Path to this page:
Subject: CVS commit: pkgsrc/mail/imapsync
From: Mark Davies
Date: 2024-08-13 23:03:49
Message id: 20240813210349.941E0FC74@cvs.NetBSD.org
Log Message:
imapsync: update to 2.264
* Dependencies added: Perl module Digest::SHA
* Dependencies removed: Perl module IO::Socket::INET6
* Enhancement: It is now possible to check login with one side. Example:
imapsync --host1 test1.lamiral.info --user1 test1 --password1 secret1
* Enhancement: Office365 OAUTH2 modern authentication supported with an external
script.
* Bug fix: Reread oauth2 files upon disconnections.
* Bug fix: Options --password1 and --password2 are no longer required when
--oauthaccesstoken1 and --oauthaccesstoken2 are used, respectively.
* Bug fix: Options --user1 and --user2 are no longer required when --oauthdirect1
and --oauthdirect2 are used, respectively.
* Refactoring: 2065 unit tests.
* Refactoring: 200 functionnal tests.
* Security: Changed the default temporary directory. Now, the temporary directory
taken from --tmpdir or $HOME/tmp or current directory, in order if defined
(instead of /tmp on Linux) CVE-2023-34204
See https://nvd.nist.gov/vuln/detail/CVE-2023-34204
and also https://github.com/imapsync/imapsync/issues/399
I did not change the default tmpdir in the CGI context because
/var/tmp/imapsync_hash is written only if it doesn't exist and
/var/tmp/imapsync_cgi/ is created under the supervision of an admin. And I am
lazy to change all my hosts for now.
* Portability: removed "use IO::Socket::INET6 ;"
* CGI context: CGI context. Exit with a "503 Service Unavailable" when \
no disk
space is available.
* CGI context: Now the logfile name can only be composed with characters a-zA-Z0-9_-
Files: