File courier-authlib.changes of Package courier-authlib
-------------------------------------------------------------------
Tue Dec 9 17:07:53 CET 2008 - hvogel@suse.de
- Fix CVE-2008-2380: Use PQsetClientEncoding() for proper
input sanitizing. This fixes a SQL injection possibility with
PGSQL databases that use non-Latin character sets.
Patch: courier-authlib-0.59plus.patch
-------------------------------------------------------------------
Fri Sep 5 15:26:06 CEST 2008 - hvogel@suse.de
- update to version 0.61.0
* Cleanup: always compile md5, sha* and hmac stuff, and remove all
conditionally-compiled cruft. Move SASL list to an internal header.
Add client-side support for AUTH EXTERNAL.
* authsasl.c (auth_sasl_ex): auth_sasl_ex() supercedes auth_sasl(),
invokes auth_sasl() for non-EXTERNAL SASL methods, implements EXTERNAL
by going through the motions, then setting up a dummy authentication
request.
* authdaemon.c (auth_generic): Check for the dummy EXTERNAL
authentication request, and handle it by invoking auth_getuserinfo(),
rather than sending it down the pipe. This avoid having to implement
a stub in every authentication module.
* authmysqllib.c: Use mysql_set_character_set() instead of SET NAMES
* authmysqllib.c: Fix domain-less queries.
* Drop the unmaintained authvchkpw module.
* authmysqllib.c: Cleanup. Use mysql_real_escape_string instead of
crude filtering.
* More portability fixes.
- add rpmlintrc (shlib-policy-name-error) for the moment
to fix build
-------------------------------------------------------------------
Mon Apr 14 11:27:57 CEST 2008 - aj@suse.de
- Small changes to make rpmlint happier:
* Rename keywords in init scripts
* Prerequire /bin/rm
-------------------------------------------------------------------
Thu Jan 17 13:20:56 CET 2008 - mskibbe@suse.de
- update to version 0.60.2 which
o Portability fix for checking the highest available file
descriptor
o Fix typos
o Use OPEN_MAX, instead of hardcoded
-------------------------------------------------------------------
Fri Jun 8 01:50:18 CEST 2007 - ro@suse.de
- remove explicit requires for mysql-shared (library is required
anyway)
-------------------------------------------------------------------
Wed Apr 25 11:17:06 CEST 2007 - mskibbe@suse.de
- update to version 0.59.3 which includes:
o CRAM authentication in vchpw module
o bug fixes
o updated man pages
-------------------------------------------------------------------
Thu Mar 29 11:38:28 CEST 2007 - rguenther@suse.de
- Add procps BuildRequires due to interesting configure checks
-------------------------------------------------------------------
Mon Mar 26 12:27:47 CEST 2007 - rguenther@suse.de
- Add gdbm-devel BuildRequires
-------------------------------------------------------------------
Thu Feb 22 14:16:01 CET 2007 - mskibbe@suse.de
- update to version 0.59.1 which
o fix some bugs
o Make the spec a little prettier
o Change distro-detection to use "rh" and "fc" for version
detection, and add support for mandriva
o Added the -f option to makeuserdb
o Try to recover when the LDAP server closes the
persistent socket, for inactivity
-------------------------------------------------------------------
Mon Sep 18 12:21:24 CEST 2006 - mskibbe@suse.de
- fix Bug 204834 - missing rccourier-authdaemon symlink
-------------------------------------------------------------------
Tue Aug 1 12:14:40 CEST 2006 - mskibbe@suse.de
- Add mysql, pipe, pgsql sub-packages
-------------------------------------------------------------------
Mon Mar 27 11:50:09 CEST 2006 - kukuk@suse.de
- Add missing ldconfig calls
-------------------------------------------------------------------
Wed Jan 25 21:35:11 CET 2006 - mls@suse.de
- converted neededforbuild to BuildRequires
-------------------------------------------------------------------
Wed Dec 14 13:46:57 CET 2005 - kukuk@suse.de
- Update to 0.58 (enable shadow aging support)
-------------------------------------------------------------------
Sun Sep 25 19:07:47 CEST 2005 - kukuk@suse.de
- Compile with -DLDAP_DEPRECATED
-------------------------------------------------------------------
Fri Jul 29 14:00:24 CEST 2005 - kukuk@suse.de
- Initial version
