Update changelog.

[hcoop/debian/courier-authlib.git] / debian / changelog

courier-authlib (0.61.0-1+lenny1hcoop1) lenny; urgency=low

  * Merge from Debian.  Remaining changes:
    + authpam.c:
      - Revert the disabling of pam_setcred so that IMAP works on AFS.
    + courier_auth_config.h:
      - Set the userdb path to be /etc/courier/userdb.
    + preauthuserdbcommon.c:
      - Get AFS tokens.

 -- Michael Olson (HCoop) <mwolson@hcoop.net>  Thu, 09 Apr 2009 23:43:21 -0400

courier-authlib (0.61.0-1+lenny1) testing-security; urgency=high

  * Non-maintainer upload by the security team
  * Fix several sql-injection vulnerabilities in authpgsqllib.c by using
    PQsetClientEncoding() and PQescapeStringConn()
    Fixes: CVE-2008-2380

 -- Steffen Joeris <white@debian.org>  Mon, 08 Dec 2008 13:48:12 +0000

courier-authlib (0.61.0-1) unstable; urgency=low

  * new upstream release
  * lintian:
    - debian/compat file
    - don't ignore make clean errors
  
 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Thu, 17 Jul 2008 12:59:36 +0200

courier-authlib (0.60.1-2.1) unstable; urgency=high

  * Non-maintainer upload by the security team
  * Fix sql injection vulnerability by changing to use
    mysql_set_character_set instead of SET NAMES
    (Change was introduced by upstream in 0.60.6)
    (Closes: #485424)

 -- Steffen Joeris <white@debian.org>  Mon, 09 Jun 2008 15:29:23 +0000

courier-authlib (0.60.2-0hcoop7) unstable; urgency=low

  * Revert last change.  Now the AFS token code is before the callback.

 -- Michael Olson (HCoop) <mwolson@hcoop.net>  Thu, 07 Feb 2008 22:37:30 -0500

courier-authlib (0.60.2-0hcoop6) unstable; urgency=low

  * Move acquiting of AFS vmail tokens to just after callback.

 -- Michael Olson (HCoop) <mwolson@hcoop.net>  Sat, 02 Feb 2008 20:29:01 -0500

courier-authlib (0.60.2-0hcoop5) unstable; urgency=low

  * Move acquiring of AFS vmail tokens to preauthuserdbcommon.c.

 -- Michael Olson (HCoop) <mwolson@hcoop.net>  Fri, 01 Feb 2008 21:55:37 -0500

courier-authlib (0.60.2-0hcoop4) unstable; urgency=low

  * authuserdb: Try using a separate get-token script.

 -- Michael Olson (HCoop) <mwolson@hcoop.net>  Wed, 30 Jan 2008 13:17:14 -0500

courier-authlib (0.60.2-0hcoop3) unstable; urgency=low

  * Fix bug in previous patch.

 -- Michael Olson (HCoop) <mwolson@hcoop.net>  Sun, 27 Jan 2008 16:19:18 -0500

courier-authlib (0.60.2-0hcoop2) unstable; urgency=low

  * Get token after authenticating a vmail user.

 -- Michael Olson (HCoop) <mwolson@hcoop.net>  Sat, 26 Jan 2008 15:28:19 -0500

courier-authlib (0.60.2-0hcoop1) unstable; urgency=low

  * New upstream release.  Remaining changes:
    - Revert the disabling of pam_setcred so that IMAP works as expected.
    - Set the userdb path to be /etc/courier/userdb.

 -- Michael Olson (HCoop) <mwolson@hcoop.net>  Fri, 25 Jan 2008 19:24:41 -0500

courier-authlib (0.60.1-2) unstable; urgency=low

  * added LSB dependency info to init scripts (Closes: #460221, thanks to
    Petter Reinholdtsen <pere@hungry.com> for the patch)

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Mon,  7 Apr 2008 13:21:37 +0200

courier-authlib (0.60.1-1hcoop1) unstable; urgency=low

  * Sync from Debian.  Remaining changes:
    - Revert the disabling of pam_setcred so that IMAP works as expected.
    - Set the userdb path to be /etc/courier/userdb.

 -- Michael Olson (HCoop) <mwolson@hcoop.net>  Fri, 25 Jan 2008 18:28:11 -0500

courier-authlib (0.60.1-1) unstable; urgency=low

  * new upstream release

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Mon, 15 Oct 2007 10:56:16 +0200

courier-authlib (0.60.0-1) unstable; urgency=low

  * new upstream release, now under GPL version 3

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Sun, 30 Sep 2007 21:58:35 +0200

courier-authlib (0.59.3-2) unstable; urgency=low

  * dropped alternative build dependency on postgresql-dev 
    (Closes: #429964, thanks to Lior Kaplan <kaplan@debian.org> for the report

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Thu, 21 Jun 2007 20:26:38 +0200

courier-authlib (0.59.3-1hcoop1) unstable; urgency=low

  [Adam Megacz]
  * Revert the disabling of pam_setcred so that IMAP works as expected.
  * Set the userdb path to be /etc/courier/userdb.
  * userdb: Allow "+", ":", and "_" in usernames.

