1.7.2 31-March-2012
---------------------------------------------
- Fix and optimize searching via Nepomuk.
1.7.1 03-March-2012
---------------------------------------------
- Don't truncate SPARQL queries in virtual collections.
- Optimize change notifications for deleted collection attributes.
- Fix possible data loss during item copy/move operations.
7.98.18 hack base to catch up perl 5.16 changes, cpan modules ..
7.98.17 update modules: cpan modules, IM et.al (to be planned).
7.98.16 FML::Install is enhanced.
- handle IMAP servers which include "/" in message IDs better, so
those messages aren't always thought to be new. Thanks: Bradley
Rintoul.
- record (IMAP) mailbox retrieved from in X-getmail-retrieved-from-mailbox:
header field, and make it available as %(mailbox) substitution
in MDA_external arguments. Thanks: Les Barstow.
- add delete_bigger_than option to allow removal of large messages
after retrieval, even if not deleting messages otherwise. Thanks:
Jan Vereecke.
MIMP is a project to create a version of IMP suitable for small mobile devices
such as WAP phones or PDAs. Basic IMP functionality is implemented including
mailbox viewing and paging, viewing messages, deleting, replying, forwarding,
and composing new messages.
Changes:
version 2.12: Fri Dec 21 12:18:51 CET 2012
Fixes:
- default for Mail::Header::new(Modify) is 'false', not 'true'
rt.cpan.org#79985 [Thomas Sibley]
- Mail::Address take username with rindex(), a bit better than
index() but still poor.
rt.cpan.org#82056 [Filipe Gonçalves]
Improvements:
- check for bad folding of header lines
rt.cpan.org#79993 [Thomas Sibley]
- add a note about better to avoid Mail::Address->name(),
in response to a question by
rt.cpan.org#81459 [Moritz Lenz]
- make sure to include /usr/include/quota.h to have the libquota prototypes,
fix a segfault on amd64
- do not leak quotahandle, make sure to quota_close() it.
PKGREVISION++
ChangeLog:
1.897 2012-12-17
skip mailboxes, rather than aborting the whole parse, when
encountering non-ASCII characters (thanks, Ruslan Zakirov!)
improve the behavior of escaping in phrases (thanks, Ruslan Zakirov!)
1.896 2012-07-31
documentation improvements (thanks, Glenn Fowler!)
Changes since 2.1.12:
- Some fixes to cache file changes in v2.1.11.
- fts-solr: Overlong UTF8 sequences in mails were rejected by Solr and
caused the mails to not be indexed.
- virtual storage: Sorting mailbox by from/to/cc/bcc didn't work.
Changelog:
FIXED
Security fixes can be found here
FIXED
Pressing the 'x' button on Windows now closes only one window rather than the whole application (805185)
FIXED
An issue that caused occasional corruption in local folders after filtering is now fixed (815012)
FIXED
An issue that caused deletion of drafts saved in IMAP folders whilst in offline mode is now fixed (805626)
For security fix, see http://www.mozilla.org/en-US/thunderbird/17.0.2/releasenotes/ .
Changelog:
FIXED
Security fixes can be found here
FIXED
Pressing the 'x' button on Windows now closes only one window rather than the whole application (805185)
FIXED
An issue that caused occasional corruption in local folders after filtering is now fixed (815012)
FIXED
An issue that caused deletion of drafts saved in IMAP folders whilst in offline mode is now fixed (805626)
For security fix, see http://www.mozilla.org/en-US/thunderbird/17.0.2/releasenotes/ .
- Build fixes for Solaris 11 (using GCC 4.7)
- Install example for new config file format
- Replace hard-coded path to state directory in various files.
Changelog: from http://www.mozilla.org/en-US/thunderbird/10.0.12/releasenotes/
FIXED
Security fixes can be found here
MFSA 2013-20 Mis-issued TURKTRUST certificates
MFSA 2013-17 Use-after-free in ListenerManager
MFSA 2013-16 Use-after-free in serializeToStream
MFSA 2013-15 Privilege escalation through plugin objects
MFSA 2013-12 Buffer overflow in Javascript string concatenation
MFSA 2013-11 Address space layout leaked in XBL objects
MFSA 2013-09 Compartment mismatch with quickstubs returned values
MFSA 2013-05 Use-after-free when displaying table with many columns and column groups
MFSA 2013-04 URL spoofing in addressbar during page loads
MFSA 2013-02 Use-after-free and buffer overflow issues found using Address Sanitizer
MFSA 2013-01 Miscellaneous memory safety hazards (rv:18.0/ rv:10.0.12 / rv:17.0.2)
Log DB error string in dkimf_add_signrequest(), and fix a DSN handling
error in dkimf_db_strerror().
LIBOPENDKIM: Ignore entries in the oversign header field name list
that are empty, and an oversign header field name list that
is present but empty.
LIBOPENDKIM: Allow header field lists to be empty, flushing any that
were previously defined.
BUILD: Improve tests for including <strl.h>.
REPUTATION: Use lowercase for keywords in REPUTE query generation
and handling.
STATS: Clean up a dead link in opendkim-genstats.
2.7.2 2012/11/14
Log the author domain name when rejecting or discarding due to ADSP.
LIBOPENDKIM: Improve re-entrancy of dkim_eoh() when verifying.
LIBOPENDKIM: Only do a single read attempt of a private key under
GNUTLS to avoid hiding a useful error code.
STATS: Add long option support for opendkim-importstats.
STATS: Fix overly-strict domain name rules in opendkim-reportstats.
TOOLS: Fix opendkim-genkey subdomains default.
TOOLS: Fix opendkim-testmsg GNUTLS initialization.
TOOLS: Add ability to assert a reporter ID to opendkim-spam.
TOOLS: Add ability to skip a fixed number of Received: fields.
TOOLS: Print a warning when asked to generate a key smaller than
the recommended minimum.
BUILD: Fix bug #SF3585163: Use a provided libstrl if detected.
BUILD: Portability fixes for Solaris 10 from Claus Assmann and
Leena Heino.
2.7.1 2012/10/30
Fix bug #SF3581657: Fix faulty logic in LDAP open code.
Fix bug #SF3581743: Properly handle NULLs returned from OpenDBX
queries and low field counts in dkimf_db_walk().
In the _FFR_REPUTATION code, free JSON objects when done with them.
TOOLS: Fix argument parsing in new version of opendkim-genkey.
2.7.0 2012/10/24
Feature request #SF2964375: Reject configuration files that have
a SigningTable referencing a missing or malformed KeyTable
entry.
Feature request #SF3544764: Support for libar has been discontinued.
For asynchronous and/or thread-safe resolver service,
use libunbound or a suitable version of BIND.
Feature request #SF3545658: Replace "ResolvConf" with "Nameservers"
and add support for NS list overrides for versions of bind
that have res_setservers(). Also rename "UnboundConfigFile"
to "ResolverConfiguration", and make "TrustAnchorFile"
generally available.
Feature request #SF3547124: Skip reputation checks on passing
signatures whose keys had a "t=y" value.
Feature request #SF3555842: Add "ReputationTest" setting.
Feature request #SF3556439: Update opendkim-atpszone per RFC6541.
Feature request #SF3559744: Add library option DKIM_OPTS_MINKEYBITS
allowing one to specify a minimum number of key bits for
acceptable keys and signatures. This is exposed through new
configuration file option "MinimumKeyBits". The default
is 1024.
Fix bug #SF3536414: Activate _FFR_OVERSIGN, and remove
DKIM_OPTS_ALWAYSHDRS.
Fix bug #SF3536655: Rename "X-Header" to "SoftwareHeader", and rename
all header fields added that start "X-" to remove that prefix,
per RFC6648. The old name will be accepted through the end
of the 2.7.x line.
Fix bug #SF3538896: Remove antiquated CVS Id: tags, which cleans up
some (harmless) build warnings.
Fix bug #SF3548741: Add "ReputationTimeout" for use inside
_FFR_REPUTATION, rather than using the built-in default
or a hard-coded one.
Fix bug #SF3549307: Remove _FFR_REPUTATION_CACHE, as it is redundant
to caching code that's part of _FFR_REPUTATION already.
Fix bug #SF3555844: Get repute client code in sync with repute.php
(and the current REPUTE WG drafts).
Fix bounds checking in the dstring printf functions.
Fix loop structure in the C side of odkim.get_rcpt().
Change all temporary directory defaults from /var/tmp to /tmp.
Activate _FFR_LUA_GLOBALS.
Request the milter permissions required to get _FFR_REDIRECT working.
Add _FFR_REPRRD, which is a second approach to DKIM-based reputation
using round robin databases and Holt-Winters foreacasting
using rrdtool (see http://oss.oetiker.ch/rrdtool/). Still
experimental.
Patch #SF3555843: With sufficient verbosity, report the default
configuration file path. Patch from Andreas Schulze.
BUILD: Fix bug #SF3531658: Move the strlcat() and strlcpy()
implementations to their own library so that programs don't
drag in crypto and other dependencies they don't need.
Also clean up several other unnecessary dependencies imposed
by imprecise use of autoconf.
BUILD: Patch #SF3555845: Add support for older versions of libcurl.
BUILD: Install non-user things in sbin instead of bin.
LIBOPENDKIM: Feature request #SF3565006: Add dkim_add_querymethod()
and dkim_sig_seterror(), define DKIM_CBSTAT_DEFAULT, and
remove an assertion in dkim_get_key_dns(), which together
allow for applications to develop non-standard key retrieval
mechanisms.
LIBOPENDKIM: Fix bug #SF3559080: Log correct domains and selectors
with SSL errors.
LIBOPENDKIM: Add DNS functions dkim_dns_config(), dkim_dns_init(),
dkim_dns_nslist(), dkim_dns_set_init(), dkim_dns_set_close(),
dkim_dns_set_nslist(), dkim_dns_set_config(),
dkim_dns_set_trustanchor(), dkim_dns_trustanchor().
LIBOPENDKIM: Patch #SF3562496: Add DKIM_OPTS_REQUIREDHDRS to allow
alteration of the mandatory header field set.
LIBOPENDKIM: If "q=" is present and method "dns" is specified, it
must be followed by "/txt", per RFC6376.
LIBOPENDKIM: For dkim_add_xtag(), copy the provided values so the
caller doesn't have to keep them around.
LIBOPENDKIM: Allow dual signing of a single body with dkim_resign().
STATS: Fix bug #SF3555847: Add "--nocircles" to opendkim-gengraphs
to allow operation with versions of gnuplot that don't know
what "with circles" means.
STATS: Patch #SF3555841: Temporary table SQL correction.
TOOLS: Feature request #SF3553918: Add "-u" flag to opendkim-atpszone
and opendkim-genzone enabling them to produce output suitable
for use as input to nsupdate(8).
TOOLS: Feature request #SF3558818: Teach opendkim-testkey about the new
"ResolverConfiguration" setting.
TOOLS: Fix bug #SF3565013: Replace opendkim-genkey with a perl script
that knows how to do splitting of character-strings in DNS
TXT records.
TOOLS: Fix bug #SF3568846: Add "-t" to opendkim-testmsg to allow
override of the directory where temporary files go. Also,
clean up temporary files after creating them.
