File bogofilter.changes of Package bogofilter

Overview Repositories Revisions Requests Users Attributes Meta

File bogofilter.changes of Package bogofilter

-------------------------------------------------------------------
Wed Sep  7 13:45:55 UTC 2016 - mmarek@suse.cz

- Add flex to BuildRequires and force rebuild of the scanner to fix
  a buffer overflow (bsc#990856, CVE-2016-6354).

-------------------------------------------------------------------
Tue Jul 23 17:11:08 UTC 2013 - lmuelle@suse.com

- Update to version 1.2.4.
  * Fix three crashes in command line and environment variable parsers
    that caused NULL pointer dereferences with long option variants
    of bogofilter --syslog-tag, or bogoutil --timestamp-date, or when
    bogotune -M<file> cannot derive the bogofilter directory.
  * Add getopt_long_chk(), a getopt_long variant that checks if the
    overlapping short and long options agree on whether their argument
    is not required, mandatory, or optional.  If they disagree, the
    program aborts.
  * Fix a crash in command line parser that causes a NULL pointer
    dereference when --db-cachesize is used without argument.
    Found with getopt_long_chk().
  * Change lexer API/ABI a bit so as to work with flex 2.5.36 generated
    lexers (for instance, on Fedora 18 "Spherical Cow") that flip the
    type of yyleng from int to size_t. We use a signed long internally.
  * Fix XML form of Bulgarian FAQ so that it validates;
    and validate XHTML at build time.
  * Mark Berkeley DB 5.2.42 and 5.3.21 supported.

-------------------------------------------------------------------
Mon Dec  3 10:09:49 UTC 2012 - lmuelle@suse.com

- Update to version 1.2.3.
  * Update configure.ac to avoid autoconf 2.68 warnings, by
    (a) quoting the first AC_RUN_IFELSE argument, an
        AC_LANG_PROGRAM(), with [ ], and
    (b) providing an explicit "true" assumption for Berkeley DB
        capabilities to avoid cross-compilation warnings.
  * Security bugfix; (CVE-2012-5468); (bnc#792939),
    Fix a heap corruption in base64 decoder on invalid input.
    http://bogofilter.sourceforge.net/security/bogofilter-SA-2012-01
  * Added bogofilter-faq-bg.html, a Bulgarian translation of the FAQ.
  * Mark "Berkeley DB 5.1.19: (August 27, 2010)" supported.
- Update to version 1.2.2.
  * Use a better PRNG for random sleeps. That is arc4random() where
    available, and drand48() elsewhere.
  * Assorted fixes for issues found with clang analyzer:
    + Fix a potential NULL deference
    + Fix a potential division by zero
    + Remove dead assignments and increments
  * Update Doxyfile and source contrib/bogogrep.c for docs, too.
  * Security bugfix, CVE-2010-2494:
    Fix a heap corruption in base64 decoder on invalid input.
    Analysis and patch by Julius Plenz <plenz@cis.fu-berlin.de>.
    Please see doc/bogofilter-SA-2010-01 for details.
  * Updated sendmail milter contrib/bogofilter-milter.pl to v1.??????
  * Bump supported/minimum SQLite3 versions and warning threshold.
    See doc/README.sqlite for details.
  * Mark BerkeleyDB 4.8.26 and 5.0.21 supported.
  * Make t.maint more robust; ignore .ENCODING token. To fix test
    failures on, for instance, FreeBSD with unicode enabled.
  * Fix several compiler warnings "array subscript has type 'char'", by
    casting the arguments to unsigned char.
  * Split error messages for ENOENT and EINVAL into new function.
  * Avoid divison by zero in robx computation by checking if there are at
    least one ham message and one spam message registered.
  * contrib/spamitarium.pl updated to version 0.4.0
  * Updated and integrated Ted Phelps's "Patch to prevent .ENCODING from
    being discarded by bogoutil -m" (SourceForge Patch #1743984).

