horok/exim4
1
0
Fork 0
Code Activity
exim4/debian/changelog
Daniel Baumann 6944111ea9
Releasing progress-linux version 4.98.2-1progress8u1. 
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
2025-06-21 14:28:24 +02:00

7456 lines
320 KiB
Text
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

exim4 (4.98.2-1progress8u1) horok; urgency=medium
* Initial upload to horok.
* Updating maintainer field.
* Updating uploaders field.
* Updating bugs field.
* Updating vcs fields.
* Removing default-mta from exim4-daemon-light provides.
-- Daniel Baumann <daniel.baumann@progress-linux.org> Sat, 21 Jun 2025 14:28:21 +0200
exim4 (4.98.2-1) unstable; urgency=medium
* New upstream version (Basically identical to 4.98,1 + CVE-2025-30232 fix)
* Unfuzz patches.
* Add export-dir setting to gbp.conf.
-- Andreas Metzler <ametzler@debian.org> Sat, 29 Mar 2025 13:22:55 +0100
exim4 (4.98.1-2) unstable; urgency=high
* Fix use-after-free (requiring local command-line access) notified by
Trend Micro (ref: ZDI-CAN-26250). this is 4.98.2 without the version
number bump. CVE-2025-30232
-- Andreas Metzler <ametzler@debian.org> Fri, 21 Mar 2025 15:32:31 +0100
exim4 (4.98.1-1) unstable; urgency=medium
* Refresh upstream keys from
https://downloads.exim.org/Exim-Maintainers-Keyring.asc
* New upstream version (Basically identical to 4.98 +
81_Squashed-from-fix-cve-2025-26794-fixes-CVE-26794.patch)
-- Andreas Metzler <ametzler@debian.org> Sat, 15 Mar 2025 13:41:07 +0100
exim4 (4.98-4) unstable; urgency=high
* Cherry-pick patches from upstream git master:
+ 79_Dovecot-fix-protocol-sequence-for-version-2.4.0.patch (Compliance
with upcoming dovecot v1.3 auth protocol)
* Use default 550 message in lowuid_aliases router ("Unrouteable address"
instead of "no mail to system accounts") to avoid disclosing information on
installed packages. Closes: #1092910
* 81_Squashed-from-fix-cve-2025-26794-fixes-CVE-26794.patch: Upgrade to
4.98.1, fixing CVE-2025-26794. This is a SQL injection for the
(Sqlite-)hints database with ETRN. Debian binaries do not yet use sqlite
for the hints DB so this just only affects users building their own
binaries from sources and switching to sqlite-hints-DB.
-- Andreas Metzler <ametzler@debian.org> Sat, 15 Feb 2025 14:02:27 +0100
exim4 (4.98-3) unstable; urgency=low
* Manpage formatting fixes by Bjarni Ingi Gislason:
exim4-config_files.5 Closes: #1082620
exim_db.8 Closes: #1087135
exim_dbmbuild.8 Closes: #1087139
exiwhat.8 Closes: #1087225
* Extract non-lintish changes from patches for pod2man-generated manpages.
Closes: #1087172,#1087206,#1087222
* Cherrypick patches from upstream GIT master:
+ 77-Fix-IP-SRR-parsing.-Bug-3124.patch: Fix theoretical crash in
received connection, triggerable by a crafted packet with massive
count of IP options. https://bugs.exim.org/show_bug.cgi?id=3124
+ Fix for DKIM smuggling attack.
78-DKIM-fix-verify-of-malformed-header-lines.-Bug-3036.patch
https://bugs.exim.org/show_bug.cgi?id=3036
* Move tls_advertise_hosts setting outside (misnamed) .ifdef
MAIN_TLS_ENABLE to ease disabling of incoming TLS. Also make
README.Debian more explicit in this respect. Closes: #1089517
* Remove Marc Haber from uploaders. - Thank you for your work!
* Run wrap-and-sort -ast.
-- Andreas Metzler <ametzler@debian.org> Sat, 21 Dec 2024 16:47:07 +0100
exim4 (4.98-2) unstable; urgency=low
* Also run update-exim4.conf on systemd daemon reload. Closes: #1077034
* Use --allow-bad-names instead of --force-badname when invoking adduser.
* Cherry-pick patches from upstream git master / bugzilla:
+ 73_Fix-SPA-authenticator.-Bug-3106.patch
https://bugs.exim.org/show_bug.cgi?id=3106
+ 74_DKIM-fix-parsing-of-pubkey-RR.patch
https://bugs.exim.org/show_bug.cgi?id=3120
+ 75_dkim_sign.patch https://bugs.exim.org/show_bug.cgi?id=3116
Closes: #1082905
-- Andreas Metzler <ametzler@debian.org> Sat, 19 Oct 2024 11:54:30 +0200
exim4 (4.98-1) unstable; urgency=medium
* New stable release, almost identical to RC3.
-- Andreas Metzler <ametzler@debian.org> Thu, 11 Jul 2024 07:41:31 +0200
exim4 (4.98~RC3-2) unstable; urgency=medium
* Upload to unstable.
* RC3 fixes CVE-2024-39929 Closes: #1075785
-- Andreas Metzler <ametzler@debian.org> Fri, 05 Jul 2024 18:06:31 +0200
exim4 (4.98~RC3-1) experimental; urgency=low
* New upstream release candidate.
-- Andreas Metzler <ametzler@debian.org> Wed, 03 Jul 2024 18:21:36 +0200
exim4 (4.98~RC2-1) experimental; urgency=low
* New upstream release candidate.
-- Andreas Metzler <ametzler@debian.org> Sun, 23 Jun 2024 18:23:00 +0200
exim4 (4.98~RC1-1) experimental; urgency=low
* New upstream release candidate.
-- Andreas Metzler <ametzler@debian.org> Sat, 15 Jun 2024 11:05:49 +0200
exim4 (4.98~RC0-1) experimental; urgency=low
* Add minimal gbp.conf.
* New upstream release candidate.
+ Drop cherry-picked patches, unfuzz 90_localscan_dlopen.dpatch.
+ Fixes hurd FTBFS. Closes: #1070396
+ Refresh debian/EDITME*
+ Add lintian-override for bash-term-in-posix-shell false positive in
exinext sh/perl script.
* Add NEWS entry to 4.97-1 regarding exiqgrep requiring at least one
selection option and point to exim's -bpi option. Closes: #1027968
* Ship newly available mailtest utility in exim4-base.
-- Andreas Metzler <ametzler@debian.org> Sat, 08 Jun 2024 13:40:06 +0200
exim4 (4.97-8) unstable; urgency=medium
* Pull fixes from upstream GIT master:
+ 78_35-Fix-encoding-for-AUTH-on-MAIL-FROM.patch
+ 78_37-Logging-fix-receive-time-crash-with-recipients-loggi.patch
+ 78_39-SRS-fix-encode-for-local-part-with-zero-length-quote.patch (exim
bug #3087)
-- Andreas Metzler <ametzler@debian.org> Sun, 07 Apr 2024 07:50:45 +0200
exim4 (4.97-7) unstable; urgency=medium
* Pull fixes from upstream GIT master:
+ 78_30-Rewrites-fix-delivery-crash-from-constant-errors_to..patch (exim
bug #3081)
+ 78_31-Lookups-fix-dbmnz-crash-on-zero-length-datum.-Bug-30.patch (exim
bug #3079)
* Update lintian overrides.
-- Andreas Metzler <ametzler@debian.org> Mon, 01 Apr 2024 10:45:05 +0200
exim4 (4.97-6) unstable; urgency=high
* Add b-d on libnsl-dev to fix (temporary) FTBFS. Closes: #1065107
* Pull fixes from upstream GIT master:
78_10-Use-non-releaseable-memory-for-regex-match-strings.-.patch
78_11-use-dynamic-mem-for-regex_match_string.patch
78_12-Use-non-releasable-memory-for-regex-line-buffer.patch
78_15-regex-avoid-releasing-built-RE-midloop.patch
78_21-Lookups-avoid-leaking-user-passwd-from-server-spec-t.patch
78_23-Fix-crash-on-empty-oMt-argument.-Bug-3070.patch
* 78_06, 78_07, 78_10, 78_11, 78_12 and 78_15 together Closes: #1053447
-- Andreas Metzler <ametzler@debian.org> Fri, 01 Mar 2024 18:09:49 +0100
exim4 (4.97-5) unstable; urgency=low
* Multiple fixes from upstream GIT master:
+ 73_Check-for-missing-commandline-arg-after-options-taki.patch (upstream
bug #3049)
+ 76_01-Support-old-format-message_id-spoolfiles-for-mailq-b.patch
(upstream bug #3050)
+ 76_05-Fix-periodic-queue-runs.-Bug-3046.patch (upstream bug #3046)
+ 78_01-Fix-recipient-or-source-selection-in-combination-wit.patch
(upstream bug #3064)
+ 78_02-Eximon-handle-new-format-message-IDs.patch (upstream bug #)
+ 78_03-Lookups-log-warning-for-deprecated-syntax.-Bug-3068.patch
(upstream bug #3068)
+ 78_04-Exinext-handle-new-format-message-IDs.patch
+ 78_05-TLS-fix-startup-after-forced-fail.patch (upstream bug #)
+ 78_06-Appendfile-release-regex-match-store-every-thousand-.patch
(upstream bug #3047)
+ 78_07-ACL-in-regex-condition-release-store-every-thousand-.patch
(upstream bug #3047)
+ 78_08-Fix-smtp-transport-response-to-close-after-all-rcpt-.patch
(upstream bug #3059)
-- Andreas Metzler <ametzler@debian.org> Sun, 28 Jan 2024 14:08:10 +0100
exim4 (4.97-4) unstable; urgency=medium
* autopkgtest: Stop using previously deprecated swaks feature to autodetect
whether the argument for --data was a file. This was dropped in swaks
20240102.0.
-- Andreas Metzler <ametzler@debian.org> Sat, 06 Jan 2024 07:48:19 +0100
exim4 (4.97-3) unstable; urgency=medium
* Fixes from upstream GIT master:
77_01-Reject-dot-LF-as-ending-data-phase.-Bug-3063.patch
77_02-Use-enum-for-body-data-input-state-machine.patch
77_03-Reject-dot-LF-as-ending-data-phase-pt.-2-.-Bug-3063.patch
+ Enforce a data synch check before emitting the 354 "go ahead".
Previously this was only done if a pre-data ACL was configured.
+ Refuse to accept a line "dot, LF" as end-of-DATA unless operating in
LF-only mode (as detected from the first header line). Previously we
did accept that in (normal) CRLF mode; this has been raised as a
possible attack scenario (under the name "smtp smuggling").
Closes: #1059387 CVE-2023-51766
-- Andreas Metzler <ametzler@debian.org> Mon, 25 Dec 2023 07:50:16 +0100
exim4 (4.97-2) unstable; urgency=medium
* Add 75-04-Lookups-Fix-dnsdb-lookup-of-multi-chunk-TXT.-Bug-305.patch from
upstream git master to fix dnsdb lookup regression. (Upstream bug 3054)
* Due to being rebuilt with a newer debhelper exim4-base.service
and exim4-base.timer move to /usr/lib/systemd/.
-- Andreas Metzler <ametzler@debian.org> Sat, 18 Nov 2023 13:02:52 +0100
exim4 (4.97-1) unstable; urgency=medium
* Drop reference to QUEUEINTERVAL from conf.d/retry/30_exim4-config.
(Thanks, Vincent Lefevre!) Closes: #1054492
* New upstream version.
+ Update debian/copyright.
-- Andreas Metzler <ametzler@debian.org> Sat, 04 Nov 2023 18:28:43 +0100
exim4 (4.97~RC3-1) unstable; urgency=medium
* New upstream version, drop patches pulled from master.
-- Andreas Metzler <ametzler@debian.org> Sun, 22 Oct 2023 07:31:26 +0200
exim4 (4.97~RC2-2) unstable; urgency=high
* 76_changesfrom_4.96.2.diff: Pull fixes for CVE-2023-42117 and
CVE-2023-42119 from upstream GIT master. Closes: #1053310
-- Andreas Metzler <ametzler@debian.org> Mon, 16 Oct 2023 18:26:40 +0200
exim4 (4.97~RC2-1) unstable; urgency=low
* Generate /etc/default/exim4 in exim4-config.postinst instead of
/etc/default/exim. Closes: #1053788
* Also remove the unused file and generate the correct one if missing.
* New upstream version.
+ Drop 75-01-Auths*.diff.
* Add two post-release fixes:
+ 75-01-Fix-crash-in-SPF-DNS-usage.patch
+ 75-02-SPF-harden-against-crafted-DNS-responses.patch
-- Andreas Metzler <ametzler@debian.org> Wed, 11 Oct 2023 18:56:28 +0200
exim4 (4.97~RC1-2) unstable; urgency=high
* Address SPA authenticator vulnerabilities (CVE-2023-42114, CVE-2023-42115,
CVE-2023-42116)
- Auths: fix possible OOB write in external authenticator (CVE-2023-42115)
- Auths: use uschar more in spa authenticator
- Auths: fix possible OOB write in SPA authenticator (CVE-2023-42116)
- Auths: fix possible OOB read in SPA authenticator (CVE-2023-42114)
-- Andreas Metzler <ametzler@debian.org> Sun, 01 Oct 2023 18:04:33 +0200
exim4 (4.97~RC1-1) unstable; urgency=medium
[ Helmut Grohne ]
* Fix FTBFS when dh_installsystemd installs units to /usr.
Closes: #1053110
[ Andreas Metzler ]
* New upstream version.
+ Drop 75_01-Fix-tr.-and-empty-strings.-Bug-3023.patch.
-- Andreas Metzler <ametzler@debian.org> Sat, 30 Sep 2023 11:29:26 +0200
exim4 (4.97~RC0-3) unstable; urgency=medium
* Drop misleading phrase regarding incoming TLS support in README.Debian.
Closes: #1051945
* Improve on description of group setting for pipe deliveries in
README.Debian.
* 75_01-Fix-tr.-and-empty-strings.-Bug-3023.patch from upstream GIT master
fixing crashes in string expansion.
https://bugs.exim.org/show_bug.cgi?id=3023
-- Andreas Metzler <ametzler@debian.org> Tue, 19 Sep 2023 18:04:22 +0200
exim4 (4.97~RC0-2) unstable; urgency=low
* Fix URL of specific upstream exim bugreport in README.Debian.
* Upload to unstable.
* Add NEWS entry for format change of internal ID used for message
identification. (See upstream changelog JH/29!)
* Generate manpage for exim_msgdate(8) with pod2man and ship it.
* Add manpage for exim_id_update.
-- Andreas Metzler <ametzler@debian.org> Sun, 10 Sep 2023 14:04:49 +0200
exim4 (4.97~RC0-1) experimental; urgency=low
* New upstream version.
+ Drop cherry-picked patches.
+ Unfuzz 90_localscan_dlopen.dpatch.
+ Add b-d and -basde dep on libfile-fcntllock-perl.
+ Update example conf md5 hash (no changes to merge).
* Let -base depend on ${perl:Depends}.
-- Andreas Metzler <ametzler@debian.org> Sat, 09 Sep 2023 13:53:15 +0200
exim4 (4.96-22) unstable; urgency=low
* Fix architecture all build.
-- Andreas Metzler <ametzler@debian.org> Sat, 02 Sep 2023 15:41:28 +0200
exim4 (4.96-21) unstable; urgency=low
* tests/basic: Add isolation-container restriction (needs a running
exim daemon).
* Add ${run } expansion test to tests/basic.
* Replace 75_78-Fix-free-of-value-after-run.patch with
75_83-Re-fix-live-variable-value-free.-The-inital-fix-resu.patch fixing
$value expansion after ${run ..}.
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Sat, 02 Sep 2023 13:49:33 +0200
exim4 (4.96-20) experimental; urgency=low
* Drop support for configuring daemon startup by setting QUEUERUNNER in
/etc/default/exim4. Also queue run from /etc/ppp/ip-up.d/exim4 is
disabled by default.
Also replace QFLAGS, QUEUEINTERVAL, COMMONOPTIONS, QUEUERUNNEROPTIONS and
SMTPLISTENEROPTIONS settings for systemd service/init script in
etc/default/exim4 with a combined EXIMSERVICE (for systemd) or
EXIMDAEMONOPTS (init script) directive.
* Drop update-inetd related code from maintainerscripts, update docs.
* Drop update-exim4defaults and its manpage It has no users in Debian
and with the removal of the queuerunner option functionality does not
provide a real benefit over editing /etc/default/exim4.
* Ship systemd exim4.service unit in exim4-daemon-* packages. (Mainly
inspired by the file from OpenSuse, but using Type=exec and -bdf as in
from exim upstream git). Since contrary to the init script
/lib/systemd/system/exim4.service is not a conffile we can simply ship it
in *both* daemon packages (they have the necessarry conflicts/replaces
relation) and let dh_installsystemd handle maintainerscripts.
* Ship exim4.service in its real location below /usr (by moving after
dh_installsystemd has run.
* Add lintian-overrides for omitted-systemd-service-for-init.d-script and
package-supports-alternative-init-but-no-init.d-script which are triggered
by service file and init script being in different packages.
-- Andreas Metzler <ametzler@debian.org> Wed, 16 Aug 2023 17:44:59 +0200
exim4 (4.96-19) unstable; urgency=medium
* 77_fix_autogencert_expiry.diff: Fix on-demand TLS cert expiry date.
Closes: #1043233
-- Andreas Metzler <ametzler@debian.org> Sat, 12 Aug 2023 14:57:51 +0200
exim4 (4.96-18) unstable; urgency=medium
* Fixes from upstream GIT master:
+ 75_78-Fix-free-of-value-after-run.patch
+ 75_79-Fix-recipients-expansion-when-used-within-run.-.-Bug.patch
-- Andreas Metzler <ametzler@debian.org> Sat, 05 Aug 2023 13:29:22 +0200
exim4 (4.96-17) unstable; urgency=low
* Fixes from upstream GIT master:
+ 75_74-Cancel-early-pipe-on-an-observed-advertising-change.patch
+ 75_75-Fix-json-extract-for-strings-carrying-commas.-Bug-30.patch
+ 75_76-Expansions-disallow-UTF-16-surrogates-from-utf8clean.patch
+ 75_77-GnuTLS-fix-crash-with-tls_dhparam-none.patch
(Upstream bugs 3006, 2998)
-- Andreas Metzler <ametzler@debian.org> Sat, 29 Jul 2023 18:32:55 +0200
exim4 (4.96-16) unstable; urgency=medium
[ Marc Haber ]
* Enforce TLS for dovecot_plain_server example. (Thanks: Dominic Preston)
Closes: #1037127
[ Andreas Metzler ]
* 75_42-Fix-run-arg-parsing.patch (From upstream GIT master, backported by
Bryce Harrington for Ubuntu): Fix argument parsing for ${run } expansion.
Previously, when an argument included a close-brace character (eg. it
itself used an expansion) an error occurred. Closes: #1025420
* 75_68-Fix-srs_encode-.-for-mod-1024-day-zero.patch from upstream GIT
master: Fix ${srs_encode ..}. Previously it would give a bad result for
one day every 1024 days.
-- Andreas Metzler <ametzler@debian.org> Sun, 11 Jun 2023 18:20:21 +0200
exim4 (4.96-15) unstable; urgency=medium
* Pull from upstream GIT master:
+ 75_70-Fix-variable-initialisation-in-smtp-transport.-Bug-2.patch
Fix a crash in the smtp transport.
https://bugs.exim.org/show_bug.cgi?id=2996
-- Andreas Metzler <ametzler@debian.org> Wed, 10 May 2023 18:30:35 +0200
exim4 (4.96-14) unstable; urgency=medium
* Pull from upstream GIT master:
+ 75_66-Fix-crash-in-expansions.patch
* [lintian]: b-d on libidn-dev instead of libidn11-dev.
* [lintian]: Drop dependency on transitional package lsb-base. (Depended on
package sysvinit-utils is Esssential: yes)
-- Andreas Metzler <ametzler@debian.org> Sat, 04 Feb 2023 13:33:50 +0100
exim4 (4.96-13) unstable; urgency=low
* Pull fixes from upstream GIT master:
75_58-Close-server-smtp-socket-explicitly-on-connect-ACL-d.patch
75_60-OpenSSL-fix-tls_eccurve-setting-explicit-curve-group.patch
75_62-OpenSSL-Fix-tls_eccurve-on-earlier-versions-than-3.0.patch
75_63-OpenSSL-log-conns-rejected-for-bad-ALPN-with-the-off.patch
75_64-DANE-do-not-check-dns_again_means_nonexist-for-TLSA-.patch
-- Andreas Metzler <ametzler@debian.org> Sat, 07 Jan 2023 14:38:13 +0100
exim4 (4.96-12) unstable; urgency=high
* 75_55-Fix-recursion-on-dns_again_means_nonexist.-Bug-2911.patch from
upstream GIT master: Fix unbounded recursion in DNS lookups.
-- Andreas Metzler <ametzler@debian.org> Fri, 30 Dec 2022 07:37:00 +0100
exim4 (4.96-11) unstable; urgency=high
* 75_50-Fix-logging-of-max-size-log-line.patch: Fix crash on acl logwrite
modifier.
-- Andreas Metzler <ametzler@debian.org> Tue, 20 Dec 2022 18:06:06 +0100
exim4 (4.96-10) unstable; urgency=medium
* Pull two OpenSSL related fixes (does not apply to Debian binaries) from
upstream git master.
* Fix pointer truncation issue in DLOPEN_LOCAL_SCAN patch. Thanks to Florian
Weimer for patch and bug report. Closes: #1026045
-- Andreas Metzler <ametzler@debian.org> Mon, 19 Dec 2022 18:23:13 +0100
exim4 (4.96-9) unstable; urgency=medium
* Cherrypick three fixes from upstream GIT master:
+ 75_31-Fix-regext-substring-capture-variables-for-null-matc.patch
+ 75_32-Fix-regex-substring-capture-variables-for-null-match.patch
+ 75_34-Fix-regex-substring-capture-commentary.-Bug-2933.patch
-- Andreas Metzler <ametzler@debian.org> Sun, 13 Nov 2022 18:43:32 +0100
exim4 (4.96-8) unstable; urgency=medium
* Cherrypick two fixes from upstream GIT master:
+ 75_22-Fix-daemon-startup.-Bug-2930.patch
+ 75_23-Fix-reccipients-after-run.-.-Bug-2929.patch
-- Andreas Metzler <ametzler@debian.org> Sat, 05 Nov 2022 07:42:03 +0100
exim4 (4.96-7) unstable; urgency=high
* Replace 85_dmarc-api-breakage-workaround.diff with version from upstream
GIT master 75_18-Fix-Build-with-libopendmarc-1.4.x-fixes-2728.patch.
* 75_19-DMARC-fix-use-after-free-in-dmarc_dns_lookup.patch: Fix
use-after-free in dmarc.c. VDB-211919 / CVE-2022-3620.
This does not affect Debian *binary* packages since they are not built
with DMARC support. Closes: #1022556
-- Andreas Metzler <ametzler@debian.org> Tue, 25 Oct 2022 18:38:38 +0200
exim4 (4.96-6) unstable; urgency=low
* Use a limit of 1G instead of 2G in message_linelength_limit. (Thanks,
Frederic Peters) Closes: #1021503
-- Andreas Metzler <ametzler@debian.org> Mon, 10 Oct 2022 07:02:03 +0200
exim4 (4.96-5) unstable; urgency=low
* Add pointers to /etc/mailname documentation to exim4-config_files.5.
Closes: #1019946
* Change remote_smtp transports to set message_linelength_limit = 2G if
IGNORE_SMTP_LINE_LENGTH_LIMIT was set to avoid accepting messages (due to
IGNORE_SMTP_LINE_LENGTH_LIMIT disabling the limit in the ACLs) without
being able to pass them on. Closes: #1019959
* Pull 75_16-GnuTLS-fix-for-clients-offering-no-TLS-extensions.patch from
upstream GIT.
-- Andreas Metzler <ametzler@debian.org> Sun, 09 Oct 2022 14:26:52 +0200
exim4 (4.96-4) unstable; urgency=low
* Cherrypick two fixes from upstream GIT master:
+ 75_05-SPF-fix-memory-accounting-for-error-case.patch
+ 75_08-Fix-regex-n-use-after-free.-Bug-2915.patch
75_09-Fix-non-WITH_CONTENT_SCAN-build.patch
75_10-Fix-non-WITH_CONTENT_SCAN-build-2.patch
75_11-Fix-non-WITH_CONTENT_SCAN-build-3.patch
* 85_dmarc-api-breakage-workaround.diff: Fix build-error against
opendmarc-1.4 which broke API and ABI without soname bump.
