X-Git-Url: http://git.marmaro.de/?p=mmh;a=blobdiff_plain;f=ChangeLog;h=e44eda5dea099e6254296f54dc069123fd88c0d4;hp=793193517ad9192db4cc70f51467f3f99e6aa6c6;hb=8146bc09fc2e8ad69520ba998be51fb02cbf069c;hpb=e9b4dc0cb4a13da6abe919b99a67e1076edd5b6d diff --git a/ChangeLog b/ChangeLog index 7931935..e44eda5 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,186 @@ +Sun Feb 20 12:17:15 2000 Ruud de Rooij + + * Fix security hole in mhshowsbr.c which allowed untrusted shell + code to be executed. + * Released nmh 1.0.3. + +Thu Feb 10 10:54:36 2000 Dan Harkless + + * Oops. %-escapes on mhstore lines in mhn.defaults.sh should not + be surrounded by single quotes, as a shell is not spawned when + just saving files, and the filenames will end up with literal + quotes embedded in them. + +Fri Feb 04 12:29:12 2000 Dan Harkless + + * Whoever originally added the -help switch to all the commands + got too cute and had the option itself print out as "-(help)" in + the -help output. I guess the idea was to make reference to the + fact that clearly you know about the -help option since you're + currently looking at its output. I think it's a bad idea to + overload the meaning of the parentheses, however -- they're + supposed to indicate what abbreviated prefix of the switch you're + allowed to specify. It doesn't make sense to show that you're + allowed to "abbreviate" the switch to its entire length. + +Thu Feb 03 17:52:01 2000 Dan Harkless + + * Applied wesley.craig@umich.edu's KPOP patches. According to him: + + The following patch fixes a problem with requesting a + service key for a machine that has multiple 'A' records. It + also makes "-kpop" a command line option, for users who + would like to use both "kpop" and "pop". + + Did no testing of the new features, as I don't have access to a + KPOP server. + + * Modified inc.man and msgchk.man to document Wesley's new -kpop. + + * Modified INSTALL and config.h.in to reflect the new -kpop feature. + +Fri Jan 28 17:39:24 2000 Dan Harkless + + * All %-escapes in mhn.defaults that actually expand to something + should be surrounded by single quotes. Added quotes to the ones + in mhn.defaults.sh that were missing them. + + * Added check for lynx to write mhshow-show-text/html line in + mhn.defaults.sh. + +Thu Jan 27 12:22:25 2000 Dan Harkless + + * makedir() had multiple bugs dating back to MH. It passed an + octal constant to atoi(), which interpreted it as decimal, + resulting in directories with no user read or execute permissions, + making nested directory creation fail. Also, when creating a + nested directory, correct permissions were only set on the inner one. + + * A second `make install' would always fail because the check for + whether mh_profile.5 existed was written incorrectly. + +Wed Jan 26 02:22:00 2000 Dan Harkless + + * Added documentation on both types of masquerading to post's man + page. + +Tue Jan 25 22:58:12 2000 Dan Harkless + + * Doug's portability fix of my setgid inc autodetection had a + caching bug -- if you re-ran configure, uip/Makefile would be + corrupted, and installation would bomb out on OSes where inc needs + to be setgid. + + * Implemented a new kind of email address masquerading. When a + user writes a custom "From:" header in a draft, nmh uses it rather + than generating one. However, the user's true address is used in + the SMTP envelope "From:" and is revealed in the "Sender:" header. + Now, when mmailid is set to non-zero, the envelope "From:" uses + the address specified in the draft "From:" header, and there is no + "Sender:" header. This is useful when sending on behalf of a + remote POP3 account or when remote mail robots incorrectly use the + envelope "From:" in preference to the body "From:". This + processing has only been implemented for post, not for the + undocumented spost (which was already missing some "From:" + processing that post has). + +Mon Jan 24 22:26:06 2000 Dan Harkless + + * Got rid of the rest of the gcc -Wall warnings that I didn't have + time for on 1999-07-15 (and, it would seem, some new ones people + introduced since then). The primary ones were the warnings that + default prototypes were being used for [v]snprintf() and + str[n]casecmp(). As of right now, there are _no_ compilation + warnings except on dtimep.c-lexed (at least under AIX 4.1.5 and + Solaris 2.6). + +Sun Jan 2 23:42:18 2000 Ruud de Rooij + + * Move mhtest from bindir to libdir. + + * Move sendfiles from libdir to bindir. + + * Updated sendfiles manpage to reflect this change. + + * Added documentation for -build and -file switches to repl and + forw manpages (patch from Peter Maydell). + + * Fixed interaction between specifying -cc in profile and -group on + command-line. + +Tue Nov 1 13:48:10 1999 Dan Harkless + + * Changed the version number from 1.0.3 to 1.0.2+dev. There was + not unanimous support for my proposed even/odd release/developer + version number dichotomy. 