) by Mishka in PR#19112. Thanks!
|
|
|
|
|
|
|
|
This includes the fix for the recent buffer overflow.
Note that IPv6 patch doesn't work, I've not had the time to look into this,
but felt that being a security fix I should get the update done.
Also note that if you define CYRUS_DB_RECOMMENDED in your build environment
it will build using the cyrus mailing list recommended defaults for the
database settings.
|
|
Use Apache 2 mime.types file.
Make the differences between the sylpheed and sylpheed-claws Makefile as
minimal as possible. Note that we now use gdk-pixbuf, rather than imlib.
Smoke tested only, IE it works with my cyrus imap server enough to read and
send mail.
|
|
|
|
|
|
mail/isync.
isync is a command line utility for synchronizing a remote IMAP mailbox
with a local maildir-style mailbox. This is useful for working in
disconnected mode, such as on a laptop. Modifications made locally and
remotely are synchronized so that no message status flags are lost.
Supplied by Ceri Storey in PR#19314. Thanks!
|
|
|
|
Fixed some potential buffer overflows in the sieve code, as well
as a pre-login buffer overflow in the IMAP parsing code.
Backport of a fix for an (unrelated) problem with the
strlcpy implementation.
|
|
(/etc -> PKG_SYSCONFDIR and /usr/local -> PREFIX). Also remove references
to the mutt_dotlock program and do not install its manpage because it does
not get installed. Bump PKGREVISION to 3.
Approved by tron, the maintainer.
|
|
* multiple session issues resolved
* many updated translations
* a number of other bugs fixed
|
|
|
|
|
|
Package Changes: update MASTER_SITES and HOMEPAGE.
Changes since previous version packaged:
Version 0.8.4 - 9 November 2002
-------------------------------
- Improvements/corrections on networking.
- Major bug fix related to rcopy/rmove.
Version 0.8.3 - 1 October 2002
------------------------------
- Bug fix/feature enhancement concerning the server announcing and closing
the connection immediately.
- Stale lockfile removed automatically.
- Many other small improvements (variable and compilation option added, etc.).
Version 0.8.2 - 31 July 2002
----------------------------
- Bug fix concerning the namespace of user's mailboxes.
Version 0.8.1 - 29 July 2002
----------------------------
- Major bug fix concerning SSL/TLS and rcopy/rmove.
- Small bug fix related to removing of the lock file.
Version 0.8 - 27 July 2002
--------------------------
- Copy/move messages between different mail accounts (IMAP mail servers)
support.
- Message flags can be changed.
- Capability to encrypt the accounts' passwords and store them securely
in the filesystem, using the integrated interactive password editor to
manage them.
- Passwords may be supplied interactively.
- Daemon mode in which the program polls repeatedly in a specified interval.
- Locking in order to prevent concurrent running instances.
- Variables to control direct expunging of mail and subscribing of newly
created mailboxes.
Version 0.7.3 - 17 June 2002
----------------------------
- Bug fix related to communication with some mail servers.
|