Closes: #1014945
-- Andreas Metzler <ametzler@debian.org> Sun, 11 Sep 2022 13:38:26 +0200
exim4 (4.96-3) unstable; urgency=medium
* Fix error messages of test-groff -b -mandoc -dAD=l -rF0 -rHY=0 -t -w w -z
on processing update-exim4.conf.8 and exim4-config_files.5. Also make
mandoc -lint update-exim4.conf.8 happy. (Thanks, Bjarni Ingi Gislason for
patch and report.)
Closes: #1014347, #1014349, #1014356
* 75_01-Fix-exit-on-attempt-to-rewrite-a-malformed-address.-.patch:
Bug 2903: avoid exit on an attempt to rewrite a malformed address.
* Add dovecot server-side AUTH example. Closes: #1014235
-- Andreas Metzler <ametzler@debian.org> Wed, 13 Jul 2022 13:22:40 +0200
exim4 (4.96-1) unstable; urgency=low
* New upstream version, almost identical to RC2.
* Upload to unstable.
* Extend debian/NEWS.
* Update lintian-overrides for new lintian version.
-- Andreas Metzler <ametzler@debian.org> Sun, 26 Jun 2022 14:11:00 +0200
exim4 (4.96~RC2-1) experimental; urgency=low
* New upstream version.
+ Drop 75_*.patch.
-- Andreas Metzler <ametzler@debian.org> Thu, 16 Jun 2022 10:32:16 +0200
exim4 (4.96~RC1-2) experimental; urgency=low
* Update from upstream GIT master:
+ 75_70-Debug-clarify-SMTP-DATA-ops-in-transport.patch
+ 75_71-Docs-more-info-on-PIPECONNECT.patch
+ 75_72-TLS-resumption-disable-on-continued-connection.patch
+ 75_73-Logging-distinguish-mem-allocation-errors.patch
+ 75_74-typo.patch
+ 75_75-TLS-resumption-fix-for-PIPECONNECT.patch
+ 75_76-DEBUG-clarify-multiline-smtp-responses.patch
+ 75_77-CHUNKING-fix-second-message-on-conn-when-first-rejec.patch
+ 75_78-CHUNKING-handle-protocol-errors-during-reception.patch
-- Andreas Metzler <ametzler@debian.org> Sat, 28 May 2022 11:41:06 +0200
exim4 (4.96~RC1-1) experimental; urgency=low
* Merge 4.95-6:
75_68-GnuTLS-Do-not-free-the-cached-creds-on-transport-con.patch:
Fix segfault on deferred delivery on first MX. Closes: #1004740
(Huge thanks to Gedalya for finding/setting up a reproducer and taking
this upstream.)
* New upstream version.
* Pull 75_69-ARC-reset-headers-before-signing-for-secondary-MX.-B.patch to
fix a crash when built against libarc.
-- Andreas Metzler <ametzler@debian.org> Sat, 21 May 2022 13:09:06 +0200
exim4 (4.96~RC0-1) experimental; urgency=low
* Drop code for upgrading from ancient (4.80-7 and earlier) versions in
maintainer-scripts. Closes: #1000962
* New upstream version.
+ Drop cherrypicked patches.
+ Unfuzz patches (including EDITME*).
+ Uses pcre2 (Closes: #1000107), update b-d to libpcre2-dev.
+ The allow_insecure_tainted_data main config option and the
"taint" log_selector were removed, add entry to NEWS.
-- Andreas Metzler <ametzler@debian.org> Sun, 24 Apr 2022 18:38:06 +0200
exim4 (4.95-6) unstable; urgency=high
* Drop code for upgrading from ancient (4.80-7 and earlier) versions in
maintainer-scripts. Closes: #1000962
* 75_68-GnuTLS-Do-not-free-the-cached-creds-on-transport-con.patch:
Fix segfault on deferred delivery on first MX. Closes: #1004740
-- Andreas Metzler <ametzler@debian.org> Fri, 20 May 2022 19:37:43 +0200
exim4 (4.95-5) unstable; urgency=medium
* More upstream fixes:
+ 75_60-Utilities-fix-exiqgrep-perl-syntax-add-testcases.-Bu.patch
Closes: #1006661
+ 75_64-Logging-fix-crash-on-local_part-utf8-conversion-fail.patch
* Update exiqgrep manpage.
-- Andreas Metzler <ametzler@debian.org> Sun, 10 Apr 2022 13:57:43 +0200
exim4 (4.95-4) unstable; urgency=low
* Fix typo in exiqgrep.8.
* Document all options of exiqgrep in manpage. (Patch by Janne Hess).
Closes: #1004428
* Cherry-pick some patches from upstream GIT master:
+ 75_32-Fix-PAM-auth.-Bug-2813.patch
https://bugs.exim.org/show_bug.cgi?id=2813
+ 75_35-Exiqgrep-check-arg-parsing.-Bug-2821.patch
https://bugs.exim.org/show_bug.cgi?id=2821
+ 75_45-Fix-bogus-error-message-copy.-Bug-2857.patch
https://bugs.exim.org/show_bug.cgi?id=2857
+ 75_50-Fix-include_directory-in-redirect-routers.-Bug-2715.patch
Closes: #988301
+ 75_55-Specific-check-for-null-pointer.patch
* Add lintian override for fp bash-term-in-posix-shell *HOSTNAME.
-- Andreas Metzler <ametzler@debian.org> Sat, 19 Feb 2022 14:49:28 +0100
exim4 (4.95-3) unstable; urgency=low
* Build with support for SASL external authenticator. Closes: #982325
* Add lintian overrides for bash-term-in-posix-shell exim4-base
usr/sbin/exim_checkaccess and exim4-config:
maintainer-script-needs-depends-on-update-inetd.
* Run wrap-and-sort -ast.
* Pull 75_40-Fix-basic-memory-use-for-SPARC.-Bug-2838.patch from upstream
GIT master to fix FTBFS on sparc. (Thanks, John Paul Adrian Glaubitz)
Closes: #995679
-- Andreas Metzler <ametzler@debian.org> Thu, 16 Dec 2021 19:26:32 +0100
exim4 (4.95-2) unstable; urgency=medium
* 75_30-Avoid-calling-gettimeofday-select-per-char-for-cmdli.patch from
upstream GIT master, fixes inefficient command line mail submission.
Closes: #996282
-- Andreas Metzler <ametzler@debian.org> Sat, 16 Oct 2021 13:14:58 +0200
exim4 (4.95-1) unstable; urgency=medium
[ Andreas Metzler ]
* Use »command -v« instead of »which«. Closes: #993653
* New upstream version.
* Catch up with changed lintian output, update overrides.
* Add macro for setting DKIM_IDENTITY. (Thanks, "RL"). Closes: #993880
* Add macro for setting the protocol option on the remote_smtp_smarthost
transport. (Thanks, Bill Allombert). Closes: #994597 Also update
README.Debian.
[ Edward Betts ]
* Remove debian/TODO. It was just a link to alioth that no longer works.
-- Andreas Metzler <ametzler@debian.org> Sun, 03 Oct 2021 13:39:56 +0200
exim4 (4.95~RC2-1) unstable; urgency=low
* Let exim4-base recommend bsd-mailx|mailx instead of only the virtual
package. (Thanks, Daniel Lewart) Closes: #992475
* New upstream version.
+ Update debian/example.conf.md5, no changes needed.
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Sat, 28 Aug 2021 13:18:59 +0200
exim4 (4.95~RC1-1) experimental; urgency=low
* New upstream version.
+ Drop 75_04-Remove-the-must-helo-check-from-the-example-config.patch
77_01-Revert-GnuTLS-when-library-too-old-for-system-CA-bun.patch.
+ Unfuzz 90_localscan_dlopen.dpatch.
-- Andreas Metzler <ametzler@debian.org> Wed, 28 Jul 2021 12:59:22 +0200
exim4 (4.95~RC0-1) experimental; urgency=low
* New upstream version.
+ Point watchfile to test subdirectory.
+ Drop superfluous patches.
+ Unfuzz 90_localscan_dlopen.dpatch
+ Unfuzz debian/EDITME.*
+ Fixup debian/minimaltest for new upstream.
+ New upstream default configuration does not abuse message_size_limit
option to reject overlong lines, there is a new main configuration
option - message_linelength_limit - which is set to 998 by default.
Mirror this change, now the IGNORE_SMTP_LINE_LENGTH_LIMIT only affects
the data ACL.
+ JH/48 Use a less bogus-looking filename for a temporary used for
DH-parameters for GnuTLS. Previously the name started "%s" which,
while not a bug, looked as if it might be one.
Closes: #985997
* Enable native SRS support. Closes: #702358
* Enable external SPF support in -heavy. Closes: #528344
* Cherrypick 75_04-Remove-the-must-helo-check-from-the-example-config.patch
from upstream git master. Drops checking for EHLO/HELO-received in ACL
since the new main config option hosts_require_helo defaults to '*'.
Adapt Debian configuration to mirror this.
* Drop versioned Breaks added in 4.94.2-6, they are superfluous due to
bumped upstream version.
* 77_01-Revert-GnuTLS-when-library-too-old-for-system-CA-bun.patch. Fix
regression (tls_verify_certificates defaulting to unset instead of
"system" for GnuTLS) by reverting respive upstream commit.
-- Andreas Metzler <ametzler@debian.org> Mon, 19 Jul 2021 13:10:00 +0200
exim4 (4.94.2-7) unstable; urgency=medium
* 73_05-Fix-tainted-message-for-fakereject.patch from upstream +fixes
branch: Fix re-expansion of custom message with control=fakereject.
-- Andreas Metzler <ametzler@debian.org> Tue, 13 Jul 2021 18:04:57 +0200
exim4 (4.94.2-6) unstable; urgency=medium
* Cherrypick
78_01-Command-line-option-for-no-notifier-socket.-Bug-2616.patch from
upstream GIT master. This allows one to disable creation of a
daemon notifier socket by either setting notifier_socket to a empty value
or specifying -oY commandline option.
* Init script: For QUEUERUNNER='separate' start daemons with -oY commandline
option to disable daemon notifier socket. Enforce lockstep ugrade of -base
and *daemon* by temporarily adding a versioned Breaks to exim4-base on
older *daemon*. Closes: #988844
-- Andreas Metzler <ametzler@debian.org> Wed, 26 May 2021 18:49:44 +0200
exim4 (4.94.2-5) unstable; urgency=high
* 73_04-Fix-host_name_lookup-Close-2747.patch from exim-4.94.2+fixes.
Fix regression in 4.94.2.
-- Andreas Metzler <ametzler@debian.org> Mon, 17 May 2021 17:45:00 +0200
exim4 (4.94.2-4) unstable; urgency=high
* 75_27_Fix-logging-with-empty-element-in-log_file_path-Bug-.patch /
75_28_Fix-logging-with-build-time-config-and-empty-element.patch replacing
75_27_open_logs_2744.patch from upstream exim-4.94.2+taintwarn branch:
Fix null-pointer dereference when logging to syslog (Closes: #988086) and
also fix loging to syslog at all (Closes: #988304)
-- Andreas Metzler <ametzler@debian.org> Sat, 15 May 2021 18:16:08 +0200
exim4 (4.94.2-3) unstable; urgency=medium
* Updates from exim-4.94.2+fixes:
+ 73_03-Named-Queues-fix-immediate-delivery.-Bug-2743.patch
Fix false positive taint error when using named queues.
-- Andreas Metzler <ametzler@debian.org> Thu, 13 May 2021 18:53:53 +0200
exim4 (4.94.2-2) unstable; urgency=medium
* Updates from exim-4.94.2+fixes:
+ 73_01-Fix-DANE-SNI-handling-Bug-2265.patch (from +fixes).
Fix broken SNI/DANE handling.
+ 73_02-Fix-ipv6norm.patch: Fix ${ip6norm:} operator. Previously, any
trailing line text was dropped, making it unusable in complex
expressions.
* 75_27_open_logs_2744.patch Partial fix for nullpointer dereference with
logging to syslog. See 988086.
-- Andreas Metzler <ametzler@debian.org> Sun, 09 May 2021 18:03:15 +0200
exim4 (4.94.2-1) unstable; urgency=high
* New upstream security release.
+ Release based on +fixes branch, drop 74_*diff.
+ Unfuzz 75_04-acl.patch.
+ Merge in upstream configuration change rejecting all RCPT commands after
too many (more than five out of the initial ten) bad recipients. Can be
disabled by setting CHECK_RCPT_NO_FAIL_TOO_MANY_BAD_RCPT.
+ Fixes multiple security vulnerabilities reported by Qualys and adds
related robustness improvements. (Special thanks to Heiko)
CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
CVE-2020-28007: Link attack in Exim's log directory
CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
CVE-2020-28012: Missing close-on-exec flag for privileged pipe
CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
CVE-2020-28009: Integer overflow in get_stdinput()
CVE-2020-28015, CVE-28021: New-line injection into spool header file
CVE-2020-28026: Line truncation and injection in spool_read_header()
CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
CVE-2020-28017: Integer overflow in receive_add_recipient()
CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
CVE-2020-28011: Heap buffer overflow in queue_run()
CVE-2020-28010: Heap out-of-bounds write in main()
CVE-2020-28018: Use-after-free in tls-openssl.c
CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()
CVE-2020-28014, CVE-2021-27216: PID file handling
CVE-2020-28008: Assorted attacks in Exim's spool directory
CVE-2020-28019: Failure to reset function pointer after BDAT error
* Update debian/upstream/signing-key.asc from
<https://downloads.exim.org/Exim-Maintainers-Keyring.asc>.
-- Andreas Metzler <ametzler@debian.org> Sun, 02 May 2021 07:22:06 +0200
exim4 (4.94-19) unstable; urgency=medium
* Further updates from heiko/exim-4.94+fixes+taintwarn:
+ 75_24-Silence-the-compiler.patch
+ 75_26-Disable-taintchecks-for-mkdir-this-isn-t-part-of-4.9.patch
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Mon, 26 Apr 2021 18:35:43 +0200
exim4 (4.94-18) experimental; urgency=medium
* Pull patches to temporarily add an option to turn taint errors into
warnings. (See #987133)
+ 75_01-Introduce-main-config-option-allow_insecure_tainted_.patch
+ 75_02-search.patch
+ 75_03-dbstuff.patch
+ 75_04-acl.patch
+ 75_05-parse.patch
+ 75_06-rda.patch
+ 75_07-appendfile.patch
+ 75_08-autoreply.patch
+ 75_09-pipe.patch
+ 75_10-deliver.patch
+ 75_11-directory.patch
+ 75_12-expand.patch
+ 75_13-lf_sqlperform.patch
+ 75_14-rf_get_transport.patch
+ 75_15-deliver.patch
+ 75_16-smtp_out.patch
+ 75_17-smtp.patch
+ 75_18-update-doc.patch
+ 75_20-Set-mainlog_name-and-rejectlog_name-unconditionally.patch
+ 75_21-tidy-log.c.patch
+ 75_22-Silence-compiler.patch
+ 75_23-Do-not-close-the-main-_log-if-we-do-not-see-a-chance.patch
* Update NEWS.Debian to describe the feature.
-- Andreas Metzler <ametzler@debian.org> Sun, 25 Apr 2021 07:42:26 +0200
exim4 (4.94-17) unstable; urgency=medium
* Let exim4-config Recommend ca-certificates, needed for certificate
verification.
-- Andreas Metzler <ametzler@debian.org> Thu, 18 Mar 2021 13:54:47 +0100
exim4 (4.94-16) unstable; urgency=medium
* README.Debian: Fix typo "tls_verify_certificate" instead of
"tls_verify_certificates".
* General doc improvements in this area. (Thanks, Jö Fahlke) Closes: #985244
* Intensify upgrade warning in NEWS file.
* Enforce certificate verification against the system trust store in the
remote SMTP transport by default by setting
REMOTE_SMTP_SMARTHOST_TLS_VERIFY_HOSTS = *. Closes: #985344
* Update from exim-4.94+fixes:
+ 74_56-Fix-FreeBSD-13-build.patch
+ 74_57-Fix-weight-calculation-for-spamd_address.-Bug-2694.patch
+ 74_58-Fix-weight-calculation-for-socks_proxy.-Bug-2694.patch
+ 74_59-Fix-build-for-platforms-not-having-ulong.patch
+ 74_60-Fix-list-expansion-for-various-domainlists-having-in.patch
+ 74_61-Bulid-fix-DISABLE_PIPE_CONNECT-build.-Bug-2703.patch
+ 74_62-Docs-fix-description-of-hosts_try_dane.-Bug-2704.patch
-- Andreas Metzler <ametzler@debian.org> Wed, 17 Mar 2021 13:50:44 +0100
exim4 (4.94-15) unstable; urgency=medium
* Update from exim-4.94+fixes:
+ 74_54-Fix-daemon-SIGHUP-on-FreeBSD.patch
+ 74_55-Fix-handling-of-server-which-follows-a-RCPT-452-with.patch
-- Andreas Metzler <ametzler@debian.org> Sun, 07 Feb 2021 08:13:29 +0100
exim4 (4.94-14) unstable; urgency=high
* As was done for -heavy in 963251 also automatically version localscanapi
provides for -light and -custom. (Thanks, Adam Borowski) Closes: #981399
-- Andreas Metzler <ametzler@debian.org> Sat, 30 Jan 2021 18:12:49 +0100
exim4 (4.94-13) unstable; urgency=medium
* Add DKIM_TIMESTAMPS macro to set the dkim_timestamps option on remote_smtp
transport. (Thanks, Simon Josefsson) Closes: #980886
* Update from exim-4.94+fixes:
+ 74_52-Lookups-fix-local_part_data-for-a-match-on-a-filenam.patch
-- Andreas Metzler <ametzler@debian.org> Sat, 30 Jan 2021 14:50:50 +0100
exim4 (4.94-12) unstable; urgency=medium
* Update from exim-4.94+fixes:
+ 74_48-Fix-build-warning-on-32-bit-int-platfowms.-Bug-2678.patch
+ 74_49-Fix-build-on-GNU-Hurd-supports-openat-.-Bug-2608.patch
+ 74_50-Utilities-harden-exim_tidydb-against-corrupt-wait-re.patch
+ 74_51-Auths-in-plaintext-authenticator-fix-parsing-of-cons.patch
-- Andreas Metzler <ametzler@debian.org> Sat, 16 Jan 2021 16:02:51 +0100
exim4 (4.94-11) unstable; urgency=medium
* Update from exim-4.94+fixes:
+ 74_46-Fix-local-delivery-delay-when-combined-with-remote-c.patch
+ 74_47-Fix-listextract-from-a-tainted-list.patch
-- Andreas Metzler <ametzler@debian.org> Fri, 25 Dec 2020 13:35:10 +0100
exim4 (4.94-10) unstable; urgency=low
* Update from exim-4.94+fixes:
+ 74_43-Fix-matching-of-long-addresses.-Bug-2677.patch
+ 74_44-Remove-the-X_-prefix-from-the-PIPE_CONNECT-SMTP-serv.patch
+ 74_45-Fix-the-PIPE_CONNECT-feature-control-in-the-template.patch
* Add lintian overrides for debian-changelog-file-is-a-symlink.
* [lintian] Bump watchfile version to v4.
* Use debhelper v13 compat.
* Stop setting SOURCE_DATE_EPOCH in debian/rules. While the build
dependencies do not (transitively) guarantee that dpkg-dev >= 1.18.8 is
installed even oldstable, i.e. Debian 9 stretch features a new enough
dpkg (1.18.25).
-- Andreas Metzler <ametzler@debian.org> Sat, 19 Dec 2020 12:03:56 +0100
exim4 (4.94-9) unstable; urgency=low
* Update from exim-4.94+fixes:
+ 74_38-GnuTLS-clear-errno-before-any-data-i-o-op-so-error-l.patch
+ 74_39-Fix-non-TLS-build.patch
+ 74_40-eximon-fix-FreeBSD-build.patch
+ 74_41-LDAP-fix-taint-check-in-server-list-walk.-Bug-2646.patch
+ 74_42-Pass-authenticator-pubname-through-spool.-Bug-2648.patch
-- Andreas Metzler <ametzler@debian.org> Wed, 04 Nov 2020 17:50:43 +0100
exim4 (4.94-8) unstable; urgency=low
* Reorder ACL using a "require" verb, move message-statement to the
beginning. (Thanks, Slavko!) Closes: #968089
* Update from exim-4.94+fixes:
+ 74_27-Fix-spelling-of-local_part_data-in-docs-and-debug-ou.patch
+ 74_28-Fix-readsocket-eol-replacement.-Bug-2630.patch
+ 74_29-Taint-fix-off-by-one-in-is_tainted-.-Bug-2634.patch
+ 74_30-Build-ifdef-guard-for-EXPERIMENTAL_QUEUEFILE.patch
+ 74_31-Taint-fix-off-by-one-in-is_tainted-.-Bug-2634.patch
+ 74_32-DANE-force-SNI-to-use-domain.-Bug-2265.patch
+ 74_33-DANE-Fix-2-rcpt-message-diff-domins-case.-Bug-2265.patch
+ 74_34-Fix-non-DANE-build.patch
+ 74_35-DANE-Fix-2-messages-from-queue-case.patch
+ 74_36-Fix-non-DANE-build.patch
-- Andreas Metzler <ametzler@debian.org> Thu, 17 Sep 2020 06:54:00 +0200
exim4 (4.94-7) unstable; urgency=low
* Update from exim-4.94+fixes:
+ 74_24-Taint-fix-ACL-spam-condition-to-permit-tainted-name-.patch
+ 74_25-Fix-debug_print_socket.patch
+ 74_26-debug_print_socket-output-formatting.patch
* [lintian] Mark some patches with "Forwarded: not-needed".
-- Andreas Metzler <ametzler@debian.org> Fri, 24 Jul 2020 13:31:47 +0200
exim4 (4.94-6) unstable; urgency=medium
* Fix typo (missing "S") in REMOTE_SMTP_SMARTHOST_TLS_VERIFY_HOSTS macro.
(Thanks, Slavko!) Closes: #964394
* Update from exim-4.94+fixes:
+ 74_21-typoes.patch (replaces 75_typo_in_74_20.diff)
+ 74_22-Fix-DKIM-signing-to-always-terminate.-Bug-2295.patch
+ 74_23-Fix-taint-trap-in-parse_fix_phrase-.-Bug-2617.patch
* Add lintian overrides for usr/lib/sendmail symlink and for not forwarding
Debian-specific manpages (maintainer-manual-page).
* [lintian] Use UTF-8 encoding in es.po.
-- Andreas Metzler <ametzler@debian.org> Sat, 11 Jul 2020 14:27:31 +0200
exim4 (4.94-5) unstable; urgency=medium
[ Justin Aplin ]
* Fix build with GNU Make (<4.3), broken in -3.
[ Andreas Metzler ]
* Update from exim-4.94+fixes:
+ 74_15-Cutthrough-handle-request-when-a-callout-hold-is-act.patch
+ 74_16-Lookups-Fix-subdir-filter-on-a-dsearch.patch
+ 74_17-Docs-list-further-ways-domain_data-c-may-be-filled-i.patch
+ 74_18-Sqlite-fix-segfault-on-bad-missing-sqlite_dbfile.-Bu.patch
+ 74_19-Taint-fix-ACL-spam-condition-to-permit-tainted-name-.patch
+ 74_20-Fix-message-reception-clock-usage.-Bug-2615.patch Closes: #962847
* 75_typo_in_74_20.diff: Fix a typo in
74_20-Fix-message-reception-clock-usage.-Bug-2615.patch.
-- Andreas Metzler <ametzler@debian.org> Fri, 03 Jul 2020 08:20:07 +0200
exim4 (4.94-4) unstable; urgency=medium
* Automatically version localscanapi provides. Closes: #963251
* Update from exim-4.94+fixes:
+ 74_14-Fix-string_copy-macro-to-not-multiple-eval-args.-Bug.patch
-- Andreas Metzler <ametzler@debian.org> Sun, 21 Jun 2020 18:10:04 +0200
exim4 (4.94-3) unstable; urgency=medium
* Update from exim-4.94+fixes:
+ 74_09-Filters-fix-vacation-in-Exim-filter.-Bug-2593.patch
+ 74_10-TLS-use-RFC-6125-rules-for-certifucate-name-checks-w.patch
+ 74_11-Taint-fix-radius-expansion-condition.patch
+ 74_12-smtp_accept_map_per_host-call-search_tidyup-in-fail-.patch
+ 74_13-Taint-fix-verify.-Bug-2598.patch
-- Andreas Metzler <ametzler@debian.org> Fri, 19 Jun 2020 10:31:26 +0200
exim4 (4.94-2) unstable; urgency=low
* Tighten package interdependencies. With 4.94's daemon avoiding of
tainting requires usage of $local_part_data instead of $local_part_data
in mail_spool transport, but this variable is only filled by the
check_local_user router option in 4.94.
