WebSVN - Diff - Rev 165 and 168 - /trunk/debian/changelog


prayer (1.3.5-dfsg1-5) unstable; urgency=medium

  * [SECURITY] CVE-2018-18655 information disclosure: Add no-referrer meta
    header to templates (Closes: #911842).

 -- Magnus Holmgren <holmgren@debian.org>  Sat, 27 Oct 2018 19:45:14 +0200

prayer (1.3.5-dfsg1-4) unstable; urgency=low

  * Switch from CDBS to dh and debhelper compat level 9.
  * openssl1.1.patch: Support OpenSSL 1.1 API changes (Closes: #828512).
    * Support for Entropy Gathering Daemon removed because it's really old
      and support for it is no longer enabled in OpenSSL by default.
  * Add missing lsb-base dependencies.
  * prayer.postrm: remove hard-coded path to deluser.
  * Bump Standards-Version to 3.9.8.

 -- Magnus Holmgren <holmgren@debian.org>  Sat, 29 Oct 2016 14:15:05 +0200

prayer (1.3.5-dfsg1-3) unstable; urgency=low

  * disable_ssl3.patch (new): Disable SSL 3.0 due to CVE-2014-3566
    (POODLE).
  * debian/Config: Disable ACCOUNTD_SSL_ENABLE since the SSL/TLS support
    in prayer-accountd and prayer-session is incomplete and never was
    functional.

 -- Magnus Holmgren <holmgren@debian.org>  Wed, 29 Oct 2014 22:32:18 +0100

prayer (1.3.5-dfsg1-2) unstable; urgency=high

  * dlopen_templates.patch: Use MYCFLAGS (which is initialized to the
    value of CFLAGS from dpkg-buildflags in the Config file) instead of
    CFLAGS in templates/{src,cam,old}/Makefile (Closes: #715310, LP:
    #1201216). The --defsym options were lost when we let CDBS override
    CFLAGS in the previous upload.

 -- Magnus Holmgren <holmgren@debian.org>  Thu, 18 Jul 2013 22:47:08 +0200

prayer (1.3.5-dfsg1-1) unstable; urgency=low

  * New upstream release.
  * Refresh patches.
  * Drop dummy package prayer-templates.
  * No longer override CDBS overriding CFLAGS, thereby allowing hardening
    flags to be properly propagated. I think it caused internal include
    flags to be lost, but since at least 1.3.2 that's no longer the case.
  * Bump Standards-Version to 3.9.4.
  * hurd.patch: Always define HAVE_SHADOW. The test for BSD4_4 seems
    bogus; it is defined on Hurd, but crypt(3) is available there.

 -- Magnus Holmgren <holmgren@debian.org>  Wed, 12 Jun 2013 00:09:05 +0200

prayer (1.3.4-dfsg1-1) unstable; urgency=low

  * New upstream release.
    - Drop ipv6_v6only.patch; fixed upstream.
    * template_sdk.patch: templates/src/build_index.pl no longer need to
      be patched.
  * Bump Standards-Version to 3.9.2.

 -- Magnus Holmgren <holmgren@debian.org>  Sat, 27 Aug 2011 22:24:50 +0200

prayer (1.3.3-dfsg1-4) unstable; urgency=low

  * Merge ld-as-needed.diff from Ubuntu into dlopen_templates.patch
    (Closes: #607559).
  * dlopen_templates.patch: Add missing #include "dlopen_templates.h" to
    servers/prayer_shared.h.
  * hurd.patch (new): Use the SPT_CHANGEARGV implementation of
    setproctitle() on the Hurd.
  * Add basic manpage for prayer-accountd(8).
  * unbrand_accountd.patch: Remove some Cambridge-specific parts of the
    filter handling.
  * Drop obsolete Build-Depends alternative libc-client2007b-dev.
  * Increase Debhelper compat level to 7.

 -- Magnus Holmgren <holmgren@debian.org>  Sun, 27 Mar 2011 22:49:18 +0200

prayer (1.3.3-dfsg1-3ubuntu1) natty; urgency=low

  * Fix FTBFS with ld --as-needed.

