prayer (1.3.5-dfsg1-4) unstable; urgency=low * Switch from CDBS to dh and debhelper compat level 9. * openssl1.1.patch: Support OpenSSL 1.1 API changes (Closes: #828512). * Support for Entropy Gathering Daemon removed because it's really old and support for it is no longer enabled in OpenSSL by default. * Add missing lsb-base dependencies. * prayer.postrm: remove hard-coded path to deluser. * Bump Standards-Version to 3.9.8. -- Magnus Holmgren Sat, 29 Oct 2016 14:15:05 +0200 prayer (1.3.5-dfsg1-3) unstable; urgency=low * disable_ssl3.patch (new): Disable SSL 3.0 due to CVE-2014-3566 (POODLE). * debian/Config: Disable ACCOUNTD_SSL_ENABLE since the SSL/TLS support in prayer-accountd and prayer-session is incomplete and never was functional. -- Magnus Holmgren Wed, 29 Oct 2014 22:32:18 +0100 prayer (1.3.5-dfsg1-2) unstable; urgency=high * dlopen_templates.patch: Use MYCFLAGS (which is initialized to the value of CFLAGS from dpkg-buildflags in the Config file) instead of CFLAGS in templates/{src,cam,old}/Makefile (Closes: #715310, LP: #1201216). The --defsym options were lost when we let CDBS override CFLAGS in the previous upload. -- Magnus Holmgren Thu, 18 Jul 2013 22:47:08 +0200 prayer (1.3.5-dfsg1-1) unstable; urgency=low * New upstream release. * Refresh patches. * Drop dummy package prayer-templates. * No longer override CDBS overriding CFLAGS, thereby allowing hardening flags to be properly propagated. I think it caused internal include flags to be lost, but since at least 1.3.2 that's no longer the case. * Bump Standards-Version to 3.9.4. * hurd.patch: Always define HAVE_SHADOW. The test for BSD4_4 seems bogus; it is defined on Hurd, but crypt(3) is available there. -- Magnus Holmgren Wed, 12 Jun 2013 00:09:05 +0200 prayer (1.3.4-dfsg1-1) unstable; urgency=low * New upstream release. - Drop ipv6_v6only.patch; fixed upstream. * template_sdk.patch: templates/src/build_index.pl no longer need to be patched. * Bump Standards-Version to 3.9.2. -- Magnus Holmgren Sat, 27 Aug 2011 22:24:50 +0200 prayer (1.3.3-dfsg1-4) unstable; urgency=low * Merge ld-as-needed.diff from Ubuntu into dlopen_templates.patch (Closes: #607559). * dlopen_templates.patch: Add missing #include "dlopen_templates.h" to servers/prayer_shared.h. * hurd.patch (new): Use the SPT_CHANGEARGV implementation of setproctitle() on the Hurd. * Add basic manpage for prayer-accountd(8). * unbrand_accountd.patch: Remove some Cambridge-specific parts of the filter handling. * Drop obsolete Build-Depends alternative libc-client2007b-dev. * Increase Debhelper compat level to 7. -- Magnus Holmgren Sun, 27 Mar 2011 22:49:18 +0200 prayer (1.3.3-dfsg1-3ubuntu1) natty; urgency=low * Fix FTBFS with ld --as-needed. -- Matthias Klose Sun, 19 Dec 2010 19:07:04 +0100 prayer (1.3.3-dfsg1-3) unstable; urgency=high * ipv6_v6only.patch (new): Set the IPV6_V6ONLY socket option on AF_INET6 sockets; since Prayer by default enumerates available address families and calls bind() once for each, conflicts will occur otherwise (Closes: #607261). -- Magnus Holmgren Thu, 16 Dec 2010 20:16:41 +0100 prayer (1.3.3-dfsg1-2) unstable; urgency=high * Convert (trivially, since CDBS with quilt was already used) to source format 3.0 (quilt). * no_db_version_check.patch: Remove unnecessary and incorrect check that not only the major and minor version numbers of the current libdb are the same as at compile time, but also that the patch number is equal or greater, which should not be a concern (Closes: #592119). -- Magnus Holmgren Sat, 07 Aug 2010 21:07:53 +0200 prayer (1.3.3-dfsg1-1) unstable; urgency=low * New upstream release. - Dropped kfreebsd.patch, clean_completely.patch, and manpage_error.patch; all incorporated upstream. * makefile_install_config.patch: Updated; some parts incorporated upstream. * prayer-templates-dev.install: Only template_structs.h and misc.h needed henceforth, since only those files are #included by compiled templates. * template_sdk.patch: The #include that templates/src/build_index.pl generates was not changed, though. * debian/Config, debian/control: Enable libtidy for HTML parsing and sanitisation, fixing certain XSS problems, which were due to simple substring matching being used. * prayer.init, prayer-accountd.init: Add $remote_fs to, and move $local_fs