-------------------------------------------------------------------
Tue Dec 20 20:13:52 UTC 2011 - coolo@suse.com

- remove call to suse_update_config (very old work around)

-------------------------------------------------------------------
Sat Sep 17 20:22:44 UTC 2011 - jengelh@medozas.de

- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build

-------------------------------------------------------------------
Wed Jul  7 08:19:00 UTC 2010 - lmuelle@suse.de

- Fix a heap corruption in base64 decoder on invalid input; CVE-2010-2494;
  (bnc#619847).

-------------------------------------------------------------------
Tue Jan 12 20:27:43 UTC 2010 - coolo@novell.com

- fix build on non-arm

-------------------------------------------------------------------
Tue Oct 27 13:38:50 UTC 2009 - bitshuffler@opensuse.org

- Update to version 1.2.1.
  + Update configure to use "host" rather than "target", to match the
    newer autotools cross-build semantics. Untested.
    Developers changing the build system and users who build from SVN
    will now need automake 1.9 and autoconf 2.60.
  + Fix Christian Frommeyer's MIME decoding bug, Ubuntu/Launchpad Bug
    #320829. As a side effect, also fixes misattribution of MIME bodies
    as MIME headers with mime: tag.  Original bug report:
    https://bugs.launchpad.net/ubuntu/+source/bogofilter/+bug/320829

Before this fix, bogofilter did not properly MIME-decode the first
    line in a body. This was especially bad with Christian's samples
    where the whole body was only one long base64 line.
  + Removed two scripts that are auto-built.
  + Added test case for Stephen Davies' Q-P EOL problem (see below).
  + Fixed EOL problem in quoted_printable text. Problem reported by
    Stephen Davies and identified by Pavel Kankovsky
  + Promoted to "stable"

-------------------------------------------------------------------
Thu May  7 14:03:29 CEST 2009 - lmuelle@suse.de

- Update to version 1.2.0.
  + Flex-2.5.35 has fix for memory allocation problem in 2.5.4, 2.5.31, and
    2.5.33, making bogofilter's flex patch obsolete.
  + Bogofilter now uses listsort in place of qsort.
  + Added token-count=n, token-count-min=n, and token-count-max=n options.
  + Minor code cleanups.
  + spamitarium.pl updated to version 0.3.0
  + update bf_compact documentation by removing explicit Berkeley DB
    references, as it has been fixed to work with other database drivers in
    March 2008.
  + bf_compact, bf_copy and bf_tar now support transformed program names
  + Update sqlite3 adaptor to take advantage of sqlite3_prepare_v2() API
    function that appeared in SQLite 3.3.9. The new _v2 interface allows for
    more specific error messages when executing SQL statements.  Also enable
    extended result codes for more precise error reporting.
  + Update doc/integrating-with-postfix: the script now suggests sendmail -G
    -i (where -G will be ignored by Postfix before 2.3) to tell Postfix it's a
    gateway submission, not an original injection; the filter pipe(8) magic
    for master.cf now suggests flags=Rq (was flags=R), as per Postfix's
    FILTER_README.
  + Drop support for systems that reverse setvbuf arguments. The last systems
    to do that are reported to be shipped in 1987 by the autoconf manual, so
    ditch them.

-------------------------------------------------------------------
Wed Feb 18 17:00:15 CET 2009 - lmuelle@suse.de

