cyrus-sasl2 (2.1.22.dfsg1-23+lenny1) stable-security; urgency=high
* debian/patches/0021_CVE-2009-0688-fix.dpatch, debian/patches/00list:
Backport security fix for CVE-2009-0688 from upstream version 2.1.23.
-- Fabian Fagerholm <fabbe@debian.org> Sun, 24 May 2009 12:16:35 +0300
cyrus-sasl2 (2.1.22.dfsg1-23) unstable; urgency=low
* Add README.source to comply with Standards-Version 3.8.0
* Fix watch file to use dversionmangle instead of uversionmangle
-- Roberto C. Sanchez <roberto@connexer.com> Mon, 01 Sep 2008 11:05:12 -0400
cyrus-sasl2 (2.1.22.dfsg1-22) unstable; urgency=low
[ Roberto C. Sanchez ]
* Added Slovak translation, thanks to Ivan Masár (Closes: #489268)
[ Fabian Fagerholm ]
* Added Japanese translation, thanks to Hideki Yamane. (Closes: #493004)
* Bump standards-version.
-- Fabian Fagerholm <fabbe@debian.org> Sat, 02 Aug 2008 15:57:11 +0300
cyrus-sasl2 (2.1.22.dfsg1-21) unstable; urgency=high
[ Fabian Fagerholm ]
* Add Basque translation, thanks to Piarres Beobide. (Closes: #481541)
* Install README.Debian into libsasl2-2 package. (Closes: #485289)
[ Roberto C. Sanchez ]
* Remove bashism from debian/rules. (Closes: #484374)
* Add Homepage field to debian/control.
-- Fabian Fagerholm <fabbe@debian.org> Mon, 09 Jun 2008 21:27:23 +0300
cyrus-sasl2 (2.1.22.dfsg1-20) unstable; urgency=high
[ Fabian Fagerholm ]
* debian/sasl2-bin.saslauthd.default, debian/sasl2-bin.README.Debian:
Include warnings about running saslauthd with the -d option.
(Closes: #474311)
* debian/control: Adjust priorities to be consistent and policy-compliant.
(Closes: #471534)
* debian/rules: Remove generated man pages in clean target. (Partial sync
with Ubuntu.)
* debian/sasl2-bin.saslauthd.init: Remove bashism in init script.
(Closes: #480613) Urgency set to high because of lenny release goal to
make dash the default /bin/sh.
-- Fabian Fagerholm <fabbe@debian.org> Tue, 13 May 2008 22:28:11 +0300
cyrus-sasl2 (2.1.22.dfsg1-19) unstable; urgency=low
[ Fabian Fagerholm ]
* debian/patches/00options, debian/patches/00list: Don't apply symbol
versioning patch when building under ppc64. (Closes: #327479)
* debian/control: Lower priority of -modules-gssapi-mit package to extra,
because it conflicts with the -modules-gssapi-heimdal package. (Policy
section 2.5.)
* debian/patches/0015_saslutil_decode64_fix.dpatch, debian/patches/00list:
Don't allow trailing CR/LF/CRLF in base64 data. (Closes: #431191)
* debian/control: Don't build-depend on -1 revisions.
* debian/cyrus-sasl2-doc.doc-base: Adjust section.
[ Roberto C. Sanchez ]
* debian/repack.sh: Automate repackaging of DFSG-compliant tarball
-- Fabian Fagerholm <fabbe@debian.org> Tue, 18 Mar 2008 20:04:21 +0200
cyrus-sasl2 (2.1.22.dfsg1-18) unstable; urgency=high
[ Fabian Fagerholm ]
* debian/control: We conform to 3.7.3.0 of the Debian policy.
* debian/control: Change Vcs-Browser to point to human-readable interface.
* debian/patches/0018_auth_rimap_quotes.dpatch: Upstream fix for potential
DoS attack through infinite loop. (Closes: #465561)
* debian/patches/0019_ldap_deprecated.dpatch: Signal the use of deprecated
LDAP functions to avoid implicit pointer conversion. (Closes: #463330)
* debian/sasl2-bin.saslauthd.init: Eliminate bashism and use consistent
comparison operators throughout. (Closes: #465355)
* debian/sasl2-bin.postinst: Call db_stop to avoid hangs when starting
saslauthd. (Closes: #459762)
* debian/sasl2-bin.config: Don't call db_reset -- if the user has already
seen the backup question, we don't ask again. (Closes: #464103)
* debian/patches/0020_saslauthd_manpage.dpatch: Correct typos in saslauthd
man page. Thanks to Thijs Kinkhorst. (Closes: #463016)
* Add Dutch translation. (Closes: #465665)
* debian/sasl2-bin.saslauthd.init: Remove S runlevel from Default-Stop.
[ Roberto C. Sanchez ]
* Add Swedish translation (Closes: #460496)
-- Fabian Fagerholm <fabbe@debian.org> Mon, 18 Feb 2008 15:37:12 +0200
cyrus-sasl2 (2.1.22.dfsg1-17) unstable; urgency=low
[ Roberto C. Sanchez ]
* debian/control: Add Vcs-Browser and Vcs-Svn tags.
* Add Patrick Koetter's saslfinger utility to the package.
* debian/cyrus-sasl2-doc.doc-base: add file
[ Fabian Fagerholm ]
* debian/control, debian/patches/0017_db4.6.dpatch,
debian/sasl2-bin.postinst: Build against libdb4.6. Thanks to Martin Pitt
for the suggestion and patch. (Closes: #458861)
* debian/rules: Install saslfinger directly since we have better control
to do it in the build scripts.
* debian/sasl2-bin.lintian-overrides: Remove unneeded overrides.
