File courier-authlib.changes of Package courier-authlib

Overview Repositories Revisions Requests Users Attributes Meta

File courier-authlib.changes of Package courier-authlib

-------------------------------------------------------------------
Tue Dec  9 17:07:53 CET 2008 - hvogel@suse.de

- Fix CVE-2008-2380: Use PQsetClientEncoding() for proper
  input sanitizing. This fixes a SQL injection possibility with
  PGSQL databases that use non-Latin character sets.
  Patch: courier-authlib-0.59plus.patch

-------------------------------------------------------------------
Fri Sep  5 15:26:06 CEST 2008 - hvogel@suse.de

- update to version 0.61.0
* Cleanup: always compile md5, sha* and hmac stuff, and remove all
  conditionally-compiled cruft. Move SASL list to an internal header.
  Add client-side support for AUTH EXTERNAL.
* authsasl.c (auth_sasl_ex): auth_sasl_ex() supercedes auth_sasl(),
  invokes auth_sasl() for non-EXTERNAL SASL methods, implements EXTERNAL
  by going through the motions, then setting up a dummy authentication
  request.
* authdaemon.c (auth_generic): Check for the dummy EXTERNAL
  authentication request, and handle it by invoking auth_getuserinfo(),
  rather than sending it down the pipe. This avoid having to implement
  a stub in every authentication module.
* authmysqllib.c: Use mysql_set_character_set() instead of SET NAMES
* authmysqllib.c: Fix domain-less queries.
* Drop the unmaintained authvchkpw module. 
* authmysqllib.c: Cleanup. Use mysql_real_escape_string instead of
  crude filtering.
* More portability fixes.
- add rpmlintrc (shlib-policy-name-error) for the moment
  to fix build

-------------------------------------------------------------------
Mon Apr 14 11:27:57 CEST 2008 - aj@suse.de

- Small changes to make rpmlint happier:
  * Rename keywords in init scripts
  * Prerequire /bin/rm

-------------------------------------------------------------------
Thu Jan 17 13:20:56 CET 2008 - mskibbe@suse.de

- update to version 0.60.2 which
  o Portability fix for checking the highest available file
    descriptor 
  o Fix typos
  o Use OPEN_MAX, instead of hardcoded

-------------------------------------------------------------------
Fri Jun  8 01:50:18 CEST 2007 - ro@suse.de

- remove explicit requires for mysql-shared (library is required
  anyway)

-------------------------------------------------------------------
Wed Apr 25 11:17:06 CEST 2007 - mskibbe@suse.de

- update to version 0.59.3 which includes:
  o CRAM authentication in vchpw module
  o bug fixes
  o updated man pages

-------------------------------------------------------------------
Thu Mar 29 11:38:28 CEST 2007 - rguenther@suse.de

- Add procps BuildRequires due to interesting configure checks

-------------------------------------------------------------------
Mon Mar 26 12:27:47 CEST 2007 - rguenther@suse.de

- Add gdbm-devel BuildRequires

-------------------------------------------------------------------
Thu Feb 22 14:16:01 CET 2007 - mskibbe@suse.de

- update to version 0.59.1 which
  o fix some bugs 
  o Make the spec a little prettier
  o Change distro-detection to use "rh" and "fc" for version
    detection, and add support for mandriva
  o Added the -f option to makeuserdb
  o Try to recover when the LDAP server closes the
    persistent socket, for inactivity

-------------------------------------------------------------------
Mon Sep 18 12:21:24 CEST 2006 - mskibbe@suse.de

- fix Bug 204834 - missing rccourier-authdaemon symlink

-------------------------------------------------------------------
Tue Aug  1 12:14:40 CEST 2006 - mskibbe@suse.de

- Add mysql, pipe, pgsql sub-packages

-------------------------------------------------------------------
Mon Mar 27 11:50:09 CEST 2006 - kukuk@suse.de

- Add missing ldconfig calls

-------------------------------------------------------------------
Wed Jan 25 21:35:11 CET 2006 - mls@suse.de

- converted neededforbuild to BuildRequires

-------------------------------------------------------------------
Wed Dec 14 13:46:57 CET 2005 - kukuk@suse.de

- Update to 0.58 (enable shadow aging support)

-------------------------------------------------------------------
Sun Sep 25 19:07:47 CEST 2005 - kukuk@suse.de

- Compile with -DLDAP_DEPRECATED

-------------------------------------------------------------------
Fri Jul 29 14:00:24 CEST 2005 - kukuk@suse.de

- Initial version

Places

File courier-authlib.changes of Package courier-authlib

Places