- Update to version 1.1.7.
  + Updated sendmail milter contrib/bogofilter-milter.pl to v1.45
  + Added maildir training info to English and French FAQs.
  + Fix uninitialized variable in lexer.c when unicode is disabled.
  + In process_arg functions use the val parameter rather than optarg.
  + Function process_arg now has the same prototype for
    bogofilter, bogolexer, bogoutil, and bogotune.  The proper
    version is called by function read_config_file for all
    programs.
  + Fixed syntax errors in t.valgrind test
  + bf_compact now supports compacting databases that use QDBM, Tokyo
    Cabinet or SQLite3 and is covered by the test suite.
  + bf_compact now verifies databases before dumping them, to avoid
    getting into an unterminated loop and wasting all diskspace.
  + Bogoupgrade now verifies databases before dumping them, to avoid
    getting into an unterminated loop and burning all memory or disk
    space when the database is corrupt.
  + Bogoupgrade now uses Pod::Usage to print usage/help, prints error
    messages that are a bit more concise and validates arguments a bit
    stricter.
  + Bump required sqlite version to 3.5.4, earlier versions could
    sometimes corrupt the database. Update install-staticdblibs.sh.
    Bogofilter will complain when used with older versions.
  + bf_compact problem fixed.
- Update to version 1.1.6.
  + Transaction support added for TokyoCabinet datastore.
  + Bump required sqlite version to 3.4.2 and fix related compiler
    warnings. Bogofilter will complain when used with older versions.
  + Support for TokyoCabinet datastore added.
  + doc/README.db was updated to BerkeleyDB 4.6
  + doc/README.db: section 3.5 was added, with information on how to 
    resolve "Logging region out of memory; you may need to increase its 
    size", section 4.2 now documents set_lg_regionmax.
  + The install-staticdblibs.sh script was relicensed under GNU GPL v3,
    adjusted to download Berkeley DB 4.2 from oracle.com, adds patch #5,
    and updated to build SQLite 3.4.1. In order to for a rebuild of the
    updated library, do: rm -rf /opt/db-4.2-lean /opt/sqlite-3-lean
    and re-run the script.
  + The recommended minimum sqlite3 version is now 3.4.0, bogofilter will
    warn if used with older versions. Bugs that could cause database
    corruption in rare circumstances have been fixed in sqlite3.
    See doc/README.sqlite for details.
  + Updated sendmail milter contrib/bogofilter-milter.pl to v1.27
  + Add '--spam-header-place={header}' to specify header line
    before which the X-Bogosity line is placed.
  + Support --db-verify for sqlite3.
  + Fix defect where the database verification method would not be called
    for traditional Berkeley DB databases. Reported by Eric Wood.
  + Fix test suite for situations where there are blanks in the test or
    working directories' names.
  + Repair passthrough defect on systems whose standard system library
    makes a distinction between text and binary mode in stdio stuff.
- Update to version 1.1.5	2007-01-14 (released) 2007-01-25 (declared stable)
  + Fixed Makefile dependency problem.
  + Fixed block-on-subnets problem.
  + Added block-on-subnets regression test.
- Update to version 1.1.4	2007-01-01 (released)
  + Update copyright notices.
  + Add GSL dependency to bogofilter target to support parallel
    makes.
  + Fixed problem in flex-2.5.4 patch.
- Update to version 1.1.3	2006-12-03 (released) 2006-12-20 (declared stable)
  + Fixed typo in configure.ac.
- Update to version 1.1.2	2006-12-02 (released)
  + Revise install-staticlibs.sh's links for retrieving database
    tarball and patches.
  + Revise make rules for generating statically linked RPM.
  + Provide separate flex patches for 2.5.4 and 2.5.3x
  + Updated file comment for lexer_v3.l and removed unneeded
    rules T1, T12, SHORT_TOKEN, and TOKEN_12.
  + Miscellaneous minor cleanups of lexer_v3.l classes and rules.
  + Patch flex skeleton code problem which can cause a seg-fault.
  + Fix processing of "--unicode=no" option.
  + Fix prefixes for ip address and url tokens.  Restore colon
    that was dropped in token.c edit for bogofilter-1.1.0.
  + Fixed problem parsing message ids, which can cause a
    seg-fault on an x86_64.
  + Added '--ham-true' option for bogofilter (to match docs)
  + FAQ's updated to point to current sylpheed-claws wiki

-------------------------------------------------------------------
Fri Nov 21 16:38:01 CET 2008 - ro@suse.de

- update check-build.sh

-------------------------------------------------------------------
Mon Sep  4 11:51:52 CEST 2006 - lmuelle@suse.de