-- Fabian Fagerholm <fabbe@debian.org> Mon, 07 Jan 2008 18:20:50 +0200
cyrus-sasl2 (2.1.22.dfsg1-16) unstable; urgency=low
* Debconf templates and debian/control reviewed by the debian-l10n-
english team as part of the Smith review project.
(Closes: #444377, #447176)
* [Debconf translation updates]
* Portuguese. (Closes: #445045)
* Vietnamese. (Closes: #445130)
* Galician. (Closes: #445199)
* Tamil. (Closes: #445251)
* German. (Closes: #442889, #445559)
* Finnish. (Closes: #445847)
* Brazilian Portuguese. (Closes: #446144)
* Italian. (Closes: #446157)
* Russian. (Closes: #446655)
* Czech. (Closes: #446787)
* French. (Closes: #447118)
* Spanish.
* debian/control: versioned depends update automatically
-- Roberto C. Sanchez <roberto@connexer.com> Sat, 20 Oct 2007 13:15:28 -0400
cyrus-sasl2 (2.1.22.dfsg1-15) unstable; urgency=low
[ Fabian Fagerholm ]
* debian/sasl2-bin.saslauthd.init: allow running with NAME variable unset.
(Closes: #436440, #436726)
* debian/sasl2-bin.saslauthd.default: better in-file documentation.
* debian/sasl2-bin.README.Debian: document what happens if you don't set
the NAME variable.
[ Roberto C. Sanchez ]
* debian/po/es.po: add
* debian/po/fr.po: add, thanks to Vincent Bernat (Closes: #433371)
* debian/po/pt.po: add, thanks to Américo Monteiro (Closes: #436556)
* debian/po/de.po: add, thanks to Helge Kreutzmann (Closes: #438719)
* debian/po/pt_BR.po: add, thanks to Jefferson Alexandre (Closes: #439132)
* debian/rules: Cleanup lintian warnings
-- Roberto C. Sanchez <roberto@connexer.com> Fri, 7 Sep 2007 22:30:01 -0400
cyrus-sasl2 (2.1.22.dfsg1-14) unstable; urgency=low
[ Fabian Fagerholm ]
* debian/control, debian/sasl2-bin.templates, debian/sasl2-bin.postinst,
debian/po/templates.pot, debian/sasl2-bin.config: Build against libdb4.4.
Upgrade the database format of /etc/sasldb2 on package upgrade. There is
no support for automatic downgrade. (Closes: #354413, #421940)
* debian/sasl2-bin.postinst: when creating an empty sasldb file, check for
existence, not that it is a regular file.
* debian/po/templates.pot: update translations template.
-- Fabian Fagerholm <fabbe@debian.org> Mon, 6 Aug 2007 09:16:21 +0300
cyrus-sasl2 (2.1.22.dfsg1-13) unstable; urgency=low
[ Fabian Fagerholm ]
* debian/control, debian/sasl2-bin.templates, debian/po: make Debconf
templates translatable. (Closes: #428048)
* debian/rules, debian/control, debian/sasl-sample-client.sgml,
debian/sasl-sample-server.sgml: Introduce man pages for
sasl-sample-client and sasl-sample-server.
* debian/rules: Allow the package to be built twice. The upstream build
system cannot properly clean the source tree after a build, but this
at least allows another build to be performed even though the tree is
not exactly the same (some generated files are left, but they would be
regenerated anyway). (Closes: #424169)
-- Fabian Fagerholm <fabbe@debian.org> Fri, 13 Jul 2007 11:54:56 +0300
cyrus-sasl2 (2.1.22.dfsg1-12) unstable; urgency=low
[ Fabian Fagerholm ]
* debian/sasl2-bin.README.Debian: Small improvement to multi-init docs.
* debian/control, debian/README.Debian: Change the wording regarding the
need to install the modules packages, since they are not needed on all
systems but are needed especially on servers that provide SASL
authentication.
* debian/control, debian/sasl2-bin.templates, debian/sasl2-bin.postinst,
debian/rules, debian/sasl2-bin.postrm: Introduce Debconf prompt to ask
for permission to remove /etc/sasldb2 on package purge, with fallback
to not remove it when Debconf is not present. (Closes: #333416)
* debian/sasl2-bin.postinst: Before creating the statoverride for the run
directory, create it -- but only if the statoverride wasn't present
already. The init script will recreate the directory if it's not there.
-- Fabian Fagerholm <fabbe@debian.org> Fri, 8 Jun 2007 12:57:11 +0300
cyrus-sasl2 (2.1.22.dfsg1-11) unstable; urgency=low
[ Fabian Fagerholm ]
* debian/sasl2-bin.saslauthd.init: Complete rewrite to allow managing
multiple saslauthd instances with a single init script. (Closes: #320377)
* debian/sasl2-bin.saslauthd.default: Adjust main default file to new
init script requirements.
* debian/sasl2-bin.README.Debian: Document the new init script setup for
sysadmins.
-- Fabian Fagerholm <fabbe@debian.org> Thu, 7 Jun 2007 13:37:51 +0300
cyrus-sasl2 (2.1.22.dfsg1-10) unstable; urgency=high
[ Fabian Fagerholm ]
* debian/control: lower priority of libsasl2-modules to optional.
* debian/control: make libsasl2-modules suggest either the MIT or Heimdal
GSSAPI module.
* debian/control: change ${Source-Version} into ${binary:Version} to
ensure that we are up to date with current practise and are binNMU-safe.
[ Roberto C. Sanchez ]
* Urgency set to high to synchronize migration with cyrus-sasl2-heimdal.
-- Roberto C. Sanchez <roberto@connexer.com> Thu, 10 May 2007 20:03:45 -0400
cyrus-sasl2 (2.1.22.dfsg1-9) unstable; urgency=low
[ Fabian Fagerholm ]
* debian/rules: allow turning off SQL, LDAP and GSSAPI at build time,
to ease bootstrapping new architectures (Closes: #404268).