TOOLS: Add opendkim-rephistory.
This should fix PR pkg/47370.
Major changes since 4.2.7:
- Allow comparison of msgsize, rcptcount & spamd, against values from LDAP
- localaddr option so that Postifix user can use spf self
- Allow filtering header and body against LDAP or CURL gathered properties
- Add format string to report last matching LDAP or CURL propery
- Add a addfooter action clause in ACL, to add mail a footer
- Allow per-dacl maxpeek setting, set by maxpeer action clause in racl
- Add LDAP or CURL gathered property substitution in format strings
- Add continue type ACL
- p0f v3 support
- Fix spamd hang if message contains NULL (Enrico Scholz)
- Send the queueid to spamd (Petar Bogdanovic)
- Ratelimit on SMTP sessions and data size
- New tarpit feature (Kouhei Sutou)
- Make SpamAssassin headers Sendmail-like (Petar Bogdanovic)
- Merge autowhite and greylist databases (Rudy Eschauzier)
- Make LDAP querries timeout configurable
- Make MX sync timeout peer-configurable (Attila Bruncsak)
This update is largely based on a patch submitted by Richard Palo
in PR pkg/47369.
repository. Approved by wiz@.
* Now work well with PHP 5.4 and later.
Version 1.4.23 - SVN
--------------------
- Added capability to issue SEARCH commands in literal format (so that
non-ASCII search terms are handled RFC-correctly).
- Fixed hook name clash: new "smtp_auth" hook added in version 1.4.22
has been renamed to "smtp_authenticate"
- Added SASL PLAIN mechanism for IMAP logins; backported from version
1.5.2.
- Prevent syslog warning in call_user_func_array() call when no
arguments given. Patch from Jean-Philippe Guerard (#3309935).
- Changed the read_body_menu_top hook from concat_hook_function to
do_hook_function (plugin authors please note)
- Always ensure that the Reply-To header is a full email address in
outgoing messages
- Fixed issue with Noselect mailboxes being clickable in folder list
- Made performance improvements in mailbox listing
- Attachment filename extensions changed from ".msg" to ".eml"
- Unified address book searches somewhat: file-backed address books now
search in each field individually; database-backed address books now
search in fields other than first/last name (nickname, email); LDAP-
backed address books now search in common name fields as well as by
email address (cn, sn, givenname, mail)
- You may now enable LDAP-backed address books to be listed (using
the "List all" button on the address search screen accessed via
the "Addresses" button on the compose screen) by adding
"$ldap_abook_allow_listing = TRUE;" (without quotes) to
config/config_local.php (previously, this required editing of a
file).
- Added ability to control browser rendering mode (quirks versus
standards) - see the $browser_rendering_mode setting in
config/config.php or the "4. General Options ==> 19. Browser
rendering mode" setting in the configuration tool (#3240356).
- Added "search_index_before" hook (analog of the "mailbox_index_before"
hook)
- Made performance improvements in security token handling
- Improvements for compatibility with PHP 5.4.
- Added option that allows users to have replies to their own
messages sent to the recipient of the previous message (#3520988).
Fixes:
2012-10-24
* Update configure.ac to avoid autoconf 2.68 warnings, by
(a) quoting the first AC_RUN_IFELSE argument, an
AC_LANG_PROGRAM(), with [ ], and
(b) providing an explicit "true" assumption for Berkeley DB
capabilities to avoid cross-compilation warnings.
2012-10-22
* Security bugfix for CVE-2012-5468 (bogofilter-SA-2012-01):
Fix a heap corruption in base64 decoder on invalid input.
Analysis and patch by Julius Plenz <plenz@cis.fu-berlin.de>.
2011-01-02
* Added bogofilter-faq-bg.html, a Bulgarian translation of the FAQ.
(thanks to Albert Ward)
2010-10-29
* Mark "Berkeley DB 5.1.19: (August 27, 2010)" supported.
Changes of Sylpheed
* 3.3.0
* 3.3.0rc (release candidate)
* The Japanese manual was updated.
* The bug that hyperlinks did not respond when 'Show attached files
first on message view' option was set was fixed.
* Some compilation fixes were made.
* Win32: .eml file association was added to installer.
* Win32: mailto and .eml association are automatically set to default
on Windows 7 on installation.
* Win32: included libtiff library was updated to 3.9.7 (security fix).
* 3.3.0beta2 (development)
* The ability of opening external rfc822 format message files (.eml) was
added.
* Sylpheed now accepts mailto: and file: URL without command-line option.
(sylpheed file:///path/to/file.eml)
* The option to specify the position of the attach tool button was added.
* The header labels on the header view now have tooltips.
* A minor memory leak related to tooltips was fixed.
* The long-standing drag-without-button-press bug on IMAP folders (since
3.0) was fixed (#93).
* The sylpheed.desktop file was modified so that desktop shells can
recognize Sylpheed as rfc822 and mailto handler.
* The sylpheed.spec file was fixed so that it builds on x86_64 platform,
and also builds sylpheed-plugins package.
* 3.3.0beta1 (development)
* Attached files are now placed first on the message view.
* Attached files can be opened from the attachment tool menu.
* The attachment tool menu was moved to the left of the header view.
* The option 'Toggle attachment list view with tab' and 'Show attached
files first on message view' were added at 'Common preferences -
Display - Attachment'.
* 'Export only selected messages' option was added to the message export
dialog.
* The import/export of messages became cancellable.
* config.rpath and install-sh script in the tarball were updated.
* IMAP FETCH command response parser was fixed.
Changes to the Cyrus IMAP Server since 2.4.16
* A bunch of cleanups and fixes to compiling
* A bunch of sieve cleanups
* Fixed bug #3691: unixhierarchysep is now obeyed when printing the
mailbox name in unexpunge
* Fixed bug #3718: crashes fetching message parts
* Fixed bug #3719: pop3 seen update of final message in a mailbox
* Improved documentation of "proxyservers" option
* Fixed bug #3737: lost emails in XFER delivery race
* Fixed bug #3725: inefficient statuscache use in some cases
* Fixed bug #3484: use of sasl property types (compile fix)
* Fixed bug #3754: failure to support binary append. This was found
by a popular library switching to using binary appends
* Fixed bug #3735: user prefix searching now works with fulldirhash
* Fixed bug #3696: can no longer rename the same mailbox twice, which
left things in a corrupted state if you caught the race.
* Fixed bug #3715: using berkeley for mailboxes.db was very broken.
It now works.
* Fixed bug #3733: reconstruct with missing cyrus.index will use file
timestamps for internaldate rather than setting it to NOW if
internaldate_heuristic is set to standard
* Fixed bug #3729: better documentation for xlist-* in 2.4.
* Fixed bug #2717: fetches of individual messages or short ranges no
longer need to parse over the entire index.
* Fixed bug #3742: reconstruct can now fix multiple folders with the
same uniqueid again (regression from 2.3) and also sync_client
avoids a crash in that broken case.
* Fixed bug #3711: detect the buggy /usr/bin/compile_et shipped on
MacOS X and fall back to our bundled copy.
Postfix 2.8 and later:
* The postscreen_access_list feature failed to ignore case in the
first character of a command (e.g., permit, reject, etc.).
Reported by Francis Picabia. (This fix is incorrectly listed
in the HISTORY files of earlier releases, and will be removed
with a future patch.)
All supported releases:
* Strip the datalink suffix (e.g., %eth0) from IPv6 addresses
returned by the system getaddrinfo() routine. Such suffixes
break the default mynetworks value, the Postfix SMTP server's
reverse/forward DNS name/address mapping check, and possibly
more.
* To eliminate the possibility of collisions with connection cache
lookup keys, the Postfix LDAP client now computes those lookup
keys by joining the number-valued connection properties with
ASCII null, just like it already did with the string-valued
connection properties.
* There was a memory leak during one-time TLS library initialization
(introduced with Postfix 2.5). Reported by Coverity.
* There was a memory leak in the unused oqmgr(8) program (introduced
with Postfix 2.3). Reported by Coverity.
26/12/2008 0.2.9
- src/lua/hotmail.lua, src/lua/juno.lua: Fixed login issues (russell822)
- src/lua/supereva.lua: added patch by la scimmia to fix To: problem (gareuselesinge)
- updater-ui/dialog/freepops-updater-dialog, updater-ui/zenity/freepops-updater-zenity: use mktem if tempfile not available (gareuselesinge), thanks Vito De Tullio
- buildfactory/Makefile, buildfactory/debian-ubuntu/control, buildfactory/debian-ubuntu/freepops.postinst, buildfactory/debian-ubuntu/rules: patch by blackmoon for ubuntu (gareuselesinge)
- buildfactory/Makefile, buildfactory/osx/Info.plist, buildfactory/osx/Info.plist.in: osx version will be reported correctly from now on (gareuselesinge)
- buildfactory/debian-ubuntu-dapper/control, buildfactory/debian-ubuntu-dapper/rules: added dapper stuff (gareuselesinge)
- buildfactory/debian-ubuntu/freepops-updater-gnome.desktop: minor fix (gareuselesinge)
- buildfactory/debian/changelog, buildfactory/debian/control, buildfactory/debian/freepops.cron.hourly, buildfactory/debian/rules, scripts/create_jail.sh: approaching 2.9.0 (gareuselesinge)
- buildfactory/debian/changelog, buildfactory/debian/freepops.postinst, buildfactory/debian/rules: some debian fixes (gareuselesinge)
- buildfactory/osx/Install_resources/English.lproj/ReadMe.txt, buildfactory/osx/Install_resources/Italian.lproj/ReadMe.txt, buildfactory/osx/iceberg/FreePOPs/FreePOPs.packproj, scripts/compile-gettext-universal.sh, src/Makefile: added gettext library, fixed installer (gareuselesinge)
- buildfactory/osx/Install_resources/English.lproj/ReadMe.txt, buildfactory/osx/Install_resources/Italian.lproj/ReadMe.txt, configure.sh, scripts/compile-curl-universal.sh, src/Makefile: use of an embedded version of libcurl for osx to avoid the old and crappy 10.4 version (gareuselesinge)
- src/lua/davmail.lua: fixed metadata (gareuselesinge)
- src/lua/hotmail.lua: new version by russell (gareuselesinge)
- src/lua/mailcom.lua: Fixed issues with india.com (russell822)
- src/lua/yahoo.lua: Minor tweaks to fix issues reported in threads. (russell822)
- osx uses a custom version of curl, since osx 10.4 has an old version
- osx package will report the correct version
Too many changes to note, but this works with PostgreSQL-9.1.5 without
spitting out any warnings which is my reason for updating it.
A few of prior pkgsrc patches have been merged upstream now.
A little improvement to MESSAGE about upgrading.
CHANGELOG Roundcube Webmail
===========================
- Fix XSS vulnerability in handling of text/enriched messages (#1488806)
- Fix handling of 'media' attribute on linked css (#1488789)
- Fix regression where unintentional page reload was done after request abort (#1488802)
- Fix excessive LFs at the end of composed message with top_posting=true (#1488797)
- Fix bug where leading blanks were stripped from quoted lines (#1488795)
RELEASE 0.8.3
-------------
- Fix AREA links handling (#1488792)
- Fix possible HTTP DoS on error in keep-alive requests (#1488782)
- Fix compatybility with MDB2 2.5.0b4 (#1488779)
- Fix a bug where saving a message in INBOX wasn't possible
- Fix HTML part detection in messages with attachments (#1488769)
- Fix bug where wrong words were highlighted on spell-before-send check
- Fix scrolling quirk in email preview frame using Opera 12 (#1488763)
- Fix displaying of multipart/alternative messages with empty parts (#1488750)
- Fix Warning: htmlspecialchars(): charset `RCMAIL_CHARSET' not supported warning in Installer (#1488744)
- Fix threaded list sorting on PHP < 5.2.9 (#1488748)
RELEASE 0.8.2
-------------
- Fix XSS vulnerability from HTTP User-Agent header (#1488737)
- Force fonts in compose fields to be all the same (#1488690)
- Add full headers view in message preview window (#1488538)
- Fix message display page issues (#1488590, #1488642)
- Fix handling vCard entries with TEL;TYPE=CELL (#1488728)
- Fix error where session wasn't updated after folder rename/delete (#1488692)
- Fix PLAIN authentication for some IMAP servers (#1488674)
- Fix encoding vCard file when contains PHOTO;ENCODING=b (#1488683)
- Fix focus issue in IE when selecting message row (#1488620)
- Fix displaying all headers when they contain malformed characters (#1488666)
- Fix decoding of HTML messages with UTF-16 charset specified (#1488654)
- Fix quota capability detection so it can be overwritten by a plugin (#1488655)
- Fix identity selection on reply (#1488101)
- Fix Larry's messages list filter in IE (#1488632)
- Fix more IE issues by disabling Compat. mode with X-UA-Compatible meta tag (#1488626)
- Fix setting locales under Solaris - use additional .UTF-8 suffix (#1488628)
- Fix email address validation for addresses with IP address in domain part
- Fix Larry skin issues in IE7 compat. mode (#1488618)
- Fix so subscribed non-existing/non-accessible shared folder can be unsubscribed
- lmtp/lda: dovecot.index.cache file is no longer fully mapped to
memory, allowing mail deliveries to work even if the file is huge.
- auth: userdb passwd lookups are now done by auth worker processes
instead of auth master process (as it was documented, but
accidentally didn't work that way).
- lmtp: lmtp_rcpt_check_quota=yes setting checks quota on RCPT TO.
- lmtp: After successful proxying RCPT TO, the next one to a
nonexistent user gave tempfail error instead of "user not found".
- lmtp proxy: Fixed hanging if remote server was down.
- imap: Fixed crash when SEARCH contained multiple KEYWORD parameters.
- doveadm: Various fixes to handling doveadm-server connections.
- -i <instance name> parameter for Dovecot tools didn't work correctly.
- director was somewhat broken in v2.1.10. This version also includes
various reliability enhancements.
- auth: passdb imap was broken in v2.1.10.
Changelog:
NEW
A Menu Button is now shown to new users by default
NEW
Tabs are now drawn in the title bar on Windows
FIXED
An issue causing spell-checking only parts of words in Thunderbird 16 is now fixed (790475)
FIXED
An issue causing Thunderbird 16 to repeatedly download emails is now fixed (806760)
FIXED
RSS feeds can now be viewed in the Wide View Layout (531397)
FIXED
Various fixes and performance improvements
FIXED
Various security fixes
CHANGED
Mac OS X 10.5 is no longer supported
Security fixes:
Fixed in Thunderbird 17
MFSA 2012-106 Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer
MFSA 2012-105 Use-after-free and buffer overflow issues found using Address Sanitizer
MFSA 2012-103 Frames can shadow top.location
MFSA 2012-101 Improper character decoding in HZ-GB-2312 charset
MFSA 2012-100 Improper security filtering for cross-origin wrappers
MFSA 2012-99 XrayWrappers exposes chrome-only properties when not in chrome compartment
MFSA 2012-97 XMLHttpRequest inherits incorrect principal within sandbox
MFSA 2012-96 Memory corruption in str_unescape
MFSA 2012-94 Crash when combining SVG text on path with CSS
MFSA 2012-93 evalInSanbox location context incorrectly applied
MFSA 2012-92 Buffer overflow while rendering GIF images
MFSA 2012-91 Miscellaneous memory safety hazards (rv:17.0/ rv:10.0.11)
Fix input handling for file data sets for the macro case.
Ensure NULL-termination of macro value tests.
STATS: Fix hang bug in opendkim-reportstats.
STATS: Fix bug #SF3547363: Fix "Top 10" and DNSSEC trend reports.
2.6.6 2012/07/18
LIBAR: Fix bug #SF3544522: Not all systems define a "_len" member for
the sockaddr structures.
LIBOPENDKIM: Fix bug #SF3545490: If the body handed to the library was
missing a trailing line terminator, then dkim_canon_closebody()
would end the hashes with some data not included. Now, if
DKIM_LIBFLAGS_FIXCRLF is set, it will detect this condition
and correct it; if not, an error is returned.
LIBOPENDKIM: If the job ID passed in during handle creation includes
slashes and temporary file creation is enabled, convert the
slashes to dots in the temporary file template.
2.6.5 2012/07/14
Swap order of "header.d" and "header.i" values in
Authentication-Results fields.
BUILD: Fix bug #SF3543282: Corrections to Darwin/libar build adjustment
made in 2.6.3.
2.6.4 2012/07/12
Feature request #SF3542099: Include "header.d" in all
Authentication-Results fields, not just "header.i". This
makes life easier for users of OpenDMARC.
BUILD: Fix SHA256 test on some systems.
2.6.3 2012/07/11
Add "ResolvConf" setting, allowing the ability to pass a
resolv.conf-like file to unbound to allow specific nameservers
to be used instead of the default.
LIBOPENDKIM: Return the correct error code when a SHA1-only library
encounters a SHA1 signature that references a SHA256-only key.
LIBAR: Add ar_resolvconf().
BUILD: Fix bug #SF3538676: Build with -DDARWIN on MacOSX, and default
to arlib if unbound isn't selected.
2.6.2 2012/07/02
Fix build confusion between _FFR_RATE_LIMIT and _FFR_RESIGN.
Fix bug #SF3538639: Fix error when --domain is not provided to
opendkim-genrates. Problem noted by Andreas Schulze.
Fix bug #SF3539449: Clarify legal "Socket" values.
Fix bug #SF3539493: Handle certain cases of data set names that
appear to be comma-separated lists which include IPv6
addresses.
2.6.1 2012/06/25
Restore and activate _FFR_SELECT_CANONICALIZATION. Also adds a
SelectCanonicalizationHeader configuration option.
Remove _FFR_SELECTOR_HEADER.
Update Authentication-Results parsing to understand "dkim-atps"
(RFC6541) and no longer understand "hardfail" (RFC6577).
LIBAR: Fix bug #SF3309946: Ensure the dispatcher doesn't hold the
master lock when it might enter a read wait.
STATS: Add a database index on messages.msgtime to aid with
expiration performance.
TOOLS: Feature request #SF3536385: Add "-a" to opendkim-genkey to
include a domain name in the generated TXT record.
2.6.0 2012/06/07
Feature request #SF3502777: Log all authentication results rather than
relying on logging of Authentication-Results header fields.
Feature request #SF3512286: Add "LDAPSoftStart" flag so the filter
doesn't abort on startup when LDAP is not available.
Feature request #SF3512836: Add _FFR_SOCKETDB, which enables support
for a generic socket data set.
Feature request #SF3514982: Add Erlang data set support.
Feature request #SF3516253: Update to newest "repute" working group
documents, which mainly means adding JSON support and
promoting application-specific extensions to the top level
in the reputon structure.
Feature request #SF3518593: Add support for OpenLDAP's MDB as a
data set backend.
Feature request #SF3519002: Put reason information inside a "reason"
tag in Authentication-Results header fields rather than in
comments.
Feature request #SF3521000: Log hostname and daemon name (taken from
macros) when logging "no MTA name match".
Feature request #SF3524756: Add ability to request TCP keepalive
features via the OpenLDAP client library.
Feature request #SF3529233: Add odkim.get_envfrom() to all Lua scripts.
Fix bug #SF3518877: Separate variable expansion from literal text in
opendkim-genkey.
Fix bug #SF3522883: Allow TLS for ldapi URIs. Problem noted by
Quanah Gibson-Mount.
Fix bug #SF3527428: Construct the LDAP URI list properly, rather than
only keeping the last one, and add failover code.
Patch #SF3522895: Add contrib/ldap/opendkim.ldif.
Activate _FFR_XTAGS.
Remove _FFR_SELECT_CANONICALIZATION.
LIBAR: Fix bug #SF3444318: Do proper buffer size calculations to
avoid valgrind warnings about references to unaddressable
space.
LIBOPENDKIM: Fix bug #SF3496041: Remove _FFR_PARSETIME.
LIBOPENDKIM: Fix bug #SF3516653: By default, treat a syntax error
in an ADSP record as an NXDOMAIN. Add new library flag
DKIM_LIBFLAGS_REPORTBADADSP to restore the original
behaviour.
LIBOPENDKIM: Fix bug #SF3524865: Disallow generation of signatures
where signer and signing domain don't match per the DKIM
specification. Add DKIM_LIBFLAGS_DROPSIGNER which, if set,
will still generate signatures in that case, but with the
signer omitted so the signature is still compliant.
BUILD: Fix bug #SF3425384: Add missing support for compiling
against libevent2, which is an option for unbound.
BUILD: Fix bug #SF3475799: Don't do a manual check for libdb.a.
Use the AC_CHECK_* macros instead.
DOCS: Fix bug #SF3518864: The license for IETF documents is not
compatible with free software licensing, which makes packaging
a bit of a chore. Replace all the text files in the "docs"
directory with a single HTML page that includes links to
all the things we used to include here.
STATS: Feature request #SF3110059: Move opendkim-reportstats from
contrib/stats to stats, making it fully supported.
STATS: Feature request #SF3525786: Add opendkim-expire script.
STATS: Feature request #SF3528652: Allow a specific list of domains,
possibly read from a file, for opendkim-gengraphs and
opendkim-genrates.
mailsort is a perl script that sorts mbox format (single file) mail
folders by the dates in the `From ' lines that separate mail messages
in each folder.
to fix the build. As the "fetchmail" package doesn't provide any
shared libraries this shouldn't cause problems caused by mixing two
versions of OpenSSL.
Changelog:
Fixed in Thunderbird 16.0.2
MFSA 2012-90 Fixes for Location object issues
MFSA 2012-67 Installer will launch incorrect executable following new installation
# SECURITY FIXES
* for CVE-2012-3482:
NTLM: fetchmail mistook an error message that the server sent in response to
an NTLM request for protocol exchange, tried to decode it, and crashed while
reading from a bad memory location.
Also, with a carefully crafted NTLM challenge packet sent from the server, it
would be possible that fetchmail conveyed confidential data not meant for the
server through the NTLM response packet.
Fix: Detect base64 decoding errors, validate the NTLM challenge, and abort
NTLM authentication in case of error.
See fetchmail-SA-2012-02.txt for further details.
Reported by J. Porter Clark.
* for CVE-2011-3389:
SSL/TLS (wrapped and STARTTLS): fetchmail used to disable a countermeasure
against a certain kind of attack against cipher block chaining initialization
vectors (SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS).
Whether this creates an exploitable situation, depends on the server and the
negotiated ciphers.
As a precaution, fetchmail 6.3.22 enables the countermeasure, by clearing
SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS.
NOTE that this can cause connections to certain non-conforming servers to
fail, in which case you can set the environment variable
FETCHMAIL_DISABLE_CBC_IV_COUNTERMEASURE to any non-empty value when starting
fetchmail to re-instate the compatibility option at the expense of security.
Reported by Apple Product Security.
For technical details, refer to <http://www.openssl.org/~bodo/tls-cbc.txt>.
See fetchmail-SA-2012-01.txt for further details.
# BUG FIX
* The Server certificate: message in verbose mode now appears on stdout like the
remainder of the output. Reported by Henry Jensen, to fix Debian Bug #639807.
* The GSSAPI-related autoconf code now matches gssapi.c better, and uses
a different check to look for GSS_C_NT_HOSTBASED_SERVICE.
This fixes the GSSAPI-enabled build on NetBSD 6 Beta.
# CHANGES
* On systems where SSLv2_client_method isn't defined in OpenSSL (such as
newer Debian, and Ubuntu starting with 11.10 oneiric ocelot), don't
reference it (to fix the build) and if configured, print a run-time error
that the OS does not support SSLv2. Fixes Debian Bug #622054,
but note that that bug report has a more thorough patch that does away with
SSLv2 altogether.
* The security and errata notices fetchmail-{EN,SA}-20??-??.txt are now
under the more relaxed CC BY-ND 3.0 license (the noncommercial clause
was dropped). The Creative Commons address was updated.
* The Python-related Makefile.am parts were simplified to avoid an automake
1.11.X bug around noinst_PYTHON, Automake Bug #10995.
* Configuring fetchmail without SSL now triggers a configure warning,
and asks the user to consider running configure --with-ssl.
# WORKAROUNDS
* Some servers, notably Zimbra, return A1234 987 FETCH () in response to
a header request, in the face of message corruption. fetchmail now treats
these as temporary errors. Report and Patch by Mikulas Patocka, Red Hat.
* Some servers, notably Microsoft Exchange, return "A0009 OK FETCH completed."
without any header in response to a header request for meeting reminder
messages (with a "meeting.ics" attachment). fetchmail now treats these as
transient errors. Report by John Connett, Patch by Sunil Shetye.
# TRANSLATION UPDATES
* [cs] Czech, by Petr Pisar
* [de] German
* [fr] French, by Frédéric Marchal
* [ja] Japanese, by Takeshi Hamasaki
* [pl] Polish, by Jakub Bogusz
* [sv] Swedish, by Göran Uddeborg --- NEW TRANSLATION - Thank you!
* [vi] Vietnamese, by Trần Ngọc Quân
Exim version 4.80.1
-------------------
PP/01 SECURITY: protect DKIM DNS decoding from remote exploit.
CVE-2012-5671
This, or similar/improved, will also be change PP/11 of 4.81.
See: https://secunia.com/advisories/51098/
1.00 Sat Apr 16 13:10:16 UTC 2011
- Avoid infinite loop: signal handler modifies errno
- Added support for SMFIC_UNKNOWN
0.99 Sun Feb 6 21:32:30 UTC 2011
- RT#65499: Handle IPv6 addresses in SMFIC_CONNECT in
Sendmail::PMilter::Context
0.98 Fri Mar 12 21:36:18 GMT 2010
- RT#51759: added child_init and child_exit parameters to prefork
dispatcher -Michael Schout
- RT#51713: fixed POD errors for embedded '>' -Michael Schout
- Note in the POD that the module is orphaned and is looking for a
proper maintainer.
0.97 Mon Feb 23 23:39:15 2009 UTC
- RT#43327: Changed protocol testing condition from ($ver == 2) to ($ver >= 2 && $ver <= 6)
to make the milter work with Sendmail 8.14
- Removed CVS Id from Changes file
0.96 Sat Jul 07 18:27:25 2007 UTC
- Changed threads::shared::share(\$nchildren) to
threads::shared::share($nchildren), this should fix some failing smokes
- fix From_ quoting in mbox delivery; use of the Python stdlib
function meant getmail was incorrectly using mboxo-style quoting
instead of mboxrd quoting, probably since early in the v4 series.
Thanks: Christoph Mitterer.
libXext/buildlink3.mk, now that it is included there.
Leave the places where its API version is set or variables from it
are used directly (about 3 packages).
version 1.35:
- added video/webm and audio/webm, although not (yet) IANA registered.
[Kurian Jose Aerthail]
version 1.34: Thu Jan 12 11:16:07 CET 2012
- subType() did not handle subType's with '+' in them.
[Roman V. Nikolaev]
version 1.33: Thu Jan 12 08:46:05 CET 2012
- all openxmlformats are binary [Beverly Wang]
- mediaType() and subType() did not handle subType's with dots
in them correctly. [Roman V. Nikolaev]
version 1.32: Thu Aug 18 23:30:25 CEST 2011
- explain how to use MIME::Types in mod_perl, after complains
from [Steve Simms], [Nicolas Mendoza], [Yves Orton] and
[Hans Dieter Pearcey]
- when you do not read the documentation about mod_perl/fork,
then it will work as ever but still inefficient.
Changelog:
Fixed in Thunderbird ESR 10.0.9
MFSA 2012-89 defaultValue security checks not applied
Fixed in Thunderbird ESR 10.0.8
MFSA 2012-87 Use-after-free in the IME State Manager
MFSA 2012-86 Heap memory corruption issues found using Address Sanitizer
MFSA 2012-85 Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer
MFSA 2012-84 Spoofing and script injection through location.hash
MFSA 2012-83 Chrome Object Wrapper (COW) does not disallow acces to privileged functions or properties
MFSA 2012-82 top object and location property accessible by plugins
MFSA 2012-81 GetProperty function can bypass security checks
MFSA 2012-79 DOS and crash with full screen and history navigation
MFSA 2012-77 Some DOMWindowUtils methods bypass security checks
MFSA 2012-74 Miscellaneous memory safety hazards (rv:16.0/ rv:10.0.8)
MFSA 2012-59 Location object can be shadowed using Object.defineProperty
Changelog:
FIXED
16.0.1: Vulnerability outlined here
https://blog.mozilla.org/security/2012/10/10/security-vulnerability-in-firefox-16/
NEW
We have now added box.com to the list of online storage services that are available for use with Thunderbird Filelink
NEW
Silent, background updates. Thunderbird will now download and apply updates in the background allowing you to start quickly the next time Thunderbird starts up.
FIXED
Various fixes and performance improvements
FIXED
Various security fixes
Fixed in Thunderbird 16.0.1
MFSA 2012-89 defaultValue security checks not applied
MFSA 2012-88 Miscellaneous memory safety hazards (rv:16.0.1)
Fixed in Thunderbird 16
MFSA 2012-87 Use-after-free in the IME State Manager
MFSA 2012-86 Heap memory corruption issues found using Address Sanitizer
MFSA 2012-85 Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer
MFSA 2012-84 Spoofing and script injection through location.hash
MFSA 2012-83 Chrome Object Wrapper (COW) does not disallow acces to privileged functions or properties
MFSA 2012-82 top object and location property accessible by plugins
MFSA 2012-81 GetProperty function can bypass security checks
MFSA 2012-80 Crash with invalid cast when using instanceof operator
MFSA 2012-79 DOS and crash with full screen and history navigation
MFSA 2012-77 Some DOMWindowUtils methods bypass security checks
MFSA 2012-76 Continued access to initial origin after setting document.domain
MFSA 2012-75 select element persistance allows for attacks
MFSA 2012-74 Miscellaneous memory safety hazards (rv:16.0/ rv:10.0.8)
Changelog v0.3.2:
+ sieve-refilter tool: improved man page documentation by explicitly specifying
the syntax used for mailbox arguments.
+ Sieve: spamtest and virustest extensions: improved trace debugging of score
calculation.
+ Sieve: made error messages about exceeding the maximum number of actions more
verbose.
- Sieve tools: fixed problems with running as root: sievec and sieve-dump now
ignore mail_uid and mail_gid settings when run as root.
- Sieve: fixed bug in action accounting (for limit checking): increase action
instance count only when an action is actually created.
- Sieve: include extension: fixed namespace separation of :global and :personal
scripts.
- ManageSieve: fixed segfault bug triggered by CHECKSCRIPT command.
- Fixed linking with ld.gold.
- Fixed several Clang compile warnings and a few potential bugs.
Changelog v0.3.3:
- Fixed compile against installed Dovecot headers. This was broken by the
ld.gold fix in the previous release.
+ imap: Implemented THREAD=ORDEREDSUBJECT extension.
+ Added "doveadm exec" command to easily execute commands from libexec_dir,
e.g. "doveadm exec imap -u user@domain"
+ Added "doveadm copy" command.
+ doveadm copy/move: Added optional user parameter to specify the source
username. This allows easily copying mails between different users.
+ Added namespace { disabled } setting to quickly enable/disable namespaces.
This is especially useful when its value is returned by userdb.
+ Added mailbox_alias plugin. It allows creating mailbox aliases using
symlinks.
+ imapc storage: Added imapc_max_idle_time setting to force activity on
connection.
+ fts-solr: Expunging multiple messages is now faster.
- director: In some conditions director may have disconnected from another
director (without logging about it), thinking it was sending invalid data.
- imap: Various fixes to listing mailboxes.
- pop3-migration plugin: Avoid disconnection from POP3 server due to idling.
- login processes crashed if there were a lot of local {} or remote {} settings
blocks.
Changelog:
FIXED Security fixes can be found here
Fixed in Thunderbird ESR 10.0.7
MFSA 2012-72 Web console eval capable of executing chrome-privileged code
MFSA 2012-70 Location object security checks bypassed by chrome code
MFSA 2012-67 Installer will launch incorrect executable following new installation
MFSA 2012-65 Out-of-bounds read in format-number in XSLT
MFSA 2012-63 SVG buffer overflow and use-after-free issues
MFSA 2012-62 WebGL use-after-free and memory corruption
MFSA 2012-61 Memory corruption with bitmap format images with negative height
MFSA 2012-58 Use-after-free issues found using Address Sanitizer
MFSA 2012-57 Miscellaneous memory safety hazards (rv:15.0/ rv:10.0.7)
option, so turn it on by default.
The option should probably be removed entirely, as the code doesn't
look amenable to a narrow-only build.
PKGREVISION -> 2.
version 2.11: Wed Aug 29 09:09:47 CEST 2012
Fixes:
- typo in Mail::Mailer::smtp, which only shows up in >5.14
[cpantesters]
version 2.10: Tue Aug 28 09:41:52 CEST 2012
Fixes:
- Mail::Mailer::smtp set from address twice.
rt.cpan.org#77161 [Vladimir Goshev]
- Mail::Mailer::smtps did not support the From option.
rt.cpan.org#77161 [Vladimir Goshev]
Improvements:
- Mail::Util::mailaddress has now an optional parameter to
set the returned value explicitly.
rt.cpan.org#75975 [Rolf G]
* Update Mozilla Lightning to 1.7
* Update Enigmail to 1.4.4 (functionality is not tested yet; should
be updated)
* Regen patches
Changelog:
NEW Multi-Channel Chat: You now can enjoy real time conversation with your contacts, right from your favorite messaging application.
NEW Do Not Track: This option has been implemented as an addition to Search the Web.
NEW Ubuntu One is now supported in Filelink - the option to upload large attachments to online storage services.
NEW New User Interface: Thunderbird is replicating the new look and feel of Mozilla Firefox in an effort to provide a similar user experience across all Mozilla software desktop or mobile and all platforms.
FIXED Various fixes and performance improvements
FIXED Various security fixes
MFSA 2012-72 Web console eval capable of executing chrome-privileged code
MFSA 2012-70 Location object security checks bypassed by chrome code
MFSA 2012-68 DOMParser loads linked resources in extensions when parsing text/html
MFSA 2012-67 Installer will launch incorrect executable following new installation
MFSA 2012-65 Out-of-bounds read in format-number in XSLT
MFSA 2012-64 Graphite 2 memory corruption
MFSA 2012-63 SVG buffer overflow and use-after-free issues
MFSA 2012-62 WebGL use-after-free and memory corruption
MFSA 2012-61 Memory corruption with bitmap format images with negative height
MFSA 2012-59 Location object can be shadowed using Object.defineProperty
MFSA 2012-58 Use-after-free issues found using Address Sanitizer
MFSA 2012-57 Miscellaneous memory safety hazards (rv:15.0/ rv:10.0.7)
Upstream changes:
0.190 2012-03-26
fix skip test count
0.189 2012-03-26
addresses in the form rjbs@[1.2.3.4], when allowed by allow_ip,
are not failed for the tld check (reported by Marcel Gr.nauer)
0.188 2012-03-15
fix [rt.cpan.org #75736], in which 0@domain.com was considered
invalid (thanks for the fix from Steve Bertrand)
0.187 2012-01-27
addresses in the form rjbs@[1.2.3.4] are now (correctly) considered
valid; this can be disabled with the -allow_ip option
(this resolves RT #48398)
check email address length and localpart length (thanks, Steve
Bertrand!)
0.186 2012-01-22
use blessed($x) instead of wrapping an ->isa called in eval{}; this
patch (thanks, Felipe Bergo!) was submitted to avoid problems with
people who have global __DIE__ handlers, but was applied to just
avoid the dumb eval{}; people with __DIE__ are otherwise on their
own, here
- The patch was added to define the non-posix MAXNAMLEN macro if it was
not already defined.
- The Makefile had to patched and then inline-replaced to fix the
invocation of the install program. Without this, non-root builds fail.
Fixes two XSS issue.
Here is quote from changelog of 0.8.1, please refer CHAGNGELOG file for
full changes from 0.7.2.
- Fix bug where domain name was converted to lower-case even with login_lc=false (#1488593)
- Fix lower-casing email address on replies (#1488598)
- Fix line separator in exported messages (#1488603)
- Fix XSS issue where plain signatures wasn't secured in HTML mode (#1488613)
- Fix XSS issue where href="javascript:" wasn't secured (#1488613)
- Fix impossible to create message with empty plain text part (#1488610)
- Fix stripped apostrophes when replying in plain text to HTML message (#1488606)
- Fix inactive Save search option after advanced search (#1488607)
- Fix Remove from group option is active for contact search result (#1488608)
- Disable autocapitalization in login form on iPad/iPhone (#1488609)
- Fix focus on the list when list row is clicked (#1488600)
- Added separate From and To columns apart from smart From/To column (#1486891)
- Fix fallback to Larry skin when configured skin isn't available (#1488591)
- Fix (workaround) delete operations with some versions of memcache (#1488592)
- Fix (disable) request validation for spell and spell_html actions
Remove the unneeded patch
Upstream changes:
Version 3.029
Allow the MIME-Version header to be replaced (thanks, Florian!)
Version 3.028
Various documentation fixes
fdm is a program to fetch mail and deliver it in various ways
depending on a user-supplied ruleset. Mail may be fetched from
stdin, IMAP or POP3 servers, or from local maildirs, and filtered
based on whether it matches a regexp, its size or age, or the output
of a shell command. It can be rewritten by an external process,
dropped, left on the server or delivered into maildirs, mboxes, to
a file or pipe, or any combination.
fdm is designed to be lightweight but powerful, with a compact but
clear configuration syntax. It is primarily designed for single-user
uses but may also be configured to deliver mail in a multi-user
setup. In this case, it uses privilege separation to minimise the
amount of code running as the root user.
Upstream changes:
version 3.32: Fri, Aug 10, 2012 4:43:24 PM
- document RFC2087 quota related calls
[Mathias Reitinger] documentation request
- rt.cpan.org#78474: idle/idle_data documentation error
[Dima Kogan]
- Quote()/Massage() now uses literals for non ascii data
[Mathias Reitinger] reported issues with utf8 data in password
- use Quote()/Massage() consistently now in:
login() proxyauth() deleteacl() setacl() listrights() rename()
- documented deleteacl() and other minor pod cleanup
- ran Mail::IMAPClient::BodyStructure through perltidy
- update year in README/pod to 2012
- rt.cpan.org#74733: Fails with Parse::RecDescent >= 1.966_002
rt.cpan.org#74593: Recent changes break Module::ExtractUse and ...
[ANDK, TEAM, SREZIC, NBEBOUT at CPAN and nine from detonation]
- Makefile.PL avoid buggy Parse::RecDescent 1.966_002 until 1.967_009
- rt.cpan.org#76989: Mail::IMAPClient::BodyStructure usage/docs
[Pierluigi Frullani]
- fix incorrect documentation on new()
- lots of doc verbiage updates
* mail-log plugin: Log mailbox names with UTF-8 everywhere (instead of mUTF-7
in some places and UTF-8 in other places)
* director: Changed director_username_hash setting's default from %u to %Lu (=
lowercase usernames). This doesn't break any existing installations, but
might fix some of them.
+ doveadm: Added "auth cache flush [<username>]" command.
+ Implemented dict passdb/userdb
+ Implemented Redis and memcached dict backends, which can be used as auth
backends. Redis can also be used as dict-quota backend.
+ Added plugin { quota_ignore_save_errors=yes } setting to allow saving a mail
when quota lookup fails with temporary failure.
- Full text search indexing might have failed for some messages, always causing
indexer-worker process to run out of memory.
- fts-lucene: Fixed handling SEARCH HEADER FROM/TO/SUBJECT/CC/BCC when the
header wasn't lowercased.
- fts-squat: Fixed crash when searching a virtual mailbox.
- pop3: Fixed assert crash when doing UIDL on empty mailbox on some setups.
- auth: GSSAPI RFC compliancy and error handling fixes.
- Various fixes related to handling shared namespaces
Based on PR 46440 by Uwe Klaus.
Version Changes for Hypermail
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
============================
HYPERMAIL VERSION 2.3.0:
============================
Jose Kahan (Oct 27, 2009)
- Added two new accesskeys in messages: 't' -> next message
in thread, 'd' -> next message
Jose Kahan (Oct 26, 2009)
- Updated hmrc.4 and hmrc.html to descrbie the new features.
Jose Kahan (Oct 26, 2009)
Various fixes / enhancements developed at W3C by Fumihiro Kato,
Daigo Matsubara and myself:
- Markup changes for deleted messages that are kept.
- New directive: htmlmessage_deleted for setting a custom HTML
message for the body of deleted messages.
- New directive: delete_incremental to disable deleting of existing
messages in the archive when doing an incremental add of a new
message. In some setups, if this feature is enabled, replies to
deleted messages will cause uncontrolled markup escape and
expansion. Feature is enabled by default.
- Updated list of known protocol uris that hypermail will convert
into links.
- Bug fix: setup.c:MakeConfig() CFG_SWITCH was using long instead of
int.
- New directive: fragment_prefix for customizing the prefix that is
put before each URI fragment in a message. Default value is "msg",
the previous hard-coded value.
- New directive: email_address_obfuscation foro enablingemail
address obfuscation using numeric character reference.
- New directive: inline_addlink to add in-line links to content that
is stored in the attachments subdirectory. 'inline_types" must
also be enabled.
- New directive: inreplyto_command, gives a URI template to a script
that hypermail will link to if it's unable to find a corresponding
Message-Id in the archive's messages.
Peter McCluskey (May 13, 2008)
Change from Fumihiro Kato to fix bug that sometimes caused a charset
problem when Content-Type is us-ascii but message headers
include other encoded text like utf-8.
Peter McCluskey (Nov 14, 2007)
Applied xhtml patch from Zvi Har'El.
Peter McCluskey (Oct 1, 2007)
Changes from Fumihiro Kato to fix bugs on 64 bit systems and some
possible buffer overflow problems.
Change in rules about whether to escape urls; it now seems to escape them
when found in the middle of the line the same way it has been doing when
they are at the start of a line.
Peter McCluskey (Feb 16, 2007)
Changes from Rick van der Zwet:
cosmetic = tweaking the interface a small bit (right align, the message
numbers, years in the date listing
spamify-domain = obfuscate the body of the message as well (will also
obfuscate 'ssh rick@foo.bar' this of course), moved the domain obfuscate
yes/no to the general to make the function more portable
Changes from Mike Fabian changing int to size_t.
Peter McCluskey (Mar 27, 2006)
Add rel="nofollow" to text message URLs (option txtsuffix = 1).
Peter McCluskey (Mar 14, 2006)
Fixed a core dump with linkquotes = 1 caused by Daigo's changes.
Peter McCluskey (Sep 30, 2005)
Fixed missing links at top when show_index_links is 1 or 3.
Peter McCluskey (Aug 4, 2005)
Fixed double counting of messages deleted with the delete_msgnum option,
which sometimes caused top level index page to show wrong number of
messages and not link to a folder.
Peter McCluskey (Jul 29, 2005)
Changed to sort on sender date rather than from date when displaying
sender date as a result of use_sender_date = 1.
Peter McCluskey (Jun 23, 2005)
Some small changes from Vincent McIntyre to make date-range in index of
folders link to default index page, to use CSS instead of <th> to
distinguish that column, and some whitespace changes.
Added explanation of how to handle strcasestr prototype error to INSTALL.
Peter McCluskey (Mar 19, 2005)
Fixes to files_by_thread option submitted by Oliver Meili.
Peter McCluskey (Dec 2, 2004)
Patch from Ulf Härnhammar to fix two format string bugs in Hypermail.
They could have caused crashes if using incremental mode on edited
pre-existing archives with data like "%n%n%n%n%n%n%n%n" in certain lines.
Peter McCluskey (Nov 28, 2004)
Add filename_base option.
Peter McCluskey (Sep 29, 2004)
Add support for JAVT timezone.
Add mailbox_date_trimmer to contrib, faq.
Peter McCluskey (Jun 2, 2004)
Add language code substitution cookie patch from Shane Wegner.
============================
HYPERMAIL VERSION 2.2.0:
============================
Peter McCluskey (May 25, 2004)
Changed some of the addresses to hypermail-project.org.
Made the "We delete ... " message print only if progress != 0.
Peter McCluskey (Mar 23, 2004)
Changes to speed up incremental update when there are deleted files if
using usegdbm (it's still slow if usegdbm = 0).
============================
HYPERMAIL VERSION 2.1.9:
============================
Peter McCluskey (Feb 23, 2004)
Released version 2.1.9 tar file.
Peter McCluskey (Feb 17, 2004)
Add use_sender_date option.
Fix instructions for doing "make install" so that the documentation will
be installed.
Peter McCluskey (Feb 5, 2004)
Update much of the documentation.
Peter McCluskey (Feb 4, 2004)
Change default in setup.c for spamprotect and spamprotect_id to On.
Peter McCluskey (Feb 2, 2004)
Add set_report_new_file and set_report_new_folder options.
Peter McCluskey (Jan 23, 2004)
Add in missing <a name="end"> for index files.
Removed a misleading, nonportable timezone string from link titles in
toplevel index pages.
Peter McCluskey (Jan 9, 2004)
Change to make mbox_shortened option work a little better with
discard_dup_msgids = 0.
Change folder_by_date option to use "From " date rather than "Date: "
to decide which subdirectory to use. This makes it consistent with
top level index page.
Peter McCluskey (Dec 26, 2003)
Add increment = -1 mode to enable automatic determination of whether
to update or append in most cases.
Peter McCluskey (Dec 3, 2003)
Added a mbox_shortened option to handle mboxes that have had messages
deleted from the start of the mbox.
Peter McCluskey (Dec 1, 2003)
Fix mismatch in <ul>, </ul> in date.html with indextable = 0.
Peter McCluskey (Nov 17, 2003)
Add a check for the problem with the starting message number that was
partly fixed on Oct 1. Now old archives with a startmsgnum = 0 .hmrc but
a first message of 0001.html in this case will be treated as if startmsgnum
was 0.
Peter McCluskey (Nov 15, 2003)
Add Portugese support from Hugo Cisneiros.
Peter McCluskey (Oct 1, 2003)
Fix some problems with starting message number that caused bugs when
increment = 1, linkquotes = 1 and using folder_by_date.
Peter McCluskey (Sep 11, 2003)
Fixes to make pcre work.
Peter McCluskey (Sep 3, 2003)
Applied patches from Mike McDonald to use nowrap option in the author and
date columns in the index tables and get rid of all of the 'width=100%'
options to the tables.
Peter McCluskey (Sep 3, 2003)
French language improvements from Olivier Kaloudoff.
Peter McCluskey (Sep 1, 2003)
Applied patches from Mike McDonald to make spamify_replacedomain use
set_antispam_at, change printdates to include the dates in the table
version of the bydate index, and make the table use the whole screen
width instead of 80%.
Jose Kahan (Aug 18, 2003)
- Changed to lowercase the suffixes added to the message indexes. That is,
from "archive name By Date" to "archive name by date" because the
upper case seemed out of style as we don't have any control on what
is the string used for the archive's name. Did this change only for
the English messages as I don't know if this convention works well for
other languages.
Jose Kahan (Aug 18, 2003)
- Made the links to the different indexes show the index of the current entry.
This change originated from the feedback we got on the WAI enhanced archievs.
People find that this small changes increases the usability of the archive.
Jose Kahan (Aug 18, 2003)
- The links to the first message (aka #first) were not working in the
by attachment, by author, and by subject indexes.
Peter McCluskey (Aug 16, 2003)
- applied fix from Jean-Charles Meyrignac to handle 0x1A in mbox.
Jose Kahan (Aug 14, 2003)
- After receiving more feedback, reverted the changes done for converting the
displayed value of the Date: header. The reason is that users like to know
when they send a message. This information was getting lost because we
were converting the date to the local time.
- Made the Received on date be shown in converted local time.
- Added a new configuration option, indexdateformat, so that people can
specify a different format for indexes than the one used elsewhere. If this
variable is not defined., it'll use the dateformat by default.
- Made the index by date compare dates independently of the value of dateformat.
Jose Kahan (Aug 13, 2003)
- Made the Received on footnote line use the same date format as that used for the
Date: header on top of the messages.
Jose Kahan (Aug 18, 2003)
- Small WAI change to the list of indexes to show the entry corresponding to
the current index, but outside of a link. This comes from feedback, where
people said it was less distracting to see the same index to links all
the time.
Jose Kahan (Aug 18, 2003)
- Add the <title> WAI enhancement that I had forgotten to do for messages.
The new format is: [subject] from [author] on [date] ([mailing list label]).
I also removed the 64 characters maximum limit check we had on the title.
The reason is that this is not part of the HTML specification, but rather
a writing style. Dominique says we shouldn't be so strict in this case. In
addition, just adding a \0 after 64 characters could break entity names and
generate invalid HTML.
Jose Kahan (Aug 13, 2003)
- The mailcommand option didn't work when applied to a paragraph that had
a previously converted href string that includes the '@' char. I added
a quick hack to ConvURlsString to avoid doing the mailto: convertion if an href
already exists in that line. The best solution would be to do something
similar to ConvURLsWithHrefs.
Also fixed a memory leak.
Peter McCluskey (Aug 8, 2003)
- Applied haof fixes from Bernhard Reiter.
Jose Kahan (Aug 4, 2003)
- As a side effect of PNK's use of an SGML entity for the @ char, the
mailcommand option stopped working on all the headers except for
the To: one.
Jose Kahan (Aug 1, 2003)
- In order to guarantee the validity of XHTML documents, changed the
behavior of hypermail when including customized footers. Previously,
when using this option, the custom markup had to include the </body>
and </html> end tags. As we also need to include a </div> in some
cases for XHTML and it's much harder to guess when to add it, I
made hypermail always add those three end tags as needed, regardless
of whether the custom footer option is being used.
Jose Kahan (Jul 30, 2003)
- After talking with Dom Hazel-Massieux, I added some extra WAI enhancements
to the list of indexes generated by hypermai. Specifically, the date
is shown in a verbose name in the title attribute of each entry and in
an abbreviated version in the markup that's being displayed.
Jose Kahan (Jul 30, 2003)
- When rebuilding an archive, the attachment files were not being overwritten
correctly. . Fixed this by adding an O_TRUNC flag.
Jose Kahan (Jul 29, 2003)
- Removed a memory leak in file.c as reported by insure.
- The ietf-mbox option didn't work on "quoted printable" encoded attachments.
Peter McCluskey (July 22, 2003)
Fix show_msg_links = 3 option (Jose's changes assumed it didn't exist).
Updates to German from Tobias Weber.
Kent Landfield (Jul 14, 2003)
- When show_headers was used in print.c, the newline was not recognized
early enough in printheaders. A check was added to assure the newline
was recognized properly.
Kent Landfield (Jul 10, 2003)
- Small typo in print.c corrected.
fprintf(fp, "%s ^lt;<em>%s</em>>"...
All supported releases:
* The local(8) delivery agent's BIFF client leaked an unprivileged
UDP socket. Fix by Jaroslav Skarvada. This bug was introduced
19990127.
* The SMTP server did not reject the AUTH command while a MAIL
FROM transaction was in progress. Reported by Timo Sirainen.
This bug was introduced 20000314.
Postfix 2.8 and later:
* The unused "pass" trigger client could close the wrong file
descriptors. This bug was introduced with Postfix 2.8.
* Fix version number in ~/.thunderbird/*/prefs.js, s/10.0.6esrpre/10.0.6/
Originally reported by is@ on tech-pkg@.
Now firefox10-10.0.6 can be invoked from thunderbird10-10.0.6nb1.
- allow normal exit on interrupt (ctrl-c) to allow the uesr to abort
message retrieval while still remembering already-retrieved
messages as successfully delivered. You may get a weird error
message after you abort, since the server may be in the middle
of delivering another message to getmail at the time. Thanks:
Krzysztof Warzecha.
changes:
-pop3c: Added pop3c_master_user setting
-bugfix: Mailbox names were accidentally sent as UTF-8 instead of mUTF-7
-more bugfixes
approved by The Maintainer
changes:
-a "From:" header is now required for outgoing mail, custom component
files may need to be adjusted
-support for filters in mhl
-more fixes and new features, see the share/doc/nmh/NEWS file for details
-dragonfly support patches were integrated
Fixes PKG_DEVELOPER error:
ERROR: The following files are in /usr/pkg but not in the PLIST:
ERROR: /work/mail/courier-mta/work/.destdir/usr/pkg/share/doc/courier/svn.html
version 3.31: Mon, Mar 19, 2012 11:11:11 AM
- rt.cpan.org#74799: Support for partial data responses in fetch_hash
[Philip Garrett]
+ bonus: cleaner handling of BODY.PEEK responses
- properly handle ALL|FULL|FAST fetch macros in fetch_hash
with:
+LICENSE= original-bsd
-----------
1.20: Aug.21,2003:
smtp.c, common.h:
fix on duplicate mailing.
1.19: Aug.20,2003:
configure:
SunOS 5.9 support from Toshio Hiraga <Toshio.Hiraga at jp.sony.com>
main.c, smtp.c:
reuse connection even when all recipients are invalid in a
transaction. please specify option -u to use this feature.
suggested by Koji Kawano <kawano at tailback.co.jp>
smtp.c:
retry on recipients which are not accepted with 452 (too many
recipients) problem reported by Kenji Ikeda
<ikeda at impress.co.jp>
fix on bug to set cnf.rcpts_trans to 1 reported by
Koji Kawano <kawano at tailback.co.jp>
avoid null pointer access/out of range access of state_tbl[]
when unexpected close of SMTP connection reported by
Hirokazu MORIKAWA <morikawa at nxhack.tarumi.kobe.jp>
also by Masato Minda <minmin at wide.ad.jp>
reply code tweaking after . termination of DATA command
problem reported by Ken Makimura <macky at astem.or.jp>
dns.c:
do not drop query when got an answer from a NS which does not
support recursive query.
util.c:
fix on size for MALLOC reported by Koji Kawano
<kawano at tailback.co.jp>
-----------
Changelog:
Version 1.4.28:
- Update autotools files.
- Improve error message on connection failures in some IPv6/IPv4 situations.
- Improve documentation of EHLO issues.
- Bug fix: expand tilde for the aliases command.
- prevent some nuisance stack traces if getmail cannot connect to
the POP/IMAP server correctly. Thanks: Daniel Dumke.
- restore use_peek IMAP retriever parameter which accidentally got
removed in 4.30. Thanks: Andreas Amann.
- improved backwards compatibility with pre-v.4.22.0 oldmail files,
so IMAP mail is not re-retrieved if you upgrade from a 4.22 or
earlier to this one; no user action necessary. Thanks: Osamu Aoki,
Tim van der Molen.
* Printing message no: was code not tested prior to 1.3.1 release...perl
compilation errors. Fixed.
* Reworked qmhandle left out printing message no: when detailed
listing of messages is requested! Fixed.
* Reworked qmhandle to be more accurate in reporting queue information
(todo state, bouncing...)
* Reworked qmhandle to be more efficient in handling message deletion
when more than one message will be deleted
* Added big-todo support (required since todo files need to be handled)
* Added delete from sender support (both regular expression and
string matching)
* Added touch info file for messages to remote domain for earlier
retry (at the cost of longer queue life)
* Added delete if message header or body line matches regular
expression (case sensitive and insensitive matching)
changes:
-features:
implemented IMAP NAMESPACE,
implemented SMTP SIZE,
support for Content-Location,
improved progress report API for IMAP and SMTP.
-bugfixes
changes:
-features:
implemented IMAP NAMESPACE,
implemented SMTP SIZE,
support for Content-Location,
improved progress report API for IMAP and SMTP.
-bugfixes
Changes since Sylpheed 3.1.4
----------------------------
[New features]
* Each attachments on the message view now have graphical label
and popup menu.
* The UI for Attachments tab was changed to save the space. Users
now also can do 'Save all' without switching the view.
* The 'show_attach_tab' option (without UI), which reverts the
attachments interface to the old one, was added.
* Multiple keywords search of the quick search was implemented.
* The context menu of the folder view and the summary view can be
popped up using Menu key or Shift+F10.
* Win32: IPv6 support was enabled again.
* Win32: SylFilter is now also included in the installer. The
default junk commands were also changed to sylfilter.
* Win32: an option to play sound when new messages arrive was
added.
* Win32: The file selector now follows Windows shortcut (.lnk).
[Improvements]
* Number of maximum characters per line of configuration files
was increased.
* Compose window will not be closed if saving of message to
outbox failed.
* Sender's e-mail address became not guessable from generated
Message-Id.
* New plug-in APIs were added.
* 'Account Preferences - Advanced - Put deleted messages in'
account setting actually works now.
* MIME debug output was modified.
* Both filtered and original numbers of messages are displayed on
the status label now.
* The POP3 remote mailbox now supports SOCKS proxy.
* The POP3 remote mailbox now retrieves headers from the newer
messages (useful for slow connection).
* The POP3 remote mailbox can now reload message headers after
the loading is stopped.
* News (NNTP) now supports SOCKS proxy.
* The details of new message counts are displayed on the tooltip
of the tray icon.
* Address auto-completion now also matches to the subsequent part
of the name of contacts.
* On file selection dialog, the last selected folders are
preserved between sessions now.
* DNS lookup error is now distinguished from other connection
errors.
* The clip icon was replaced with more visible one on selected
row.
[Performance improvements]
* The performance of reading cache files was improved by using
memory mapped file (requires GTK+ >= 2.8).
* Win32: the launch of Windows installer became faster.
[Other changes]
* Sylfilter command was added as a preset of junk filter program.
* The blinking period of the tray icon was extended to 10 seconds.
* 'Is shorter than' became the default for 'Age' filter condition.
* The Japanse manual was updated, and the encoding of Japanese
manual was changed to UTF-8 to prevent display failure on some
browsers.
[Bugfixes]
* Queue control headers are removed when moving messages from
queue folders to trash.
* Duplicated keyboard accelerators on some dialogs were fixed.
* The focus on quick search entry is not stolen by the refresh of
summary.
* The HTML parser was modified.
* The check of IMAP AUTHENTICATE response was fixed.
* The compilation failure with GLib 2.32 or later was fixed.
* The bug that a MIME part that didn't have its name could not be
saved was fixed.
* Address autocomplete drop-down list with newer version of GTK+
was fixed (#52).
* Line-space for auto-wrapped lines now reflects the line-space
setting (#64).
* Some minor fixes for IMAP were made.
* Some memory leaks were fixed.
* Other bugfixes were made.
* Some compiler warnings were removed.
* Win32: OpenSSL was updated to 0.9.8x. (0.9.8w in Sylpheed 3.1.4
is also not vulnerable)
- fix a nuisance stack trace that would be dumped if a connection
failed in particular states. Thanks: Gary Schmidt.
Updating this leaf package during the freeze for the bugfix.
error messages, always use strerror.
While here, also correct warnings about implicit declaration of malloc
... which turned out to arise because someone patched stdlib.h into
all the right places years ago, but for some bizarre reason decided the
change should be OS-specific.
grmbl.
- silence a nuisance deprecation warning about the sets module when
running with Python >= 2.5 which was reintroduced in 4.29.0.
Thanks: Stephan Schulz.
- fix breakage introduced in 4.29.0 where BrokenUIDLPOP3Retriever
would fail with a TypeError at logout time. Thanks: Scott Robbins,
Stephan Schulz.
- fix breakage introduced in 4.29.0 where deleted mail was not being
expunged from the last (or only) folder retrieved from in an IMAP
session. Thanks: Paul Howarth.
- update old contact information for Free Software Foundation.
Thanks: Ricky Zhou.
- fix incorrect character encoding in plaintext documentation.
Thanks: Ricky Zhou.
- ensure getmail exits nonzero if a server refuses login due to a
credential problem. Thanks: Stephan Schulz.
- ensure getmail exits nonzero if various error conditions (like
POP/IMAP authentication failure) occur. Thanks: Ryan J., Stephan
Schulz.
- python versions prior to 2.5.0 contain a bug when dealing with
read-only IMAP mailboxes. Monkey-patch imaplib when running with
Python<2.5.0. Thanks: Les Barstow.
- do IMAP modified-utf7 conversion of mailbox names containing
non-ASCII characters. Thanks: A. Lapraitis, Randall Mason.
- add special ALL value for retrieving mail from all selectable
IMAP mailboxes in the account.
- change IMAP retrieval strategy to retrieve all messages from a
mailbox, then move on to the next mailbox, etc. Should result in
increased speed, but if you set `max_messages_per_session` too
low, this could result in later mailboxes not being retrieved
from.
Updating this leaf package during the freeze for bugfixes.
Fix bug #SF3496208: Replace stats/opendkim-genstats with a perl
script so it's far more efficient.
Fix bug #SF3514793: Pass proper flags to libdb when creating
temporary LDAP caches. Problem noted by Sergey Romanov.
Fix a crash bug when using LocalADSP with a message with no
parseable From: field. Problem noted by John Merriam.
Fix a crash bug when using LDAP with authentication when LDAPAuthUser
is not defined.
STATS: Fix bug #SF3510729: Convert stats/opendkim-gengraphs to a perl
script.
2.5.1 2012/03/15
Fix bug #SF3496131: Fix query cache build problem.
Fix bug #SF3500660: Add Date: header field to generated reports.
BUILD: A few subsidiary libraries need to know about -lresolv on
systems that need it. Reported by Scott Kitterman.
STATS: Add "-E" command line flag to opendkim-importstats, forcing
an abort on any input error.
2.5.0 2012/02/29
#####################################################################
### ###
### This release is dedicated to the memory of J.D. Falk, a ###
### tireless champion of anti-abuse technology and collaboration ###
### and a founding member of the Board of the Trusted Domain ###
### Project, a participant in related IETF work, and a long-time ###
### particpant and supporter of MAAWG. J.D. was taken by cancer ###
### on November 16, 2011. His enthusiasm and perspective for ###
### all of this work will be sorely missed. ###
### ###
#####################################################################
Feature request #SF3385816: Discontinue DomainKeys support.
Feature request #SF3393282: Update ARF output per
draft-ietf-marf-authfailure-report-03 et seq.
Feature request #SF3406814: Add ability to invoke chroot().
Feature request #SF3477908: Update DKIM reporting per
draft-ietf-marf-dkim-reporting-10.
Add "WeakSyntaxChecks" suppressing some short-circuiting error checks
on syntax.
Allow a set of test files to be passed via "-t" rather than just one.
Add _FFR_REPUTATION, and several new support libraries (in the
libut/ and reputation/ directories) for doing DKIM-based
reputation evaluations of arriving messages. Full
documentation of the algorithms will appear in an upcoming
white paper. This also includes several new configuration
options that make use of reputation data pulled from servers:
ReputationCache
ReputationCacheTTL
ReputationLimits
ReputationLowTime
ReputationMinimum
ReputationLimitModifiers
ReputationRatios
ReputationSpamCheck
ReputationTimeFactor
For now these are briefly documented in reputation/README.
As this subsystem matures, they will be fully documented in
opendkim.conf(5).
Fix bug #SF3471520: Don't crash when the first line of a configuration
file is an "Include" instruction.
Fix bug #SF3475149: Apply RFC2254 encoding to LDAP queries.
LIBOPENDKIM: Feature request #SF3317160: Per RFC6376, remove
granularity checks.
LIBOPENDKIM: Feature request #SF3385768: Add dkim_privkey_load(),
allowing validation of a private key before reaching
end-of-message.
LIBOPENDKIM: Feature request #SF3423226: Copy header field name lists
instead of using the caller's copy.
LIBOPENDKIM: Update list of header fields that should be signed
per RFC6376.
LIBOPENDKIM: Don't report the absence of "c=" as an error, since
there is a default.
LIBOPENDKIM: Add DKIM_SIG_CHECK() macro. Suggested by Heikki
Gruner.
LIBAR: Fix bug #SF2917856: Rename "ar.h" to "async-resolv.h" since
"ar.h" is already in common use.
STATS: Feature request #SF3397903: Drop all support for data needed
for the DKIM Implementation Report, as it has been completed.
Leave stuff that's useful for reputation R&D.
STATS: Feature request #SF3402857: Modify opendkim-spam to be able
to write update records to statistics files.
STATS: Feature request #SF3439384: Make opendkim-importstats more
backend-agnostic.
TOOLS: Add opendkim-testmsg, for signing/verifying messages without
all the milter code being invoked.
CONTRIB: Add LDAP documentation and examples.
Release date: 2012-06-09 15:39 UTC
Release state: stable
Changelog:
* Added possibility to set additional parameters of message part header,
e.g. attachment size [alec]
* Added automatic setting of attachment size via Content-Disposition header
size parameter [alec]
* Update enigmail to 1.4.2
* Update Lightning to 1.5
Changelog:
* Filelink: Upload your files to an online storage service and send links
to your friends, avoiding bounce back due to large attachments. We have
partnered with YouSendIt to bring this feature, but additional partners
will be added in the near future.
* In partnership with Gandi and Hover, you can now sign up for a
personalized email address from within Thunderbird. Along with your new
email address, Thunderbird will be automatically set up and ready to
send and receive messages. We are working with additional suppliers to
cover more areas of the world and to provide more options in the future.
* Various security fixes
MFSA 2012-40 Buffer overflow and use-after-free issues found using Address Sanitizer
MFSA 2012-39 NSS parsing errors with zero length items
MFSA 2012-38 Use-after-free while replacing/inserting a node in a document
MFSA 2012-37 Information disclosure though Windows file shares and shortcut files
MFSA 2012-36 Content Security Policy inline-script bypass
MFSA 2012-35 Privilege escalation through Mozilla Updater and Windows Updater Service
MFSA 2012-34 Miscellaneous memory safety hazards
* The minimum system requirements for Windows are now Windows XP Service
Pack 2 or later.