 -- Matthias Klose <doko@ubuntu.com>  Sun, 19 Dec 2010 19:07:04 +0100

prayer (1.3.3-dfsg1-3) unstable; urgency=high

  * ipv6_v6only.patch (new): Set the IPV6_V6ONLY socket option on
    AF_INET6 sockets; since Prayer by default enumerates available address
    families and calls bind() once for each, conflicts will occur
    otherwise (Closes: #607261).

 -- Magnus Holmgren <holmgren@debian.org>  Thu, 16 Dec 2010 20:16:41 +0100

prayer (1.3.3-dfsg1-2) unstable; urgency=high

  * Convert (trivially, since CDBS with quilt was already used) to source
    format 3.0 (quilt).
  * no_db_version_check.patch: Remove unnecessary and incorrect check that
    not only the major and minor version numbers of the current libdb are
    the same as at compile time, but also that the patch number is equal
    or greater, which should not be a concern (Closes: #592119).

 -- Magnus Holmgren <holmgren@debian.org>  Sat, 07 Aug 2010 21:07:53 +0200

prayer (1.3.3-dfsg1-1) unstable; urgency=low

  * New upstream release.
    - Dropped kfreebsd.patch, clean_completely.patch, and
      manpage_error.patch; all incorporated upstream.
    * makefile_install_config.patch: Updated; some parts incorporated
      upstream.
  * prayer-templates-dev.install: Only template_structs.h and misc.h
    needed henceforth, since only those files are #included by compiled
    templates.
  * template_sdk.patch: The #include that templates/src/build_index.pl
    generates was not changed, though.
  * debian/Config, debian/control: Enable libtidy for HTML parsing and
    sanitisation, fixing certain XSS problems, which were due to simple
    substring matching being used.
  * prayer.init, prayer-accountd.init: Add $remote_fs to, and move
    $local_fs to, Required-Start.
  * Upgrade to Standards-Version 3.9.0:
    * Use Breaks instead of Conflicts to handle the renaming of
      prayer-templates.

 -- Magnus Holmgren <holmgren@debian.org>  Thu, 22 Jul 2010 03:27:52 +0200

prayer (1.3.2-dfsg1-4) unstable; urgency=low

  * Undo inadvertent inclusion of /usr/include/prayer in
    prayer-templates-src (Closes: #557056).

 -- Magnus Holmgren <holmgren@debian.org>  Tue, 24 Nov 2009 23:14:12 +0100

prayer (1.3.2-dfsg1-3) unstable; urgency=low

  * Replace non-existing libc-client2007-dev with new libc-client2007e-dev
    among the libc-client Build-Depends alternatives (Closes: #552717).

 -- Magnus Holmgren <holmgren@debian.org>  Sat, 31 Oct 2009 13:57:08 +0100

prayer (1.3.2-dfsg1-2) unstable; urgency=low

  * dlopen_templates.patch:
    * templates/{cam,old}/Makefile: Define the symbols template_map and
      template_map_count as aliases to the template_$(TYPE)_map and
      template_$(TYPE)_map_count when linking, so that template libraries
      can be loaded by other names than the original one. Also remove some 
      cruft.
    * shared/dlopen_templates.c: Use those symbols instead.
  * Add symlinks so that template_set = xhtml_strict will still work.
  * Update the names of the directories for locally modified templates
    (under /etc/prayer/templates) to reflect the new template names.
  * template_sdk.patch (new): Create makefile for building template set
    libraries. Install it together with binaries and scripts needed.
  * Rename prayer-templates as prayer-templates-src and add new binary
    package prayer-templates-dev containing the aforementioned
    template-building tools as well as a README.Debian explaining how to
    use it all.
  * Ship NEWS.Debian only in the prayer package. Ship TEMPLATES in
    prayer-templates-src in addition to prayer-templates-dev.