* Update from exim-4.94+fixes:
+ 74_01-Docs-listitem.patch
+ 74_02-Taint-fix-pam-expansion-condition.-Bug-2587.patch
+ 74_03-Taint-fix-listcount-expansion-operator.-Bug-2586.patch
+ 74_04-Docs-fix-mistaken-variable-name.patch
+ 74_05-Docs-fix-layout.patch
+ 74_06-Docs-typoes.patch
+ 74_07-Taint-fix-multiple-ACL-actions-to-properly-manage-ta.patch
+ 74_08-Fix-bi.-Bug-2590.patch
-- Andreas Metzler <ametzler@debian.org> Sun, 07 Jun 2020 09:55:58 +0200
exim4 (4.94-1) unstable; urgency=low
* New upstream version.
* Use mktemp(1) instead of tempfile(1), avoid deprecation warning.
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Mon, 01 Jun 2020 18:45:54 +0200
exim4 (4.94~RC2-1) experimental; urgency=low
* New upstream version.
-- Andreas Metzler <ametzler@debian.org> Sat, 23 May 2020 18:07:01 +0200
exim4 (4.94~RC1-1) experimental; urgency=low
* Fix broken cross-reference in exim_lock.8 (Closes: #960356) and sync from
spec.txt.
* New upstream version.
+ Drop 75*patch.
+ In ACLs always specify "message" or "log_message" after conditions.
+ Use $local_part_data instead of $local_part in require_files statements.
+ Update example.conf.md5.
-- Andreas Metzler <ametzler@debian.org> Sat, 16 May 2020 11:13:48 +0200
exim4 (4.94~RC0-2) experimental; urgency=low
* Update from upstream GIT master.
+ 75_06-Debug-socket-details.patch
+ 75_08-Fix-build-on-platforms-not-supporting-sockopt-SO_PRO.patch
+ 75_09-Build-fix-parallelism-problem.-Bug-2566.patch
+ 75_11-Make-bounce-warn-_message_file-expanded.-Bug-2522.patch
+ 75_12-Taint-When-a-non-wildcarded-localpart-affix-is-match.patch
+ 75_14-Consolidate-local_part_verified-into-local_part_data.patch
+ 75_17-Ensure-lookup-result-variables-are-dropped-between-m.patch
+ 75_18-tidying.patch
+ 75_19-Fix-SPA-authenticator-checking-client-supplied-data-.patch
+ 75_20-wip-see-failed-summary.log.list_match_value.-Pretty-.patch
+ 75_21-value-return.patch
+ 75_22-docs-more-debug.patch
+ 75_23-testcases-for-value-return.patch
+ 75_24-Numeric-variable-returns.patch
+ 75_25-Rework-SPA-fix-to-avoid-overflows.-Bug-2571.patch
+ 75_28-I18N-change-default-on-smtp-transport-to-downconvert.patch
+ 75_29-Lookups-ret-key-option.patch
+ 75_32-Performance-workaround-Linux-kernel-bug.patch
+ 75_33-Fix-build-with-Radius-auth-expansion-condition-suppo.patch
* $local_part_verified gone again, use $local_part_data. - Update NEWS and
configuration.
-- Andreas Metzler <ametzler@debian.org> Sun, 10 May 2020 10:27:04 +0200
exim4 (4.94~RC0-1) experimental; urgency=low
* Point watchfile to test subdirectory.
* New upstream version.
+ Drop 74_*.diff (fixes branch) and
75_01-Build-Enable-GNU-Hurd-Bug-2476.patch (from GIT master).
+ Unfuzz 90_localscan_dlopen.dpatch.
+ Update debian/minimaltest, stop using tainted $local_part variable as
local filename for delivery.
+ Sync from upstream default configuration: Use
"file = /var/mail/$local_part_verified" in mail_spool transport
instead of [...]/$local_part.
* Add NEWS entry for tainting change.
* Patches from upstream GIT master:
+ 75_02-Fix-local_part_verified-for-remote-delivery-routing-.patch
-- Andreas Metzler <ametzler@debian.org> Fri, 01 May 2020 18:57:32 +0200
exim4 (4.93-16) unstable; urgency=medium
* Update from exim-4.93+fixes:
+ 74_40-DKIM-fix-dkim_key_length-in-verify.patch
+ 74_41-Build-fix-parallelism-problem.-Bug-2566.patch
+ 74_42-tidying.patch
+ 74_43-Ensure-lookup-result-variables-are-dropped-between-m.patch
+ 74_44-Fix-SPA-authenticator-checking-client-supplied-data-.patch
+ 74_45-Rework-SPA-fix-to-avoid-overflows.-Bug-2571.patch
+ 74_46-Fix-build-with-Radius-auth-expansion-condition-suppo.patch
-- Andreas Metzler <ametzler@debian.org> Sat, 09 May 2020 19:10:34 +0200
exim4 (4.93-15) unstable; urgency=low
* Update from exim-4.93+fixes:
+ 74_37-Taint-fix-parsing-of-ACL-ratelimit-condition.patch
+ 74_38-Fix-spool-space-check-to-account-for-SIZE.-Bug-2552.patch
* Add macro REMOTE_SMTP_INTERFACE for setting the interface option on the
remote_smtp transport. Closes: #761925
-- Andreas Metzler <ametzler@debian.org> Sat, 25 Apr 2020 14:10:47 +0200
exim4 (4.93-14) unstable; urgency=low
* Update from exim-4.93+fixes:
+ 74_34-Taint-fix-dsearch-result-to-be-untainted.patch
+ 74_35-Fix-argument-checking-for-readsocket.patch
+ 74_36-OpenSSL-avoid-loading-server-s-CA-list-for-client-no.patch
-- Andreas Metzler <ametzler@debian.org> Fri, 10 Apr 2020 13:53:34 +0200
exim4 (4.93-13) unstable; urgency=medium
* Update from exim-4.93+fixes:
+ 74_29-Fix-mime_part_count-for-non-mime-message-on-multi-me.patch
+ 74_31-Taint-track-in-utf8clean-operator.patch
+ 74_32-Fix-spurious-detection-of-timeout-while-writing-to-t.patch
+ 74_33-Fix-segfault-on-bad-cmdline-f-sender-argument.-Bug-2.patch
* [lintian] Move eximon.bin from /usr/lib/exim4 to /usr/libexec/exim4.
-- Andreas Metzler <ametzler@debian.org> Sat, 21 Mar 2020 11:39:19 +0100
exim4 (4.93-12) unstable; urgency=low
* Update from exim-4.93+fixes:
+ 74_28-Fix-tr-expansion-item.-Bug-2533.patch
* Recover more gracefull from half installed state after trying to install
without util-linux (essential) installed. Closes: #952451 (Thanks, James
Le Cuirot for the patch)
* Use macro ("ROUTER_DNSLOOKUP_IGNORE_TARGET_HOSTS") for ignore_target_hosts
list setting on dnslookup router. Extend list by corresponding IPv6
entries (Thanks, C Snover) Closes: #950973
* Add REMOTE_SMTP_TRANSPORTS_HEADERS_REMOVE to allow setting headers_remove
on both remote_smtp and remote_smtp_smarthost transports. Closes: #927741
-- Andreas Metzler <ametzler@debian.org> Sat, 29 Feb 2020 15:53:44 +0100
exim4 (4.93-11) unstable; urgency=medium
* Update from exim-4.93+fixes:
+ 74_26-Auths-fix-cyrus-sasl-driver-for-gssapi-use.-Bug-2524.patch
+ 74_27-GnuTLS-fix-hanging-callout-connections.patch
-- Andreas Metzler <ametzler@debian.org> Fri, 14 Feb 2020 16:02:05 +0100
exim4 (4.93-10) unstable; urgency=medium
* Refresh debian/upstream/signing-key.asc from
https://downloads.exim.org/Exim-Maintainers-Keyring.asc.
* Update from exim-4.93+fixes:
+ 74_23-Fix-taint-hybrid-checking-on-BSD.patch
+ 74_24-TFO-even-in-binary-built-for-modern-Linux-handle-err.patch
+ 74_25-Taint-slow-mode-checking-only.patch
-- Andreas Metzler <ametzler@debian.org> Sat, 01 Feb 2020 11:06:29 +0100
exim4 (4.93-9) unstable; urgency=medium
* Add 74_22-Taint-hybrid-checking-mode.patch.
-- Andreas Metzler <ametzler@debian.org> Thu, 16 Jan 2020 18:15:36 +0100
exim4 (4.93-8) unstable; urgency=medium
* Refresh debian/upstream/signing-key.asc from
https://downloads.exim.org/Exim-Maintainers-Keyring.asc.
* More updates from exim-4.93+fixes:
+ 74_19-SPF-fix-result-for-case-of-only-non-spf-TXT-RRs.-Bug.patch
+ 74_20-Fix-error-logging-for-dynamically-loaded-modules.-Bu.patch
+ 74_21-heimdal-auth-fix-the-increase-of-big_buffer-size.-Bu.patch
Closes: #949034
-- Andreas Metzler <ametzler@debian.org> Thu, 16 Jan 2020 14:38:21 +0100
exim4 (4.93-7) unstable; urgency=medium
* README.Debian: Expand a little bit on how macros work. (See #948308)
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Sat, 11 Jan 2020 11:12:35 +0100
exim4 (4.93-6) experimental; urgency=low
* Improve on reproducible build, set EXIM_ARCHTYPE=DEB_TARGET_GNU_CPU to
override/avoid CPU detection with uname -m.
* More updates from exim-4.93+fixes:
74_18-SPF-fix-handling-mix-of-spf-and-other-txt-records.-B.patch
* Polish debian/rules. (Use CURDIR instead of executing `pwd`, avoid :=
assignments with $(shell).
* Build with SMTPUTF8 support. (SUPPORT_I18N_2008 and SUPPORT_I18N)
Closes: #885149
In configuration set smtputf8_advertise_hosts to '' instead of '*'.
-- Andreas Metzler <ametzler@debian.org> Mon, 06 Jan 2020 13:58:44 +0100
exim4 (4.93-5) unstable; urgency=medium
* More updates from exim-4.93+fixes:
74_14-SPF-only-require-v-spf1-on-TXT-DNS-records-during-lo.patch
74_15-Eximon-fix-string-handling.-Bug-2500.patch
74_16-Fix-build-with-heimdal-gssapi.-Bug-2501.patch
74_17-Fix-the-variables-set-by-gsasl-authenticator.patch
-- Andreas Metzler <ametzler@debian.org> Fri, 03 Jan 2020 19:02:33 +0100
exim4 (4.93-4) unstable; urgency=medium
* Improve on TLS info in README.Debian.
* More updates from exim-4.93+fixes:
74_10-DMARC-default-dmarc_tld_file-to-unset.-Bug-2494.patch
74_11-Zero-smtp-context-structure-after-allocation.patch
74_13-ARC-Reset-received-ARC-instance-counter-before-next-.patch
-- Andreas Metzler <ametzler@debian.org> Thu, 26 Dec 2019 15:13:40 +0100
exim4 (4.93-3) unstable; urgency=medium
* More updates (4.93.0.3) from exim-4.93+fixes:
74_08-ARC-fix-crash-induced-by-misordered-headers.-Bug-249.patch
74_09-Fix-taint-issue-with-retry-records.-Bug-2492.patch
-- Andreas Metzler <ametzler@debian.org> Fri, 13 Dec 2019 18:56:18 +0100
exim4 (4.93-2) unstable; urgency=medium
* Update to exim-4.93+fixes branch
74_01-PAM-fix-crash-in-the-pam-expansion-condition.-Bug-24.patch
74_02-Regard-command-line-recipients-as-tainted.patch
74_03-TFO-disable-for-FreeBSD.patch
74_04-Hurd-errno-really-uses-more-than-a-short-sized-value.patch
74_06-local_scan-align-local_scan.h-and-docs-re.-store_get.patch
74_07-Fix-taint-issue-in-transport-with-DSN.-Bug-2491.patch
-- Andreas Metzler <ametzler@debian.org> Thu, 12 Dec 2019 18:25:44 +0100
exim4 (4.93-1) unstable; urgency=low
* Point watchfile to release directory again.
* New upstream version.
-- Andreas Metzler <ametzler@debian.org> Mon, 09 Dec 2019 19:05:17 +0100
exim4 (4.93~RC7-1) unstable; urgency=low
* New upstream version.
+ Update md5 hash for upstream example configuration. (Change not relevant
for Debian)
* 75_01-Build-Enable-GNU-Hurd-Bug-2476.patch and
75_02-TFO-disable-for-FreeBSD.patch from upstream 4.next branch: Re-enable
build on GNU/hurd. (Thanks. Samuel Thibault) Closes: #945943
-- Andreas Metzler <ametzler@debian.org> Thu, 05 Dec 2019 17:50:20 +0100
exim4 (4.93~RC5-1) unstable; urgency=low
* New upstream version.
+ Bump exim4-localscanap Provides.
-- Andreas Metzler <ametzler@debian.org> Wed, 27 Nov 2019 19:25:06 +0100
exim4 (4.93~RC4-1) unstable; urgency=low
* New upstream version.
-- Andreas Metzler <ametzler@debian.org> Tue, 19 Nov 2019 19:39:37 +0100
exim4 (4.93~RC3-1) unstable; urgency=low
* Drop (dead) link to openspf.org in rcpt ACL message string.
Closes: #944786
* New upstream version.
+ Unfuzz 90_localscan_dlopen.dpatch.
-- Andreas Metzler <ametzler@debian.org> Sun, 17 Nov 2019 11:37:15 +0100
exim4 (4.93~RC2-1) unstable; urgency=low
* New upstream beta version.
+ Drop patches/75*.
* Allow overriding cron.daily paniclog report recipient. Closes: #611085
* Add REMOTE_SMTP_SMARTHOST_TLS_VERIFY_CERTIFICATES and
REMOTE_SMTP_SMARTHOST_TLS_VERIFY_HOSTS to set tls_verify_certificates and
tls_verify_hosts respectively on the remote_smtp_smarthost transport.
Closes: #823831
In addition to that add REMOTE_SMTP_HOSTS_REQUIRE_TLS to set
hosts_require_tls for the remote_smtp transport. Closes: #780033
-- Andreas Metzler <ametzler@debian.org> Sun, 10 Nov 2019 13:30:37 +0100
exim4 (4.93~RC1-4) unstable; urgency=low
* Add libnet-ssleay-perl dependency to "basic" autopkg test. We do not need
it yet but will forget for sure to add it when we do.
* Following upstream defaults do not disable incoming TLS by default - i.e.
if MAIN_TLS_ENABLE is not set - but use a self-signed certificate.
(Relevant upstream changes: tls_advertise_hosts defaults to * for TLS
builds since 4.87_JH/18, on-demand generation of self-signed certificate
for inbound SMTP since 4.88_JH/05, 4.93_JH/23 TLS enabled build by
default.)
* 75_02-Revert-preallocate-store-for-config-which-appears-to.patch: Fix
mismerge which triggered a test error on mipsel. Closes: #944060
-- Andreas Metzler <ametzler@debian.org> Sat, 09 Nov 2019 19:25:10 +0100
exim4 (4.93~RC1-3) unstable; urgency=low
* 75_01-Dsearch-Fix-taint-handling-in-lookup.-Bug-2465.patch: Untaint
dsearch lookup. Closes: #944199
-- Andreas Metzler <ametzler@debian.org> Sat, 09 Nov 2019 15:10:27 +0100
exim4 (4.93~RC1-2) unstable; urgency=low
* autopkg test: Drop (python2) test for ancient vulnerability and do some
basic testing with swaks instead. Closes: #943006
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Sun, 03 Nov 2019 14:39:28 +0100
exim4 (4.93~RC1-1) experimental; urgency=low
* New upstream beta version.
+ Drop 75_01-Fix-HAVE_LOCAL_SCAN-build.-Bug-2457.patch,
75_02-CHUNKING-fix-all-RCPTs-rejected-non-pipelined.-Bug-2.patch and
75_03_Fix-local-scan-ABI.-Bug-2458.patch.
+ Update debian/example.conf.md5 (Removal of dnssec_request_domains was
already implemented in 4.93~RC0-1.)
* exigrep does case sensitive *option* processing (as it did for all
versions <4.90). Notably -M, -m, --invert, -I may be affected.
Closes: #927280
(This change was already present in RC0.)
-- Andreas Metzler <ametzler@debian.org> Thu, 31 Oct 2019 18:22:11 +0100
exim4 (4.93~RC0-2) experimental; urgency=low
* 75_03_Fix-local-scan-ABI.-Bug-2458.patch: Fix function prototypes in
local_scan.h.
* 90_localscan_dlopen.dpatch: Unfuzz, mark
string_copy_function/string_copy_taint_function/string_copyn_function in
string.c as visible.
* Provide exim4-localscanapi-2.1.
* Drop sa-exim Breaks, the localscanapi version bump makes this superfluous.
-- Andreas Metzler <ametzler@debian.org> Sun, 27 Oct 2019 13:48:27 +0100
exim4 (4.93~RC0-1) experimental; urgency=low
* Point watchfile to test-subdirectory.
* New upstream beta version.
+ Drop debian/patches/7[56]*.
+ Unfuzz 90_localscan_dlopen.dpatch.
+ Unfuzz/update (explicit -lnsl) debian/EDITME*
+ Update configuration, mirorring upstream changes.
Both dnssec_request_domains and hosts_try_dane now default to '*', drop
these settings. REMOTE_SMTP_DISABLE_DANE is a noop, now.
+ Exim DH param configuration (tls_dhparam) now makes use of the current
GnuTLS (> 3.6) functionality, which implements rfc 7919. Drop
unnecessary packaging bits.
+ Pull post release fix from upstream GIT
(75_01-Fix-HAVE_LOCAL_SCAN-build.-Bug-2457.patch) to fix build error
with HAVE_LOCAL_SCAN=yes.
+ Update 90_localscan_dlopen.dpatch to #include documented interface
(local_scan.h) instead of exim.h.
* debian/rules: Do not try to build -heavy if -light failed.
* 75_02-CHUNKING-fix-all-RCPTs-rejected-non-pipelined.-Bug-2.patch:
Post-release hix from upstream GIT.
https://bugs.exim.org/show_bug.cgi?id=2454
* The localscan dlopen functionality is broken, (temporarily) drop
exim4-localscanapi-2.0 from Provides.
-- Andreas Metzler <ametzler@debian.org> Sun, 20 Oct 2019 13:46:49 +0200
exim4 (4.92.3-1) unstable; urgency=medium
* Fix (commented) examples in configuration for clamd and courier authdaemon
to refer to /run instead of /var/run. Closes: #942292
* While we are at it also fix exim pid file path in exim(8).
* New upstream version (identical to 4.92.2 +
75_36-Fix-buffer-overflow-in-string_vformat.-Bug-2449.patch, i.e.
4.92.2-3).
* Use patches from exim-4.92.3+fixes, add
75_36-Fix-errorcheck-in-smtp-transport.patch.
* [lintian] Set Rules-Requires-Root: binary-targets.
-- Andreas Metzler <ametzler@debian.org> Fri, 18 Oct 2019 18:44:35 +0200
exim4 (4.92.2-3) unstable; urgency=critical
* 75_36-Fix-buffer-overflow-in-string_vformat.-Bug-2449.patch: Fix buffer
overflow in string_vformat. CVE-2019-16928
-- Andreas Metzler <ametzler@debian.org> Sat, 28 Sep 2019 06:41:18 +0200
exim4 (4.92.2-2) unstable; urgency=medium
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Sun, 08 Sep 2019 15:10:46 +0200
exim4 (4.92.2-1) experimental; urgency=medium
* New upstream security release (identical except for the version number to
4.92.1 + 77_01-string.c-do-not-interpret-before-0-CVE-2019-15846.patch).
+ Drop 77_01-string.c-do-not-interpret-before-0-CVE-2019-15846.patch.
* Refresh from exim-4.92.2+fixes branch:
+ 75_32-Fix-domain-for-a-bare-local-part-input.-Bug-2375.patch
+ 75_33-exim_dbmbuild-handle-0-sequence.patch
+ 75_34-fixup-exim_dbmbuild-handle-0-sequence.patch
-- Andreas Metzler <ametzler@debian.org> Sat, 07 Sep 2019 11:00:29 +0200
exim4 (4.92.1-3) unstable; urgency=high
* 77_01-string.c-do-not-interpret-before-0-CVE-2019-15846.patch - Fix SNI
related buffer overflow. CVE-2019-15846
-- Andreas Metzler <ametzler@debian.org> Tue, 03 Sep 2019 19:35:34 +0200
exim4 (4.92.1-2) unstable; urgency=medium
* Pulled from exim-4.92+fixes branch:
+ 75_30-Fix-crash-after-TLS-channel-shutdown.patch
+ 75_31-Auth-handle-socket-read-errors-in-Dovecot-authentica.patch
* Add Breaks: sa-exim (<< 4.2.1-17) to -heavy, see #930648.
* Change *.logrotate to nocreate to work around #400198.
Closes: #399930
-- Andreas Metzler <ametzler@debian.org> Wed, 14 Aug 2019 09:25:28 +0200
exim4 (4.92.1-1) unstable; urgency=low
* New upstream bugfix release. (4.92.1 is 4.92 + the fix for CVE-2019-13917,
so there are no source changes to the previous upload.)
+ Drop 77_Avoid-re-expansion-in-sort-CVE-2019-13917-OVE-201907.patch.
+ Use patches from exim-4.92.1+fixes branch.
* In cron.daily use '/usr/sbin/exim4 -be '${primary_hostname}' instead of
hostname --fqdn to get local hostname (for information purposes).
Closes: #933231
* Run exim4-base daily job via systemd.timer to guarantee execution before
logrotate. Closes: #932328 (Thanks to Sven Hartge for bug-report and
patch)
* Add systemd-sysv as alternative for fulfilling the cron dependency.
* Use debhelper 12 compat.
-- Andreas Metzler <ametzler@debian.org> Sun, 04 Aug 2019 14:28:22 +0200
exim4 (4.92-10) unstable; urgency=high
* Fix remote command execution vulnerability related to
"${sort}"-expansion. CVE-2019-13917 OVE-20190718-0006
-- Andreas Metzler <ametzler@debian.org> Sat, 20 Jul 2019 19:01:57 +0200
exim4 (4.92-9) unstable; urgency=low
* exim4-base.cron.daily, paniclog warning mail:
+ Improve on wording. ${E4BCD_PANICLOG_LINES} only sets an upper limit
of reported lines, there might be less lines than that in the mail.
Closes: #929626
+ Instead of quoting the last ${E4BCD_PANICLOG_LINES} send out the last
lines not filtered out by "$E4BCD_PANICLOG_NOISE". Closes: #929798
* Add missing patches from exim-4.92+fixes branch, other patches renamed for
proper order.
+ 75_11-Fix-bP-smtp_receive_timeout-.-Bug-2384.patch
+ 75_12-Fix-build-with-recent-LibreSSL-when-including-DANE.-.patch
+ 75_13-SPF-better-buld-compatibility-with-OpenBSD.patch
+ 75_15-GnuTLS-3.6.7-cipher-strings.patch
+ 75_17-Fix-listing-a-named-queue-by-a-non-admin-user.-Bug-2.patch
+ 75_21-Unbreak-heimdal_gssapi-auth-driver.patch
+ 75_22-Fix-DSN-Final-Recipient-field.patch
+ 75_23-Fix-bounce-generation-under-RFC-3461-request.-Bug-24.patch
* 75_20-Fix-detection-of-32b-platform-at-build-time.-Bug-240.patch is now
also from + fixes branch.
* Tighten dependency of exim4 on daemon packages. Closes: #930519 Add
lintian override for version-substvar-for-external-package.
-- Andreas Metzler <ametzler@debian.org> Fri, 05 Jul 2019 19:23:53 +0200
exim4 (4.92-8) unstable; urgency=low
* Pulled from exim-4.92+fixes branch:
+ 75_11-GnuTLS-fix-tls_out_ocsp-under-hosts_request_ocsp.patch
Fix expansion of $tls_out_ocsp under hosts_request_ocsp.
+ 75_12-GnuTLS-fix-the-advertising-of-acceptable-certs-by-th.patch
When tls_verify_certificates was set to a directory instead of a file
exim/GnuTLS would still send out the list of accepted certificates,
This did not match documented behavior.
+ 75_13-Use-dsn_from-for-success-DSN-messages.-Bug-2404.patch
The dsn_from option was not used for DSN success messages.
* Pulled from upstream GIT master:
+ 75_14-Fix-smtp-response-timeout.patch
Fix the timeout on smtp response to apply to the whole response instead
of resetting for every byte received.
+ 75_15-Fix-detection-of-32b-platform-at-build-time.-Bug-240.patch
https://bugs.exim.org/show_bug.cgi?id=2405
${eval } was broken on 32bit archs.
-- Andreas Metzler <ametzler@debian.org> Sat, 08 Jun 2019 17:37:43 +0200
exim4 (4.92-7) unstable; urgency=medium
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Tue, 07 May 2019 19:44:23 +0200
exim4 (4.92-6) experimental; urgency=medium
* Revert 90_localscan_dlopen.dpatch removal to give Magnus some chance for
debugging sa-exim.
* Set HAVE_LOCAL_SCAN=yes in EDITME.
* Upload to experimental.