to, Required-Start. * Upgrade to Standards-Version 3.9.0: * Use Breaks instead of Conflicts to handle the renaming of prayer-templates. -- Magnus Holmgren Thu, 22 Jul 2010 03:27:52 +0200 prayer (1.3.2-dfsg1-4) unstable; urgency=low * Undo inadvertent inclusion of /usr/include/prayer in prayer-templates-src (Closes: #557056). -- Magnus Holmgren Tue, 24 Nov 2009 23:14:12 +0100 prayer (1.3.2-dfsg1-3) unstable; urgency=low * Replace non-existing libc-client2007-dev with new libc-client2007e-dev among the libc-client Build-Depends alternatives (Closes: #552717). -- Magnus Holmgren Sat, 31 Oct 2009 13:57:08 +0100 prayer (1.3.2-dfsg1-2) unstable; urgency=low * dlopen_templates.patch: * templates/{cam,old}/Makefile: Define the symbols template_map and template_map_count as aliases to the template_$(TYPE)_map and template_$(TYPE)_map_count when linking, so that template libraries can be loaded by other names than the original one. Also remove some cruft. * shared/dlopen_templates.c: Use those symbols instead. * Add symlinks so that template_set = xhtml_strict will still work. * Update the names of the directories for locally modified templates (under /etc/prayer/templates) to reflect the new template names. * template_sdk.patch (new): Create makefile for building template set libraries. Install it together with binaries and scripts needed. * Rename prayer-templates as prayer-templates-src and add new binary package prayer-templates-dev containing the aforementioned template-building tools as well as a README.Debian explaining how to use it all. * Ship NEWS.Debian only in the prayer package. Ship TEMPLATES in prayer-templates-src in addition to prayer-templates-dev. -- Magnus Holmgren Sun, 25 Oct 2009 19:22:13 +0100 prayer (1.3.2-dfsg1-1) unstable; urgency=low * New upstream release (Closes: #546918). * The set of available template sets has changed and several obsolete configuration options are no longer recognized. Please see NEWS.Debian for more information. - Repacked without University of Cambridge logos with dubious copyright/license status (more info in debian/copyright). - unbrand_cam_template.patch: Remove said Cambridge-specific graphics from 'cam' template set. - Drop unlimit_login_username.patch (fixed upstream when replacing the old login screen with frontend templates) and usernames_with_at.patch (incorporated upstream). * clean_completely.patch: Partially implemented upstream. * Manpages incorporated upstream. * dlopen_templates.patch: Experimental support for dynamically loading templates. * Update README.Debian. * makefile_install_config.patch(share/config.c): Change default template_set to "old". * makefile_install_config.patch(files/Makefile): Fix permissions on icons and static files. * manpage_error.patch: Fix missing .El in prayer-session(8). -- Magnus Holmgren Wed, 07 Oct 2009 22:50:45 +0200 prayer (1.2.3-2) unstable; urgency=low * welcome_is_template.patch wasn't fully incorporated upstream. Remove the help_dir setting and check in makefile_install_config.patch instead.c * Make Prayer work on kFreeBSD. Unfortunately there is no support for SysV semaphores. * kfreebsd.patch: Include the right headers under glibc. Detect that semtimedop is a stub. * debian/Config: Add -lutils to LIBS. * makefile_install_config.patch: put back a default value for lock_dir. * makefile_install_config.patch: Set imap_server to localhost/notls in default prayer.cf (Closes: #531801). * Depend on exim4 | mail-transport-agent. * Increase Standards-Version to 3.8.3. -- Magnus Holmgren Mon, 31 Aug 2009 23:48:04 +0200 prayer (1.2.3-1) unstable; urgency=low * New upstream release. - Drop repair_ssl_session_db_on_version_mismatch.patch, remove_old_db_logfiles_from_prayer-ssl-prune.patch, welcome_is_template.patch, template_find_bug.patch; all incorporated upstream. - Update makefile_install_config.patch after welcome.html gone. * kfreebsd.patch (new): Try to get Prayer to work on Debian GNU/kFreeBSD. * Add ${misc:Depends} to Depends for prayer-templates. * Upgrade to Standards-Version 3.8.1. + Add debian/README.source. * clean_completely.patch (new): Fix a few makefiles that didn't remove their build targets in the clean target (Closes: #521369). Thanks to Simon McVittie. -- Magnus Holmgren Tue, 14 Apr 2009 00:50:31 +0200 prayer (1.2.2.1-7) unstable; urgency=high * Since /var/run can be a tmpfs filesystem, don't ship /var/run/prayer as part of the package but create it in the init script (LP: #304071). Also, var_prefix, pid_dir and prayer_user will by default be overriden from the command line to make sure that they get the values expected by the init script. -- Magnus Holmgren Fri, 31 Oct 2008 18:31:28 +0100 prayer (1.2.2.1-6) unstable; urgency=low * prayer.init: Correctly check for the presence of the executables. * Split out templates to a separate arch-indep package. * Change the default value of the tmp_dir option back to ${var_prefix}/tmp (/var/run/prayer/tmp) because using /tmp may not be secure. * usernames_with_at.patch (new, from upstream CVS): If a username contains an @, it will be assumed to be a valid email address and be used as envelope sender address and default "From" address when sending mail (Closes: #497016). -- Magnus Holmgren Fri, 31 Oct 2008 18:19:34 +0100 prayer (1.2.2.1-5a) unstable; urgency=medium * Prevent dh_installman from interpreting the cf in prayer.cf.5 as a language code. -- Magnus Holmgren Sun, 17 Aug 2008 19:24:10 +0200 prayer (1.2.2.1-4) unstable; urgency=medium * Urgency medium since fixing fairly serious bug(s). * debian/Config: Fix handling of CFLAGS, CPPFLAGS and LDFLAGS from the environment or command line, breaking a circular definition of LDFLAGS (FTBFS on Ubuntu; LP: #256220). * unlimit_login_username.patch (new): - servers/prayer_login.c: Remove 8 character username limit from login form (Closes: #494517). * prayer.init, prayer-accountd.init: Sleep 1 second between stop and start in restart. * Add manpages prayer(8), prayer-session(8), prayer.cf(5), and prayer-ssl-prune(8) (groff-mdoc format). Remove half-done Docbook versions from source package. -- Magnus Holmgren Sun, 17 Aug 2008 17:38:00 +0200 prayer (1.2.2.1-3) unstable; urgency=low * welcome_is_template.patch: - shared/config.c: Don't require that the help_dir option, which was removed from the default prayer.cf earlier, is defined (Closes: #493009). * makefile_install_config.patch: - shared/config.c: Likewise don't check for lock_dir (Closes: #494011). -- Magnus Holmgren Wed, 06 Aug 2008 21:20:17 +0200 prayer (1.2.2.1-2) unstable; urgency=low * Acknowledge NMU, but change the build dependency to libc-client2007b-dev | libc-client2007-dev | libc-client-dev (>= 7:2007~), since we need at least that version. -- Magnus Holmgren Sun, 27 Jul 2008 20:52:18 +0200 prayer (1.2.2.1-1.1) unstable; urgency=low * Non-maintainer upload. * Build-depend on unversioned libc-client-dev to allow BinNMUs. Closes: bug#492285. -- Jonas Smedegaard Thu, 24 Jul 2008 23:42:33 +0200 prayer (1.2.2.1-1) unstable; urgency=low * New upstream release featuring XHTML templates and fixes to various bugs created by the reorganisation. - Drop accountd_makefile_typo.patch; fixed upstream. * makefile_install_config.patch: Changes to the default config: - Disable SSL session caching. - Clean out "direct connection stuff". Remove lock_dir since we use SysV semaphores. * Point login_prefix_path, motd_path, and login_suffix_path towards /etc/prayer. * Change postponed-mail and sent-mail to Drafts and Sent. * Improve SSL/TLS configuration: * makefile_install_config.patch: Point ssl_cert_file and ssl_privatekey_file to /etc/ssl/*/ssl-cert-snakeoil.*. + Add dependency on ssl-cert (>= 1.0.11). + prayer.postinst: Add prayer to group ssl-cert on fresh install or when upgrading from versions prior to this one. * welcome_is_template.patch (new): Although the welcome screen is now a template among others, cmd_welcome.c still tried to read the file specified by welcome_path (welcome.html by default) and wouldn't show the welcome screen if the option was unset or the file couldn't be read. This patch removes that check as well as the welcome_path and help_path options from prayer.cf. * No longer install welcome.html (see above) and motd.html (no real content) in /etc/prayer. Install login_prefix.html, login_suffix.html, and motd.html (the versions found in files/etc.hermes in the distribution tarball) in /usr/share/doc/prayer/examples instead. * Do not install prayer-chroot (too experimental, hardcoded chroot path) or prayer-sem-prune (does nothing that ipcrm cannot