- Update to version 1.1.1.
  + Fixed minor header/body multi-word token defect.
  + Add large file support for 32-bit systems.
    (_FILE_OFFSET_BITS/_LARGE_FILE).
  + Fix lexer_v3.l format string mismatch that broke debugging code on
    64-bit systems.
  + Add multi-word token support to bogoutil & bogotune.
  + Clean up token prefixing.
  + Clean up queue-id processing.
  + Add max-multi-token-len checks.
  + Add min-token-len check (with exemption for 2 character
    money amounts which bogofilter has long accepted).
  + Add "short token" pattern to lexer
  + Add options for min/max token length, multi-token count, and
    max multi-token length.
  + Corrected option parsing in bogotune to support -n ham1 ham2
    -s spam1 spam2 as suggested by bogotune -h; broken since 0.93.2.
  + Corrected problem with bogotune's -D option (thanks to Jason Smith).
  + Flush output after writing spam header line and/or message body.
  + When database is near to maximum allowed size, allow reading
    it and disallow writing to it.
  + Fix formatting of Rtable output when in the message header,
    this keeps verbose passthrough modes RFC-822/2822 compliant.
  + Fixed --input-file and --output-file command line options.

-------------------------------------------------------------------
Wed Jan 25 21:34:42 CET 2006 - mls@suse.de

- converted neededforbuild to BuildRequires

-------------------------------------------------------------------
Mon Jan 23 15:44:10 CET 2006 - lmuelle@suse.de

- Update to version 1.0.1; CVE-2005-4591, CVE-2005-4592; [#142490].

-------------------------------------------------------------------
Fri Dec  2 12:59:36 CET 2005 - lmuelle@suse.de

- Update to version 1.0.0.

-------------------------------------------------------------------
Thu Nov 24 12:45:47 CET 2005 - lmuelle@suse.de

- Ensure to set permissions of all scripts with a hash-bang starting header in
  the contrib dir to 0755.

-------------------------------------------------------------------
Tue Nov 22 14:13:55 CET 2005 - lmuelle@suse.de

- Update to version 0.96.6.

-------------------------------------------------------------------
Tue Nov 15 17:28:41 CET 2005 - uli@suse.de

- hardwire shared DB test to yes on ARM

-------------------------------------------------------------------
Thu Oct 27 12:58:18 CEST 2005 - lmuelle@suse.de

- Update to version 0.96.2.

-------------------------------------------------------------------
Fri Jul  8 13:44:55 CEST 2005 - lmuelle@suse.de

- Update to version 0.95.2.

-------------------------------------------------------------------
Mon Jun 20 13:08:11 CEST 2005 - lmuelle@suse.de

- Update to version 0.94.14.

-------------------------------------------------------------------
Wed May 18 09:53:03 CEST 2005 - lmuelle@suse.de

- Remove superfluous, twice installed man pages from the doc dir.

-------------------------------------------------------------------
Tue May 17 16:59:11 CEST 2005 - lmuelle@suse.de

- Update to version 0.94.12, [#84028].

-------------------------------------------------------------------
Tue Apr 26 15:14:18 CEST 2005 - uli@suse.de

- disabled make check on ARM (may hang QEMU)

-------------------------------------------------------------------
Tue Feb  1 16:49:23 CET 2005 - ro@suse.de

- added check-build.sh (need 2.6.X kernel at least)

-------------------------------------------------------------------
Mon Dec  6 11:08:47 CET 2004 - lmuelle@suse.de

- Update to version 0.93.2.

-------------------------------------------------------------------
Thu Nov 25 01:22:59 CET 2004 - ro@suse.de

- fix build on db-4.3

-------------------------------------------------------------------
Tue Oct 26 23:21:20 CEST 2004 - lmuelle@suse.de

- Update to version 0.92.8, [#47636].

-------------------------------------------------------------------
Thu Oct 14 18:19:03 CEST 2004 - mmj@suse.de

- Update to version 0.92.7

-------------------------------------------------------------------
Thu Oct 14 17:32:43 CEST 2004 - lmuelle@suse.de

- Update to version 0.92.6.