-- Andreas Metzler <ametzler@debian.org> Tue, 16 Apr 2019 17:58:20 +0200
exim4 (4.92-5) unstable; urgency=medium
* Improved spam-scanning example with accompaning information in
README.Debian. Explicitly warn about adding the default SpamAssassin
report in a header, which Closes: #774553
* Drop 90_localscan_dlopen.dpatch. (It has been non-functional for a couple
of months.) Closes: #925982 Add a Conflicts for sa-exim, which relied on
the (working) version of the patch. Drop exim4-dev package. Add a NEWS
entry for this change.
-- Andreas Metzler <ametzler@debian.org> Sun, 07 Apr 2019 13:39:31 +0200
exim4 (4.92-4) unstable; urgency=medium
* Another patch from exim-4.92+fixes branch:
75_10-Harden-plaintext-authenticator.patch
-- Andreas Metzler <ametzler@debian.org> Fri, 22 Mar 2019 07:15:20 +0100
exim4 (4.92-3) unstable; urgency=medium
* Pull fixes from exim-4.92+fixes branch.
+ 75_05-Fix-expansions-for-RFC-822-addresses-having-comments.patch
+ 75_06-Docs-Add-note-on-lsearch-for-IPv4-mapped-IPv6-addres.patch
+ 75_07-Fix-crash-from-SRV-lookup-hitting-a-CNAME.patch
+ 75_08-Logging-fix-initial-listening-on-log-line.patch
+ 75_09-OpenSSL-Fix-aggregation-of-messages.patch
-- Andreas Metzler <ametzler@debian.org> Wed, 20 Mar 2019 17:01:29 +0100
exim4 (4.92-2) unstable; urgency=medium
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Wed, 20 Feb 2019 19:23:11 +0100
exim4 (4.92-1) experimental; urgency=medium
* Point watchfile to release directory again.
* New upstream stable release, identical to rc6 except for the version
string.
* Pull fixes from exim-4.92+fixes branch.
+ 75_01-Fix-json-extract-operator-for-unfound-case.patch
+ 75_02-Fix-transport-buffer-size-handling.patch
+ 75_03-Fix-info-on-using-local_scan-in-the-default-Makefile.patch
+ 75_04-GnuTLS-Fix-client-detection-of-server-reject-of-clie.patch
* Upload to experimental while waiting for rc6 to migrate.
-- Andreas Metzler <ametzler@debian.org> Sun, 17 Feb 2019 13:13:55 +0100
exim4 (4.92~RC6-1) unstable; urgency=low
* New upstream snapshot rc6, includes
40_01-Fix-dkim_verify_signers-option.-Bug-2366.patch.
-- Andreas Metzler <ametzler@debian.org> Sat, 09 Feb 2019 14:33:15 +0100
exim4 (4.92~RC5-2) unstable; urgency=high
* In init script use start-stop-daemon directly instead of lsb-base's
killproc which currently fails to pass on the executable name to s-s-d
(921558). This broke with s-s-d 1.19.2 which (for security reasons)
requires further filtering arguments in addition to --pidfile when the pid
file is not owned by root. Closes: #921205
-- Andreas Metzler <ametzler@debian.org> Thu, 07 Feb 2019 18:42:41 +0100
exim4 (4.92~RC5-1) unstable; urgency=medium
* New upstream snapshot rc5.
* 40_01-Fix-dkim_verify_signers-option.-Bug-2366.patch: dkim_verify_signers
was ignored.
-- Andreas Metzler <ametzler@debian.org> Thu, 31 Jan 2019 19:25:03 +0100
exim4 (4.92~RC4-3) unstable; urgency=medium
* Refresh debian/upstream/signing-key.asc from
https://downloads.exim.org/Exim-Maintainers-Keyring.asc.
* Drop outdated pointers to alioth package homepage from README.Debian.
* Update exim4-config Breaks to enforce upgrade to daemon binary package
with DANE support. Closes: #919902
* [lintian] Minimize upstream/signing-key.asc.
-- Andreas Metzler <ametzler@debian.org> Sun, 20 Jan 2019 17:52:39 +0100
exim4 (4.92~RC4-2) unstable; urgency=medium
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Sat, 05 Jan 2019 15:35:38 +0100
exim4 (4.92~RC4-1) experimental; urgency=low
* New upstream version.
+ Drop 75_GnuTLS-repeat-lowlevel-read-and-write-operations-whi.patch.
+ Unfuzz patches.
-- Andreas Metzler <ametzler@debian.org> Mon, 31 Dec 2018 13:13:45 +0100
exim4 (4.92~RC3-1) unstable; urgency=low
* Add 75_GnuTLS-repeat-lowlevel-read-and-write-operations-whi.patch from
upstream GIT master, fixing outgoing TLS 1.3.
https://bugs.exim.org/show_bug.cgi?id=2359
* New upstream version.
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Wed, 26 Dec 2018 16:07:52 +0100
exim4 (4.92~RC2-1) experimental; urgency=low
* New upstream version.
+ Drop 75_01-Fix-parsing-of-option-type-Kint-integer-stored-in-K-.patch
-- Andreas Metzler <ametzler@debian.org> Tue, 18 Dec 2018 19:20:24 +0100
exim4 (4.92~RC1-1) experimental; urgency=low
* Update upstream/signing-key.asc from
https://ftp.exim.org/pub/exim/Exim-Maintainers-Keyring.asc, adding
96E4754B8F93C1B239F1A95785BCF7AC6735A680 while removing
1F9C181B1E83D2099F02C95AC4F4F94804D29EBA and
FAA1C7F9CD077DC4304BC0C885AB833FDDC03262.
* New upstream release candidate:
+ Point watchfile to test subdir.
+ Update watchfile to handle -RC1 in addition to _RC1.
+ Drop 75_fixes*.patch.
+ Unfuzz 32_exim4.dpatch and 90_localscan_dlopen.dpatch
+ Update configuration from upstream example, except for
tls_sni/tls_require_ciphers settings on remote_smtp_smarthost transport:
* Enable dns_dnssec_ok.
* Set dnssec_request_domains = * on dnslookup and
dnslookup_relay_to_domains routers.
* Set hosts_try_dane = */dnssec_request_domains = * on remote_smtp
transport unless REMOTE_SMTP_DISABLE_DANE is set.
* Set multi_domain on remote_smtp_smarthost transport.
* Post release updates:
+ 75_01-Fix-parsing-of-option-type-Kint-integer-stored-in-K-.patch
-- Andreas Metzler <ametzler@debian.org> Sat, 15 Dec 2018 16:24:54 +0100
exim4 (4.91-9) unstable; urgency=low
* Run "wrap-and-sort --max-line-length=72 --short-indent" and add back
autodeleted comments.
* Update from exim-4_91+fixes branch:
+ 75_fixes_26-Fix-bad-use-of-library-copying-string-over-itself.patch
+ 75_fixes_27-Fix-cyrus-sasl-authenticator-for-authenticated_fail_.patch
+ 75_fixes_28-Avoid-leaving-domain-live-with-bogus-info-during-ser.patch
+ 75_fixes_29-Fix-AUTH_GSASL-build.patch
+ 75_fixes_30-Harden-string-list-handling.patch
-- Andreas Metzler <ametzler@debian.org> Thu, 06 Dec 2018 19:19:38 +0100
exim4 (4.91-8) unstable; urgency=low
[ Andreas Metzler ]
* Update from exim-4_91+fixes branch:
+ 75_fixes_18-Restore-Darwin-OS-configuration.patch
+ 75_fixes_20-Fix-filter-noerror-command.-Bug-2318.patch
+ 75_fixes_21-DANE-fix-TA-mode-verify-under-GnuTLS.-Bug-2311.patch
+ 75_fixes_22-Testsuite-track-newer-GnuTLS-behaviour.patch
+ 75_fixes_24-DANE-ignore-undersized-TLSA-records.patch
+ 75_fixes_25-Logging-do-not-log-a-missing-proxy-address-on-delive.patch
[ Marc Haber ]
* Move definition of CHECK_RCPT_*_LOCALPARTS macro to acl file proper.
-- Andreas Metzler <ametzler@debian.org> Sat, 29 Sep 2018 19:08:52 +0200
exim4 (4.91-7) unstable; urgency=low
* Update from exim-4_91+fixes branch:
+ 75_fixes_16-Fix-non-EVENTS-build.patch
+ 75_fixes_17-Fix-cutthrough-delivery-for-more-than-one-iteration-.patch
-- Andreas Metzler <ametzler@debian.org> Sun, 26 Aug 2018 11:33:15 +0200
exim4 (4.91-6) unstable; urgency=low
* Update from exim-4_91+fixes branch:
+ 75_fixes_13-DKIM-Fix-signing-for-body-lines-starting-with-a-pair.patch
+ 75_fixes_14-ARC-Fix-verification-to-do-AS-checks-in-reverse-orde.patch
+ 75_fixes_15-I18N-Fix-protocol-recorded-for-a-multi-SMTPUTF8-mess.patch
* [lintian] Do not run mininal testsuite with DEB_BUILD_OPTIONS=nocheck.
(override_dh_auto_test-does-not-check-DEB_BUILD_OPTIONS)
-- Andreas Metzler <ametzler@debian.org> Fri, 20 Jul 2018 11:21:24 +0200
exim4 (4.91-5) unstable; urgency=medium
* Update from exim-4_91+fixes branch:
+ 75_fixes_10-Use-serial-number-1-for-self-generated-selfsigned-ce.patch
+ 75_fixes_11-Fix-logging-of-cmdline-args-when-starting-in-an-unli.patch
+ 75_fixes_12-ARC-Fix-signing-for-case-when-DKIM-signing-failed.patch
-- Andreas Metzler <ametzler@debian.org> Sat, 09 Jun 2018 18:10:39 +0200
exim4 (4.91-4) unstable; urgency=medium
* Update from exim-4_91+fixes branch:
+ 75_fixes_06-Cutthrough-fix-race-resulting-in-duplicate-delivery..patch
+ 75_fixes_07-tidying.patch
+ 75_fixes_08-ARC-fix-crash-on-signing-with-missing-key-file.patch
+ 75_fixes_09-Content-scanning-Fix-locking-on-message-spool-files..patch
* [lintian] Delete trailing empty lines in changelog.
-- Andreas Metzler <ametzler@debian.org> Thu, 17 May 2018 17:14:53 +0200
exim4 (4.91-3) unstable; urgency=medium
* Update from exim-4_91+fixes branch:
+ 75_fixes_01-Belated-README.UPDATING-notes-for-Exim-4.91.patch
+ 75_fixes_02-Avoid-doing-logging-in-signal-handlers.-Bug-1007.patch
+ 75_fixes_03-Fix-typo-in-arc.-Bug-2262.patch
+ 75_fixes_04-Fix-OpenSSL-non-OCSP-build.patch
+ 75_fixes_05-DKIM-enforce-limit-of-20-on-received-DKIM-Signature-.patch
+ Move 50_localscan_dlopen.dpatch to end of patch series and rename to
90_... to preserve alphanumeric patch ordering.
* Add log_message for local blacklists to improve log readability. (Patch by
Dominic Hargreaves).
-- Andreas Metzler <ametzler@debian.org> Sat, 28 Apr 2018 14:59:36 +0200
exim4 (4.91-2) unstable; urgency=low
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Sat, 21 Apr 2018 10:38:50 +0200
exim4 (4.91-1) experimental; urgency=medium
* Point watchfile to release directory again and use downloads.exim.org
host.
* New upstream version.
* Tighten b-d on libgnutls28-dev to >= 3.5.7, earlier Debian packages did
not ship libgnutls-dane0.
-- Andreas Metzler <ametzler@debian.org> Sun, 15 Apr 2018 17:52:05 +0200
exim4 (4.91~RC4-1) experimental; urgency=medium
* New upstream version.
-- Andreas Metzler <ametzler@debian.org> Mon, 09 Apr 2018 19:25:18 +0200
exim4 (4.91~RC3-1) experimental; urgency=medium
* New upstream version.
* Point vcs* to salsa.
-- Andreas Metzler <ametzler@debian.org> Thu, 05 Apr 2018 19:43:39 +0200
exim4 (4.91~RC2-1) experimental; urgency=medium
* New upstream version.
Drop 75_01-Fix-heavy-pipeline-SMTP-command-input-corruption.-Bu.patch
-- Andreas Metzler <ametzler@debian.org> Wed, 21 Mar 2018 19:25:44 +0100
exim4 (4.91~RC1-1) experimental; urgency=medium
* Point watchfile to test subdirectory.
* New upstream version:
+ Drop debian/patches/75_*.
+ Update example.conf.md5.
Upstream now enables verify = header_syntax check in default config,
mirror this change in Debian, introduce
NO_CHECK_DATA_VERIFY_HEADER_SYNTAX macro to override this.
* Build with newly available (well, for GnuTLS) DANE support.
* Pull 75_01-Fix-heavy-pipeline-SMTP-command-input-corruption.-Bu.patch from
upstream master, fixing https://bugs.exim.org/show_bug.cgi?id=2250.
-- Andreas Metzler <ametzler@debian.org> Sat, 17 Mar 2018 17:41:51 +0100
exim4 (4.90.1-5) unstable; urgency=medium
* Update from exim-4_90+fixes branch:
75_15-Pipe-transport-part-two.-Bug-2257.patch
75_16-Fix-spool_wireformat-final-dot-on-LMTP-transport.-Bu.patch
75_17-Cutthrough-enforce-non-use-in-combination-with-DKIM-.patch
-- Andreas Metzler <ametzler@debian.org> Sat, 31 Mar 2018 07:14:31 +0200
exim4 (4.90.1-4) unstable; urgency=medium
* Update from exim-4_90+fixes branch:
75_11-DMARC-add-variables-to-list-of-those-now-unused-at-t.patch
75_12-Fix-heavy-pipeline-SMTP-command-input-corruption.-Bu.patch
75_13-Unbreak-DMARC.patch
75_14-Fix-pipe-transport-to-not-use-a-socket-only-syscall..patch
-- Andreas Metzler <ametzler@debian.org> Thu, 22 Mar 2018 07:44:05 +0100
exim4 (4.90.1-3) unstable; urgency=medium
* Update from exim-4_90+fixes branch:
75_07-Fix-ldap-lookups-for-zero-length-attribute-value.-Bu.patch
75_08-Mark-variables-unused-before-release-of-store-in-the.patch
75_09-Mark-variables-unused-before-release-of-store-in-the.patch
75_10-Mark-variables-that-are-unused-before-release-of-sto.patch
-- Andreas Metzler <ametzler@debian.org> Fri, 16 Mar 2018 18:35:01 +0100
exim4 (4.90.1-2) unstable; urgency=medium
* Update from exim-4_90+fixes branch:
75_01-ACL-Enforce-non-usability-of-control-utf8_downconver.patch
75_02-Fix-memory-leak-during-multi-message-reception-using.patch
75_03-OpenSSL-Fix-memory-leak-during-multi-message-connect.patch
75_04-Fix-exim_dbmbuild-to-permit-directoryless-filenames..patch
75_05-OpenSSL-revert-needless-free-of-certificate-list.-Th.patch
75_06-I18N-Fix-utf8_downconvert-propagation-through-a-redi.patch
-- Andreas Metzler <ametzler@debian.org> Sat, 10 Mar 2018 14:25:51 +0100
exim4 (4.90.1-1) unstable; urgency=high
* New upstream version, fixing CVE-2018-6789. Closes: #890000
+ Drop 75_*.patch.
-- Andreas Metzler <ametzler@debian.org> Sat, 10 Feb 2018 13:45:40 +0100
exim4 (4.90-7) unstable; urgency=medium
* Update from exim-4_90+fixes branch. (exim-4.90.0.27)
+ 75_21-DKIM-fix-buffer-overflow-in-verify.patch
+ 75_22-Repair-Heimdal-GSSAPI-authenticator-init.patch
+ 75_23-Repair-Heimdal-GSSAPI-authenticator-init-part-2.patch
* Typo fixes in old patch descriptions. (Thanks, lintian!)
-- Andreas Metzler <ametzler@debian.org> Sat, 10 Feb 2018 13:13:37 +0100
exim4 (4.90-6) unstable; urgency=medium
* Update from exim-4_90+fixes branch.
+ 75_17-Cutthrough-fix-for-port-number-defined-by-router.-Bu.patch
+ 75_18-GnuTLS-fix-to-ignore-timeout-on-unrelated-callout-co.patch
Closes: #887489
+ 75_19-Build-.git-may-be-a-file-when-this-repo-is-a-submodu.patch
+ 75_20-Debugging-fix-potential-null-derefs-in-DSN-debug_pri.patch
-- Andreas Metzler <ametzler@debian.org> Wed, 07 Feb 2018 19:37:03 +0100
exim4 (4.90-5) unstable; urgency=low
* Add 75_16-Cutthrough-fix-multi-message-initiating-connections.patch from
exim-4_90+fixes branch.
* Improved exim4-daemon-custom documentation by Gedalya. Closes: #887971
* [update-exim4.conf] stop converting variables set to an empty value in
/etc/exim4/update-exim4.conf.conf to exim macros with a literal value of
"empty" in the generated configuration. Thanks, Gedalya. Closes: #887972
-- Andreas Metzler <ametzler@debian.org> Sat, 27 Jan 2018 17:00:42 +0100
exim4 (4.90-4) unstable; urgency=low
* Update from exim-4_90+fixes branch.
75_13-Lookups-fix-mysql-lookup-returns-for-no-data-queries.patch
75_14-Fix-D-string-expansion-to-not-use-millisec.patch
75_15-DKIM-DNS-records-having-no-v-tag-are-acceptable.-Bug.patch
-- Andreas Metzler <ametzler@debian.org> Sat, 20 Jan 2018 08:00:45 +0100
exim4 (4.90-3) unstable; urgency=medium
* Three more patches from exim-4_90+fixes branch:
75_10-Fix-issue-with-continued-connections-when-the-DNS-sh.patch
75_11-MIME-ACL-fix-SMTP-response-for-non-accept-result-of-.patch
75_12-DKIM-permit-dkim_private_key-to-override-dkim_strict.patch
-- Andreas Metzler <ametzler@debian.org> Mon, 08 Jan 2018 18:55:28 +0100
exim4 (4.90-2) unstable; urgency=medium
* Update to exim-4_90+fixes branch:
+ Replace 75_Lookups-fix-pgsql-multiple-row-single-column-return.patch.
+ 75_01-TLS-Fix-excessive-calling-of-smtp_auth_acl-under-AUT.patch
+ 75_02-TLS-avoid-calling-smtp_auth_acl-on-client-cert-when-.patch
+ 75_03-Debug-fix-coding-in-dnssec-reporting.-Bug-2205.patch
+ 75_04-DKIM-Ignore-non-DKIM-TXT-records-in-DNS-response.-Bu.patch
+ 75_05-Fix-build-of-nisplus-lookup.patch
+ 75_06-Fix-const-issue-in-nisplus-lookup.patch
+ 75_08-DKIM-tighter-checking-while-parsing-signature-header.patch
+ 75_09-Fix-crash-associated-with-dnsdb-lookup-done-from-DKI.patch
-- Andreas Metzler <ametzler@debian.org> Sat, 30 Dec 2017 15:43:52 +0100
exim4 (4.90-1) unstable; urgency=low
* rc4 released as 4.90.
* Point watchfile to release directory again.
* 75_Lookups-fix-pgsql-multiple-row-single-column-return.patch from upstream
GIT master branch. Fix pgsql lookup for multiple result-tuples with a
single column. Previously only the last row was returned.
https://lists.exim.org/lurker/message/20171223.102237.a53dd5bd.en.html
* Simplify debian/rules and make it usable with dh v10 compat. The
fine-grained support for selecting the to be built packages (-custom with
or without -base) was dropped. The build process is now controlled by
attaching tasks to dh-override hooks instead of using file dependencies,
makefile-style. The latter broke with dh v10 due to upstream's
build-system which always has the main targets out-of-date inter alia due
to the compile-number feature.
* Use hardening=+all instead of hardening=+bindnow,+pie. (Does not change
buildflags ATM.)
* Use debhelper v10 compat.
* Drop override_dh_strip-arch, we have had enough toolchain and
source changes to prevent file conflicts.
-- Andreas Metzler <ametzler@debian.org> Thu, 28 Dec 2017 13:42:23 +0100
exim4 (4.90~RC4-1) unstable; urgency=medium
* New upstream version.
-- Andreas Metzler <ametzler@debian.org> Thu, 14 Dec 2017 18:11:40 +0100
exim4 (4.90~RC3-2) unstable; urgency=low
* Upload to unstable.
* Point homepage to https URL.
-- Andreas Metzler <ametzler@debian.org> Sat, 02 Dec 2017 17:37:13 +0100
exim4 (4.90~RC3-1) experimental; urgency=medium
* New upstream version.
+ Fix a use-after-free while reading smtp input for header lines.
A crafted sequence of BDAT commands could result in in-use memory
being freed. CVE-2017-16943. Closes: #882648
+ Fix checking for leading-dot on a line during headers reading
from SMTP input. Previously it was always done; now only done for
DATA and not BDAT commands. CVE-2017-16944 Closes: #882671
* Drop 78_Disable-chunking-BDAT-by-default.patch again.
-- Andreas Metzler <ametzler@debian.org> Fri, 01 Dec 2017 19:14:08 +0100
exim4 (4.90~RC2-3) experimental; urgency=medium
* As a workaround for the yet-unfixed security vulnerability resurrect (and
adapt for 4.90) 78_Disable-chunking-BDAT-by-default.patch (dropped in
4.89-4) to disable both incoming and outgoing BDAT/CHUNKING. #882648
https://lists.exim.org/lurker/message/20171125.034842.d1d75cac.en.html
-- Andreas Metzler <ametzler@debian.org> Sat, 25 Nov 2017 12:01:40 +0100
exim4 (4.90~RC2-2) experimental; urgency=low
* B-d on lynx, instead of lynx-cur | lynx.
-- Andreas Metzler <ametzler@debian.org> Fri, 17 Nov 2017 17:03:10 +0100
exim4 (4.90~RC2-1) experimental; urgency=low
* New upstream release candidate.
+ Unfuzz patches, drop 40_reproducible_build.diff and
75_fix_ftbfs_SOURCE_DATE_EPOCH.diff.
+ Refresh debian/example.conf.md5, No changes to Debian's configuration
needed, upstream added a (commented) entry to change OpenSSL ciphers.
-- Andreas Metzler <ametzler@debian.org> Thu, 16 Nov 2017 19:40:35 +0100
exim4 (4.90~RC1-1) experimental; urgency=low
* New upstream release candidate.
+ Point watchfile to test subdirectory.
+ Update 40_reproducible_build.diff
+ Drop 75_fixes*.patch and
80_Repair-manualroute-transport-name-not-last-option.patch.
+ Unfuzz EDITME*.diff
+ 75_fix_ftbfs_SOURCE_DATE_EPOCH.diff Fix build-error when
SOURCE_DATE_EPOCH is set.
* Drop trailing whitespace in debian/README.source, debian/changelog and
debian/rules. (Thanks, lintian)
* Drop debian/README.source and outdated parts of debian/copyright.
-- Andreas Metzler <ametzler@debian.org> Sun, 29 Oct 2017 10:52:30 +0100
exim4 (4.89-13) unstable; urgency=high
* 75_fixes_21-Chunking-do-not-treat-the-first-lonely-dot-special.-.patch
from exim-4_89+fixes branch. Closes: #882671 CVE-2017-16944
-- Andreas Metzler <ametzler@debian.org> Wed, 29 Nov 2017 19:30:37 +0100
exim4 (4.89-12) unstable; urgency=high
* Sync with exim-4_89+fixes branch:
+ 75_fixes_19-Fix-mariadb-mysql-macro-confusion.patch
+ 75_fixes_20-Avoid-release-of-store-if-there-have-been-later-allo.patch
Closes: #882648 (use-after-free, remote-code-execution) CVE-2017-16943
* Update EDITME* for 75_fixes_19-Fix-mariadb-mysql-macro-confusion.patch.
-- Andreas Metzler <ametzler@debian.org> Tue, 28 Nov 2017 20:04:23 +0100
exim4 (4.89-11) unstable; urgency=critical
* B-d on lynx, instead of lynx-cur | lynx.
-- Andreas Metzler <ametzler@debian.org> Sat, 25 Nov 2017 13:02:43 +0100
exim4 (4.89-10) unstable; urgency=critical
* As a workaround for the yet-unfixed security vulnerability resurrect
78_Disable-chunking-BDAT-by-default.patch (dropped in 4.89-4) to disable
both incoming and outgoing BDAT/CHUNKING. #882648
https://lists.exim.org/lurker/message/20171125.034842.d1d75cac.en.html
-- Andreas Metzler <ametzler@debian.org> Sat, 25 Nov 2017 11:43:24 +0100
exim4 (4.89-9) unstable; urgency=medium
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Fri, 27 Oct 2017 19:23:25 +0200
exim4 (4.89-8) experimental; urgency=low
* Sync with exim-4_89+fixes branch:
75_fixes_17-Fix-queue_run_in_order-to-ignore-the-PID-portion-of-.patch
75_fixes_18-Use-safer-routine-for-possibly-overlapping-copy.patch
* Point watchfile to https site.