1. New authenticator driver, "gsasl". Server-only (at present).
This is a SASL interface, licensed under GPL, which can be found at
http://www.gnu.org/software/gsasl/.
This system does not provide sources of data for authentication, so
careful use needs to be made of the conditions in Exim.
2. New authenticator driver, "heimdal_gssapi". Server-only.
A replacement for using cyrus_sasl with Heimdal, now that $KRB5_KTNAME
is no longer honoured for setuid programs by Heimdal. Use the
"server_keytab" option to point to the keytab.
3. The "pkg-config" system can now be used when building Exim to reference
cflags and library information for lookups and authenticators, rather
than having to update "CFLAGS", "AUTH_LIBS", "LOOKUP_INCLUDE" and
"LOOKUP_LIBS" directly. Similarly for handling the TLS library support
without adjusting "TLS_INCLUDE" and "TLS_LIBS".
In addition, setting PCRE_CONFIG=yes will query the pcre-config tool to
find the headers and libraries for PCRE.
4. New expansion variable $tls_bits.
5. New lookup type, "dbmjz". Key is an Exim list, the elements of which will
be joined together with ASCII NUL characters to construct the key to pass
into the DBM library. Can be used with gsasl to access sasldb2 files as
used by Cyrus SASL.
6. OpenSSL now supports TLS1.1 and TLS1.2 with OpenSSL 1.0.1.
Avoid release 1.0.1a if you can. Note that the default value of
"openssl_options" is no longer "+dont_insert_empty_fragments", as that
increased susceptibility to attack. This may still have interoperability
implications for very old clients (see version 4.31 change 37) but
administrators can choose to make the trade-off themselves and restore
compatibility at the cost of session security.
7. Use of the new expansion variable $tls_sni in the main configuration option
tls_certificate will cause Exim to re-expand the option, if the client
sends the TLS Server Name Indication extension, to permit choosing a
different certificate; tls_privatekey will also be re-expanded. You must
still set these options to expand to valid files when $tls_sni is not set.
The SMTP Transport has gained the option tls_sni, which will set a hostname
for outbound TLS sessions, and set $tls_sni too.
A new log_selector, +tls_sni, has been added, to log received SNI values
for Exim as a server.
8. The existing "accept_8bitmime" option now defaults to true. This means
that Exim is deliberately not strictly RFC compliant. We're following
Dan Bernstein's advice in http://cr.yp.to/smtp/8bitmime.html by default.
Those who disagree, or know that they are talking to mail servers that,
even today, are not 8-bit clean, need to turn off this option.
9. Exim can now be started with -bw (with an optional timeout, given as
-bw<timespec>). With this, stdin at startup is a socket that is
already listening for connections. This has a more modern name of
"socket activation", but forcing the activated socket to fd 0. We're
interested in adding more support for modern variants.
10. ${eval } now uses 64-bit values on supporting platforms. A new "G" suffix
for numbers indicates multiplication by 1024^3.
11. The GnuTLS support has been revamped; the three options gnutls_require_kx,
gnutls_require_mac & gnutls_require_protocols are no longer supported.
tls_require_ciphers is now parsed by gnutls_priority_init(3) as a priority
string, documentation for which is at:
http://www.gnu.org/software/gnutls/manual/html_node/Priority-Strings.html
SNI support has been added to Exim's GnuTLS integration too.
For sufficiently recent GnuTLS libraries, ${randint:..} will now use
gnutls_rnd(), asking for GNUTLS_RND_NONCE level randomness.
12. With OpenSSL, if built with EXPERIMENTAL_OCSP, a new option tls_ocsp_file
is now available. If the contents of the file are valid, then Exim will
send that back in response to a TLS status request; this is OCSP Stapling.
Exim will not maintain the contents of the file in any way: administrators
are responsible for ensuring that it is up-to-date.
13. ${lookup dnsdb{ }} supports now SPF record types. They are handled
identically to TXT record lookups.
14. New expansion variable $tod_epoch_l for higher-precision time.
15. New global option tls_dh_max_bits, defaulting to current value of NSS
hard-coded limit of DH ephemeral bits, to fix interop problems caused by
GnuTLS 2.12 library recommending a bit count higher than NSS supports.
16. tls_dhparam now used by both OpenSSL and GnuTLS, can be path or identifier.
Option can now be a path or an identifier for a standard prime.
If unset, we use the DH prime from section 2.2 of RFC 5114, "ike23".
Set to "historic" to get the old GnuTLS behaviour of auto-generated DH
primes.
17. SSLv2 now disabled by default in OpenSSL. (Never supported by GnuTLS).
Use "openssl_options -no_sslv2" to re-enable support, if your OpenSSL
install was not built with OPENSSL_NO_SSL2 ("no-ssl2").
* rfc2045/rfc2045reply.c (mkreply): Fix copying of the contents of the
original message.
* msg2html.c (msg2html_download): rfc2231_udecodeDisposition() failure
is not fatal.
* cgi/cgi.c (cgiformdecode): Ditto.
* pcp/pcp.c (list_msg_mime): Ditto.
* liblock/mail.c (dotlock_exists): Handle getting here because of a
recycled pid.
* unicode/unicode.c (init_default_chset): Handle NULL from setlocale().
* rfc2045/reformime.c (main2): Fixed segfault on some arches from an
initial null given to strtok.
* rfc2045/reformime.c (main2): On ia64 and arm, argv is in readonly
memory.
* showmsg2html.c (error): Provide a definition for error().
* Fix gcc 4.6 warnings
* sqwebmail.spec.in: switch to systemd. Remove script used when
upgrading from ancient pre-sysconftool versions.
* Fix autoconf warnings.
* cone/gettext.C: gettext can't deal with literal ^Ds, so provide a
workaround: "\\D" literal.
* cone/cursesindexdisplay.C (drawLine): Misformatting of the date
column in some locales.
* rfc2045/rfc2045reply.c (mkreply): Fix copying of the contents of the
original message.
* rfc2045/reformime.c (do_print_info): rfc2231_udecodeDisposition()
failure is not fatal.
* rfc2045/reformime.c (get_suitable_filename): Ditto.
* rfc2045/reformime.c (main2): Fixed segfault on some arches from an
initial null given to strtok.
* mailbot: add "feedback" and "replyfeedback" formats, generating
RFC 5965-formatted feedback report. -a option attaches the entire
original message, instead of only its headers, for "replydsn",
"feedback", and "replyfeedback" formats.
* rfc2045/reformime.c (main2): On ia64 and arm, argv is in readonly
memory.
* imapd.c (main): Open IMAPDEBUGFILE only if it exists already.
(do_expunge): Optionally log deletions.
* pop3dserver.c (cleanup): Optionally log deletions.
* imapd.dist.in (IMAP_MOVE_EXPUNGE_TO_TRASH): Officially document how
IMAPDEBUGFILE works.
* imapscanclient.c: Postpone Y2038K for a while, for uid validities.
* liblock/mail.c (dotlock_exists): Handle getting here because of a
recycled pid.
* unicode/unicode.c (init_default_chset): Handle NULL from setlocale().
* rfc2045/reformime.c (main2): Fixed segfault on some arches from an
initial null given to strtok.
* rfc2045/reformime.c (main2): On ia64 and arm, argv is in readonly memory.
* pop3dserver.c (openpop3dlist): Try a few times to reopen pop3dsizelist
if it fails with ESTALE.
* pop3d.dist.in: Add AUTHSERVICE settings. They've been supported all along.
* Fix gcc 4.6 warnings
* courier-imap.spec.in: switch to systemd. Remove script used when
upgrading from ancient pre-sysconftool versions.
* Fix autoconf warnings.
* rfc2045mkboundary.c was broken in 0.68
Changes 0.68:
* rfc2045/rfc2045mkboundary.c (rfc2045_mk_boundary): truncate
the hostname portion of the boundary to 30 chars.
* courier/doc/courier.sgml: Remove descriptions of some configuration
files that were moved to the courier-authlib package a while ago.
They don't belong here any more.
* courier/submit.C: Use the authenticated address, instead of the
return address, for domain-based virtual configuration.
* courier/libs/cfilename.c (config_has_vhost): Checks whether
vhost.[ip] exists.
* courier/module.esmtp/courieresmtpd.c (main): Only set a message's
virtual host if vhost.[ip] exists.
* courier/module.esmtp/esmtpclient.c (get_sourceaddr): Make sure the
input buffer is null-terminated.
* courier/submit.C (getrcpts): If there's no vhost setting from the
sender's IP address (this includes local mail!) if vhost.domain exists,
use [domain] as the virtual host.
* Remove config_search(), which simply called config_localfilename().
Change all current callers to call config_localfilename().
* courier/libs/cfilename.c (config_set_local_vhost): saves a string
that gets appended as a suffix, by config_localfilename(), and if that
filename exists, that's returned as the filename, otherwise it's the
original string without the suffix. config_get_local_vhost() returns
the suffix string.
to config_set_local_vhost().
* courier/libs/comsubmitclient.c (submit_fork): If
config_get_local_vhost(), add a -vhost parameter to submit().
* courier/submit.C (cppmain): -vhost sets config_set_local_vhost().
* courier/submit2.C (closectl): New COMCTLFILE_VHOST parameter in the
config file, taken from the vhost setting.
* courier/libs/comctlfile.c (ctlfile_setvhost): If COMCTLFILE_VHOST is
set, call ctlfile_setvhost(), return an indication if the vhost has
changed. Absence of a COMCTLFILE_VHOST treated as a discrete "(null)"
setting.
* courier/module.esmtp/esmtpclient.c (esmtpchild): If ctlfile_setvhost()
then disconnect the current socket, if one is open.
* courier/module.esmtp/esmtpclient.c (get_sourceaddr): The IP address
specified in ipout or ip6out overrides SOURCE_ADDRESS and
SOURCE_ADDRESS_IPV6 environment variable.
* courier/module.local/localmail.c (main): Call ctlfile_setvhost().
* courier/module.uucp/uucp.c (uux): Call ctlfile_setvhost().
* courier/module.dsn/dsn.c (main): Call ctlfile_setvhost().
* liblock/mail.c (dotlock_exists): Quell a compiler warning.
* courier/courierd.dist.in SOURCE_ADDRESS: Add a note that this setting
is deprecated.
Changelog:
* Security fixes can be found here
MFSA 2012-40 Buffer overflow and use-after-free issues found using Address Sanitizer
MFSA 2012-39 NSS parsing errors with zero length items
MFSA 2012-38 Use-after-free while replacing/inserting a node in a document
MFSA 2012-37 Information disclosure though Windows file shares and shortcut files
MFSA 2012-36 Content Security Policy inline-script bypass
MFSA 2012-34 Miscellaneous memory safety hazards
* The MAPIResolveName API has been added to Simple MAPI
interfaces which should improve interoperability (244222)
database, and they are looking for them directly under INSTALL_DIR.
As such, move them to RCDIR.
- install bin/ scripts with --x rights.
Package not bumped. All these changes do not affect roundcube besides
installation and update. If your roundcube install works already, chances
are you have adjusted the package in a way similar to this patch.