-------------------------------------------------------------------
Sat Aug  7 06:09:36 CEST 2004 - lmuelle@suse.de

- Update to version 0.92.4.

-------------------------------------------------------------------
Thu Jul 15 12:38:23 CEST 2004 - lmuelle@suse.de

- Update to version 0.92.2.

-------------------------------------------------------------------
Mon Jun 28 20:30:49 CEST 2004 - mmj@suse.de

- Update to 0.92.0.

-------------------------------------------------------------------
Sat Apr 10 11:42:34 CEST 2004 - lmuelle@suse.de

- Update to version 0.17.5

-------------------------------------------------------------------
Fri Mar  5 13:08:06 CET 2004 - lmuelle@suse.de

- remove twice listed bogotune man page from file list

-------------------------------------------------------------------
Thu Mar  4 19:45:03 CET 2004 - mmj@suse.de

- Update to 0.16.4

-------------------------------------------------------------------
Wed Jan  7 10:16:39 CET 2004 - lmuelle@suse.de

- update to version 0.15.13.1

-------------------------------------------------------------------
Mon Nov 10 17:30:43 CET 2003 - lmuelle@suse.de

- update to version 0.15.8
- add norootforbuild to the spec file

-------------------------------------------------------------------
Thu Aug 14 15:27:29 CEST 2003 - lmuelle@suse.de

- update to version 0.14.4

-------------------------------------------------------------------
Thu Jul  3 16:02:41 CEST 2003 - lmuelle@suse.de

- update to version 0.13.7.2

-------------------------------------------------------------------
Fri Jun  6 13:31:10 CEST 2003 - lmuelle@suse.de

- update to version 0.13.6.2

-------------------------------------------------------------------
Sat Apr 19 16:40:39 CEST 2003 - lmuelle@suse.de

- update to version 0.11.2

-------------------------------------------------------------------
Wed Apr  9 15:35:00 CEST 2003 - lmuelle@suse.de

- switch to the upstream patch to work with current coreutils

-------------------------------------------------------------------
Tue Apr  8 12:04:25 CEST 2003 - lmuelle@suse.de

- update to version 0.11.1.8

-------------------------------------------------------------------
Thu Mar 27 10:54:14 CET 2003 - lmuelle@suse.de

- update to version 0.11.1.4

-------------------------------------------------------------------
Thu Mar  6 09:23:14 CET 2003 - lmuelle@suse.de

- update to version 0.11.1

-------------------------------------------------------------------
Mon Feb 24 15:18:13 CET 2003 - lmuelle@suse.de

- update to version 0.10.3.1

-------------------------------------------------------------------
Tue Feb 11 20:18:41 CET 2003 - lmuelle@suse.de

- update to version 0.10.2

-------------------------------------------------------------------
Sun Dec  8 14:19:20 CET 2002 - lmuelle@suse.de

- update to version 0.9.1.2

-------------------------------------------------------------------
Sun Dec  1 19:22:53 CET 2002 - lmuelle@suse.de

- update to version 0.9.1

-------------------------------------------------------------------
Tue Nov 12 12:07:05 CET 2002 - lmuelle@suse.de

- remove superfluous aclocal, libtoolize, autoheader, automake, autoconf

-------------------------------------------------------------------
Mon Nov 11 14:45:20 CET 2002 - lmuelle@suse.de

- update to version 0.8.0
- make use of autoheader and automake; call aclocal first

-------------------------------------------------------------------
Tue Nov  5 21:13:49 CET 2002 - lmuelle@suse.de

- update to version 0.7.6

-------------------------------------------------------------------
Mon Nov  4 15:31:42 CET 2002 - lmuelle@suse.de

- add patch for getopt call to fix -d option from Carsten Hoeger
  <choeger@suse.de>

-------------------------------------------------------------------
Sun Oct 20 18:23:45 CEST 2002 - lmuelle@suse.de

- inital SuSE RPM based on ESR spec file

Places

File bogofilter.changes of Package bogofilter

Places