1.0.2+dev implies release 1.0.2 plus + some development. + +Fri Oct 29 13:42:51 1999 Dan Harkless + + * Upped the version number to 1.0.3. If we don't do this, then + when people report bugs against 1.0.2, we won't know "which" 1.0.2 + they're talking about (since the development source is publically + available via CVS). I think the Linux kernel version numbers are + a good model, so the next time we roll a tarball, it should be + version 1.0.4 (or higher -- anyhow, an even-numbered version). + +Fri Oct 29 06:41:08 1999 Doug Morris + + * Released nmh-1.0.2. + +Tue Oct 26 22:57:00 1999 Doug Morris + + * Added check for whether "libtool" is in fact gnu libtool. If + it is, it is not used. This is the wrong behavior. If vendor + XYZ later on decides to create yet another libtool, we'll be + caught again. This works for now. + + * Minor updates to MACHINES refering to Mac OS X. + +Thu Oct 21 20:45:37 1999 Doug Morris + + * Added check for "libtool" (a ranlib type tool for Mac OS X) + and modified Makefiles so that nmh will build under Mac OS X. + +Sun Oct 17 08:28:56 1999 Ruud de Rooij + + * Changed repl defaults to partly revert to MH behaviour, + "-cc all" is now only implied with -group. + + * The replcomps template includes cc: header again (as in MH). + + * Updated repl man page to reflect these changes. + +Sat Oct 16 02:57:47 1999 Doug Morris + + * Tweaked configure to handle Solaris and SunOS after the BIND + changes. Both need more cleanup. + +Sat Oct 16 00:17:36 1999 Doug Morris + + * Removed BIND define and replaced it with a check for + gethostbyname (to determine if the host is DNS aware) and a + check for sethostent. This appears to be the right thing to + do, but there is no explanation of the reasoning behind the + BIND define in the code and it appears to have been used for + multiple purposes. + +Wed Oct 13 15:53:53 1999 Doug Morris + + * Updated manpages Makefile to link mh-profile.5 to + mh_profile.5 after installation. Suggestion from Richard Cohen + . + + * Modified configure.in to check for _IO_write_ptr and libio.h + to determine whether to define LINUX_STDIO instead of using + config.guess. + +Mon Oct 4 15:22:46 1999 Dan Harkless + + * Added '-L' to the calls of 'ls' in configure.in -- I have seen + multiple machines in the past where the mail spool was a symlink + to a directory on another device with more free space. + Fri Oct 1 22:36:56 1999 Dan Harkless * Fixed a portability problem in Doug's fix of a portability @@ -29,7 +212,7 @@ Mon Sep 13 21:20:10 1999 Doug Morris it's needed for ioctl() anyway. This prevents a warning about implicit definition of ioctl(). - * Moved guesses preformed by AC_CANONICAL_SYSTEM back into the + * Moved guesses performed by AC_CANONICAL_SYSTEM back into the "User Configuration" section of config.h (moved @TOP@ in acconfig.h) so they're easier to find, should someone actually want to mess with them. @@ -527,9 +710,9 @@ Fri May 7 17:18:28 1999 Dan Winship * Add new section on "Transfer Encodings" to man page for mhbuild. * In mhbuild.c, split compose_content into compose_content - (parse and execute composition string), and scan_content (scan content, - decided transfer encoding, check for clash with boundary string). - I did a good amount of rearranging of this code. + (parse and execute composition string), and scan_content (scan + content, decided transfer encoding, check for clash with boundary + string). I did a good amount of rearranging of this code. * Moved definitions for data structures for parsing MIME messages from mhn.c and mhbuild.c to a new include @@ -1678,10 +1861,11 @@ Sun Dec 1 10:00:00 1996 Richard Coleman * Added flist command from exmh distribution. It doesn't work yet, but it compiles :-) - * Changed default location for install to /usr/local/nmh/{bin,etc,lib,man}. - Split files so that format and configuration files go in nmh/etc, and - support binaries go in nmh/lib. Of course, all this can now be changed - in the top level Makefile. + * Changed default location for install to + /usr/local/nmh/{bin,etc,lib,man}. Split files so that format + and configuration files go in nmh/etc, and support binaries go + in nmh/lib. Of course, all this can now be changed in the top + level Makefile. * Started with mh-6.8.3 as based and converted to autoconf. Rewrote all the Makefiles. Currently only works with sendmail/smtp.