Rev 39 | Details | Compare with Previous | Last modification | View Log | RSS feed
Rev | Author | Line No. | Line |
---|---|---|---|
38 | magnus | 1 | libspf2 (1.2.5.dfsg-5+lenny2) testing-security; urgency=high |
2 | |||
3 | * 51_actually-keep-track-of-max_var_len.dpatch: Fix possible DoS with |
||
4 | long sender addresses. Thanks to Hannah Schroeter. |
||
39 | magnus | 5 | * 52_compile_bufoverflow.dpatch: Prevent buffer overflows in SPF_compile |
6 | from mechanisms with huge domainspecs. Workaround suggested by |
||
7 | upstream. Limits the size of mechanisms and modifiers, but that |
||
8 | shouldn't be a problem in practice. |
||
40 | magnus | 9 | * 42_empty_sender.dpatch could previously cause segfaults by trying to |
10 | write to a constant string. Fixed. |
||
38 | magnus | 11 | |
40 | magnus | 12 | -- Magnus Holmgren <holmgren@debian.org> Wed, 05 Nov 2008 10:37:20 +0100 |
38 | magnus | 13 | |
29 | magnus | 14 | libspf2 (1.2.5.dfsg-5+lenny1) testing-security; urgency=high |
15 | |||
16 | * [CVE-2008-2469] 50_dns_resolv_bufoverflow.dpatch: Fix buffer overflows |
||
17 | in DNS response parsing. |
||
18 | |||
19 | -- Magnus Holmgren <holmgren@debian.org> Sun, 19 Oct 2008 22:14:18 +0200 |
||
20 | |||
18 | magnus | 21 | libspf2 (1.2.5.dfsg-5) unstable; urgency=low |
22 | |||
23 | * 43_new_explanation_url.dpatch: Bring default explanation up to date by |
||
24 | referring to www.openspf.org instead of spf.pobox.com. |
||
19 | magnus | 25 | * Add spfquery(1) manpage. |
21 | magnus | 26 | * Fix format of copyright notice in debian/copyright. |
22 | magnus | 27 | * Move upstream homepage URL to the new Homepage control field, rename |
28 | VCS control fields, and update Standards-Version. |
||
25 | magnus | 29 | * A few cosmetic adjustments including fixing the indentation of the |
30 | 1.2.5.dfsg-3 entry below (Closes: #465466). |
||
26 | magnus | 31 | * New maintainer email address. |
18 | magnus | 32 | |
26 | magnus | 33 | -- Magnus Holmgren <holmgren@debian.org> Fri, 18 Apr 2008 17:51:28 +0200 |
18 | magnus | 34 | |
14 | magnus | 35 | libspf2 (1.2.5.dfsg-4) unstable; urgency=low |
36 | |||
37 | * Added 23_spfquery_ipv6.dpatch: Make spfquery accept IPv6 addresses |
||
38 | (Closes: #440147). Thanks to Matthias Cramer. |
||
15 | magnus | 39 | * 35_untabify_help.dpatch: Make --help output of utilities less ugly by |
40 | converting tabs to spaces. |
||
14 | magnus | 41 | |
18 | magnus | 42 | -- Magnus Holmgren <magnus@kibibyte.se> Wed, 05 Sep 2007 15:39:22 +0200 |
14 | magnus | 43 | |
12 | magnus | 44 | libspf2 (1.2.5.dfsg-3) unstable; urgency=low |
45 | |||
46 | * 22_spfquery_fallback_segfault.dpatch: Fix fallback-related segfault in |
||
47 | spfquery (Closes: #430414). Thanks to Robert Millan. |
||
48 | * Correct debian/copyright (Closes: #433047). Thanks to Julian Mehnle. |
||
49 | * A second patch from Robert split into three: |
||
50 | * 40_permanent_include_errors.dpatch: Make permanent errors in |
||
51 | processing an include: directive cause the parent evaluation to return |
||
52 | a permanent error as well (Closes: #435139). |
||
53 | * 41_none_not_neutral.dpatch: Use a diffent explanation for |
||