-- Andreas Metzler <ametzler@debian.org> Mon, 23 Oct 2017 19:14:24 +0200
exim4 (4.89-7) unstable; urgency=low
* In debian/rules' manually called update-mtaconflicts target use
grep-aptavail instead of hard-coding /var/lib/apt/lists/.
(Thanks, Julian Andres Klode) Closes: #874772
* Update debian/mtalist.
* Sync with exim-4_89+fixes branch:
75_fixes_13-Document-CVE-assignment-for-Berkeley-DB-issue.patch
75_fixes_14-DKIM-fix-signing-bug-induced-by-total-size-of-parame.patch
75_fixes_15-SOCKS-fix-unitialized-pointer.patch
75_fixes_16-Fix-crash-in-transport-on-second-smtp-connect-fail-f.patch.
-- Andreas Metzler <ametzler@debian.org> Wed, 27 Sep 2017 07:35:23 +0200
exim4 (4.89-6) unstable; urgency=medium
* Use "runuser --command ..." instead of "su - --command ..." in
exim4-base.cron.daily to avoid invoking pam_systemd. Closes: #871688
(Thanks, Jakobus Schürz)
* Sync priorities with override file: exim4{,-base,-config,-daemon-light}
optional from standard, exim4-dev optional from extra.
* In debian/rules when setting up the build-tree for -custom also copy
EDITME.eximon to allow building based on EDITME.exim4-light with eximon
building *not* disabled. (Thanks, Marko von Oppen) Closes: #783813
-- Andreas Metzler <ametzler@debian.org> Sat, 09 Sep 2017 15:29:39 +0200
exim4 (4.89-5) unstable; urgency=medium
* Update to exim-4_89+fixes branch:
75_fixes_01-Start-exim-4_89-fixes-to-cherry-pick-some-commits-fr.patch
75_fixes_02-Cleanup-prevent-repeated-use-of-p-oMr-to-avoid-mem-l.patch
(replaces 79_CVE-2017-1000369.patch)
75_fixes_03-Fix-log-line-corruption-for-DKIM-status.patch (replaces
81_Fix-log-line-corruption-for-DKIM-status.patch)
75_fixes_04-Openssl-disable-session-tickets-by-default-and-sessi.patch
75_fixes_05-Transport-fix-smtp-under-combo-of-mua_wrapper-and-li.patch
75_fixes_07-Openssl-disable-session-tickets-by-default-and-sessi.patch
75_fixes_08-Transport-fix-smtp-under-combo-of-mua_wrapper-and-li.patch
75_fixes_09-Use-the-BDB-environment-so-that-a-database-config-fi.patch
(CVE-2017-10140)
75_fixes_10-Fix-cache-cold-random-callout-verify.-Bug-2147.patch
75_fixes_11-On-callout-avoid-SIZE-every-time-but-noncacheable-rc.patch
75_fixes_12-Fix-build-for-earlier-version-Berkeley-DB.patch
* Simplify debian/rules by including buildflags.mk unconditionally which was
introduced in dpkg 1.16.1 released in October 2011.
* Use pkg-info.mk to get package-version, upstream-version and
SOURCE_DATE_EPOCH. For the latter fall back to current time if it is not
provided by pkg-info.mk.
* [lintian] In *daemon.postinst use which certtool instead of
[ -x /usr/bin/certtool ] to check for availablility of the command.
-- Andreas Metzler <ametzler@debian.org> Thu, 10 Aug 2017 10:17:05 +0200
exim4 (4.89-4) unstable; urgency=low
* 80_Repair-manualroute-transport-name-not-last-option.patch from GIT
master: Starting with 4.85 a transport name needed to specified after
options in route_list. Closes: #865287
* Add 81_Fix-log-line-corruption-for-DKIM-status.patch from GIT master.
* Drop 78_Disable-chunking-BDAT-by-default.patch, enable BDAT/Chunking by
default.
* Standards-Version: 4.0.0
+ Do not check for availability of invoke-rc.d, use it always and do not
fall back to invoking the init-script directly.
+ Drop eximon menu file.
* Migrate to automatic debug packages. Bump b-d on debhelper since
--dbgsym-migration was introduced in debhelper 9.20160114.
-- Andreas Metzler <ametzler@debian.org> Sat, 15 Jul 2017 12:46:16 +0200
exim4 (4.89-3) unstable; urgency=high
* Re-upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Mon, 19 Jun 2017 18:51:13 +0200
exim4 (4.89-2+deb9u1) stretch-security; urgency=medium
* CVE-2017-100369
-- <jmm@debian.org> Wed, 14 Jun 2017 07:03:07 +0200
exim4 (4.89-2) unstable; urgency=medium
* Revert addition of header "# pidfile: /var/run/exim4/exim.pid" to
initscript (#844178). It breaks when the initscript does not start a
daemon but only runs update-exim4.conf. (inetd or QUEUERUNNER='nodaemon').
Closes: #860317
* When reporting bugs also attach /etc/default/exim4 by default.
-- Andreas Metzler <ametzler@debian.org> Thu, 20 Apr 2017 17:14:04 +0200
exim4 (4.89-1) unstable; urgency=medium
* Enable inbound (server-side) proxying for -heavy. Closes: #856712
* New upstream release, source identical to RC7.
-- Andreas Metzler <ametzler@debian.org> Thu, 09 Mar 2017 17:49:47 +0100
exim4 (4.89~RC7-1) unstable; urgency=medium
* New upstream version.
-- Andreas Metzler <ametzler@debian.org> Wed, 01 Mar 2017 18:37:18 +0100
exim4 (4.89~RC6-1) unstable; urgency=medium
* Document E4BCD_PANICLOG_LINES in README.Debian.
* New upstream version.
-- Andreas Metzler <ametzler@debian.org> Thu, 23 Feb 2017 18:24:33 +0100
exim4 (4.89~RC5-1) unstable; urgency=medium
* New upstream version.
-- Andreas Metzler <ametzler@debian.org> Mon, 13 Feb 2017 19:04:46 +0100
exim4 (4.89~RC4-1) unstable; urgency=medium
* New upstream version.
+ Drop 92_CVE-2016-1238.diff.
* Use /run/exim4/ instead of legacy directory /var/run/exim4 for pidfile
while we are changing the init script.
-- Andreas Metzler <ametzler@debian.org> Sun, 12 Feb 2017 15:28:09 +0100
exim4 (4.89~RC3-1) unstable; urgency=medium
* New upstream version.
+ Unfuzz 92_CVE-2016-1238.diff.
* init file:
+ Source /etc/default/exim4 *before* defining the shell
variables holding the pidfilenames. Overriding these via
/etc/default/exim4 is not supported.
+ Add missing support for reload when QUEUERUNNER='queueonly'.
+ For QUEUERUNNER='queueonly' use $PIDFILE instead of $QRPIDFILE. This way
$PIDFILE is used for the main exim process for all available QUEUERUNNER
choices.
+ Add header "# pidfile: /var/run/exim4/exim.pid" for improved systemd
interaction. systemd-sysv-generator uses this pseudoheader to set
PIDFile in the generated service file and it also sets
RemainAfterExit=no instead of yes if it is present. Thanks, Michael
Biebl for suggestion and explanation. Closes: #844178
-- Andreas Metzler <ametzler@debian.org> Fri, 10 Feb 2017 19:08:52 +0100
exim4 (4.89~RC2-1) unstable; urgency=medium
* New upstream version.
+ Drop 75_add_bak_spec.txt.diff.
-- Andreas Metzler <ametzler@debian.org> Sat, 04 Feb 2017 15:24:44 +0100
exim4 (4.89~RC1-1) unstable; urgency=low
* Refresh debian/upstream/signing-key.asc.
* New upstream bugfix release.
+ Drop superfluous patches.
75_00_DKIM-More-validation-of-DNS-key-record.-Bug-1926.patch
75_01_DKIM-Under-debug-when-signing-do-an-extra-check-on-t.patch
75_02_Do-not-call-ldap_start_tls_s-on-ldapi-connections.patch
75_03_PROXY-fix-v2-protocol-decode.-Bugs-2003-1747.patch
75_04_CHUNKING-fix-non-pipelined-synch-checks.-Bug-2004.patch
+ Unfuzz 31_eximmanpage.dpatch and
78_Disable-chunking-BDAT-by-default.patch.
+ Add 75_add_bak_spec.txt.diff - spec.txt and filter.txt missing in rc
tarball.
+ Unfuzz debian/EDITME.exim4-*.
+ Update debian/example.conf.md5. - Upstream typo fix.
-- Andreas Metzler <ametzler@debian.org> Tue, 31 Jan 2017 19:52:50 +0100
exim4 (4.88-5) unstable; urgency=medium
* 78_Disable-chunking-BDAT-by-default.patch: Change default value of main
option chunking_advertise_hosts and smtp transport option
hosts_try_chunking from "*" to empty.
This is a Debian specific change, we are right before the freeze and BDAT
needs a little time.
-- Andreas Metzler <ametzler@debian.org> Thu, 19 Jan 2017 19:18:15 +0100
exim4 (4.88-4) unstable; urgency=medium
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Sat, 07 Jan 2017 14:38:00 +0100
exim4 (4.88-3) experimental; urgency=medium
* Pull multiple patches from upstream GIT:
+ 75_00_DKIM-More-validation-of-DNS-key-record.-Bug-1926.patch,
75_01_DKIM-Under-debug-when-signing-do-an-extra-check-on-t.patch
+ 75_02_Do-not-call-ldap_start_tls_s-on-ldapi-connections.patch
+ 75_03_PROXY-fix-v2-protocol-decode.-Bugs-2003-1747.patch
+ 75_04_CHUNKING-fix-non-pipelined-synch-checks.-Bug-2004.patch
(Thanks, Bart Noordervliet for the pointer) Closes: #850175
-- Andreas Metzler <ametzler@debian.org> Fri, 06 Jan 2017 17:32:20 +0100
exim4 (4.88-2) unstable; urgency=medium
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Tue, 27 Dec 2016 17:36:29 +0100
exim4 (4.88-1) experimental; urgency=medium
* New upstream version.
* Upload to experimental, let (almost identical) 4.88~RC6-2 propagate to
testing.
* Drop 75_Fix-DKIM-information-leakage.patch.
-- Andreas Metzler <ametzler@debian.org> Sun, 25 Dec 2016 18:07:12 +0100
exim4 (4.88~RC6-2) unstable; urgency=high
* Add macro IGNORE_SMTP_LINE_LENGTH_LIMIT to allow disabling the SMTP DATA
physical line limit check for both for SMTP DATA ACL and remote_smtp*
transports. Closes: #828801
Also update corresponding NEWS entry.
* [lintian] debian/changelog: s/lenght/length/
* Pull 75_Fix-DKIM-information-leakage.patch from upstream GIT, fixing DKIM
information leakage issue CVE-2016-9963.
-- Andreas Metzler <ametzler@debian.org> Thu, 22 Dec 2016 16:50:21 +0100
exim4 (4.88~RC6-1) unstable; urgency=low
* New upstream version.
-- Andreas Metzler <ametzler@debian.org> Thu, 08 Dec 2016 07:19:18 +0100
exim4 (4.88~RC5-1) unstable; urgency=low
* New upstream version.
+ Drop 75_01-Ensure-socket-is-nonblocking-before-draining.diff.
-- Andreas Metzler <ametzler@debian.org> Sat, 19 Nov 2016 17:43:51 +0100
exim4 (4.88~RC4-2) unstable; urgency=low
* Pull 75_01-Ensure-socket-is-nonblocking-before-draining.diff from upstream
GIT to fix exim bug 1914 (exim doesn't close connection after quit.
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Sat, 12 Nov 2016 07:26:14 +0100
exim4 (4.88~RC4-1) experimental; urgency=low
* New upstream version.
-- Andreas Metzler <ametzler@debian.org> Mon, 07 Nov 2016 19:08:47 +0100
exim4 (4.88~RC3-1) experimental; urgency=medium
* New upstream version.
Drop 75_01-Fix-check-for-commandline-macro-definition.patch
75_02_Fix-bug-with-aborted-server-TLS-connection-under-Gnu.patch.
-- Andreas Metzler <ametzler@debian.org> Mon, 24 Oct 2016 19:25:31 +0200
exim4 (4.88~RC2-3) experimental; urgency=medium
* Fix thinko in exim4-daemon-*.postinst. Do not regenerate gnutls params on
every upgrade.
* 75_02_Fix-bug-with-aborted-server-TLS-connection-under-Gnu.patch: Fix
longstanding bug with aborted TLS server connection handling. Under
GnuTLS, when a session startup failed (eg because the client
disconnected) Exim did stdio operations after fclose. This was exposed by
a recent change which nulled out the file handle after the fclose.
-- Andreas Metzler <ametzler@debian.org> Sun, 23 Oct 2016 16:39:13 +0200
exim4 (4.88~RC2-2) experimental; urgency=medium
* 75_01-Fix-check-for-commandline-macro-definition.patch - Fix permission
problems on commandline mail submission. Closes: #840355
-- Andreas Metzler <ametzler@debian.org> Thu, 13 Oct 2016 19:25:07 +0200
exim4 (4.88~RC2-1) experimental; urgency=low
* New upstream version.
+ Changed default Diffie-Hellman parameters to be Exim-specific, created
by Phil Pennock. Added RFC7919 DH primes as an alternative.
Closes: #839978
* Set tls_dhparam = historic to use site-specific DH parameters.
* Again, ship /usr/share/exim4/exim4_refresh_gnutls-params, use it in
-daemon postinst.
* Initialize /var/spool/exim4/gnutls-params-2048 at daemon install, either
by running certtool or by installing
/usr/share/exim4/gnutls-params-2048. Do not try to use
openssl dhparam, it takes too long.
-- Andreas Metzler <ametzler@debian.org> Sun, 09 Oct 2016 17:37:08 +0200
exim4 (4.88~RC1-1) experimental; urgency=low
* Drop reference to removed (in 4.80-7) "what"-option in init script usage
message. (Thanks, Calum Mackay!) Closes: #823855
* 92_CVE-2016-1238.diff: eximstats: Remove . from @INC [CVE-2016-1238]
Closes: #832442
* [lintian] update-exim4.conf.8 - fix typo.
* [lintian] Drop unused override binaries-have-file-conflict.
* B-d on default-libmysqlclient-dev.
* New upstream version.
+ Refresh patches: 31_eximmanpage.dpatch 32_exim4.dpatch 35_install.dpatch
50_localscan_dlopen.dpatch
+ Drop superfluous patches.
71_01_configure.default-nice-message-for-overlong-lines-Bu.patch
71_02_Delivery-quieten-smtp-transport-conn-reuse-vs.-deliv.patch
71_03_Avoid-exposing-passwords-in-log-on-failing-ldap-look.patch
71_04_Avoid-exposing-passwords-in-log-on-failing-ldap-look.patch
+ Fix crash in VRFY handling when handed an unqualified name
(lacking @domain). Apply the same qualification processing as RCPT.
Closes: #834699
+ Fix a possible security hole, wherein a process operating with the Exim
UID can gain a root shell. Credit to http://www.halfdog.net/ for
discovery and writeup. LP: #1580454
* [lintian] exim4-config_files.5 - fix typo.
-- Andreas Metzler <ametzler@debian.org> Sun, 25 Sep 2016 15:44:00 +0200
exim4 (4.87-3) unstable; urgency=medium
* Pull multiple patches from upstream GIT:
+ 71_01_configure.default-nice-message-for-overlong-lines-Bu.patch
Improved message on overlong lines in example config.
+ 71_02_Delivery-quieten-smtp-transport-conn-reuse-vs.-deliv.patch
Fix race condition related to connection reuse.
https://bugs.exim.org/show_bug.cgi?id=1810
+ 71_03_Avoid-exposing-passwords-in-log-on-failing-ldap-look.patch
71_04_Avoid-exposing-passwords-in-log-on-failing-ldap-look.patch
Avoid exposing passwords in log on failing ldap lookup
expansion. https://bugs.exim.org/show_bug.cgi?id=165
* Copy information message on rejecting overlong lines in data ACL from
upstream example configuration. Closes: #823418
* Add NEWS entry on line-length-limit introduced in 4.87~RC1-1.
Closes: 821830
-- Andreas Metzler <ametzler@debian.org> Sun, 08 May 2016 14:03:10 +0200
exim4 (4.87-2) unstable; urgency=medium
* Fix reference to README.Debian in 01_exim4-config_listmacrosdefs.
(Thanks, L. Guruprasad!) Closes: #821416
* Add REMOTE_SMTP_SMARTHOST_HOSTS_REQUIRE_TLS macro to enforce TLS
connections (hosts_require_tls option) in remote_smtp_smarthost
transport. Closes: #822174
* exim4-daemon-heavy: Disable WITH_OLD_DEMIME ("demime" ACL condition). It
is deprecated and will be removed in 4.88.
* README.Debian*: Fix minor issues found by lintian.
* Fix reference to spec.txt in 30_exim4-config_check_rcpt. Closes: #665399
* Drop exim4-base Recommends on perl-modules. This had been unnecessary
since 4.80~rc6-1 which dropped /usr/share/exim4/timeout.pl.
-- Andreas Metzler <ametzler@debian.org> Sat, 30 Apr 2016 13:38:29 +0200
exim4 (4.87-1) unstable; urgency=medium
* Fix comment in
conf.d/transport/30_exim4-config_remote_smtp_smarthost. (Thanks,
Jörg-Volker Peetz!) Closes: #819780
* New upstream release.
-- Andreas Metzler <ametzler@debian.org> Thu, 07 Apr 2016 19:26:59 +0200
exim4 (4.87~RC7-1) unstable; urgency=low
* Enable SOCKS support in both -light and -heavy. Closes: #818091
* Fix typos in configuration. (Thanks, Vincent Lefevre!) Closes: #819482
* New upstream version.
+ Drop 74_Store-the-initial-working-directory.diff,
75_String-expansions-fix-extract.patch,
76_only_warn_on_nonempty_environment.diff.
+ Update debian/example.conf.md5.
-- Andreas Metzler <ametzler@debian.org> Fri, 01 Apr 2016 19:04:07 +0200
exim4 (4.87~RC6-3) unstable; urgency=medium
* Merge changelog entries for 4.86.2-1 and -2.
* Upload to unstable.
* Add link to CVE details to latest NEWS entry and bump its version and date
to match this upload. Closes: #818349, #817244
-- Andreas Metzler <ametzler@debian.org> Wed, 23 Mar 2016 18:44:22 +0100
exim4 (4.87~RC6-2) experimental; urgency=medium
* 74_Store-the-initial-working-directory.diff,
76_only_warn_on_nonempty_environment.diff: Upstream followups on the
CVE fix (Thanks, Heiko Schlittermann!):
+ Runtime warning is only generated if (and only if) keep_environment
is unset and environment is nonempty.
+ Store the initial working directory and make it available in the new
expansion variable $initial_cwd.
* Merge all NEWS.Debian files into a single one, identical for all binary
packages. - Different NEWS files built from a single source package is not
and has not ever been supported by apt-listchanges which is the most
important frontend.
* Add a NEWS entry about the environment related runtime warning.
-- Andreas Metzler <ametzler@debian.org> Sat, 19 Mar 2016 18:11:32 +0100
exim4 (4.87~RC6-1) experimental; urgency=medium
* New upstream version.
* Add 75_String-expansions-fix-extract.patch from upstream GIT, fixing
${extract } string expansion for the numeric/3-string case. (Bug was
introduced in 4.85.)
* Set keep_environment to empty value instead of setting a minimal PATH in
add_environment.
-- Andreas Metzler <ametzler@debian.org> Fri, 11 Mar 2016 19:50:07 +0100
exim4 (4.87~RC5-2) experimental; urgency=medium
* Update debian/upstream/signing-key.asc, using the keys listed in
ftp://ftp.exim.org/pub/exim/Exim-Maintainers-Keyring.asc. This adds
Heiko Schlittermann's key.
* Bump exim4-config Breaks to exim4-daemon-* (<< 4.87~RC5). Closes: #816790
-- Andreas Metzler <ametzler@debian.org> Sat, 05 Mar 2016 13:17:01 +0100
exim4 (4.87~RC5-1) experimental; urgency=medium
* exim4-config.postinst: Test for existence of /etc/inetd.conf before trying
to grep in it. Closes: #814998
* New upstream version, includes the patch for CVE-2016-1531. (Local root
exploit).
* Add macros MAIN_KEEP_ENVIRONMENT and MAIN_ADD_ENVIRONMENT to set the new
options. If neither is used we use add_environment to set a minimal
PATH=/bin:/usr/bin to avoid a runtime warning.
-- Andreas Metzler <ametzler@debian.org> Wed, 02 Mar 2016 21:06:43 +0100
exim4 (4.87~RC3-2) experimental; urgency=medium
* README.Debian: Refer to Exim specification by chapter name instead of
chapter number. Closes: #813351
* Fix some spelling errors found by lintian.
* Minor debian/rules cleanup:
+ Restore originally intended behavior, upstream changelog is only
shipped in exim4-base, symlinks to it elsewhere.
+ Drop workaround for #347577, fixed in debhelper 5.0.15.
+ Use "dh binary-arch" and "dh binary-indep" and a bunch of override
targets instead of listing all dh-commands. While this is uglier and
slows things down a bit it shortens debian/rules by 40 lines and has the
huge benefit that we automatically use all suggested helpers in correct
order.
+ Drop unused variables combinedidbgpackage/dhcombinedidbgpackage.
+ Delete unused, commented code.
+ Drop (exported) variable MTACONFLICTS, used only once.
* Bugfix: Stop build if generation of EDITME.exim4-heavy fails.
* Refresh debian/EDITME.*, -heavy was missing ldap and sql support.
-- Andreas Metzler <ametzler@debian.org> Sat, 13 Feb 2016 20:10:53 +0100
exim4 (4.87~RC3-1) experimental; urgency=medium
* Move Vcs-* from git/http to https.
* [lintian] README.Debian: s/desireable/desirable/.
* [lintian] README.Debian: Fix grammar error "allow + infinitive".
* [lintian] exim4-config.postinst: Use which foo > /dev/null
instead of [ -x /path/to/foo ].
* Update list of patches in debian/README.Debian.xml
* Drop 66_enlarge-dh-parameters-size.dpatch: It does not have any effect
with GnuTLS >= 2.12 and even stable has GnuTLS 3.x.
* New upstream version.
+ Upstream's default rcpt ACL now requires that a HELO/EHLO was accepted,
merge this change and drop CHECK_MAIL_HELO_ISSUED macro.
-- Andreas Metzler <ametzler@debian.org> Thu, 21 Jan 2016 17:44:00 +0100
exim4 (4.87~RC2-1) experimental; urgency=medium
* New upstream version.
-- Andreas Metzler <ametzler@debian.org> Sat, 19 Dec 2015 17:51:39 +0100
exim4 (4.87~RC1-1) experimental; urgency=medium
* New upstream version.
+ Refresh patches.
+ Drop debian/patches/75_00xx*.patch from exim-4_86+fixes branch.
+ Sync with upstream default configuration: Check maximum (physical, i.e.
before unfolding) line length in default spec file data ACL and smtp
transport. Bug 1684 Closes: #797919
+ HS/02 Add the Exim version string to the process info. This way exiwhat
gives some more detail about the running daemon. Closes: #240883
* Override upstream's new default of tls_advertise_hosts = * if
MAIN_TLS_ENABLE is not set.
-- Andreas Metzler <ametzler@debian.org> Fri, 11 Dec 2015 20:15:30 +0100
exim4 (4.86.2-2) unstable; urgency=high
* Bump exim4-config Breaks to exim4-daemon-* (<< 4.86.2). Closes: #816790
-- Andreas Metzler <ametzler@debian.org> Sat, 05 Mar 2016 13:07:31 +0100
exim4 (4.86.2-1) unstable; urgency=high
* Pull 75_0012_Cutthrough-Fix-bug-with-dot-only-line.patch from upstream
4.86+fixes branch.
* New upstream security release for CVE-2016-1531.
+ New options keep_environment/add_environment which are empty by default,
i.e. any subprocesses start in a clean (empty) environment.
+ -C requires an absolute path.
+ Exim changes it's working directory to / right after startup.
* Add macros MAIN_KEEP_ENVIRONMENT and MAIN_ADD_ENVIRONMENT to set the new
options. If neither is used we use add_environment to set a minimal
PATH=/bin:/usr/bin to avoid a runtime warning.
