X-Git-Url: http://git.marmaro.de/?p=mmh;a=blobdiff_plain;f=ChangeLog;h=e44eda5dea099e6254296f54dc069123fd88c0d4;hp=61e91a3646781764df22ce1a45ac6299945397f3;hb=8146bc09fc2e8ad69520ba998be51fb02cbf069c;hpb=264318e5898da32e9a0e3ec2b4c69185db89bb8a diff --git a/ChangeLog b/ChangeLog index 61e91a3..e44eda5 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,99 @@ +Sun Feb 20 12:17:15 2000 Ruud de Rooij + + * Fix security hole in mhshowsbr.c which allowed untrusted shell + code to be executed. + * Released nmh 1.0.3. + +Thu Feb 10 10:54:36 2000 Dan Harkless + + * Oops. %-escapes on mhstore lines in mhn.defaults.sh should not + be surrounded by single quotes, as a shell is not spawned when + just saving files, and the filenames will end up with literal + quotes embedded in them. + +Fri Feb 04 12:29:12 2000 Dan Harkless + + * Whoever originally added the -help switch to all the commands + got too cute and had the option itself print out as "-(help)" in + the -help output. I guess the idea was to make reference to the + fact that clearly you know about the -help option since you're + currently looking at its output. I think it's a bad idea to + overload the meaning of the parentheses, however -- they're + supposed to indicate what abbreviated prefix of the switch you're + allowed to specify. It doesn't make sense to show that you're + allowed to "abbreviate" the switch to its entire length. + +Thu Feb 03 17:52:01 2000 Dan Harkless + + * Applied wesley.craig@umich.edu's KPOP patches. According to him: + + The following patch fixes a problem with requesting a + service key for a machine that has multiple 'A' records. It + also makes "-kpop" a command line option, for users who + would like to use both "kpop" and "pop". + + Did no testing of the new features, as I don't have access to a + KPOP server. + + * Modified inc.man and msgchk.man to document Wesley's new -kpop. + + * Modified INSTALL and config.h.in to reflect the new -kpop feature. + +Fri Jan 28 17:39:24 2000 Dan Harkless + + * All %-escapes in mhn.defaults that actually expand to something + should be surrounded by single quotes. Added quotes to the ones + in mhn.defaults.sh that were missing them. + + * Added check for lynx to write mhshow-show-text/html line in + mhn.defaults.sh. + +Thu Jan 27 12:22:25 2000 Dan Harkless + + * makedir() had multiple bugs dating back to MH. It passed an + octal constant to atoi(), which interpreted it as decimal, + resulting in directories with no user read or execute permissions, + making nested directory creation fail. Also, when creating a + nested directory, correct permissions were only set on the inner one. + + * A second `make install' would always fail because the check for + whether mh_profile.5 existed was written incorrectly. + +Wed Jan 26 02:22:00 2000 Dan Harkless + + * Added documentation on both types of masquerading to post's man + page. + +Tue Jan 25 22:58:12 2000 Dan Harkless + + * Doug's portability fix of my setgid inc autodetection had a + caching bug -- if you re-ran configure, uip/Makefile would be + corrupted, and installation would bomb out on OSes where inc needs + to be setgid. + + * Implemented a new kind of email address masquerading. When a + user writes a custom "From:" header in a draft, nmh uses it rather + than generating one. However, the user's true address is used in + the SMTP envelope "From:" and is revealed in the "Sender:" header. + Now, when mmailid is set to non-zero, the envelope "From:" uses + the address specified in the draft "From:" header, and there is no + "Sender:" header. This is useful when sending on behalf of a + remote POP3 account or when remote mail robots incorrectly use the + envelope "From:" in preference to the body "From:". This + processing has only been implemented for post, not for the + undocumented spost (which was already missing some "From:" + processing that post has). + +Mon Jan 24 22:26:06 2000 Dan Harkless + + * Got rid of the rest of the gcc -Wall warnings that I didn't have + time for on 1999-07-15 (and, it would seem, some new ones people + introduced since then). The primary ones were the warnings that + default prototypes were being used for [v]snprintf() and + str[n]casecmp(). As of right now, there are _no_ compilation + warnings except on dtimep.c-lexed (at least under AIX 4.1.5 and + Solaris 2.6). + Sun Jan 2 23:42:18 2000 Ruud de Rooij * Move mhtest from bindir to libdir. @@ -614,9 +710,9 @@ Fri May 7 17:18:28 1999 Dan Winship * Add new section on "Transfer Encodings" to man page for mhbuild. * In mhbuild.c, split compose_content into compose_content - (parse and execute composition string), and scan_content (scan content, - decided transfer encoding, check for clash with boundary string). - I did a good amount of rearranging of this code. + (parse and execute composition string), and scan_content (scan + content, decided transfer encoding, check for clash with boundary + string). I did a good amount of rearranging of this code. * Moved definitions for data structures for parsing MIME messages from mhn.c and mhbuild.c to a new include @@ -1765,10 +1861,11 @@ Sun Dec 1 10:00:00 1996 Richard Coleman * Added flist command from exmh distribution. It doesn't work yet, but it compiles :-) - * Changed default location for install to /usr/local/nmh/{bin,etc,lib,man}. - Split files so that format and configuration files go in nmh/etc, and - support binaries go in nmh/lib. Of course, all this can now be changed - in the top level Makefile. + * Changed default location for install to + /usr/local/nmh/{bin,etc,lib,man}. Split files so that format + and configuration files go in nmh/etc, and support binaries go + in nmh/lib. Of course, all this can now be changed in the top + level Makefile. * Started with mh-6.8.3 as based and converted to autoconf. Rewrote all the Makefiles. Currently only works with sendmail/smtp.