 -- Magnus Holmgren <holmgren@debian.org>  Sun, 25 Oct 2009 19:22:13 +0100

prayer (1.3.2-dfsg1-1) unstable; urgency=low

  * New upstream release (Closes: #546918).
    * The set of available template sets has changed and several
      obsolete configuration options are no longer recognized. Please
      see NEWS.Debian for more information.
    - Repacked without University of Cambridge logos with dubious
      copyright/license status (more info in debian/copyright).
    - unbrand_cam_template.patch: Remove said Cambridge-specific graphics
      from 'cam' template set.
    - Drop unlimit_login_username.patch (fixed upstream when replacing
      the old login screen with frontend templates) and
      usernames_with_at.patch (incorporated upstream).
    * clean_completely.patch: Partially implemented upstream.
    * Manpages incorporated upstream.
  * dlopen_templates.patch: Experimental support for dynamically loading
    templates.
  * Update README.Debian.
  * makefile_install_config.patch(share/config.c): Change default
    template_set to "old".
  * makefile_install_config.patch(files/Makefile): Fix permissions on
    icons and static files.
  * manpage_error.patch: Fix missing .El in prayer-session(8).

 -- Magnus Holmgren <holmgren@debian.org>  Wed, 07 Oct 2009 22:50:45 +0200

prayer (1.2.3-2) unstable; urgency=low

  * welcome_is_template.patch wasn't fully incorporated upstream. Remove
    the help_dir setting and check in makefile_install_config.patch instead.c
  * Make Prayer work on kFreeBSD.  Unfortunately there is no support for
    SysV semaphores.
    * kfreebsd.patch: Include the right headers under glibc. Detect that 
      semtimedop is a stub.
    * debian/Config: Add -lutils to LIBS.
    * makefile_install_config.patch: put back a default value for
      lock_dir.
  * makefile_install_config.patch: Set imap_server to localhost/notls in
    default prayer.cf (Closes: #531801).
  * Depend on exim4 | mail-transport-agent.
  * Increase Standards-Version to 3.8.3.

 -- Magnus Holmgren <holmgren@debian.org>  Mon, 31 Aug 2009 23:48:04 +0200

prayer (1.2.3-1) unstable; urgency=low

  * New upstream release.
    - Drop repair_ssl_session_db_on_version_mismatch.patch,
      remove_old_db_logfiles_from_prayer-ssl-prune.patch,
      welcome_is_template.patch, template_find_bug.patch; all incorporated
      upstream.
    - Update makefile_install_config.patch after welcome.html gone.
  * kfreebsd.patch (new): Try to get Prayer to work on Debian
    GNU/kFreeBSD.
  * Add ${misc:Depends} to Depends for prayer-templates.
  * Upgrade to Standards-Version 3.8.1.
    + Add debian/README.source.
  * clean_completely.patch (new): Fix a few makefiles that didn't remove
    their build targets in the clean target (Closes: #521369). Thanks to
    Simon McVittie.

 -- Magnus Holmgren <holmgren@debian.org>  Tue, 14 Apr 2009 00:50:31 +0200

prayer (1.2.2.1-7) unstable; urgency=high

  * Since /var/run can be a tmpfs filesystem, don't ship /var/run/prayer
    as part of the package but create it in the init script (LP: #304071).
    Also, var_prefix, pid_dir and prayer_user will by default be overriden
    from the command line to make sure that they get the values expected by
    the init script.

 -- Magnus Holmgren <holmgren@debian.org>  Fri, 31 Oct 2008 18:31:28 +0100

prayer (1.2.2.1-6) unstable; urgency=low

  * prayer.init: Correctly check for the presence of the executables.
  * Split out templates to a separate arch-indep package.
  * Change the default value of the tmp_dir option back to
    ${var_prefix}/tmp (/var/run/prayer/tmp) because using /tmp may not be
    secure.
  * usernames_with_at.patch (new, from upstream CVS): If a username
    contains an @, it will be assumed to be a valid email address and be
    used as envelope sender address and default "From" address when
    sending mail (Closes: #497016).

 -- Magnus Holmgren <holmgren@debian.org>  Fri, 31 Oct 2008 18:19:34 +0100

prayer (1.2.2.1-5a) unstable; urgency=medium

  * Prevent dh_installman from interpreting the cf in prayer.cf.5 as a
    language code.

 -- Magnus Holmgren <holmgren@debian.org>  Sun, 17 Aug 2008 19:24:10 +0200

prayer (1.2.2.1-4) unstable; urgency=medium

  * Urgency medium since fixing fairly serious bug(s).
  * debian/Config: Fix handling of CFLAGS, CPPFLAGS and LDFLAGS from the
    environment or command line, breaking a circular definition of
    LDFLAGS (FTBFS on Ubuntu; LP: #256220).
  * unlimit_login_username.patch (new):
    - servers/prayer_login.c: Remove 8 character username limit from login
      form (Closes: #494517).
  * prayer.init, prayer-accountd.init: Sleep 1 second between stop and
    start in restart.
  * Add manpages prayer(8), prayer-session(8), prayer.cf(5), and
    prayer-ssl-prune(8) (groff-mdoc format). Remove half-done Docbook
    versions from source package.

 -- Magnus Holmgren <holmgren@debian.org>  Sun, 17 Aug 2008 17:38:00 +0200

prayer (1.2.2.1-3) unstable; urgency=low

  * welcome_is_template.patch: 
    - shared/config.c: Don't require that the help_dir option, which was
      removed from the default prayer.cf earlier, is defined
      (Closes: #493009).
  * makefile_install_config.patch: 
    - shared/config.c: Likewise don't check for lock_dir (Closes: #494011).

 -- Magnus Holmgren <holmgren@debian.org>  Wed, 06 Aug 2008 21:20:17 +0200

prayer (1.2.2.1-2) unstable; urgency=low

  * Acknowledge NMU, but change the build dependency to
    libc-client2007b-dev | libc-client2007-dev | libc-client-dev 
    (>= 7:2007~), since we need at least that version.

 -- Magnus Holmgren <holmgren@debian.org>  Sun, 27 Jul 2008 20:52:18 +0200

prayer (1.2.2.1-1.1) unstable; urgency=low

  * Non-maintainer upload.
  * Build-depend on unversioned libc-client-dev to allow BinNMUs.
    Closes: bug#492285.

 -- Jonas Smedegaard <dr@jones.dk>  Thu, 24 Jul 2008 23:42:33 +0200

prayer (1.2.2.1-1) unstable; urgency=low

  * New upstream release featuring XHTML templates and fixes to various
    bugs created by the reorganisation.
    - Drop accountd_makefile_typo.patch; fixed upstream.
  * makefile_install_config.patch: Changes to the default config: 
    - Disable SSL session caching.  
    - Clean out "direct connection stuff". Remove lock_dir since we use
      SysV semaphores.
    * Point login_prefix_path, motd_path, and login_suffix_path towards
      /etc/prayer.
    * Change postponed-mail and sent-mail to Drafts and Sent.
  * Improve SSL/TLS configuration:
    * makefile_install_config.patch: Point ssl_cert_file and
      ssl_privatekey_file to /etc/ssl/*/ssl-cert-snakeoil.*.
    + Add dependency on ssl-cert (>= 1.0.11).  
    + prayer.postinst: Add prayer to group ssl-cert on fresh install or
      when upgrading from versions prior to this one.
  * welcome_is_template.patch (new): Although the welcome screen is now a
    template among others, cmd_welcome.c still tried to read the file
    specified by welcome_path (welcome.html by default) and wouldn't show
    the welcome screen if the option was unset or the file couldn't be
    read. This patch removes that check as well as the welcome_path and
    help_path options from prayer.cf.
  * No longer install welcome.html (see above) and motd.html (no real
    content) in /etc/prayer. Install login_prefix.html, login_suffix.html,
    and motd.html (the versions found in files/etc.hermes in the
    distribution tarball) in /usr/share/doc/prayer/examples instead.
  * Do not install prayer-chroot (too experimental, hardcoded chroot path)
    or prayer-sem-prune (does nothing that ipcrm cannot do).
  * templates_fallback_to_compiled.patch (new): If the
    template_use_compiled option is false, nevertheless use compiled-in
    templates in template_expand.c if the requested template cannot be
    found on disk. Change default template_path to /etc/prayer/templates.
    Install said directory as well as subdirectories for available
    template sets.
  * Update and improve README.Debian.
  * Add logrotate dependency.
  * makefile_install_config.patch: Remove call to install.sh from
    files/Makefile and replace it with single tar pipeline; thus
    install.sh no longer needs to be patched.
  * remove_old_db_logfiles_from_prayer-ssl-prune.patch (new): Patch
    myarchive() in lib/mydb_db3.c so that it only deletes obsolete
    transaction logs if dirname = NULL, then call it (via DB->archive())
    from ssl_prune_sessions() in lib/ssl.c.
    - prayer-db-prune thus unnecessary.
  * template_find_bug.patch (new): Fix segfault in template_find() when
    template_set specifies a non-existing set. Also update default set.