-- Andreas Metzler <ametzler@debian.org> Tue, 01 Mar 2016 19:34:39 +0100
exim4 (4.86-7) unstable; urgency=medium
* Allow arch-indep build (dpkg-buildpackage -A). Closes: #806023
* 75_0011_MIME-fix-crash-on-filenames-having-null-charset.-Bug.patch from
exim-4_86+fixes branch fixes another MIME ACL related crash.
https://bugs.exim.org/show_bug.cgi?id=1730
-- Andreas Metzler <ametzler@debian.org> Sat, 28 Nov 2015 18:45:31 +0100
exim4 (4.86-6) unstable; urgency=medium
* Cleanup (actual patch is identical): Use
75_0009_Avoid-misaligned-access-in-cached-lookup.-Bug-1708.patch from
exim-4_86+fixes branch instad of
76_Avoid-misaligned-access-in-cached-lookup.-Bug-1708.patch.
* Pull 75_0010_DKIM-ignore-space-tab-embedded-in-base64-during-deco.patch,
DKIM: ignore space & tab embedded in base64 during decode. Bug 1700
-- Andreas Metzler <ametzler@debian.org> Sun, 08 Nov 2015 07:55:51 +0100
exim4 (4.86-5) unstable; urgency=high
* Pull 76_Avoid-misaligned-access-in-cached-lookup.-Bug-1708.patch from GIT
head to avoid misaligned access in cached lookup. Closes: #803255
-- Andreas Metzler <ametzler@debian.org> Tue, 03 Nov 2015 19:33:49 +0100
exim4 (4.86-4) unstable; urgency=medium
* Fix documentation of lowuid_aliases router, exceptions are in
CONFDIR/lowuid-aliases not CONFDIR/lowuid_aliases. (Thanks, Tim Krah)
Closes: #799672
* fcron has been removed from Debian in 2011, stop listing it as an
alternative dependency of exim4-base (Thanks, Alexandre Detiste).
Closes: #798236
* Update to upstream exim-4_86+fixes branch:
+ Drop 75_Fix-ESMTP-MAIL-command-option-processing.patch,
76_Fix-post-transport-crash.patch,
77_Fix-post-transport-crash-safeguard-for-missing-spool.patch,
78_Close-logs-after-daemon-process-exceptional-write.patch.
+ Add 75_0001-Fix-post-transport-crash.patch
75_0002-Fix-post-transport-crash-safeguard-for-missing-spool.patch
75_0003-Fix-ESMTP-MAIL-command-option-processing.patch
75_0005-Close-logs-after-daemon-process-exceptional-write.-B.patch
75_0007-DNS-time-limit-cached-returns-using-TTL.-Bug-1395.patch
75_0008-Retry-always-use-interface-if-set-for-retry-DB-key.-.patch
* Use dh v9.
-- Andreas Metzler <ametzler@debian.org> Sat, 17 Oct 2015 15:01:01 +0200
exim4 (4.86-3) unstable; urgency=medium
* Pull three patches from upstream git:
+ 75_Fix-ESMTP-MAIL-command-option-processing.patch:
Corrects handling of mail-addresses with whitespace.
<http://article.gmane.org/gmane.mail.exim.user/97069>
+ 76_Fix-post-transport-crash.patch
77_Fix-post-transport-crash-safeguard-for-missing-spool.patch
<https://bugs.exim.org/show_bug.cgi?id=1671>
* Fix spelling error in copyright file. (Thanks, lintian)
* Pull 77_Fix-post-transport-crash-safeguard-for-missing-spool.patch from
upstream git, exim was keeping logfiles open after after a "too many
connections" event. Closes: #796524, #476958 (Thanks to Andreas Pflug for
chasing this.)
* When saving the berkeley DB version at build-time pass -P option to cpp,
to prevent linebreaks.
-- Andreas Metzler <ametzler@debian.org> Tue, 25 Aug 2015 20:05:59 +0200
exim4 (4.86-2) unstable; urgency=high
* Update exim4-config Breaks, PRDR support is was moved from being
Experimental into the mainline with 4.83.
Closes: #794320
-- Andreas Metzler <ametzler@debian.org> Sun, 02 Aug 2015 07:40:24 +0200
exim4 (4.86-1) unstable; urgency=medium
* New upstream version, identical to RC5 (except for the version string).
-- Andreas Metzler <ametzler@debian.org> Sun, 26 Jul 2015 18:35:33 +0200
exim4 (4.86~RC5-1) unstable; urgency=medium
* New upstream version.
+ Drop 75_Bump-LOCAL_SCAN_ABI_VERSION.patch.
-- Andreas Metzler <ametzler@debian.org> Sat, 18 Jul 2015 11:46:11 +0200
exim4 (4.86~RC4-2) unstable; urgency=medium
* Drop libmysqlclient15-dev alternative build-dependency. Closes: #790463
* Update list of upstream gpg-keys (0x4D1E900E14C1CC04 Phil Pennock,
0x85AB833FDDC03262 Nigel Metheringham, 0xFFC0F14C84C71B6E Tony Finch,
0xC4F4F94804D29EBA Todd Lyons, 0xBCE58C8CE41F32DF Jeremy Harris,
0x63762CDA67E2F359 David Woodhouse, 0xAD5EDBB793EC57E4 Graeme Fowler),
transition from debian/upstream-signing-key.pgp to
debian/upstream/signing-key.asc.
* Pull 75_Bump-LOCAL_SCAN_ABI_VERSION.patch from upstream GIT and update
exim4-localscanapi-x.y provides to 2.0. A binNMU of sa-exim will then
properly fix the issue. Closes: #790616
-- Andreas Metzler <ametzler@debian.org> Sun, 05 Jul 2015 11:47:47 +0200
exim4 (4.86~RC4-1) unstable; urgency=medium
* unexport/undefine TZ in debian/rules for reproducible build. It would be
used as default value for TIMEZONE_DEFAULT.
* New upstream version.
+ Unfuzz 31_eximmanpage.dpatch.
-- Andreas Metzler <ametzler@debian.org> Mon, 29 Jun 2015 07:43:19 +0200
exim4 (4.86~RC3-2) unstable; urgency=medium
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Tue, 23 Jun 2015 19:11:19 +0200
exim4 (4.86~RC3-1) experimental; urgency=medium
* Don't provide default-mta on Ubuntu and Ubuntu-derivatives. See LP-bug
1166671.
* New upstream version.
-- Andreas Metzler <ametzler@debian.org> Mon, 22 Jun 2015 20:39:11 +0200
exim4 (4.86~RC2-1) experimental; urgency=medium
* Drop nowadays unneeded XS-Testsuite: autopkgtest in debian/control
(Thanks, lintian).
* New upstream version:
+Drop included patches.
(-72_0001-Guard-routing-against-a-null-deref.-Bug-1639.patch,
72_0002-Spamd-add-missing-initialiser.-Rspamd-mode-was-incor.patch,
72_0003-DSN-fix-null-deref-when-bounce-is-due-to-conn-timeou.patch,
72_0004-Content-scan-Use-ETIMEDOUT-not-ETIME-as-having-bette.patch)
* Sync Debian config with upstream default config:
+ Set prdr_enable.
+ Add +smtp_protocol_error +smtp_syntax_error +tls_certificate_verified to
log_selector option value.
-- Andreas Metzler <ametzler@debian.org> Wed, 17 Jun 2015 19:49:58 +0200
exim4 (4.86~RC1-3) experimental; urgency=medium
* Get time and date of latest debian/changelog entry and patch exim(on) to
use these instead of __DATE__ and __TIME__.
* Pull 72_0004-Content-scan-Use-ETIMEDOUT-not-ETIME-as-having-bette.patch
from GIT to fix FTBFS on kfreebsd.
-- Andreas Metzler <ametzler@debian.org> Sat, 13 Jun 2015 15:22:47 +0200
exim4 (4.86~RC1-2) experimental; urgency=medium
* Pull three post-release fixes from upstream GIT. (null pointer
derefencing, and spam scanning defaulting to rspam mode)
+ 72_0001-Guard-routing-against-a-null-deref.-Bug-1639.patch
+ 72_0002-Spamd-add-missing-initialiser.-Rspamd-mode-was-incor.patch
+ 72_0003-DSN-fix-null-deref-when-bounce-is-due-to-conn-timeou.patch
-- Andreas Metzler <ametzler@debian.org> Sun, 07 Jun 2015 07:26:13 +0200
exim4 (4.86~RC1-1) experimental; urgency=medium
* New upstream release.
+ Drop 84_Fix-truncation-of-items-in-headers_remove-lists-this.patch,
refresh patches.
+ Update EDITME*, enable AUTH_TLS for -heavy.
+ Sync Debian config with upstream default config, rfc1413 calls are now
disabled by default.
+ Uses MIME format bounce messages (RFC 3461). Closes: #230284,#400741
+ The spamd_address main option now supports an optional timeout value per
server (tmo=timespec), it defaults two 2 minutes. Closes: #297915
+ spamd_address also accepts hostnames and IPv6 addresses. Closes: #751687
+ log reason for defer, on a hostlist dns-lookup temporary error.
Closes: #670035
-- Andreas Metzler <ametzler@debian.org> Sat, 06 Jun 2015 15:41:33 +0200
exim4 (4.85-3) unstable; urgency=medium
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Tue, 28 Apr 2015 19:34:16 +0200
exim4 (4.85-2) experimental; urgency=medium
* Merge from unstable 4.84-8.
+ Tighten dependency of exim4 on exim4-base to (>= ${source:Version}) and
(<< ${source:Version}.1), at least source version, but not the next
sourceful upload. Closes: #777246
+ Pull 84_Fix-truncation-of-items-in-headers_remove-lists-this.patch from
upstream GIT which fixes breakage of string-expansion in headers_remove
commands. (Thanks Gordon Dickens, for the pointer.) -
83_Remove-limit-on-remove_headers-item-size.-Bug-1533.patch not added
here since it already part of 4.85.
-- Andreas Metzler <ametzler@debian.org> Sat, 21 Feb 2015 15:38:47 +0100
exim4 (4.85-1) experimental; urgency=medium
* exim4-config_files.5: Escape dots in regex. (Thanks, ael)
* New upstream version.
-- Andreas Metzler <ametzler@debian.org> Tue, 13 Jan 2015 18:48:45 +0100
exim4 (4.85~RC4-1) experimental; urgency=medium
* update-exim4.conf:
+ Drop unused variable UPEX4C_internal_tmp.
+ Use tempfile(1) if the generated file will not be written to
/var/lib/exim4/.
+ Add --check option.
* init-script: On restart use update-exim4.conf --check before stopping the
daemon. (This is a no-op with systemd since its sysv compat layer
translates "foo restart" into "foo stop" "foo start" instead of using the
init scripts restart target.)
* Handle _RC in watchfile with uversionmangle.
* New upstream version.
+ Stop repacking source, rfcs have been dropped.
-- Andreas Metzler <ametzler@debian.org> Wed, 31 Dec 2014 14:24:35 +0100
exim4 (4.85~RC3+dfsg-1) experimental; urgency=medium
* New upstream version.
-- Andreas Metzler <ametzler@debian.org> Thu, 18 Dec 2014 19:07:59 +0100
exim4 (4.85~RC2+dfsg-1) experimental; urgency=medium
* New upstream version.
* Unfuzz patches: 50_localscan_dlopen.dpatch 67_unnecessaryCopt.diff
70_remove_exim-users_references.dpatch.
-- Andreas Metzler <ametzler@debian.org> Mon, 01 Dec 2014 18:54:17 +0100
exim4 (4.85~RC1+dfsg-1) experimental; urgency=medium
* Unset message_prefix/message_sufix in maildrop_pipe transport. Maildrop
neither expects a mbox-style From nor an empty line add the end. (Thanks,
Edward Betts) Closes: #769396
* Change the init script's restart order from { regenerate_config; stop;
start ; } to { stop; regenerate_config; start ; }. (Thanks, Jakub Warmuz)
Closes: #768874
* New upstream version.
+ Unfuzz 66_enlarge-dh-parameters-size.dpatch
+ Drop 80_mime_empty_charset.diff.
* Remove rfc from upstream source and repack it.
-- Andreas Metzler <ametzler@debian.org> Tue, 18 Nov 2014 19:28:20 +0100
exim4 (4.84-8) unstable; urgency=medium
* Pull 83_Remove-limit-on-remove_headers-item-size.-Bug-1533.patch and
84_Fix-truncation-of-items-in-headers_remove-lists-this.patch from
upstream GIT which fix breakage of string-expansion in headers_remove
commands. (Thanks Gordon Dickens, for the pointer.)
-- Andreas Metzler <ametzler@debian.org> Tue, 17 Feb 2015 18:00:42 +0100
exim4 (4.84-7) unstable; urgency=medium
* Tighten dependency of exim4 on exim4-base to (>= ${source:Version}) and
(<< ${source:Version}.1), at least source version, but not the next
sourceful upload. Closes: #777246
-- Andreas Metzler <ametzler@debian.org> Sat, 07 Feb 2015 15:12:33 +0100
exim4 (4.84-6) unstable; urgency=medium
* Revert init script's restart order change in 4.84-4 for the time being.
This needs a slightly more involved change than I want to push into jessie
right now.
-- Andreas Metzler <ametzler@debian.org> Sun, 21 Dec 2014 14:07:12 +0100
exim4 (4.84-5) unstable; urgency=medium
* 82_quoted-or-r-2047-encoded.diff pulled from upstream git (sans
testsuite), extends the fix in 4.84-2.
-- Andreas Metzler <ametzler@debian.org> Wed, 17 Dec 2014 19:03:39 +0100
exim4 (4.84-4) unstable; urgency=medium
* Unset message_prefix/message_sufix in maildrop_pipe transport. Maildrop
neither expects a mbox-style From nor an empty line add the end. (Thanks,
Edward Betts) Closes: #769396
* Change the init script's restart order from { regenerate_config; stop;
start ; } to { stop; regenerate_config; start ; }. (Thanks, Jakub Warmuz)
Closes: #768874
* 81_buffer-overrun-in-spam-acl.diff from upstream git. Fix a buffer overrun
with control characters in argument of spam= acl condition.
<http://bugs.exim.org/show_bug.cgi?id=1552>
-- Andreas Metzler <ametzler@debian.org> Sun, 30 Nov 2014 08:24:04 +0100
exim4 (4.84-3) unstable; urgency=medium
* Apply patch to Italian (it) debconf template translation, thanks to
s3v <c0llapsed@yahoo.it>. Closes: #764925
* Let virtual package cron-daemon fulfill exim4-base's dependency now that
bcron provides it instead of "cron" and systemd-cron is fixed.
Closes: #765720
-- Andreas Metzler <ametzler@debian.org> Sun, 19 Oct 2014 13:35:56 +0200
exim4 (4.84-2) unstable; urgency=high
* Add 80_mime_empty_charset.diff from upstream GIT (the parts that change
the code, not the testsuite) to handle empty content-type charset.
-- Andreas Metzler <ametzler@debian.org> Fri, 29 Aug 2014 19:41:38 +0200
exim4 (4.84-1) unstable; urgency=medium
* New upstream release.
-- Andreas Metzler <ametzler@debian.org> Thu, 14 Aug 2014 19:33:01 +0200
exim4 (4.84~RC2-1) unstable; urgency=medium
* New upstream release candidate.
-- Andreas Metzler <ametzler@debian.org> Sat, 09 Aug 2014 07:42:00 +0200
exim4 (4.84~RC1-3) unstable; urgency=medium
* Third try. Simply comment *custom* in debian/control.
-- Andreas Metzler <ametzler@debian.org> Sat, 02 Aug 2014 09:29:13 +0200
exim4 (4.84~RC1-2) unstable; urgency=medium
* Re-upload, after manually removing *custom* from the changes file to avoid
false detection of NEW packages due to the changes in the archive
infrastructure related source-only uploads.
-- Andreas Metzler <ametzler@debian.org> Sat, 02 Aug 2014 08:14:54 +0200
exim4 (4.84~RC1-1) unstable; urgency=medium
* New upstream release candidate, fixing a regression in the MIME handling
code.
-- Andreas Metzler <ametzler@debian.org> Sat, 02 Aug 2014 07:45:26 +0200
exim4 (4.83-2) unstable; urgency=medium
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Sat, 26 Jul 2014 09:25:15 +0200
exim4 (4.83-1) experimental; urgency=medium
* New upstream release which includes the fix for CVE-2014-2972.
-- Andreas Metzler <ametzler@debian.org> Wed, 23 Jul 2014 08:13:22 +0200
exim4 (4.83~RC3-1) experimental; urgency=medium
* New upstream release candidate.
-- Andreas Metzler <ametzler@debian.org> Tue, 08 Jul 2014 19:07:52 +0200
exim4 (4.83~RC2-1) experimental; urgency=medium
* New upstream release candidate.
+ JH/26 Port service names are now accepted for tls_on_connect_ports, to
align with daemon_smtp_ports. Bug 72. Closes: #316441
-- Andreas Metzler <ametzler@debian.org> Fri, 06 Jun 2014 19:11:24 +0200
exim4 (4.83~RC1-1) experimental; urgency=medium
* New upstream feature release candidate.
+ JH/06 Log outbound-TLS and port details, subject to log selectors, for a
failed delivery. Closes: #712987
* Unfuzz 31_eximmanpage.dpatch and 50_localscan_dlopen.dpatch.
* Drop superfluous patches: 75_unbind-ldap-connection.diff
76_fix_ldap_option_setting.diff 77_close-the-server-side-of-TLS.diff
80_fix_ftbfs_hurd.diff
* Since exim4-base currently only includes daily cronjobs let anacron
fulfill the dependency, too. Systems with missing recommends (anacron
recommends cron) that are *not* restarted regularily will therefore not
run the cron-job regularily. Exim should not break horribly in this case
and we can assume the local system administrator knows what (s)he is doing
by disabling installation of recommends. (Policy: "[...] packages that
would be found together with this one in all but unusual installations")
Closes: #733929
-- Andreas Metzler <ametzler@debian.org> Thu, 29 May 2014 13:09:04 +0200
exim4 (4.82.1-2) unstable; urgency=high
* [87_double_expansion.diff] from upstream. Stop unwanted double expansion
of arguments to mathematical comparison operations. CVE-2014-2972
-- Andreas Metzler <ametzler@debian.org> Sun, 20 Jul 2014 19:05:48 +0200
exim4 (4.82.1-1) unstable; urgency=high
* New upstream security release, fixing CVE-2014-2957. This is a remote
code execution flaw in Exim version 4.82 (only) when built with DMARC
support. Debian's binary packages are not built with DMARC support and
therefore not vulnerable. However we want to fix this for people building
their own binaries based on Debian's packaging.
-- Andreas Metzler <ametzler@debian.org> Wed, 28 May 2014 19:01:43 +0200
exim4 (4.82-8) unstable; urgency=medium
* Now that GMP has been relicensed to LGPLv3+/GPLv2+ build exim against
GnuTLS v3.
-- Andreas Metzler <ametzler@debian.org> Sat, 12 Apr 2014 16:19:05 +0200
exim4 (4.82-7) unstable; urgency=high
[ Martin Pitt ]
* debian/tests/control: Add missing python test dependency, as
debian/tests/security calls python. Closes: #740092
[ Andreas Metzler ]
* 4.82 deprecated $tls_bits, $tls_certificate_verified, $tls_cipher,
$tls_peerdn, $tls_sni and introduced tls_in_*/tls_out_* variants of these
variables which describe the respective status of the current incoming or
outgoing TLS connection. The rationale for this is that a single exim
process can now use both an incoming (message reception) and outgoing
TLS connection (callout or cutthrough delivery) concurrently. With this
change the "old" variables were mapped to tls_in_*, i.e. they expand to
empty values on outgoing connections. (This is not yet documented.)
Outgoing tls-connections can therefore not be detected by nonempty
$tls_cipher anymore. exim4-config << 4.82 used this mechanism to prevent
sending of plaintext AUTH information on unencrypted connections. Force a
lockstep upgrade of exim4-config by bumping the version of exim4-base's
dependency on exim4-config to >= 4.82.
Closes: #742901, #736081
-- Andreas Metzler <ametzler@debian.org> Sun, 06 Apr 2014 08:32:11 +0200
exim4 (4.82-6) experimental; urgency=medium
[ Martin Pitt ]
* debian/tests/control: Add missing python test dependency, as
debian/tests/security calls python. Closes: #740092
[ Andreas Metzler ]
* Now that GMP has been relicensed to LGPLv3+/GPLv2+ build exim against
GnuTLS v3.
-- Andreas Metzler <ametzler@debian.org> Sat, 05 Apr 2014 14:18:11 +0200
exim4 (4.82-5) unstable; urgency=medium
* Upgrade to libdb5.3-dev. Closes: #738637 Be paranoid and bump BDBVERSION
in exim4-base.postinst from 3.0 (no idea why this did not read 5.1) to
5.3, therefore purging hints db on upgrades.
-- Andreas Metzler <ametzler@debian.org> Wed, 12 Feb 2014 19:31:55 +0100
exim4 (4.82-4) unstable; urgency=medium
* Correct title/name of exim4-config_files(5). (Thanks, Heiko Schlittermann)
Closes: #734212
* 80_fix_ftbfs_hurd.diff by Samuel Thibault fixes FTBFS on GNU/hurd due to
missing support for TCLASS. Closes: #738445
* Add debian/upstream-signing-key.pgp (listed in
debian/source/include-binaries) and update watchfile to check
upstream signature.
-- Andreas Metzler <ametzler@debian.org> Sun, 09 Feb 2014 19:41:34 +0100
exim4 (4.82-3) unstable; urgency=low
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Wed, 27 Nov 2013 19:51:26 +0100
exim4 (4.82-2) experimental; urgency=low
* Pull two post-release fixes from upstream git master:
+ 75_unbind-ldap-connection.diff - Only unbind ldap connection if bind
succeeded.
+ 77_close-the-server-side-of-TLS.diff - Correctly close the server side
of TLS when forking for delivery.
* Pull 76_fix_ldap_option_setting.diff from Todd Lyons testing tree. See
<http://mid.gmane.org/20131029200309.GA277075%40zedat.fu-berlin.de>.
-- Andreas Metzler <ametzler@debian.org> Sat, 09 Nov 2013 17:24:59 +0100
exim4 (4.82-1) experimental; urgency=low
* New upstream stable release.
* Drop exim4-config_files.5 symlinks for local_host_whitelist and
local_sender_whitelist, add symlinks for host_local_deny_exceptions and
sender_local_deny_exceptions instead. Closes: #661365
-- Andreas Metzler <ametzler@debian.org> Sat, 09 Nov 2013 11:52:58 +0100
exim4 (4.82~rc5-1) experimental; urgency=low
* New upstream version.
-- Andreas Metzler <ametzler@debian.org> Sat, 26 Oct 2013 08:50:58 +0200
exim4 (4.82~rc3-1) experimental; urgency=low
* New upstream version.
+ TL/15 Fix exiqsumm summary for corner case. Patch provided by Richard
Hall.
+ TL/16 Bugzilla 1289 - Clarify host/ip processing when have errors
looking up a hostname or reverse DNS when processing a host list. Used
suggestions from multiple comments on this bug.
+ TL/17 Bugzilla 1057 - Multiple clamd TCP targets patch from Mark Zealey.
* Add macros for sending a client certificate on outgoing TLS connections.
(REMOTE_SMTP_TLS_CERTIFICATE/REMOTE_SMTP_PRIVATEKEY,
REMOTE_SMTP_SMARTHOST_TLS_CERTIFICATE/REMOTE_SMTP_SMARTHOST_PRIVATEKEY)
Closes: #677826
-- Andreas Metzler <ametzler@debian.org> Sat, 12 Oct 2013 09:30:28 +0200
exim4 (4.82~rc2-1) experimental; urgency=low
* exim-gencert: Generate 2048bit key by default. LP: #1200581
* New upstream version.
+ Drop 80_addmanuallybuiltdocs.diff
-- Andreas Metzler <ametzler@debian.org> Thu, 03 Oct 2013 19:24:59 +0200
exim4 (4.82~rc1-1) experimental; urgency=low
* New upstream version.
+ TL/02 Add +smtp_confirmation as a default logging option.
Closes: #649600
+ JH/05 Permit multiple router/transport headers_add/remove lines.
Closes: #276126
+ See /usr/share/doc/exim4-base/NewStuff.gz for other newly added
features.
* Upload to experimental.
* Drop unnecessary patches (30_dontoverridecflags.dpatch
75_openssl_sni.diff 76_tls_dh_min_bits.diff 77_docsfortls_dh_min_bits.diff
78_pkcs11_init.diff 84_CVE-2012-5671.patch 85_server_set_id_SPA.diff
86_Dovecot-robustness.diff 87_localinjected_mimeacl.diff), unfuzz patches.
* Applying upstream's default configuration updates to Debian configuration
change 30_exim4-config_examples to use tls_in_cipher/tls_out_cipher
instead of tls_out_cipher. - exim4-config therefore Breaks
exim daemon << 4.82~rc1.
* 80_addmanuallybuiltdocs.diff: Upstream rc tarball ships empty filter.txt
and spec.txt, replace these with correct handbuilt versions.
-- Andreas Metzler <ametzler@debian.org> Sun, 29 Sep 2013 14:43:25 +0200
exim4 (4.80-9) unstable; urgency=low
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Sat, 14 Sep 2013 08:05:18 +0200
exim4 (4.80-8) experimental; urgency=low
* Import updated watchfile by Bart Martens. (Handles more compression types
and x.y.revision versioning.)
* In initscript invoke pidofproc with a pathname argument as it is
documented in LSB and required by lsb-base (>= 4.1+Debian9).
Closes: #693696, #718871
* Improve exim4-config_files.5 and README.Debian - Warn about unresolvable
items in host lists. Closes: #627988
* Drop support for "/etc/init.d/exim4 what". It offers zero benefit to
invoking exiwhat directly and throws an error mesage, too. (Thanks Regid
Ichira for the diagnosis.) Closes: #643720
* Set "host_find_failed = ignore" (instead of defer) on smarthost and
hub_user_smarthost router. Now if one (of the possibly multiple) listed
smarthosts is not resolvable (NXDOMAIN) ignores it and and tries the next
listed one. If all listed hosts are unresolvable the mail is still
defered, since host_all_ignored is set to defer by default. Therefore the
behavior does not change for single-smarthost systems. Closes: #658878
* Remove obsolete conffile /etc/cron.monthly/exim4-base which was only
shipped in 4.69-3. Closes: #689334
* Update exim_db.8, syncing against spec.txt from exim 4.80.
* 87_localinjected_mimeacl.diff from upstream GIT. When injecting a message
locally in non-SMTP mode, and with MIME ACLs configured, if the ACL
rejected the message, Exim would try to `fprintf(NULL, "%s",
the_message)`. This fixes that.
* [lintian] Escape some dashes in exim4-config_files.5.
* Point vcs-* to anonscm.
* Remove pidfile after stopping the daemon, exim does not remove it itself.
Closes: #702988
* eu.po: Fix last reference to /usr/share/doc/exim4-base/README.Debian
(without either .html or .gz suffix). Closes: #394975
* Merge autopkgtests from Ubuntu (Thanks Yolanda Robla for the pointer)
Closes: #710018
+ tests/CVE-2010-4344.py is GPLv2 - Add license header.
+ tests/daemon and tests/security do not use bashisms, change shebang
to /bin/sh.
* Upload to experimental, due to perl transition.
-- Andreas Metzler <ametzler@debian.org> Sun, 01 Sep 2013 15:58:49 +0200
exim4 (4.80-7) unstable; urgency=low
* Use exim's ${quote:xxx} operator when invoking spfquery to disallow
bypassing of SPF validation by using special mailbox names. (Thanks to
Lekensteyn for diagnosis and testing.) Closes: #697057
-- Andreas Metzler <ametzler@debian.org> Wed, 02 Jan 2013 19:37:21 +0100
exim4 (4.80-6) unstable; urgency=low
* Cherrypick two changes from GIT:
+ 85_server_set_id_SPA.diff: server_set_id was not stored in
$authenticated_id when using SPA authentication.
http://article.gmane.org/gmane.mail.exim.user/92181
+ 86_Dovecot-robustness.diff: robustness fixes for the Dovecot
authenticator.
-- Andreas Metzler <ametzler@debian.org> Wed, 21 Nov 2012 19:08:53 +0100
exim4 (4.80-5.1) unstable; urgency=high
* Non-maintainer upload by the Security Team.
* CVE-2012-5671: Fix heap-based buffer overflow in DKIM handling.
-- Nico Golde <nion@debian.org> Thu, 25 Oct 2012 20:11:11 +0200
exim4 (4.80-5) unstable; urgency=low
* Fix grammar error in debian/manpages/exim4-config_files.5. (Thanks,
Regid Ichira)
* Fix hardening support. (Thanks, Simon Ruderich)
+ Append $(CPPFLAGS) to CFLAGS, the exim buildsystem does not use it.
+ Set LFLAGS += $(LDFLAGS) in debian/rules.
Closes: #687645
* Correct typo in Russian debconf translation. (Thanks, Krasu)
Closes: #683385
* Point Vcs-* to git repository.
-- Andreas Metzler <ametzler@debian.org> Sun, 23 Sep 2012 12:20:16 +0200
exim4 (4.80-4) unstable; urgency=low
* Disable autoloading of PKCS#11 modules. Closes: #678238
-- Andreas Metzler <ametzler@debian.org> Sat, 23 Jun 2012 18:35:03 +0200
exim4 (4.80-3) unstable; urgency=low
* Pull 75_openssl_sni.diff from upstream. - Segfault caused by NULL
dereference if Exim is built using OpenSSL, tls_sni is used and a
forced expansion failure is configured.
* Pull 76_tls_dh_min_bits.diff (and the corresponding doc change
77_docsfortls_dh_min_bits.diff) from upstream. Adds a new SMTP transport
option tls_dh_min_bits for setting the minimal size of DH parameters.
* Add macro TLS_DH_MIN_BITS for setting the tls_dh_min_bits smtp transport
option. Closes: #676563
* [lintian] Stop shipping empty directory /usr/share/exim4 in exim4-base.
-- Andreas Metzler <ametzler@debian.org> Fri, 08 Jun 2012 12:37:05 +0200
exim4 (4.80-2) unstable; urgency=low
* [Brown paper bag] actually target unstable in changelog.
-- Andreas Metzler <ametzler@debian.org> Sun, 03 Jun 2012 17:24:05 +0200
exim4 (4.80-1) experimental; urgency=low
* New upstream version, identical to rc7.
* Add a missing piece of documentation to update-exim4.conf.8. DCreadhost
is not only used for rewriting, in satellite setup it is also
the host where local mail is delivered to. (Thanks, Regid Ichira).
Closes: #675712
-- Andreas Metzler <ametzler@debian.org> Sun, 03 Jun 2012 16:49:51 +0200
exim4 (4.80~rc7-1) experimental; urgency=low
* New upstream version.
* Let debian/EDITME.openssl.exim4-light.diff apply again.
-- Andreas Metzler <ametzler@debian.org> Tue, 29 May 2012 19:33:07 +0200
exim4 (4.80~rc6-1) experimental; urgency=low
* Ship newly available GnuTLS-FAQ.txt in exim4-base.
* Upstream's handling of GnuTLS DH parameters has changed, hardcoded
parameters (from RFCs are used by default. See
/usr/share/doc/exim4-base/README.UPDATING* for details. Stop shipping
/usr/share/exim4/exim4_refresh_gnutls-params /usr/share/exim4/timeout.pl
and /var/spool/exim4/gnutls-params-2236.
-- Andreas Metzler <ametzler@debian.org> Sun, 27 May 2012 18:46:48 +0200
exim4 (4.80~rc5-1) experimental; urgency=low
* New upstream version.
-- Andreas Metzler <ametzler@debian.org> Thu, 24 May 2012 20:20:24 +0200
exim4 (4.80~rc4-1) experimental; urgency=low
* New upstream version.
+ Unfuzz 50_localscan_dlopen.dpatch
+ Drop 80_revert_stringformatprintf.diff, superseded upstream.
+ Default DH param size switched to 2236 for NSS compat. Update
generation script and shipped parameters.
-- Andreas Metzler <ametzler@debian.org> Mon, 21 May 2012 20:00:18 +0200
exim4 (4.80~rc2-1) experimental; urgency=low
* Fix typo in retry/30_exim4-config (s/frequenzy/frequency/) (Thanks, Regid
Ichira). Closes: #646338
* dpkg-buildflags supersedes hardening-wrapper. set
DEB_BUILD_MAINT_OPTIONS := hardening=+bindnow,+pie to use features enabled
by hardening-wrapper by default. Make sure to always set -Wall.
* List mapppings between debconf choices ("mail sent by smarthost; no local
mail" et al.) and corresponding values of the DC_eximconfig_configtype
macro in update-exim4.conf(8). Closes: #651883
* README.Debian.*: Correct documentation of the lowuid_aliases router. - The
macro is named FIRST_USER_ACCOUNT_UID instead of FIRST_USER_UID. (Thanks,
Yubao Liu) Closes: #653058
* add more verbose help to /etc/default/exim4. Closes: #653272
* Updated French debconf templates translation. (thanks for proofreading,
debian-l10n-french!) Closes: #668475
* Fix typo usualy in update-exim4.conf.8.
* Add source lintian override (debian/source/lintian-overrides) for
binaries-have-file-conflict exim4-daemon-heavy-dbg exim4-daemon-light-dbg.
*-daemon-dbg depends on the respective -daemon, and the daemon-packages
conflict with each other.
* New upstream version:
+ Unfuzz patches
+ Update 66_enlarge-dh-parameters-size.dpatch. This is now a noop if built
against gnutls >= 2.12.
+ Default DH param size is 2432, update generation script and shipped
parameters.
+ Unfuzz/update */EDITME/*. Update debian/example.conf.md5.
+ 80_revert_stringformatprintf.diff. Do not mark string_format() as
PRINTF_FUNCTION(3,4) to allow compilation with -Wformat
-Werror=format-security
+ Sets accept_8bitmime = true by default. Closes: #445013
+ Uses GnuTLS priority string for configuration. (See NEWS.Debian)
Closes: #624041
-- Andreas Metzler <ametzler@debian.org> Sun, 20 May 2012 15:57:15 +0200
exim4 (4.77-1) unstable; urgency=low
* Fix typo in exim4-config_files.5. (Thanks, Regid Ichira) Closes: #645283
* New upstream stable release. (No major changes compared to rc4)
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Sat, 22 Oct 2011 18:00:11 +0200
exim4 (4.77~rc4-1) experimental; urgency=low
* New upstream release candidate.
+ drop patches included in this release.
(80_gnutls_certificate_verify_peers2.diff 80_gnutls_initrc.diff
80_TLS1.2-and-TLS1.1-support.diff)
+ New expansion conditions, "inlist", "inlisti".
+ Exim no longer performs string expansion on the second string of
the match_* expansion conditions: "match_address", "match_domain",
"match_ip" & "match_local_part". Named lists can still be used. The
previous behavior made it too easy to create (remotely) vulnerable
configurations. A more detailed rationale and explanation can be found
on
https://lists.exim.org/lurker/message/20111003.122326.fbcf32b7.en.html
+ doc/pcrepattern.txt is not shipped anymore as part of the exim tarball
(and therefore the Debian package suite.)
* Make use of /usr/share/dpkg/buildflags.mk if available.
* Change build system to build each binary variant in a separate copy of
the source tree instead of re-using the copy and moving away the results
after build. The old approach stopped working since upstream added a
dependency on make all to make install. - As we were changing parts of
tree (Local/Makefile) after the build this caused an (incorrect) rebuild
on make install.
-- Andreas Metzler <ametzler@debian.org> Sat, 08 Oct 2011 13:07:35 +0200
exim4 (4.76-4) experimental; urgency=low
* 80_TLS1.2-and-TLS1.1-support.diff (pulled from upstream GIT gnutls_fixes
branch): Enable TLS1.2 and TLS1.1
* 80_gnutls_certificate_verify_peers2.diff, 80_gnutls_initrc.diff (pulled
from upstream GIT gnutls_fixes branch): Use
gnutls_certificate_verify_peers2() instead of
gnutls_certificate_verify_peers(). The deprecated function was dropped in
GnuTLS 3.x. Closes: #624082
-- Andreas Metzler <ametzler@debian.org> Sat, 24 Sep 2011 18:36:08 +0200
exim4 (4.76-3) unstable; urgency=low
* [exim4-base.cron.daily] Correct invocation of mail(1), options need to be
specified before arguments for compatibility with heirloom-mailx (Thanks,
Andreas Schiweck). Closes: #629314
* [exim4-base.exim4.init] Use echo instead of log_failure_msg for the panic
log warning. Closes: #629610
* [exim4-base.postinst] Also take care of ratelimit db on bdbd upgrades.
Closes: #630985
* Update Debian exim webpage URL. Closes: #641126
* Do not run upgrade test for 4.67-5 on exim4.conf.template if split config
is used and vice versa. Closes: #577633
* [lintian] Do not specify priority in binary package stanzas, unless it
deviates from the source package priority setting.
* [lintian] Drop unused lintian override binary-without-manpage
usr/sbin/exim.
* [lintian] Improve on short descriptions of *-dbg packages.
-- Andreas Metzler <ametzler@debian.org> Sun, 18 Sep 2011 11:49:13 +0200
exim4 (4.76-2) unstable; urgency=low
* debian/rules: Remove test/ and test-stamp on clean.
* Handle BerkeleyDB upgrades more gracefully. Instead of checking Debian
version numbers compare DB-version of old exim (stored by postinst in
/var/lib/exim4/berkeleydbvers.txt) with currently used DB-version
(hardcoded at build time in exim4-base.postinst).
* [exim4-base.postinst exim4-config.postinst] Do away with unnecessary
chowns by dropping them or limiting to upgrades from 4.30.
-- Andreas Metzler <ametzler@debian.org> Sun, 29 May 2011 18:21:03 +0200
exim4 (4.76-1) unstable; urgency=low
* New upstream version.
* Drop 80_match_isinlist.diff (included upstream).
-- Andreas Metzler <ametzler@debian.org> Mon, 09 May 2011 19:12:09 +0200
exim4 (4.76~RC1-3) experimental; urgency=low
* 80_match_isinlist.diff pulled from upstream git.
-- Andreas Metzler <ametzler@debian.org> Sun, 08 May 2011 14:44:20 +0200
exim4 (4.76~RC1-2) experimental; urgency=low
* Fix testsuite error.
* Disable verification of DKIM signatures if DC_minimaldns or the (newly
added) DISABLE_DKIM_VERIFY macro are set. Closes: #609764
* [lintian] Drop useless comments from debian/watch.
-- Andreas Metzler <ametzler@debian.org> Sun, 08 May 2011 08:58:24 +0200
exim4 (4.76~RC1-1) experimental; urgency=low
* New upstream version.
* Drop superfluous patches. 80_ldap_require_cert-work.diff
81_negatebool.diff 82_dkimpercent.diff
* [Lintian] Fix grammar error in manpage (spelling-error-in-manpage
update-exim4defaults.8.gz allows to allows one to).
* [debian/minimaltest]: Added. Try to run a minimal functionality test after
building exim. (Currently only supported if the build-system has a
Debian-exim user.)
-- Andreas Metzler <ametzler@debian.org> Fri, 06 May 2011 20:27:56 +0200
exim4 (4.75-3) unstable; urgency=high
* [debian/rules] Fix dependencies and targets, speeding up package build.
Previously everything was compiled twice.
* Patches pulled from upstream git:
+81_negatebool.diff Negating the $bool expansion condition did not work.
+82_dkimpercent.diff dkim sig logged to paniclog. Closes: #624670
(CVE-2011-1764)
-- Andreas Metzler <ametzler@debian.org> Fri, 06 May 2011 20:08:51 +0200
exim4 (4.75-2) unstable; urgency=low
* clamav socket on Debian is clamd:/var/run/clamav/clamd.ctl, fix
configuration example accordingly. (Thanks, Roman V. Nikolaev)
Closes: #622111
* Use on libdb5.1-dev (instead of 4.8), zap hints db on upgrade from <=
4.75-1. Closes: #621388
* Enable hardening options. (Last difference to Ubuntu except for not being
the default-mta there.) Closes: #542726
-- Andreas Metzler <ametzler@debian.org> Sat, 16 Apr 2011 14:45:36 +0200
exim4 (4.75-1) unstable; urgency=low
* New upstream version.
* 80_ldap_require_cert-work.diff Pulled from upstream git. The new
ldap_require_cert option would segfault if used.
-- Andreas Metzler <ametzler@debian.org> Mon, 28 Mar 2011 19:24:55 +0200
exim4 (4.75~rc3-1) experimental; urgency=low
* New upstream version.
-- Andreas Metzler <ametzler@debian.org> Thu, 03 Mar 2011 19:10:06 +0100
exim4 (4.75~rc2-1) experimental; urgency=low
* New upstream version.
+ Fixes exiqgrep "Line mismatch" error on messages without size info.
Closes: #528625
+ Restore default SIGPIPE handler for child_open_uid. Closes: #573779
* Enable verbose compilation.
-- Andreas Metzler <ametzler@debian.org> Sun, 27 Feb 2011 11:59:45 +0100
exim4 (4.74-2) unstable; urgency=low
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Thu, 24 Feb 2011 19:02:07 +0100
exim4 (4.74-1) experimental; urgency=low
* 4.74 release, should build on hurd again.
* Fix some lintian --pedantic issues: copyright-refers-to-symlink-license
maintainer-script-without-set-e debian-control-has-unusual-field-spacing
-- Andreas Metzler <ametzler@debian.org> Sat, 29 Jan 2011 15:39:51 +0100
exim4 (4.74~rc2-1) experimental; urgency=low
* In spf example use spf-tools-perl's spfquery instead of the one from
libmail-spf-query-perl. Do not try to use unimplemented best-guess
support. Update Suggests accordingly. Closes: #608336
* Add headers in ACL by using the add_header modifier instead of "message".
(This modifier has been available since 4.61.) Closes: #609308
* New upstream version.
+ includes the fix for CVE-2011-0017
+ If a non-debug daemon was invoked with a non-whitelisted macro, then
logs from after attempting delivery would be silently lost, including
for successful delivery. This log-loss bug was introduced in 4.73
as part of the security lockdown. Closes: #610611
+ Update some patches.
-- Andreas Metzler <ametzler@debian.org> Sun, 23 Jan 2011 14:02:36 +0100
exim4 (4.73~rc1-1) experimental; urgency=low
* New upstream release candidate.
* Drop included patches. 80_4.73rc1_*, 40_dkimnotinpaniclog.diff.
* Update 31_eximmanpage.dpatch.
* exim4 now uses INSTREAM (added in clamav 0.95) instead of STREAM when
talking to clamav. exim4-daemon-heavy therefore Breaks: clamav-daemon
(<< 0.95).
* Unfuzz EDITME*diff.
* Dependency changes:
+ Drop exim4-config's conflicts with bash (<< 2.05). This was relevant
pre-sarge.
+ Drop exim4-daemon-* dependency on exim4-base (>> 4.71-2). This one is
superfluous because of of the dependency on
exim4-base (>= ${Upstream-Version}).
+ exim4-config breaks instead of conflicts with pre-DKIM (i.e. << 4.69.1)
exim4-daemon.
+ exim4-base breaks instead of conflicts with <<${Upstream-Version} daemon
packages.
* Add Vcs-Svn and Vcs-Browser fields to debian/control.
* Build depend on libmysqlclient-dev | libmysqlclient15-dev instead of
libmysqlclient15-dev. libmysqlclient-dev is not a virtual package
anymore. Closes: #590218
* Use db_settitle unconditionally, even etch supports this. Drop unneeded
lintian override exim4-config: settitle-requires-versioned-depends.
-- Andreas Metzler <ametzler@debian.org> Mon, 27 Dec 2010 19:48:19 +0100
exim4 (4.72-6) unstable; urgency=high
* 80_4.74_filtertesting.diff: Do not abort when setgid fails if privileges
were dropped. This fixes a regression from 4.72-2, it was not possible to
test filter files with exim4 -bf anymore. Closes: #611572
-- Andreas Metzler <ametzler@debian.org> Mon, 31 Jan 2011 19:05:48 +0100
exim4 (4.72-5) unstable; urgency=medium
* 80_4.74_deliverylogging.patch (Pulled from upstream git): If a non-debug
daemon was invoked with a non-whitelisted macro, then logs from after
attempting delivery would be silently lost, including for successful
delivery. This log-loss bug was introduced as part of the security
lockdown for fixing CVE-2010-4345. Closes: #610611
-- Andreas Metzler <ametzler@debian.org> Sat, 29 Jan 2011 14:33:36 +0100
exim4 (4.72-4) unstable; urgency=medium
* In spf example use spf-tools-perl's spfquery instead of the one from
libmail-spf-query-perl. Do not try to use unimplemented best-guess
support. Update Suggests accordingly. Closes: #608336
* 80_4.74_CVE-2011-0017.patch (Pulled from upstream git): Check return
values of setgid/setuid. This is a privilege escalation vulnerability
whereby the Exim run-time user can cause root to append content of the
attacker's choosing to arbitrary files.
-- Andreas Metzler <ametzler@debian.org> Sat, 22 Jan 2011 17:48:19 +0100
exim4 (4.72-3) unstable; urgency=low
* [README.Debian*] Correct command for manual paniclog rotation. (Thanks,
Jörg Sommer) Closes: #602188
* 67_unnecessaryCopt.diff: Do not use exim's -C option in utility scripts.
This would not work with ALT_CONFIG_PREFIX.
* Pull changes related to fixing CVE-2010-4345 from exim 4.73 rc1.
Closes: #606527
+ 1_cfile_norw_eximuid: Don't allow a configure file which is writeable by
the Exim user or group.
+ 2_permcheck_configurefile: Check configure file permissions even for
non-default files if still privileged.
+ 3_remove_ALT_CONFIG_ROOT_ONLY: Remove ALT_CONFIG_ROOT_ONLY build option,
effectively making it always true.
+ 4_FD_CLOEXEC: Set FD_CLOEXEC on SMTP sockets after forking in the
daemon, to ensure that rogue child processes cannot use them.
+ 5_TRUSTED_CONFIG_LIST: Add TRUSTED_CONFIG_LIST compile option.
+ 6_nonroot_system_filter_user: If the system filter needs to be run as
root, let that be explicitly configured. The default is now the Exim
run-time user.
+ 7_filter_D_option: Add a (compiletime) whitelist of acceptable values
for the -D option.
+ 8_updatedocumentation: Update documentation to reflect the changes.
* Build with WHITELIST_D_MACROS=OUTGOING. Post patch 7_filter_D_option exim
will not regain root privileges (usually necessary for local delivery) if
the -D option was used. Macro identifiers listed in WHITELIST_D_MACROS are
exempted from this restriction. mailscanner (4.79.11-2.2) uses -DOUTGOING.
* Build with TRUSTED_CONFIG_LIST=/etc/exim4/trusted_configs. Post patch
3_remove_ALT_CONFIG_ROOT_ONLY exim will not re-gain root privileges
(usually necessary for local delivery) if the -C option was used. This
makes it impossible to start a fully functional damon with an alternate
configuration file. /etc/exim4/trusted_configs (can) contain a list of
filenames (one per line, full path given) to which this restriction does
not apply.
-- Andreas Metzler <ametzler@debian.org> Sun, 26 Dec 2010 15:13:08 +0100
exim4 (4.72-2) unstable; urgency=low
[ Marc Haber ]
* Apply patch to russian (ru) debconf template, thanks to Тим
Алексеевский and Tim Alexeevsky. Closes: #576202
* fix exim4-config_files man page, mention
{host|sender}_local_deny_exceptions instead of
local_{host|sender}_whitelist. Thanks to Fabien André in #578176
* add !acl = acl_local_deny_exceptions to defer stanzas in SPF code.
Thanks to Fabien André. Closes: #578176
* Re-work config.autogenerated header to more exactly reflect
configuration source. (mh) Closes: #593984
[ Andreas Metzler ]
* Fix getopt invocation to make update-exim4.conf.template -o work. (Thank
you Matthew W. S. Bell) Closes: #590333
* 40_dkimnotinpaniclog.diff pulled from upstream git. Stop logging
non-critical DKIM errors in paniclog. Closes: #567876
* Debconf translations:
- Danish. Closes: #592792
-- Andreas Metzler <ametzler@debian.org> Sat, 30 Oct 2010 13:38:26 +0200
exim4 (4.72-1) unstable; urgency=low
* New upstream release. (Identical to the git snapshot previously
uploaded to experimental.)
-- Andreas Metzler <ametzler@debian.org> Thu, 03 Jun 2010 17:42:52 +0200
exim4 (4.72~20100529-1) experimental; urgency=low
* Git snapshot 20100529.
+ Fix documentation for exipick -bpra. #574778
+ CVE-2010-2024: Protect against symlink attacks on MBX lockfile in /tmp.
(Debian's default configuration does not use MBX format, but the
exim4-daemon-heavy binary supports MBX.)
+ CVE-2010-2023 Prevent hardlink attack on mbox sticky mail directory.
(Probably not relevant for Debian systems at all, since the mail spool
is 2775 root:mail.)
+ Dovecot authenticator ignores unknown keywords, making it compatible
with version 1.1 of Dovecot authentication protocol. (= dovecot 2.0).
See Changelog for complete list.
* Drop patches included upstream: 36_typoinexipick.diff
20_PDKIM-Upgrade-PolarSSL.diff.
-- Andreas Metzler <ametzler@debian.org> Sun, 30 May 2010 14:01:52 +0200
exim4 (4.71-4) unstable; urgency=low
* Drop unneeded lintian overrides.
+ description-contains-homepage
+ debian/source.lintian-overrides dbg-package-missing-depends exim4-dbg.