54 | SPF_RESULT_NONE than the one for SPF_RESULT_NEUTRAL (Closes: #435140). |
||
25 | magnus | 55 | * 42_empty_sender.dpatch: Use the HELO identity in MAIL FROM checks if |
56 | the sender address has been set to the empty string (Closes: #431239). |
||
13 | magnus | 57 | * debian/control: Add XS-Vcs-* fields. |
12 | magnus | 58 | |
13 | magnus | 59 | -- Magnus Holmgren <magnus@kibibyte.se> Wed, 22 Aug 2007 17:13:27 +0200 |
12 | magnus | 60 | |
5 | magnus | 61 | libspf2 (1.2.5.dfsg-2) unstable; urgency=low |
62 | |||
63 | * 21_spfquery_infininte_loop.dpatch: Fix infinite loop when giving |
||
64 | unimplemented options to spfquery. |
||
65 | * 20_printf_types.dpatch: Revert to using standard conversion specifiers |
||
66 | without z modifiers. |
||
67 | * debian/watch: mangle away .dfsg from package version. |
||
68 | * Lower spfquery and spfd alternatives priorities to 25. |
||
69 | * Skip applying 01_line-endings.dpatch; it's meaningless. |
||
70 | |||
71 | -- Magnus Holmgren <magnus@kibibyte.se> Wed, 06 Jun 2007 19:31:01 +0200 |
||
72 | |||
2 | magnus | 73 | libspf2 (1.2.5.dfsg-1) unstable; urgency=low |
74 | |||
75 | * New maintainer (Closes: #372629). |
||
76 | * Repacked .orig.tar.gz without non-free IETF Internet Draft (Closes: |
||
77 | #393390). |
||
78 | * Merge updates from Ubuntu: |
||
79 | - Add debian/compat and Build-depend on debhelper >= 5. |
||
80 | - Add alternatives handling for /usr/bin/spfquery (Closes: #306875). |
||
81 | - Conflict on libmail-spf-query-perl << 1:1.999.1-3. |
||
82 | - Add postinst and prerm scripts. |
||
83 | - debian/copyright: update author address. |
||
84 | - debian/control: add final newline. |
||
85 | * debian/control: |
||
86 | * Change description of spfquery (Closes: #410592). |
||
87 | * Add homepage to package descriptions. |
||
88 | * Reduce Debian diff by changing line endings with sed instead. |
||
89 | * Further reduce Debian diff by eliminating config.sub and config.guess |
||
90 | from there. Build-depend on autotools-dev to ensure up-to-date |
||
91 | versions instead. |
||
92 | * The autogenerated spf_lib_version.h was put in the wrong directory, |
||
93 | while there was a static spf_lib_version.h in the right directory. |
||
94 | Fix that with some rules in debian/rules. |
||
95 | * Use dpatch to manage patches. |
||
96 | * Apply 20_64bit_types.dpatch to hopefully prevent segfaults on 64-bit |
||
97 | architectures (Closes: #392793). Thanks to Thomas Jacob, Carsten |
||
98 | Koch-Mauthe and Herbert Straub. |
||
99 | * 20_printf_types.dpatch: Change format strings to use the z flag, |
||
100 | meaning size_t, among other things. |
||
101 | * 30_spfd_check_unlink_failure.dpatch: Fix a typo in spfd (patch from |
||
102 | Thomas Jacob). |
||
103 | * debian/watch: added. |
||
104 | * Update Standards-Version to 3.7.2 without changes. |
||
105 | * Apply 20_spf_dns_include_std_headers.dpatch: Include arpa/nameser.h and |
||
106 | netdb.h from spf_dns.h instead of defining the constants needed unless |
||
107 | certain HAVE_ macros are defined (Closes: #405885). |
||
108 | * Apply 25_maxvals.dpatch, which brings certain processing limits (meant |
||
