sendmail 8.14.1-7ubuntu1 source package in Ubuntu

Changelog

sendmail (8.14.1-7ubuntu1) gutsy; urgency=low

  * Merge from Debian unstable, remaining changes:
    - Wrong emphasis in update_tls.in
    - Update maintainer in field debian/control.

sendmail (8.14.1-7) unstable; urgency=low

  * buildd's do not honour Build-Depends-Indep:, so replicate that
    information on the Build-Depends line to solve FTBFS  Closes: #430405

sendmail (8.14.1-6) unstable; urgency=low

  * The `ironclad or die` release, using newer gcc/binutils
    features to further reduce the exploit footprint of an
    application.   Thanks to Marc-Christian Petersen
    Read more about all that good stuff at:
    http://www.gentoo.org/proj/en/hardened/hardened-toolchain.xml#RELRO

  * Create an ELF "PT_GNU_RELRO" segment header in the object.
    Or in other words: built with "-z relro"

  * When generating an executable or shared library, mark it to tell
    the dynamic linker to resolve all symbols when the program is
    started, or when the shared library is linked to using dlopen,
    instead of deferring function call resolution to the point when
    the function is first called.
    Or in other words: built with "-z now"

  * Emit extra code to check for buffer overflows, such as stack
    smashing attacks. This is done by adding a guard variable to
    functions with vulnerable objects. This includes functions
    that call alloca, and functions with buffers larger than 8
    bytes. The guards are initialized when a function is entered
    and then checked when the function exits.  If a guard check
    fails, an error message is printed and the program exits.
    Or in other words: built with "-fstack-protector-all"

  * Compiled as PIE (Position Independant Executable)
    This assists PAX enabled kernels, with ASLR, and is also needed
    for GRSecurity.  Even with stock kernels, this makes the memory
    mapping less static, hindering attacks.

sendmail (8.14.1-5) private; urgency=low

  * DH_COMPAT = 5

  * Tweak LSB setup of /etc/init.d/sendmail such that stop/start
    when DAEMON_MODE=None is not an error

  * Clean up rules file abit, more to go (I love deleting suff)
    + drop sm_conf/sm_conf_opt from debian/rules
    + drop old private copy of dbs and use cdbs (not cleanly)
    + drop support of older sendmail versions (8.8.8+)
    + drop support for building on older debian versions (slink+)
    + drop split debian directory kluge
    + drop smX support - it requires a complete revamp

  * Things are still complicated by upstream not using autoconf/makefile
    builds, but I have used them in support - much of that work remains and
    will not be removed in the near term

  * Add alternative build-depend for linux-libc-dev (which will depcrecate
    linux-kernel-headers)

 -- Michele Angrisano <email address hidden>   Mon,  2 Jul 2007 16:26:44 +0200