* debian/control: lower priority of libsasl2 to optional (Closes: #416561).
* debian/control: remove transitional packages, conflict with Heimdal
GSSAPI package.
* debian/control: build-conflict with heimdal-dev.
-- Fabian Fagerholm <fabbe@debian.org> Fri, 20 Apr 2007 19:30:20 +0300
cyrus-sasl2 (2.1.22.dfsg1-8) unstable; urgency=high
[ Fabian Fagerholm ]
* debian/control, libsasl2-2: update Conflicts on Postfix, need a more
recent version still for everything to work.
* debian/control: add libsasl2-gssapi-mit transitional package.
* debian/control, libsasl2-2: add versioned Conflicts: libsasl2-gssapi-mit
and libsasl2-krb4-mit. This means Kerberos 4 is no longer supported.
* debian/control, libsasl2-modules-gssapi-mit: add versioned Conflicts: and
Replaces: libsasl2-gssapi-mit, remove Provides: libsasl2-gssapi-mit.
* debian/TODO: remember to remove the transitional packages post-etch.
-- Fabian Fagerholm <fabbe@debian.org> Wed, 13 Dec 2006 23:22:02 +0200
cyrus-sasl2 (2.1.22.dfsg1-7) unstable; urgency=high
[ Fabian Fagerholm ]
* debian/sasl2-bin.postinst: create default statoverride entries for the
saslauthd run directory and sasldb file, and create an empty sasldb file
unless one already exists. (Closes: #401348)
* debian/TODO: update.
-- Fabian Fagerholm <fabbe@debian.org> Fri, 8 Dec 2006 10:21:15 +0200
cyrus-sasl2 (2.1.22.dfsg1-6) unstable; urgency=medium
[ Fabian Fagerholm ]
* debian/control: add Provides: libsasl2-gssapi-mit, as suggested by
Sam Hartman.
* debian/patches/0015_saslutil_decode64_fix.dpatch: add check to succeed
when input string is CR or LF terminated, as well. (Closes: #400955)
* debian/sasl2-bin.saslauthd.init: if THREADS is not set, don't include
the -n option, and let saslauthd fall back to the compiled-in default.
(Closes: #401716)
-- Fabian Fagerholm <fabbe@debian.org> Tue, 5 Dec 2006 22:55:01 +0200
cyrus-sasl2 (2.1.22.dfsg1-5) unstable; urgency=low
[ Fabian Fagerholm ]
* debian/control: libsasl2-2 conflicts with postfix (<< 2.3.4-2) because
earlier versions of postfix use the old method of setting the plugin
configuration path. (Closes: #400772)
* debian/control: drop libsasl2-2-dev and use libsasl2-dev only.
* debian/patches/0015_saslutil_decode64_fix.dpatch: make sasl_decode64
ignore trailing CRLF in the input data. (Closes: #400955)
-- Fabian Fagerholm <fabbe@debian.org> Fri, 1 Dec 2006 22:41:02 +0200
cyrus-sasl2 (2.1.22.dfsg1-4) unstable; urgency=low
[ Fabian Fagerholm ]
* debian/rules, etc.: Build sample-{client,server} and ship them with
Debianized names (prefix sasl-) in sasl2-bin. (Closes: #305357)
-- Fabian Fagerholm <fabbe@debian.org> Tue, 21 Nov 2006 07:51:18 +0200
cyrus-sasl2 (2.1.22.dfsg1-3) unstable; urgency=low
[ Fabian Fagerholm ]
* debian/control, debian/rules: Add cyrus-sasl2-dbg package and make
dh_strip put debugging symbols in it. (Closes: #240767)
* debian/sasl2-bin.saslauthd.init: Allow configurable run directory and
pid file. (Closes: #201826)
* debian/sasl2-bin.README.Debian: Short documentation on how to integrate
saslauthd with Postfix.
-- Fabian Fagerholm <fabbe@debian.org> Fri, 17 Nov 2006 09:04:03 +0200
cyrus-sasl2 (2.1.22.dfsg1-2) unstable; urgency=low
[ Fabian Fagerholm ]
* debian/sasl2-bin.saslauthd.init: Fix case when MECH_OPTIONS is empty.
(Closes: #397818)
* debian/sasl2-bin.saslauthd.default: Include an example for postfix users.
* debian/rules: Preserve CFLAGS variable as suggested by Andreas Metzler.
[ Roberto C. Sanchez ]
* debian/rules: added '--sysconfdir=/etc' option for configure
(Closes: #398137)
-- Fabian Fagerholm <fabbe@debian.org> Mon, 13 Nov 2006 08:46:05 +0200
cyrus-sasl2 (2.1.22.dfsg1-1) unstable; urgency=low
[ Fabian Fagerholm ]
* debian/control: Adjust priority of packages to be more in line with
policy and overrides.
* debian/sasl2-bin.saslauthd.default: saslauthd can *not* use more than one
authentication mechanism at a time. (Closes: #329716, #274182, #368189)
* Repackage upstream tarball to remove non-DFSG-free IETF docs that were
accidentally reintroduced for some reason. (Closes: #365183)
* Remove non-DFSG-free IETF docs from trunk, so it corresponds to the
repackaged tarball.
* debian/patches/0012_xopen_crypt_prototype.dpatch: Avoid segfault on
architectures where the size of a pointer is greater than the size of an
integer. Dann Frazier reported and supplied the patch. (Closes: #397549)
* debian/patches/0013_fix_hurd_build.dpatch: This patch had gotten lost,
it fixes building on hurd-i386. (Closes: #397714)
* debian/patches/0014_avoid_pic_overwrite: Don't overwrite PIC version of
libsasldb.a with non-PIC version. This causes linking to fail when
making shared objects on certain platforms such as amd64 and hppa.
(Closes: #397603, #397605)
* debian/rules: Move "-Wl,-z,defs" from CFLAGS to LDFLAGS to avoid a lot
of irrelevant linker messages. Andreas Metzler spotted this.
-- Fabian Fagerholm <fabbe@debian.org> Thu, 9 Nov 2006 14:12:40 +0200
cyrus-sasl2 (2.1.22-1) unstable; urgency=low
[ Fabian Fagerholm ]
* debian/sasl2-bin.saslauthd.default: put back the descriptive comment
about sasldb for saslauthd.
* Upload to unstable (famous last words ;-).
-- Fabian Fagerholm <fabbe@debian.org> Tue, 7 Nov 2006 13:43:14 +0200
cyrus-sasl2 (2.1.22-0~pre05) experimental; urgency=low
[ Fabian Fagerholm ]
* debian/control: improve description of -doc package.
* debian/control: add -modules-ldap package to -modules Suggests.
* debian/control: build-depend on older libdb to ease upgrade.
* debian/sasl2-bin.saslauthd.init: fix typo on line 31.
* debian/sasl2-bin.saslauthd.init: if daemon is already running or already
stopped, reflect this fact in the start or stop message, respectively.
* debian/sasl2-bin.saslauthd.init: quote the user-supplied variable on
line 51 to avoid errors when it contains a space-separated list.
* debian/rules: socket directory is /var/run/saslauthd, fix typo.
* debian/sasl2-bin.saslauthd.default: -T option doesn't work, remove.
* debian/rules: enable sasldb support in saslauthd.
* debian/rules: add test target (currently just builds the test suite).
* debian/rules: clean up unneccessary file copying.
* debian/patches/0009_sasldb_al.dpatch: fix building saslauthd with
sasldb support.
* debian/patches/0010_maintainer_mode.dpatch: use AM_MAINTAINER_MODE.
* debian/patches/0011_saslauthd_ac_prog_libtool.dpatch: use AC_PROG_LIBTOOL
in saslauthd's configure.in.
-- Fabian Fagerholm <fabbe@debian.org> Wed, 1 Nov 2006 23:55:50 +0200
cyrus-sasl2 (2.1.22-0~pre04) experimental; urgency=low
[ Fabian Fagerholm ]
* debian/rules: use /dev/urandom instead of /dev/random.
* debian/README.Debian: document change to /dev/urandom.
* Rename the package according to Steve Langasek's advice (based on a
patch from Andreas Metzler).
-- Fabian Fagerholm <fabbe@debian.org> Mon, 30 Oct 2006 18:48:42 +0200
cyrus-sasl2 (2.1.22-0~pre03) experimental; urgency=low
[ Roberto C. Sanchez ]
* Acknowledge previous NMU (Closes: #275431)
[ Fabian Fagerholm ]
* debian/cyrus-sasl-2.1-bin.saslauthd.init: exit 0 when saslauthd binary
is missing (policy 9.3.2) and exit 0 when START != yes.
* debian/rules: enable --with-ldap and --enable-ldapdb.
* debian/control: create an LDAP modules package.
* debian/libsasl2-2-modules-ldap.{dirs,install}: install libldapdb.* into
LDAP modules package.
[ Andreas Metzler ]
* debian/control: Change lsb-base from Build-Depends to Depends for
cyrus-sasl-2.1-bin.
-- Fabian Fagerholm <fabbe@debian.org> Mon, 23 Oct 2006 17:27:18 +0300
cyrus-sasl2 (2.1.22-0~pre02) experimental; urgency=low
[ Roberto C. Sanchez ]
* debian/control: versioned conflict on libsasl2-modules allows
installation of pre-release packages.
[ Fabian Fagerholm ]
* debian/rules: install dbconverter-2 as sasldbconverter2.
* debian/rules: include man page for sasldbconverter2.
* debian/changelog: clean up, rebuild for experimental.
-- Fabian Fagerholm <fabbe@debian.org> Fri, 20 Oct 2006 08:29:19 +0300
cyrus-sasl2 (2.1.22-0~pre01) experimental; urgency=low
* Acknowledged previous NMUs (Closes: #274087, #344686, #362511, #245818)
(Closes: #276637, #285605, #332703, #336485, #345880, #357527, #379846)
(Closes: #248333, #315177, #324288, #361937, #242184, #256808, #202836)
(Closes: #262339, #265751, #275498, #276849)
[ Fabian Fagerholm ]
* Adopted package (Closes: #368370)
* Fixed static linking against libsasl2 (Closes: #282775)
* debian/rules: Exit with an error if any of the auto* commands fail
(Closes: #321760)
* New upstream version (Closes: #316404)
- Fixed crash with DIGEST-MD5 (Closes: #286285, #314724)
- Built with courier authdaemon support (Closes: #328879)
- sql plugin respects log_level settings (Closes: #296449)
* debian/watch: Included a watch file (Closes: #205589)
* debian/control, debian/rules: Switched from Heimdal to MIT Kerberos
(Closes: #257306, #310438)
* Repackaged upstream source to remove non-free docs (Closes: #365183)
* debian/README.Debian: Document why libsasl2-modules is recommended
(Closes: #302280, #365287)
* debian/rules: Strip rpath from binaries and shared libraries when build
inserts one.
[ Roberto C. Sanchez ]
* Added myself to Uploaders field
* debian/control: Added missing Build-Depends on groff-base
* debian/control: Changed build dependency from db4.2 to db4.4
(Closes: #354413)
* debian/rules: Made it so README.configure-options is actually populated
* debian/rules: Prevent bogus ldconfig calls in postinst and postrm
* debian/testsaslauthd.8: Added manual page for testsaslauthd(8)
* debian/cyrus-sasl-2.1-bin.saslauthd.init: Improved socket and pidfile
location flexibility (Closes: #254298, #300710, #287313)
* debian/control: Changed libsasl2-2-modules-sql to depend on
libsasl2-2-modules (Closes: #392571)
* debian/rules: /etc/sasl at start of config search path (Closes: #211156)
* Split OTP plugin into its own package (Closes: #251735)
* debian/control: Made libsasl2-2-modules suggest
libsasl2-2-modules-{sql,otp,gssapi-heimdal} (Closes: #348685)
* debian/cyrus-sasl-2.1-bin.saslauthd.init: Useful errors (Closes: #257181)
* debian/control: Added NTLM to description (Closes: #274402)
* Added necessary config.h and Makefile to build samples (Closes: #190658)
-- Fabian Fagerholm <fabbe@debian.org> Thu, 19 Oct 2006 23:26:02 +0300
cyrus-sasl2 (2.1.19.dfsg1-0.5) unstable; urgency=low
* Non-maintainer upload during BSP.
* Changed init script for option -m in saslauthd.
(Thanks Elmar Hoffmann for your Help)
Closes: #364395.
-- Michael Steinfurth <michael.steinfurth@fh-stralsund.de> Sun, 17 Sep 2006 12:20:44 +0200
cyrus-sasl2 (2.1.19.dfsg1-0.4) unstable; urgency=high
* Non-maintainer upload
* Reverted to libdb4.2-dev.
-- Peter Eisentraut <petere@debian.org> Sat, 16 Sep 2006 00:19:18 +0200
cyrus-sasl2 (2.1.19.dfsg1-0.3) unstable; urgency=high
* Use libkrb5-dev instead of heimdal-dev. Closes: #379846.
* Use libdb4.3-dev instead of libdb4.2-dev. Closes: #336485.
-- Peter Eisentraut <petere@debian.org> Fri, 15 Sep 2006 18:30:19 +0200
cyrus-sasl2 (2.1.19.dfsg1-0.2) unstable; urgency=high
* Non-maintainer upload
* Applied upstream patch to fix remote denial of service
[debian/patches/27_CVE-2006-1721.diff]
Closes: #361937.
-- dann frazier <dannf@debian.org> Tue, 25 Apr 2006 09:39:43 -0600
cyrus-sasl2 (2.1.19.dfsg1-0.1) unstable; urgency=low
* Non-maintainer upload.
* Remove dlcompat-20010505 subdirectory from source package as it
contains non-DFSG-free source. Required regeneration of the orig.tar.gz.
Closes: #357527.
-- dann frazier <dannf@debian.org> Tue, 4 Apr 2006 16:38:20 -0600
cyrus-sasl2 (2.1.19-1.9) unstable; urgency=low
* Non-maintainer upload.
* debian/patches/26_fix_hurd_build.diff: Fix FTBFS on hurd-i386.
Closes: #324288.
-- Michael Banck <mbanck@debian.org> Fri, 20 Jan 2006 15:45:30 +0100
cyrus-sasl2 (2.1.19-1.8) unstable; urgency=medium
* Non-maintainer upload.
* Medium-urgency upload for RC bugfixes.
* Rebuild against current heimdal packages, dropping the build-dependency
on the obsolete and soon-to-be-removed krb4 package; also drop the
(misnamed) libsasl2-modules-kerberos-heimdal package as a result.
Closes: #345737, 345880.
* Drop mention of KERBEROS_V4 in the libsasl2 package description.
* Build against libmysqlclient15 instead of the obsolete libmysqlclient10
for libsasl2-modules-sql.
* debian/patches/25_postgresql_pg_config.diff:
Use pg-config --includedir in configure.in, so that cyrus-sasl2 continues
to build when the postgresql include path changes as the postgresql
maintainers are planning to do; and adjust the include path in
plugins/sql.c accordingly. Closes: #315177.
-- Steve Langasek <vorlon@debian.org> Sat, 7 Jan 2006 04:18:58 -0800
cyrus-sasl2 (2.1.19-1.7) unstable; urgency=low
* Non-maintainer upload.
* fix FTBFS in plugins/ntlm.c with patch 24. Closes: #332703
-- Andreas Barth <aba@not.so.argh.org> Sat, 5 Nov 2005 20:07:50 +0100
cyrus-sasl2 (2.1.19-1.6) unstable; urgency=medium
* Non-maintainer upload.
* Medium-urgency upload for RC bugfixes.
* Drop the extern declaration of a static variable global_callbacks,
allowing the package to build with gcc-4.0 (closes: #285605).
* Build-Depend on libpq-dev instead of on postgresql-dev, as the
latter package name is obsolete. (Ref: #315177)
-- Steve Langasek <vorlon@debian.org> Wed, 24 Aug 2005 17:41:57 -0700
cyrus-sasl2 (2.1.19-1.5) unstable; urgency=emergency
* NMU
* Clean-up 2.1.19-1.4 NMU:
+ Since we were using an upstream CVS patch, add another patch
fixing it instead of changing the (bad) upstream CVS patch;
Sent this new patch upstream
+ Set *path to NULL, not to 0
* Add Build-Conflicts: autoconf2.13, automake1.4
* We want something easy to merge/further fix in sarge, so this cleanup
is a good idea
-- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 16 Oct 2004 17:50:19 -0300
cyrus-sasl2 (2.1.19-1.4) unstable; urgency=low
* NMU
* fix the security fix: Initialize *path with 0.
Closes: #276637.