109 | to mitigate DoS attacks) in line with RFC 4408. Thanks to Scott |
||
110 | Kitterman. |
||
111 | * debian/control: Change libspf2-dev dependency to ${binary:Version} so |
||
112 | that binNMUs will work. |
||
113 | * Ship spfd in the spfquery package (Closes: #258360). |
||
114 | |||
115 | -- Magnus Holmgren <magnus@kibibyte.se> Sat, 24 Mar 2007 14:51:23 +0100 |
||
116 | |||
117 | libspf2 (1.2.5-4) unstable; urgency=low |
||
118 | |||
119 | * Orphan. |
||
120 | |||
121 | -- Eric Dorland <eric@debian.org> Mon, 20 Nov 2006 02:16:20 -0500 |
||
122 | |||
123 | libspf2 (1.2.5-3) unstable; urgency=low |
||
124 | |||
125 | * src/include/spf_server.h: Remove useless include to |
||
126 | spf_dns_internal.h. (Closes: #312145) |
||
127 | * debian/control: Have spfquery against libmail-spf-query-perl to work |
||
128 | around #306875, hopefully temporarily. |
||
129 | |||
130 | -- Eric Dorland <eric@debian.org> Sat, 30 Jul 2005 01:25:24 -0400 |
||
131 | |||
132 | libspf2 (1.2.5-2) unstable; urgency=low |
||
133 | |||
134 | * The "Doh, missed a soname change" release. |
||
135 | * debian/libspf2-0.install: Rename to libspf2-2.install. |
||
136 | * debian/control: |
||
137 | - Change libspf2-0 to libspf2-2 to reflect soname change. |
||
138 | (Closes: #306205) |
||
139 | - Add spfquery package, don't package spfd for now, can't figure |
||
140 | out how to make it work. This partially addresses #258360. |
||
141 | * debian/spfquery.install: New file. |
||
142 | |||
143 | -- Eric Dorland <eric@debian.org> Mon, 25 Apr 2005 20:07:48 -0400 |
||
144 | |||
145 | libspf2 (1.2.5-1) unstable; urgency=low |
||
146 | |||
147 | * New upstream release. |
||
148 | |||
149 | -- Eric Dorland <eric@debian.org> Sun, 17 Apr 2005 23:37:27 -0400 |
||
150 | |||
151 | libspf2 (1.0.4-4) unstable; urgency=medium |
||
152 | |||
153 | * configure, aclocal.m4: Run aclocal and autoconf to get the right code |
||
154 | for the libtool test to use the pass_all method on arm. (Closes: |
||
155 | #276516) |
||
156 | * Urgency medium to get this bloody thing fixed already. |
||
157 | |||
158 | -- Eric Dorland <eric@debian.org> Fri, 26 Nov 2004 00:15:04 -0500 |
||
159 | |||
160 | libspf2 (1.0.4-3) unstable; urgency=low |
||
161 | |||
162 | * config/ltmain.sh: Re-libtoolize again, hopefully this will fix arm |
||
163 | building. |
||
164 | |||
165 | -- Eric Dorland <eric@debian.org> Wed, 17 Nov 2004 13:50:50 -0500 |
||
166 | |||
167 | libspf2 (1.0.4-2) unstable; urgency=low |
||
168 | |||
169 | * config/ltmain.sh: Re-libtoolize. (Closes: #269936) |
||
170 | * configure.ac: Apply patch from Kurt Roeckx to fix build on |
||
171 | amd64. (Closes: #262687) |
||
172 | * Rerun autoconf to apply the changes. |
||
173 | |||
174 | -- Eric Dorland <eric@debian.org> Mon, 6 Sep 2004 19:36:20 -0400 |
||
175 | |||
176 | libspf2 (1.0.4-1) unstable; urgency=low |
||
177 | |||
178 | * New upstream release. (Closes: #261709) |
||
179 | |||
180 | -- Eric Dorland <eric@debian.org> Mon, 9 Aug 2004 00:57:49 -0400 |
||
181 | |||
182 | libspf2 (1.0.3-1) unstable; urgency=low |
||
183 | |||
184 | * Initial release. (Closes: #257644) |
||
185 | |||
186 | -- Eric Dorland <eric@debian.org> Fri, 2 Jul 2004 00:00:19 -0400 |
||
187 |