about summary refs log tree commit
DateCommit message (Collapse)
2016-08-01Release 3.10 v3.10
2016-07-29Add Changes entry for previous commit
2016-07-29Merge pull request #29 from tonycoz/cve-2016-1238
CVE-2016-1238: avoid loading Net::LocalCfg from default .
2016-07-28Remove the default Net::Cmd::timeout()
This accidentally overrode the timeout() in Net::FTP's $IOCLASS. Instead, we now document that timeout() needs to be provided by the Net::Cmd sub-class (normally by inheriting from IO::Socket::INET or similar (which in turn inherit from IO::Socket, which provides timeout()), which most users seem to do anyway). Similarly, document that close() most also be provided (normally by inheriting from IO::Handle, which IO::Socket::INET or similar also do, via IO::Socket). This fixes CPAN RT#116345. Thanks to ppisar@redhat.com for the analysis.
2016-07-28CVE-2016-1238: avoid loading Net::LocalCfg from default .
Net::Cfg treats Net::LocalCfg as an optional load, if a site does not have Net::LocalCfg in the standard places perl will attempt to load it from the . entry in @INC. If the current directory happens to be world writable (like /tmp) an attacker can create Net/LocalCfg.pm to run code as any user that runs code that loads Net::Cfg in that directory. This patch temporarily removes the default . entry from @INC when loading Net::LocalCfg to prevent that.
2016-07-19Bump version
2016-07-19Release 3.09 v3.09
2016-07-19Fill in Changes file for recent changes
2016-07-07Provide (and document) a default Net::Cmd::timeout()
Previuosly, subclasses were required to provide a timeout() function, but this was not documented anywhere! Fixes CPAN RT#110978.
2016-07-01Require IO::Socket::IP >= 0.25 to hopefully stop t/pop3_ipv6.t hanging
See https://rt.cpan.org/Ticket/Display.html?id=104545
2016-06-30Merge pull request #27 from pprindeville/master
Include decoded (from base64) negotiation for SASL.
2016-06-30Fix/update some links in README
Adapted from PR#26.
2016-06-28Merge pull request #25 from jmdh/nntp_docs
Correct innd/nnrpd confusion in relation to Reader option
2016-06-28Merge pull request #28 from jkeenan/uninit_value_in_ipv6_tests
Adapt tests to Test2 revision of Test::More::note().
2016-06-22Adapt tests to Test2 revision of Test::More::note().
In each of the three t/*_ipv6.t test files, a helper subroutine was defined whose last statement was an invocation of Test::More::note(). Under the old Test::Builder framework, note() would always have returned a defined value of 0. However, in the Test2 framework -- which is in Perl 5 blead as of 5.25.2 -- note() calls the release() method from lib/Test2/API/Context.pm -- and release() has a bare return, which is treated as 'undef' in scalar context. Perl's exit function wants to return a non-negative integer value. Hence, we should guarantee that these helper subroutines -- which are invoked by exit() calls in each of the three files -- explicitly return 0 upon success.
2016-06-13Include decoded (from base64) negotiation for SASL.
Text is prefixed with (decoded) and appears before on sends and after on receives.
2016-04-02Correct innd/nnrpd confusion in relation to Reader option
In the 'Reader' paragraph of the 'Constructor' section, the text has nnrpd and innd the wrong way round Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=51962
2016-01-05Bump version
2016-01-05Release 3.08 v3.08
2015-12-27Add Changes entry for the syswrite() fix
2015-12-27Fix _set_status_closed() calls following commit 852982580b
2015-12-27Merge pull request #24 from dagolden/fix-syswrite
Fix syswrite in Net::Cmd
2015-12-27Merge pull request #23 from daleevans/patch-3
POD fix escape of > character
2015-12-27Merge pull request #22 from daleevans/patch-4
fix pop3 demo program
2015-12-27Merge pull request #21 from daleevans/patch-2
minor POD error
2015-12-27Merge pull request #20 from daleevans/patch-1
fix smtp demo program
2015-12-26Fix typo
2015-12-25Make other syswrites use _syswrite_with_timeout
Two other methods in Net::Cmd did syswrite() calls, both without a loop or timeout. This replaces those with a call to the new, common _syswrite_with_timeout() method, which does both correctly and restarts after EINTR.
2015-12-25Refactor syswrite with timeout
2015-12-25POD fix escape of > character
C<Debug => 1> doesn't render correctly because of the embedded ">".
2015-12-25fix pop3 demo program
Getopt::Long requires that implicit option variables ($opt_XXX) be declared with "our" and not "my". At least using Getopt::Long 2.38 / perl 5.14, this results in the $opt_* never getting any values filled in.
2015-12-25minor POD error
should close an =over with a =back before starting a new =head1, or you get the following errors from perldoc: POD ERRORS Hey! The above document had some coding errors, which are explained below: Around line 36: You forgot a '=back' before '=head1' Around line 42: =back without =over
2015-12-25fix smtp demo program
Getopt::Long requires that implicit option variables ($opt_XXX) be declared with "our" and not "my".
2015-09-03Minor tweaks to Changes file formatting
2015-09-03SMTP: document passing of SASL instance to auth()
Based on a patch by Jan Viktorin <viktorin@rehivetech.com>. Fixes CPAN RT#106183.
2015-09-02Use past tense in Changes file
2015-09-02ChangeLog was renamed to Changes a while ago
2015-09-02Simplify specification of INSTALLDIRS
We do not need to check the lower bound since we only support Perl 5.8.1 and higher anyway.
2015-09-02Add INSTALL file
2015-09-01Re-sort MANIFEST
2015-09-01Bump version
2015-07-17Release 3.07 v3.07
2015-07-17Add Changes entry for previous merge commit
2015-07-17Merge branch 'ColMelvin-use-MLSD-for-more-robustness'
2015-07-17Merge branch 'use-MLSD-for-more-robustness' of ↵
https://github.com/ColMelvin/perl-libnet into ColMelvin-use-MLSD-for-more-robustness
2015-07-17Minor correction to 8b327f4281, confirmed by Steffen
2015-07-16Add Changes entry for previous merge commit, plus other minor tidy-ups
2015-07-16Merge pull request #18 from noxxi/af_domain
let FTP, NNTP, POP3, SMTP restrict Domain to IPv4 even if IPv6 is sup…
2015-07-16Merge pull request #19 from zhouzhen1/podspell
fix a typo in pod
2015-07-16Fix Net::Cmd::datasend() for octets stored in an upgraded string
The data passed to datasend() should already be encoded, but it can sometimes happen that the string holding the octets gets accidentally upgraded and it was wrong for datasend() to treat it differently in that case. Fixes CPAN RT#104433. Many thanks to Ricardo and Aristotle for their help on the ticket.