-- Andreas Barth <aba@debian.org> Fri, 15 Oct 2004 20:26:41 +0200
cyrus-sasl2 (2.1.19-1.3) unstable; urgency=high
* NMU
* Fix minor issue with -1.2 in patch 15, to squash a compiler
warning (just in case it becomes more than a warning in some arch):
add missing "int" to extern declaration
-- Henrique de Moraes Holschuh <hmh@debian.org> Fri, 8 Oct 2004 13:06:28 -0300
cyrus-sasl2 (2.1.19-1.2) unstable; urgency=high
* NMU, since I am not sure Dima is back yet
* SECURITY FIX: SASL_PATH environment variable must not be honoured on
setuid environments, otherwise we have a local privilege escalation
exploit (CVE: CAN-2004-0884), related advisories: RHSA-2004:546-02;
GLSA 200410-05
* upstream CVS: lib/common.c: don't honor SASL_PATH in setuid
environment. from Gentoo (CVE CAN-2004-0884); (closes: #275431)
* upstream CVS: plugins/kerberos4.c: document weirdness with openssl DES
* upstream CVS: plugins/cram.c,plugins/anonymous.c,plugins/login.c,
plugins/plain.c,plugins/sasldb.c: Fixed several 64 bit portability
warnings
* Forward port sasl_set_alloc locking patch from SASL 1.5, to avoid
problems with the braindead idea of globals SASL has, and with libraries
that think they can get around mucking with them (hello openldap!)
(closes: #274087)
-- Henrique de Moraes Holschuh <hmh@debian.org> Fri, 8 Oct 2004 11:15:39 -0300
cyrus-sasl2 (2.1.19-1.1) unstable; urgency=medium
* NMU with permission from the maintainer
* Release Manager:
SASL 2.1.18 (currently in sarge) is very unusable. Please accept
this upload for sarge. The main reasons justifying this are:
* Security fixes from upstream: at least one buffer overflow
was plugged in 2.1.19, and the code was made more secure, which may
have plugged other latent security bugs.
* Essential feature: 2.1.18 has a very bad regression in that saslauthd
cannot support realms embedded inside the username as previous
versions did. However, that regression is exactly how it should be
behaving since day one, never mind that too many setups are hopeless
with the realm information out-of-band. 2.1.19 adds a "-r" option to
saslauthd which restores the former behaviour. Both behaviours are
needed, depending on the SASL mechs being used (one sends the realm
out-of-band, the other in-band). Users have complained loudly about
this issue, not only in Debian, but in the SASL and Cyrus IMAP
mailinglists as well. For way too many people and setups, "-r" is
essential
* Essential bug fixes: Digest-MD5 and GSSAPI are quite broken in
2.1.18, and extensive fixes were applied on them in 2.1.19. In fact,
2.1.18 GSSAPI does _not_ work completely right against Heimdall and
MIT kerberos.
* ABI version issue: the 2.1.19-1 Debian package was uploaded to
_unstable_ before the freeze. Maybe because of that, the maintainer
did upgrade the shlibs dependency to 2.1.19 (I have confirmed that to be
required for SASL modules, so it appears to be really required).
Packages built in _unstable_ since them are being held back due to
this issue. The best fix for packages that use libsasl2 *is* getting
this new version into sarge, due to all other fixes.
* Bugs closed in 2.1.19-1, but not ackwnoleged before:
* Fix FTBFS in hppa, due to broken libtool usage, thanks to Steve Langasek
for the patch (closes: #245818)
* 2.1.19 supports saslauthd "-r" option (closes: #248333, #256808)
* Changes in this NMU:
* upstream CVS: plugins/digestmd5.c: Fix handling of client realm callback
* upstream CVS: plugins/gssapi.c: Memory management cleanup
* upstream CVS: configure.in, plugins/gssapi.c: Wrap all GSS calls
in mutexes when required by the implementation (closes: #202836)
THIS PATCH PROBABLY SHOULD BE SET TO DISABLED BY DEFAULT WHEN MIT
KERBEROS 1.3.5 ENTERS UNSTABLE
(see https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=2255)
* Libtool is refreshed at every build, so this upload closes: #262339
* debian/control: build-depend on debhelper (>= 4)
* debian/control: build-depend on libtool (>= 1.5.6) instead of (>=
1.5.2-1)
* Fix initscript to return status 0 if stop called when daemon is
already stopped (closes: #242184)
-- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 14 Aug 2004 13:04:38 -0300
cyrus-sasl2 (2.1.19-1) unstable; urgency=medium
* New upstream version (Closes: #259503, #259658)
* Acknowledge the last NMU (closes: #254818)
* Build against libdb4.2 (closes: #253894)
* Fixed the path to saslauthd.conf in the saslauthd
man page (Closes: #254454)
-- Dima Barsky <dima@debian.org> Sun, 4 Jul 2004 20:38:53 +0100
cyrus-sasl2 (2.1.18-4.1) unstable; urgency=low
* NMU.
* Fix FTBFS, non-PIC in shared lib (closes: #254818).
-- Matthias Klose <doko@debian.org> Fri, 21 May 2004 08:02:44 +0200
cyrus-sasl2 (2.1.18-4) unstable; urgency=medium
* Added the build dependency on libtool
-- Dima Barsky <dima@debian.org> Mon, 19 Apr 2004 13:46:23 +0100
cyrus-sasl2 (2.1.18-3) unstable; urgency=medium
* Update config.{sub,guess} at the build time
* Added conflict with old MIT kerberos packages (Closes: #240714)
-- Dima Barsky <dima@debian.org> Sun, 18 Apr 2004 18:02:48 +0100
cyrus-sasl2 (2.1.18-2) unstable; urgency=low
* Renamed libsasl2-modules-mysql to libsasl2-modules-sql
* Reduced some packages' priority to optional, only the core remain important.
* Enabled KRB4 (should've done it in 2.1.18-1).