 -- Magnus Holmgren <holmgren@debian.org>  Tue, 24 Jun 2008 01:34:14 +0200

prayer (1.2.0-1) unstable; urgency=low

  * New upstream release featuring a major code reorganisation and a new
    template system.
    - Drop obsolete folder_list_cosmetics.patch and includes.patch.
    - Note: SSL support has been removed from prayer-accountd for now.
  * Changed defaults (manual intervention may be needed):
    - Let prayer-accountd.pid reside in /var/run; letting the two packages
      share /var/run/prayer caused too much trouble.
    - prayer.cf (makefile_install_config.patch and debian/Config):
      var_prefix set to /var/run/prayer and referred to in other
      settings. socket_split_dir disabled by default and default sockets
      directory changed to /var/run/prayer/sockets.
  * debian/control:
    + Build-depend on latest Berkley DB library (libdb-dev).
    + Add Homepage field.
  * repair_ssl_session_db_on_version_mismatch.patch: Recreate session DB
    environment when upgrading from a version of Prayer that used an older
    BDB library.
  * prayer.postinst: Set HOME of prayer user to /var/run/prayer.
  * prayer.postrm: Simply remove /var/run/prayer (since accountd doesn't use it)
    on remove or disappear and correctly remove statoverrides (Closes: #483176).
    Also check that deluser exists; it may be gone at purge time.
  * Package build details:
    - Reduce makefile_install_config.patch by not changing BROOT into DESTDIR.
    - Override CDBS overriding CFLAGS.
  * debian/patches/accountd_makefile_typo.patch: Fix typo that caused PAM
    not to be used.

 -- Magnus Holmgren <holmgren@debian.org>  Sat, 31 May 2008 19:28:21 +0200

prayer (1.1.0-2) unstable; urgency=low

  * Define LDAP_DEPRECATED so that the deprecated LDAP interfaces can be
    used.
  * makefile_install_config.patch: Modify prayer/Makefile so that the
    above definition isn't lost if CFLAGS is overridden.
  * Improve prayer.postrm to clean /var/run/prayer on removal and
    disappearence.
  * Use dpkg-override to allow the administrator to change mode of
    /var/run/prayer and /var/log/prayer.
  * Add postinst and postrm scripts for prayer-accountd.
  * makefile_install_config.patch: Set authtype = pam in accountd.cf so
    that accountd will start.
  * Bump Standards-Version to 3.7.3. No changes necessary.
  * Override Lintian warnings about GPL code linked with OpenSSL. Special
    exception has been granted.
  * Don't require cdbs 0.4.27-1. Oldstable has 0.4.28-1.

 -- Magnus Holmgren <holmgren@debian.org>  Thu, 15 May 2008 22:47:14 +0200

prayer (1.1.0-1) unstable; urgency=low

  * First upload to unstable.
  * New upstream release.
    + Requires development version of the c-client library (libc-client2007-dev).
    - Drop pidfiles_extension.patch, session_unix_bugs.patch,
      session_server_bugs.patch; all incorporated upstream.
    - Drop ipv6.patch; incorporated upstream.
    - Drop utf8.patch; incorporated and improved upstream.
    - Drop hasnochildren_means_noinferiors.patch since upstream now
      handles dual-use mailboxes.
  * New maintainer email address.
  * Update README.Debian, removing lies about TLS not being possible to
    disable (Closes: #440462).
  * folder_list_cosmetics.patch: Remove space between expand/collapse
    arrow and folder icon in the folder list and change the alt texts so
    that the tree looks nicer in text browsers.

 -- Magnus Holmgren <holmgren@debian.org>  Tue, 13 May 2008 22:31:36 +0200

prayer (1.0.18-1) experimental; urgency=low

  * Initial release (Closes: #392823)

 -- Magnus Holmgren <magnus@kibibyte.se>  Sat, 10 Mar 2007 14:24:21 +0100
Subversion Repositories

(root)/trunk/debian/changelog - Rev 165 → 168