 -- Michael Olson (HCoop) <mwolson@hcoop.net>  Fri, 25 Jan 2008 17:46:10 -0500

courier-authlib (0.59.3-1) unstable; urgency=low

  * new upstream release

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Mon, 23 Apr 2007 10:18:17 +0200

courier-authlib (0.59.1-0.1) experimental; urgency=low

  * new upstream release

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Wed, 17 Jan 2007 11:58:29 +0100

courier-authlib (0.58-5) unstable; urgency=low

  * added dependency and build dependency on expect (Closes: #400812,
    thanks to Peter Troeger <peter@troeger.eu> for the report)

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Wed, 29 Nov 2006 11:42:45 +0100

courier-authlib (0.58-4) unstable; urgency=medium

  * call dh_makeshlibs during binary-arch target in order to get proper shlib
    information for libcourierauth.so (Closes: #378249, thanks to Charles
    Fry <cfry@debian.org> for the report and Steinar H. Gunderson
    <sesse@debian.org> for the patch) 
  * ensure that courier-authdaemon is upgraded when switching to courier-authlib
  * switch to lsb logging functions (Closes: #384823, thanks to David Härdeman
    <david@2gen.com> for the patch)
  
 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Sat,  9 Sep 2006 17:37:11 +0200

courier-authlib (0.58-3.1) unstable; urgency=medium

  * Non-Maintainer Upload to fix security bug, caused by
    /var/run/courier/authdaemon being world executable.  Thanks to Martin
    Ferrari for the fix. (Closes: #378571)

 -- Margarita Manterola <marga@debian.org>  Tue,  1 Aug 2006 16:45:07 -0300

courier-authlib (0.58-3) unstable; urgency=low

  * remove all Courier runtime files on purge of courier-authdaemon

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Tue,  6 Jun 2006 04:48:20 +0200

courier-authlib (0.58-2) unstable; urgency=low

  * set ownership of /var/run/courier and /var/run/courier/authdaemon to
    daemon.daemon (Closes: #368358, #368360)

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Tue, 23 May 2006 09:43:15 +0200

courier-authlib (0.58-1.0) unstable; urgency=low

  * first upload to unstable

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Fri, 12 May 2006 16:53:38 +0200

courier-authlib (0.58-0.4) experimental; urgency=low

  * changed alternative dependency for libmysqlclient-dev to
    libmysqlclient15-dev (Closes: #356728, thanks to Stefan Huehner
    <huehner@unix-ag.uni-kl.de> for the report)

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Tue, 14 Mar 2006 11:14:11 +0100

courier-authlib (0.58-0.3) experimental; urgency=low

  * courier-authlib-userdb conflicts with pre-authlib courier-base package

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Wed, 11 Jan 2006 09:33:10 +0100

courier-authlib (0.58-0.2) experimental; urgency=low

  * updated config.{guess,sub} to avoid FTBFS on some architectures
    (Closes: #346105, thanks to Petr Salinger
    <Petr.Salinger@t-systems.cz>)

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Fri,  6 Jan 2006 11:13:19 +0100

courier-authlib (0.58-0.1) experimental; urgency=low

  * new upstream release
  * transition to new PostgreSQL architecture (Closes: #339297, thanks to
    Martin Pitt <mpitt@debian.org> for the report and the patch)
  * added courier-authlib-mysql/postgresql prerm/postinst scripts to
    restart courier-authdaemon
  
 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Thu,  5 Jan 2006 14:58:19 +0100

courier-authlib (0.57.20051004-2) experimental; urgency=low

  * ship configuration files with sane ownership/permissions
  * restoring call to pam_acct_mgmt

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Fri, 11 Nov 2005 00:49:19 +0100

courier-authlib (0.57.20051004-1) experimental; urgency=low

  * new upstream release:
    - contains authtest manual page and authpasswd script
  * keep authtest name instead of renaming to courierauthtest, there are
    currently no conflicts with other binaries
  * separate package courier-authlib-pipe for authpipe module
  * revive courier-authdaemon package to allow seamless upgrades from sarge
  * changed FSF address in copyright file
  * changed BuildDepends from libmysqlclient10-dev to libmysqlclient14-dev
  * use DH_COMPAT=4
  
 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Tue, 25 Oct 2005 11:04:45 +0200

courier-authlib (0.56-0.5) experimental; urgency=low

  * added build dependency on procps (Closes: #311976, thanks to Kurt
    Roeckx <kurt@roeckx.be> for the report)

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Sat,  4 Jun 2005 22:03:43 +0200

courier-authlib (0.56-0.4) experimental; urgency=low

  * provide proper LDAP configuration file instead of an empty one (thanks
    to Peter Mann <Peter.Mann@tuke.sk> for the report)

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Tue, 31 May 2005 14:48:04 +0200

courier-authlib (0.56-0.3) experimental; urgency=low

  * added dependency to courier-authlib-dev on courier-authlib
  * versioned dependencies for courier-authlib-* packages

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Tue, 31 May 2005 11:13:01 +0200

courier-authlib (0.56-0.2) experimental; urgency=low

  * removed check for openssl binary (Closes: #311175, thanks to Kenshi
    Muto <kmuto@debian.org> for the report)

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Mon, 30 May 2005 13:23:02 +0200

courier-authlib (0.56-0.1) experimental; urgency=low
  
  * initial release

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Fri, 27 May 2005 23:20:21 +0200