-- Dima Barsky <dima@debian.org> Sun, 21 Mar 2004 01:07:40 +0000
cyrus-sasl2 (2.1.18-1) unstable; urgency=low
* New upstream release (Closes: #232086)
* Revised Build-Depends list (Closes: #212615)
* Fixed typo in debian/control, thanks to hmh@debian.org (Closes: #213521)
* Fixed mutex handling (Closes: #223253)
* Use single -a for several mechanisms in /etc/init.d/saslauthd
(Closes: #202354)
* Fixed sasltestsuite (Closes: #217538)
-- Dima Barsky <dima@debian.org> Sat, 13 Mar 2004 16:16:26 +0000
cyrus-sasl2 (2.1.15-6) unstable; urgency=low
* Acknowledging the last two NMUs (Closes: #213510, #212945, #212318, #211958)
* Added -fno-strict-aliasing flag (Closes: #215862)
-- Dima Barsky <dima@debian.org> Sun, 26 Oct 2003 01:26:53 +0100
cyrus-sasl2 (2.1.15-5.2) unstable; urgency=low
* NMU
* Eeek, kill acinclude.m4 (what the FUCK is it doing there anyway?!)
so as to correctly update the libtool environment (Closes: #213510)
* While at it fix some stuff in the control file:
+ Section: libs for libsasl2-* since SASL runtime environment is NOT
a devel suite
* Document rather bluntly the extreme need for sasl modules for this
lib to actually work in README.Debian
-- Henrique de Moraes Holschuh <hmh@debian.org> Tue, 30 Sep 2003 21:14:56 -0300
cyrus-sasl2 (2.1.15-5.1) unstable; urgency=low
* NMU
* Rebuild, to get correct heimdal dependencies. Also add comerr-dev to
build-dependency list (Closes: #212945)
* Build-depend on libtool1.4 (Closes: #212318)
-- Henrique de Moraes Holschuh <hmh@debian.org> Tue, 30 Sep 2003 13:56:28 -0300
cyrus-sasl2 (2.1.15-5) unstable; urgency=low
* Set priority to "important" (Closes: #202876)
* Run aclocal,autoconf,automake, and autoheader in saslauthd
directory as well as the top one (Closes: #203096)
* Registered a conflict between *-heimdal packages and *-mit ones
(Closes: #202838)
* Grabbed doc/components.html from the SASL CVS (Closes: #202642)
-- Dima Barsky <dima@debian.org> Thu, 31 Jul 2003 21:17:09 +0100
cyrus-sasl2 (2.1.15-4) unstable; urgency=low
* Removed build dependency on libopenafs-dev, it was only required for
SASL1. SASL2 can take the DES library from libssl-dev (Closes: #202569).
-- Dima Barsky <dima@debian.org> Wed, 23 Jul 2003 12:50:59 +0100
cyrus-sasl2 (2.1.15-3) unstable; urgency=low
* Added build dependency on groff-base
-- Dima Barsky <dima@debian.org> Mon, 21 Jul 2003 12:39:50 +0100
cyrus-sasl2 (2.1.15-2) unstable; urgency=low
* Added build dependency on dbs and libopenafs-dev
-- Dima Barsky <dima@debian.org> Mon, 21 Jul 2003 11:43:38 +0100
cyrus-sasl2 (2.1.15-1) unstable; urgency=low
* New upstream release
* Added LDAP_SASLAUTHD doc file to sasl2-bin (Closes: #201893)
* Added build dependency on automake1.4 and autoconf2.13
-- Dima Barsky <dima@debian.org> Tue, 15 Jul 2003 21:39:08 +0100
cyrus-sasl2 (2.1.14-1) unstable; urgency=low
* New upstream release
* Changed the build system to dbs.
* THe GSSAPI segfault has been fixed upstream (Closes: #192502)
* Fixed a typo in the sasl2-bin description (Closes: #197070, #193958)
* Made a separate package for the MYSQL plugin (Closes: #188716, #166702, #190673)
* Moved libsasldb plugin into the libsasl2 package.
-- Dima Barsky <dima@debian.org> Mon, 14 Jul 2003 07:04:47 +0100
cyrus-sasl2 (2.1.12-1) unstable; urgency=low
* New upstream release
* Changed variable 'c' in testsuite.c:2871 from char to int
(Closes: #177426)
* Recompiled with the latest heimdal libraries (Closes: #179810)
* Removed RFC documents from libsasl2 (Closes: #178987)
-- Dima Barsky <dima@debian.org> Sat, 15 Mar 2003 22:29:25 +0000
cyrus-sasl2 (2.1.10-1) unstable; urgency=low
* New upstream release (Closes: #172453)
* Included sasldbconverter2 (Closes: #170740)
* Removed duplicate "--with-ldap" from debian/rules (Closes: #167858)
* Added "--sysconfdir=/etc" to debian/rules (Closes: #167855)
* Changed libsasl2 -> libsasl2-modules dependency from Suggests to
Recommends (Closes: #171938)
* Added "--enable-alwaystrue" to debian/rules (Closes: #170495)
* Included testsaslauthd (Closes: #167876)
* Included sasltestsuite (Closes: #166538)
-- Dima Barsky <dima@debian.org> Mon, 23 Dec 2002 16:07:31 +0000
cyrus-sasl2 (2.1.9-5) unstable; urgency=low
* Updated libtool files inside saslauthd/config/ (Closes: #166810)
* Enabled NTLM module
* Enabled LDAP support for saslauthd
-- Dima Barsky <dima@debian.org> Mon, 28 Oct 2002 21:12:56 +0000
cyrus-sasl2 (2.1.9-4) unstable; urgency=low
* Enabled DO_DLOPEN unconditionally in configure.in
-- Dima Barsky <dima@debian.org> Mon, 28 Oct 2002 00:20:55 +0000