do). * templates_fallback_to_compiled.patch (new): If the template_use_compiled option is false, nevertheless use compiled-in templates in template_expand.c if the requested template cannot be found on disk. Change default template_path to /etc/prayer/templates. Install said directory as well as subdirectories for available template sets. * Update and improve README.Debian. * Add logrotate dependency. * makefile_install_config.patch: Remove call to install.sh from files/Makefile and replace it with single tar pipeline; thus install.sh no longer needs to be patched. * remove_old_db_logfiles_from_prayer-ssl-prune.patch (new): Patch myarchive() in lib/mydb_db3.c so that it only deletes obsolete transaction logs if dirname = NULL, then call it (via DB->archive()) from ssl_prune_sessions() in lib/ssl.c. - prayer-db-prune thus unnecessary. * template_find_bug.patch (new): Fix segfault in template_find() when template_set specifies a non-existing set. Also update default set. -- Magnus Holmgren Tue, 24 Jun 2008 01:34:14 +0200 prayer (1.2.0-1) unstable; urgency=low * New upstream release featuring a major code reorganisation and a new template system. - Drop obsolete folder_list_cosmetics.patch and includes.patch. - Note: SSL support has been removed from prayer-accountd for now. * Changed defaults (manual intervention may be needed): - Let prayer-accountd.pid reside in /var/run; letting the two packages share /var/run/prayer caused too much trouble. - prayer.cf (makefile_install_config.patch and debian/Config): var_prefix set to /var/run/prayer and referred to in other settings. socket_split_dir disabled by default and default sockets directory changed to /var/run/prayer/sockets. * debian/control: + Build-depend on latest Berkley DB library (libdb-dev). + Add Homepage field. * repair_ssl_session_db_on_version_mismatch.patch: Recreate session DB environment when upgrading from a version of Prayer that used an older BDB library. * prayer.postinst: Set HOME of prayer user to /var/run/prayer. * prayer.postrm: Simply remove /var/run/prayer (since accountd doesn't use it) on remove or disappear and correctly remove statoverrides (Closes: #483176). Also check that deluser exists; it may be gone at purge time. * Package build details: - Reduce makefile_install_config.patch by not changing BROOT into DESTDIR. - Override CDBS overriding CFLAGS. * debian/patches/accountd_makefile_typo.patch: Fix typo that caused PAM not to be used. -- Magnus Holmgren Sat, 31 May 2008 19:28:21 +0200 prayer (1.1.0-2) unstable; urgency=low * Define LDAP_DEPRECATED so that the deprecated LDAP interfaces can be used. * makefile_install_config.patch: Modify prayer/Makefile so that the above definition isn't lost if CFLAGS is overridden. * Improve prayer.postrm to clean /var/run/prayer on removal and disappearence. * Use dpkg-override to allow the administrator to change mode of /var/run/prayer and /var/log/prayer. * Add postinst and postrm scripts for prayer-accountd. * makefile_install_config.patch: Set authtype = pam in accountd.cf so that accountd will start. * Bump Standards-Version to 3.7.3. No changes necessary. * Override Lintian warnings about GPL code linked with OpenSSL. Special exception has been granted. * Don't require cdbs 0.4.27-1. Oldstable has 0.4.28-1. -- Magnus Holmgren Thu, 15 May 2008 22:47:14 +0200 prayer (1.1.0-1) unstable; urgency=low * First upload to unstable. * New upstream release. + Requires development version of the c-client library (libc-client2007-dev). - Drop pidfiles_extension.patch, session_unix_bugs.patch, session_server_bugs.patch; all incorporated upstream. - Drop ipv6.patch; incorporated upstream. - Drop utf8.patch; incorporated and improved upstream. - Drop hasnochildren_means_noinferiors.patch since upstream now handles dual-use mailboxes. * New maintainer email address. * Update README.Debian, removing lies about TLS not being possible to disable (Closes: #440462). * folder_list_cosmetics.patch: Remove space between expand/collapse arrow and folder icon in the folder list and change the alt texts so that the tree looks nicer in text browsers. -- Magnus Holmgren Tue, 13 May 2008 22:31:36 +0200 prayer (1.0.18-1) experimental; urgency=low * Initial release (Closes: #392823) -- Magnus Holmgren Sat, 10 Mar 2007 14:24:21 +0100