cyrus-sasl2 (2.1.9-3) unstable; urgency=low
* Added AM_MAINTAINER_MODE to configure.in
-- Dima Barsky <dima@debian.org> Sat, 26 Oct 2002 01:46:13 +0100
cyrus-sasl2 (2.1.9-2) unstable; urgency=low
* Added dbconverter-2 as /usr/sbin/sasldbconverter-2
* Added build dependency on zlib1g-dev
-- Dima Barsky <dima@debian.org> Fri, 25 Oct 2002 22:28:30 +0100
cyrus-sasl2 (2.1.9-1) unstable; urgency=low
* New upstream release
* shlibs now refers to the current version (Closes: #163845)
* sasl2-bin now uses dpkg-statoverride to manage permissions of
/var/run/saslauthd and /etc/sasldb2 (Closes: #163042, #164393)
-- Dima Barsky <dima@debian.org> Mon, 21 Oct 2002 22:01:01 +0100
cyrus-sasl2 (2.1.7-3) unstable; urgency=low
* Added shlibs file (Closes: #162927)
-- Dima Barsky <dima@debian.org> Tue, 1 Oct 2002 17:44:36 +0100
cyrus-sasl2 (2.1.7-2) unstable; urgency=low
* Build with versioned symbols
* Another split: KERBEROS mechanism is now in a separate module (Closes: #154153)
* README.Debian has been updated a while ago, we can
close bug 146543 now. (Closes: #146543)
-- Dima Barsky <dima@debian.org> Mon, 30 Sep 2002 17:23:12 +0100
cyrus-sasl2 (2.1.7-1) unstable; urgency=low
* New upstream version (Closes: #156286, #158296)
* Enabled ldap and mysql (Closes: #155025, #154965)
* /etc/sasldb2 and /var/run/saslauthd now belong to the group "sasl"
and are group-readable (Closes: #151798)
-- Dima Barsky <dima@debian.org> Thu, 25 Sep 2002 15:51:12 +0100
cyrus-sasl2 (2.1.6-1) unstable; urgency=low
* New upstream version
* Make sure autoheader is not invoked at the build stage (Closes: #153127)
-- Dima Barsky <dima@debian.org> Wed, 17 Jul 2002 12:19:29 +0100
cyrus-sasl2 (2.1.5-7) unstable; urgency=low
* Separated heimdal-dependent plugins into the
libsasl2-modules-gssapi-heimdal package
* Updated libtool to the latest version (Closes: #146229)
* Changed permissions on /var/run/saslauthd to 711 (Closes: #151796)
-- Dima Barsky <dima@debian.org> Thu, 4 Jul 2002 09:24:42 +0100
cyrus-sasl2 (2.1.5-6) unstable; urgency=low
* Removed build dependency on automake
-- Dima Barsky <dima@debian.org> Wed, 3 Jul 2002 09:51:47 +0100
cyrus-sasl2 (2.1.5-5) unstable; urgency=low
* Added a few packages to the Build-Depends list
-- Dima Barsky <dima@debian.org> Tue, 2 Jul 2002 16:22:57 +0100
cyrus-sasl2 (2.1.5-4) unstable; urgency=low
* Enabled DES, KERBEROS, and GSSAPI
* Merged all modules into the package libsasl2-modules
-- Dima Barsky <dima@debian.org> Tue, 2 Jul 2002 13:10:10 +0100
cyrus-sasl2 (2.1.5-3) unstable; urgency=low
* Enabled sasldb in saslauthd (Closes: 146791)
-- Dima Barsky <dima@debian.org> Tue, 2 Jul 2002 11:50:03 +0100
cyrus-sasl2 (2.1.5-2) unstable; urgency=low
* Preserve /usr/lib/sasl2/*.la (Closes: #151567)
-- Dima Barsky <dima@debian.org> Mon, 1 Jul 2002 19:24:21 +0100
cyrus-sasl2 (2.1.5-1) unstable; urgency=low
* New upstream version (Closes: #133458, #148693, #131792, #150957)
* Added explicit rule for building libsasl2.a (Closes: #144200)
* Added a warning about /dev/random to README.Debian (Closes: #146982)
* /var/run/saslauthd/mux is now world-readable (Closes: #147484)
* Modified sasl2-bin.default to make it clear that MECHANISMS is a
space separated lists, so it should be quoted if there is more
than one item in it (Closes: #146790)
-- Dima Barsky <dima@debian.org> Sun, 30 Jun 2002 01:19:16 +0100
cyrus-sasl2 (2.1.2-2) unstable; urgency=low
* Fixed saslauthd man page (Closes: #131791)
-- Dima Barsky <dima@debian.org> Wed, 27 Mar 2002 15:27:39 +0000
cyrus-sasl2 (2.1.2-1) unstable; urgency=low
* New upstream version
* Changed --without-gssapi to --disable-gssapi
* Closes: #131792
-- Dima Barsky <dima@debian.org> Tue, 26 Mar 2002 22:29:12 +0000
cyrus-sasl2 (2.1.1-0.2) unstable; urgency=low
* Fix a naming problem with the init script.
* Fix problems with the init script itself.
-- Michael Alan Dorman <mdorman@debian.org> Sun, 17 Mar 2002 15:44:45 -0500
cyrus-sasl2 (2.1.1-0.1) unstable; urgency=low
* New upstream version
* Total rewrite of debian/rules, fold everything into nice, standard debhelper usage
* Functionality to auto-start saslauthd, which configury through /etc/default/saslauthd
-- Michael Alan Dorman <mdorman@debian.org> Sun, 17 Mar 2002 15:09:55 -0500
cyrus-sasl2 (2.1.0-2) unstable; urgency=low
* Added build dependency on libopie-dev
-- Dima Barsky <dima@debian.org> Sun, 27 Jan 2002 20:07:15 +0000
cyrus-sasl2 (2.1.0-1) unstable; urgency=low
* Initial release of cyrus-sasl2
-- Dima Barsky <dima@debian.org> Sun, 20 Jan 2002 14:36:45 +0000