+ partially-translated-question
+ maintainer-script-needs-depends-on-update-inetd
+ possible-bashism-in-maintainer-script
+ binary-without-manpage
+ possible-debconf-note-abuse
+ changelog-not-compressed-with-max-compression
* Lintian informational hints:
+ hyphen-used-as-minus-sign. debian/manpages/exim4-config_files.5
debian/manpages/update-exim4.conf.8 debian/manpages/exiwhat.8
* Use dh_lintian.
* Fix sourcing of lsb-functions in init-script. Test for existence of
/usr/lib/exim4/exim4 first. Unconditionally read /lib/lsb/init-functions.
If they are not present the package's dependencies are not installed.
Bump dependency on lsb-base to 3.0-6. (log_action_*)
* Update reference to spec.txt in README.Debian. Closes: #568051
* Invoke spfquery as spfquery.mail-spf-query-perl. There are three different
implementations of spfquery in Debian, with incompatible commandline
switches and different exit codes. Closes: #573956
-- Andreas Metzler <ametzler@debian.org> Thu, 25 Mar 2010 17:34:30 +0100
exim4 (4.71-3) unstable; urgency=low
* exim4-base.cron.daily: Do not run exim_tidydb on Berkeley DB logfiles.
Closes: #501892
* exim4-base.postinst: If exim_dumpdb fails to read a hints-db also remove
Berkeley DB logfiles.
* Switch to Berkeley DB 4.8 (from 4.6). Zap hints db on upgrade. Temporarily
make -daemon packages depend on exim4-base >> 4.71-2. (This can be removed
after the next upstream release.)
Closes: #548479
* control: Drop bzip2 from Build-Depends. Use line-wrapping for
Build-Depends.
* 36_typoinexipick.diff: Fix a typo in exipick manpage. (Lintian).
* exim4-base.postinst: Redirect status message to stderr.
-- Andreas Metzler <ametzler@debian.org> Fri, 01 Jan 2010 13:41:44 +0100
exim4 (4.71-2) unstable; urgency=low
* Pulled from upstream: 20_PDKIM-Upgrade-PolarSSL.diff. Update files copied
from PolarSSL to 0.12.1.
* Add example file to set smarthost from /etc/network/interfaces (mh)
* Add DKIM_* macros on remote smtp transports for setting the corresponding
dkim_* options.
* Upload to unstable.
-- Andreas Metzler <ametzler@debian.org> Sat, 12 Dec 2009 13:24:21 +0100
exim4 (4.71-1) experimental; urgency=low
* New upstream version.
+ Drop patches included upstream. 51_dkimrelatedcrash.diff
51_noreject_unsigned.diff.
-- Andreas Metzler <ametzler@debian.org> Sat, 28 Nov 2009 12:03:50 +0100
exim4 (4.70-2) experimental; urgency=low
* 51_noreject_unsigned.diff Fix a dkim related expansion error that appears
when the expanded value of dkim_verify_signers winds up empty and
acl_smtp_dkim is defined. (This has the effect of rejecting any mail
without DKIM signature.)
* Work around 490937 by removing CHANGES.
-- Andreas Metzler <ametzler@debian.org> Sat, 21 Nov 2009 10:15:41 +0100
exim4 (4.70-1) experimental; urgency=low
* Point watchfile to ftp.exim.org.
* Use dpkg-source v3 instead of dpatch, simplifying debian/rules a little
bit.
* New upstream version.
+ Pull 51_dkimrelatedcrash.diff fixing a segfault only applying to the
4.7x series. http://bugs.exim.org/show_bug.cgi?id=912
* debhelper v7 mode.
+ Use -XCHANGES to Keep dh_installchangelogs v7 from insisting to install
./CHANGES as upstream changelog.
+ Bump build-dependency.
+ Use dh_prep instead of dh_clean -k.
-- Andreas Metzler <ametzler@debian.org> Sun, 15 Nov 2009 13:10:32 +0100
exim4 (4.70~rc4-1) experimental; urgency=low
* New upstream version.
-- Andreas Metzler <ametzler@debian.org> Wed, 11 Nov 2009 19:04:35 +0100
exim4 (4.70~cvs+20091030-1) experimental; urgency=low
* New upstream snapshot.
-- Andreas Metzler <ametzler@debian.org> Sat, 31 Oct 2009 10:08:55 +0100
exim4 (4.70~cvs+20091026-1) experimental; urgency=low
* New snapshot.
+ Fixes segfault in dovecot authenticator. Closes: #551106
+ Improved documentation regarding certifacte verification on outgoing
SMTP connections. Closes: #544472
* Drop 40_boolean_redefine_protect.dpatch - included upstream.
* Drop unapplied superfluous patches from diff: 36_pcre 37_exiwhatpsmisc.
-- Andreas Metzler <ametzler@debian.org> Mon, 26 Oct 2009 16:09:32 +0100
exim4 (4.70~cvs+20091017-1) experimental; urgency=low
* Fix syntax errors in README.Debian.xml. (Thank's, Daniel Leidert)
* New upstream cvs snapshot.
+ Drop unnecessary patches: 36_pcre 37_exiwhatpsmisc.
+ Close dovecot socket after wrong password was given. Closes: #515503
+ Standalone DKIM support. Obsoletes and therefore
Closes: #486437,#459883
* Drop upstream URL from package descriptions. Closes: #471425
* [patches/00_unpack.dpatch] Drop workaround for tar 1.14, even oldstable
has 1.16. Closes: #486436.
* Do not set 'tls_try_verify_hosts = *' by default anymore. Some clients
(e.g Outlook) will terminate the SSL connection when the server presents
the long list of accepted TLS certificates after STARTTLS. If TLS
certificate validation of clients is needed you'll need to set
MAIN_TLS_TRY_VERIFY_HOSTS again and point MAIN_TLS_VERIFY_CERTIFICATES to
a file containing only the accepted certificates.
Closes: #515999, #316522, #482012
* Add debian/README.source. (Policy 3.8.3)
* Fix typo in update-exim4.conf.8.
Thanks to Calum Mackay. Closes: #543354
* Listen on IPv6 loopback interface by default. (Only applies to fresh
installations.) Closes: #544292
* upstream default configure file explicitly disables dkim in some
instances. Merge into Debian config and update debian/example.conf.md5.
Bump Conflicts of exim4-config package.
-- Andreas Metzler <ametzler@debian.org> Sat, 17 Oct 2009 14:26:54 +0200
exim4 (4.69-11) unstable; urgency=medium
* Build-Depend on lynx-cur|lynx instead of lynx. (lynx is just a dummy
package currently, and due its strict dependencies uninstallable until
the most recent version of lynx-cur has been built.)
* Work around sed's improved unicode support, not accepting latin1
characters as pattern delimiters in UTF-8 locales anymore. Closes: #527445
+ [update-exim4.conf] Go for / as separator instead. - This might have
served a purpose in earlier releases with free-form replacements but is
just overcomplicated now.
+ [update-exim4defaults]: The tricky bits for exim options are the
ones that take a filename as argument (e.g. -C and -oX) or -D for
overriding macros. Use LC_CTYPE=C.
+ [exim4-config.config] The sed commands deals with (lists of) hostnames
and IP(v6) addresses and nets. Use LC_CTYPE=C.
-- Andreas Metzler <ametzler@debian.org> Sun, 10 May 2009 10:15:34 +0200
exim4 (4.69-10) unstable; urgency=low
[ Andreas Metzler ]
* Use macro CONFDIR in lowuid_aliases router, too. Closes: #507124
* Disable shell filename expansion in update-exim4.conf using set -f.
Closes: #515668
* Stop using set -u in update-exim4.conf. With version 4.0 bash changed its
behavior to throw an error on expansion of $* or $@ with set -u if no
positional parameters were given. Working around this is obnoxious and
harms readability, imho doing away with set -u's benefits. Closes: #518752
* Allow setting outgoing smtp helo/ehlo by setting
REMOTE_SMTP_HELO_DATA macro directly. Previously this was just supposed
to be used as a helper macro for REMOTE_SMTP_HELO_FROM_DNS.
REMOTE_SMTP_HELO_FROM_DNS overrides a manual REMOTE_SMTP_HELO_DATA data
setting. Closes: #514113
* [README.Debian] Bring documentation for Diffie-Hellman parameters up to
current practice, mainly by deleting most of the outdated docs.
Closes: #508749
* [exim4 init-script]. Modify check for smtp inetd entry to use an anchored
pattern, matching "smtp" but not "smtp-foo". Closes: #516146
* exim4-daemon-light now Provides: default-mta. See #508644.
* Ship both transport-filter.pl and ratelimit.pl in
/usr/share/doc/exim4-base/examples. Closes: #518836
* [lintian] Add ${misc:Depends} to all Depends.
* [lintian] Add override for dbg-package-missing-depends exim4-dbg.
* Sync debian/control with override file by moving *-dbg to section debug.
* Fix grammar error in update-exim4.conf.8. (Thank's, Gerfried Fuchs)
Closes: #525248
[ Christian Perrier ]
* Debconf translations:
- Asturian. Closes: #511624
- Belarusian. Closes: #516049
- Kazakh added. Closes: #520996
- Slovak. Closes: #523447
- Bengali added.
-- Andreas Metzler <ametzler@debian.org> Sat, 02 May 2009 09:05:56 +0200
exim4 (4.69-9) unstable; urgency=medium
* [update-exim4.conf]: Use POSIX character classes [:alnum:] or explicit
listing ("ABCDEF..") instead of a-z, since the latter does not work as
expected in some locales. Closes: #500691
-- Andreas Metzler <ametzler@debian.org> Tue, 30 Sep 2008 20:12:27 +0200
exim4 (4.69-8) unstable; urgency=low
[ Andreas Metzler ]
* Quote last n lines (configurable by changing the value of
E4BCD_PANICLOG_LINES, defaults to 10) of paniclog in warning
email sent out on non-empty paniclog. Closes: #499492
* Fix evaluation logic of E4BCD_WATCH_PANICLOG for sending out warning
e-mails about non-empty paniclog in daily cron-job to match documentation:
+ yes: Send daily warning e-mails, do not touch panniclog.
+ once: Send out the mail and rotate paniclog afterwards.
+ no: Do nothing. (Logfile is rotated when its size reaches 10 MB.)
(Previously the interpretations of "once" and yes were mixed up.)
[ Debconf translations ]
* Catalan. Closes: #499299
-- Andreas Metzler <ametzler@debian.org> Sun, 28 Sep 2008 12:01:39 +0200
exim4 (4.69-7) unstable; urgency=low
[ Andreas Metzler ]
* Sync from ubuntu: Refer to spec.txt.gz instead of spec.txt in
README.Debian.xml.
[ Debconf translations ]
* Korean. Closes: #491518
* Lithuanian. Closes: #497402
* Greek. Closes: #498466
* Esperanto. Closes: #498796
-- Andreas Metzler <ametzler@debian.org> Tue, 16 Sep 2008 19:14:08 +0200
exim4 (4.69-6) unstable; urgency=high
[ Debconf translations ]
* Malayalam. Closes: #479466
* Albanian. Closes: #480282
* Polish. Closes: #481638
* Vietnamese. Closes: #482641
* Turkish. Closes: #482714
* Brazilian Portuguese. Closes: #485384
* Finnish. Closes: #489171
[ Marc Haber ]
* Have timeout.pl print a meaningful error message if perl-modules
is not installed. Have exim4-base recommend perl-modules.
Thanks to Tom Schouten. Closes: #482319
* Create gnutls-params with mode 644 in the first place.
Thanks to Jean-Luc Coulon. Closes: #481765
* Replace ~/.rnd with $HOME/.rnd in exim_gencerts. Thanks to
Ross Boylan for noticing this.
* exim4-config.config: send hostname --fqdn stderr to /dev/null,
we handle errors properly. Thanks to Andrew Vaughan in #481597.
[ Andreas Metzler ]
* Fix typos/other errors in README.Debian.xml. Improve formatting.
(Thank's Georg Neis and Paul Menzel) Closes: #486105, #486106, #486116
* Revert fancy quoting in initscript. Closes: #486667,#482752
(fixes rc-bugs).
* [debian/control README.Debian.xml] Spelling fix ("metapackage" instead of
"meta-package"). Thank's lintian
-- Andreas Metzler <ametzler@debian.org> Sat, 19 Jul 2008 19:56:36 +0200
exim4 (4.69-5) unstable; urgency=low
* remove chmod/chown code from exim4_refresh_gnutls-params completely
* do not remove gnutls-params in exim4-base.postinst
-- Marc Haber <mh+debian-packages@zugschlus.de> Mon, 28 Apr 2008 21:46:18 +0200
exim4 (4.69-4) unstable; urgency=low
* update-exim4.conf: Fix impossible code path in guessed_name check. Ouch.
Thanks to Anand Kumria. Closes: #478066
* Regenerating the 2048 bits DH parameters takes too long for slow
systems, disable (both in the monthly cron job and postinst) and
document that paranoid people will want to regenerate them manually.
-- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 27 Apr 2008 10:06:39 +0200
exim4 (4.69-3) unstable; urgency=low
* The "please do not file duplicate bugs" release
[ Marc Haber ]
* Work around lsb-base regression (#477055, "wontfix") by changing
the way we quote exim's arguments in the init script, hoping that
this does not sacrifice robustness.
Closes: #477194, #477236, #477239, #477258, #477562, #476987
* README.Debian.xml: Fix router/transport pair typo.
Thanks to Georg Neis. Closes: #463573
* Have exim4-base Suggest swaks
* Relax exim4-dbg dependency on eximon4 to a recommends (see #463929).
* 30_exim4-config_check_rcp: Remove mention of /usr/share/doc/exim4-
config/default_acl in favor of exim4-config_files(5).
Thanks to Jon Dowland. Closes: #464539
* Move paniclog log rotation to /etc/logrotate.d/exim4-paniclog to
allow people to manually rotate the paniclog only by calling
logrotate -f /etc/logrotate.d/exim4-paniclog. Thanks to Josip Rodin
(#396003) for this nice idea. Implement E4BCD_WATCH_PANICLOG=once
as suggested by Vasilis Vasaitis.
* activate dlfunc. Closes: #471314
* set LC_ALL=C in debian/rules. Thanks to Michael Meskes. Closes: #471486
* Document that Incredimail's TLS "implementation" breaks on a
certificate request. Thanks to Andrew McGlashan. Closes: #459323
* Fix parenthesis mismatch in README.Debian
* exim4_refresh_gnutls-params: Call openssh dhparam with
HOME=$EXIM4_SPOOLDIR so that openssl's .rnd file is placed there.
* update-exim4.conf: print a warning if dc_minimaldns and hostname
--fqdn does not print a fully qualified name. Thanks to Lothar
Ketterer. Closes: #476249
* DH parameters handling: Closes: #475194
* add dpatch to have exim use 2048 bit DH parameters
* ship static gnutls-params file with the package.
* Override resulting lintian warning.
* generate new gnutls-params only monthly and in postinst on configure.
* exim4_refresh_gnutls-params:
* generate 2048 bit DH parameters
* dh-params file can be world readable
* Filter out noise from mainlog before handing it off to eximstats
in daily cron job. Thanks to Justin Pryzby. Closes: #476541
* Move docs from Apps/Net to Network/Communication
* linda R.I.P.
[ Robert Millan ]
* Process acl_local_deny_exceptions ACL before rejecting a message in SPF
check. Thanks to Miklos Szeredi. Closes: #451633
[ Andreas Metzler ]
* Fix typos in exinext's man page (/s/eximnext/exinext/). (Thanks,
Filipus Klutiero) Closes: #471113
* exiwhat: Check at runtime whether killall is available. Fall back to a
combination of 'ps ax' and regular kill otherwise.
Closes: #476455
* Fix wrong logic in testing for existence of lsb-base functions in init
script. (Thanks, Tim Cross) Closes: #477578
-- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 26 Apr 2008 00:00:30 +0200
exim4 (4.69-2) unstable; urgency=low
[ Marc Haber ]
* update-exim4.conf: fix bashism echo -n in preprocess_macro.
Thanks to Michal Politowski. Closes: #462173
[ Christian Perrier ]
* Debconf translations updates:
- German. Thanks to Eric Schanze. Closes: #462673
[Andreas Metzler]
* Add missing .P to exim_db.8 to fix indenting. (Thanks, David L. Anselmi)
Closes: #462712
* Add (disabled) patch to save random seed to a file
-- Marc Haber <mh+debian-packages@zugschlus.de> Wed, 30 Jan 2008 09:26:56 +0100
exim4 (4.69-1) unstable; urgency=low
[ Marc Haber ]
* New upstream version.
- improve --help handling. Closes: 438435
* Debconf translations updates:
- Dutch. Thanks to Bart Cornelis. Closes: #448924
- Norwegian Bokmål. Thanks to Hans Fredrik Nordhaug. Closes: #452383
- Slovak. Thanks to Peter Mann. Closes: #460502
- Catalan: fix some semicolon issues and most obvious fuzzy strings.
Thanks to Jordà Polo. Closes: #447765.
* Add support for smtp_accept_max_nonmail_hosts to ease external
relay testing.
* Make Change to init script dependencies as suggested by Petter
Reinholdtsen. Closes: #460229
* debian/control:
* Add Homepage field to Source Package stanza.
* Standards-Version: 3.7.3 (no changes necessary)
* lintian/overrides:
- Override all description-contains-homepage messages,
we're going to keep this field around until post-lenny.
- Override exim4-daemon-heavy: package-contains-empty-directory
usr/lib/exim4/local_scan/, the directory should be there to show
people where to put local extensions (and I am not sure how exim
behaves if that directory is not there).
* linda/overrides:
- Override menu section Applications, which is a false alert.
- Override complaint about newer standards version.
- This override does not work due to #386647
* exim4-base.NEWS: fix Debian's typo
* exim4-base.dirs: remove usr/bin, we do not ship any files there.
* Generate exim macros from every definition found in ue4cc that
starts with a capital letter (sans CFILEMODE) to cater for an
obviously very common user error. This feature is going to stay
undocumented.
[ Christian Perrier ]
* Debconf translations updates:
- Dzongkha. Thanks to Tenzin Dendup. Closes: #455871
- Slovak. Thanks to Peter Mann. Closes: #460502
[ Andreas Metzler ]
* Fix typo in acl/20_exim4-config_local_deny_exceptions. (Thanks, Roderick
Schertler) Closes: #456343
-- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 22 Jan 2008 09:19:14 +0100
exim4 (4.68-2) unstable; urgency=low
[ Marc Haber ]
* Fix changelog: lowuid router does not close #420217. Closes: #440217
[ Andreas Metzler ]
* Mention /etc/exim4/exim4.conf in FILES section of update-exim4.conf.8.
* Fix syntax error in real-local router. Closes: #446346
* Configuring exim as configtype="internet host" asks a different set of
questions than e.g. satellite. However some of the settings controlled by
these hidden questions still have effects on exim's behavior. Change
exim4-config to ask these hidden questions if they have been set to a
non-default value. (Either manually, or by switching configtype after
setting the values.) Closes: #443210
These questions have been added conditionally:
- internet site with smarthost:
+ dc_relay_domains
- satellite
+ dc_relay_domains
+ dc_localdelivery
-- Marc Haber <mh+debian-packages@zugschlus.de> Thu, 01 Nov 2007 19:17:36 +0100
exim4 (4.68-1) unstable; urgency=low
* new upstream version. Closes: #444195
* Documents tls_verify_hosts during TLS sessions. Closes: #422419
* new example.conf md5 sum
* Move lowuid router to a later place, handle real- only for
locally generated messages. Thanks to Andreas Metzler and others
on pkg-exim4-devel. Closes: #440217
* /etc/init.d/exim4:
* Use start_daemon and killproc from lsb-base
as a new plunge at #396944
* Do not clean the environment as severly as before (functions
need to survive).
* README.Debian:
* Document that using client certificates needs extra
configuration. Thanks to John Goerzen. Closes: #440663
* conf.d/main/03_exim4-config_tlsoptions: Make it clear that this
file only concerns exim as an SMTP server.
* exim4-config.preinst: Add EX4DEBUG facility, add rm_conffile
function
* Rename acl_whitelist_local_deny to acl_local_deny_exceptions
as suggested by Ross Boylan. Closes: #387078.
* Switch Build-Depends to db4.6. Closes: #442645
* Debconf translations updates:
- Portuguese. Thanks to Miguel Figueiredo. Closes: #441895, #445494
- Norwegian Nynorsk. Thanks to Håvard Korsvoll.
* exim4-config.NEWS: Explicitly mention that .dpkg-old and
.dpkg-dist files are included in the DEBCONFsomethingDEBCONF check to
allow lazy people to only grep the docs instead of actually reading
them. This was requested by Hamish Moffatt in #445327.
-- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 07 Oct 2007 21:38:22 +0200
exim4 (4.67-8) unstable; urgency=low
[ Marc Haber ]
* Define REMOTE_SMTP_HELO_DATA and REMOTE_SMTP_HELO_FROM_DNS macros
to have exim pull its HELO name from DNS automatically.
Thanks to Jari Aalto and Magnus Holmgren. Closes: #275975
* Enable DNSDB in exim4-daemon-light (needed by the HELO magic)
* update-exim4.conf: Allow [] in ascii strings (needed for @[])
* Improve domain literal docs
* Remove debconf template noalias_regenerate
* Fix PRIMARY_HOSTNAME typo in main/02_exim4-config_options.
Thanks to Tim Krah. Closes: #434337
* fix alphabet salad in README.Debian. Closes: #434640
* Add E4BCD_DAILY_REPORT_TO to daily cron job.
Thanks to Florian Schlichting. Closes: #426840
* Fix /etc/exim paths in exim4-config_files(5).
Thanks to Marques Johansson.
* Debconf translations updates:
- Japanese. Closes: #433070
- Spanish. Thanks to Javier Fernández-Sanguino Peña. Closes: #433084
- Thai. Thanks to Theppitak Karoonboonyanan. Closes: #433177
- Arabic. Thanks to Ossama Khayat. Closes: #433222
- Hebrew. Thanks to Baruch Even. Closes: #433291
- Italian. Closes: #433200
- Galician. Closes: #433218
- Portuguese. Thanks to Miguel Figueiredo. Closes: #433293
- Hungarian. Thanks to Josip Rodin. Closes: #433336
- Punjabi. Thanks to Amanpreet Singh Alam. Closes: #433578
- Marathi. Thanks to Priti Patil.
- Wolof. Thanks to M Mamoune Mbacke. Closes: #433701
- Indonesian. Thanks to Arief S Fitrianto. Closes: #433758
- Romanian. Thanks to Eddy Petrisor. Closes: #433854
- Nepali. Thanks to shyam krishna bal. Closes: #435345
- Swedish. Thanks to Daniel Nylander. Closes: #435705
[ Andreas Metzler ]
* Update eximon menu file for menu 2.1.35 hierarchy.
[ Christian Perrier ]
* Fix typo in README.Debian.xml. Thanks to <shaulka@012.net.il>
Closes: #434961
-- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 19 Aug 2007 09:25:10 +0200
exim4 (4.67-7) unstable; urgency=low
* only generate HIDE_MAILNAME macro if its value is really non-empty
-- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 14 Jul 2007 08:47:40 +0200
exim4 (4.67-6) unstable; urgency=low
* Add some more debugging output to maintainer scipts, hopefully
nailing #396944 which has surfaced again.
* Improve wording in NEWS.Debian for exim4-config.
Closes: #431019, #431130
* Issue DEBCONFfooDEBCONF warning as well for
DEBCONFheaders_rewriteDEBCONF.
Thanks to John Goerzen. Closes: #431088
* fix localhost inserted twice into local_domains. Closes: #432394
* fix MAIN_RELAY_TO_DOMAINS in update-exim4.conf.
Thanks to Ben Wheeler. Closes: #432521
* Document that special handling is needed for host lists that only
consist of a single IPv6 address. Thanks to Frederic Daniel Luc
Lehobey. Closes: #432229
* Add forgotten (conditional) definition of REMOTE_SMTP_HEADERS_REWRITE
and REMOTE_SMTP_RETURN_PATH for remote_smtp transports.
Thanks to Miguel Martins Feitosa Filho. Closes: #432716
* Debconf translations
* Bulgarian completed. Closes: #431957, #430521
* Update Tamil. Thanks to Tirumurti Vasudevan. Closes: #432181
* Update Spanish.
Thanks to Javier Fernández-Sanguino Peña. Closes: #429940
-- Marc Haber <mh+debian-packages@zugschlus.de> Fri, 13 Jul 2007 22:22:09 +0200
exim4 (4.67-5) unstable; urgency=low
* the "verderben viele Koeche den Brei?" release
[ Andreas Metzler ]
* Point to exim4_passwd(5) instead of non-existing exim_passwd(5) in AUTH
section of configuration. (Thanks Arkadiusz Dykiel, #430149)
* update-exim4.conf check_ascii_pipe(): Accept < since we use it for list
construction. Closes: #430391
* Anchor UPEX4CmacrosUPEX4C in update-exim4.conf
[ Robert Millan ]
* Update informational message in SPF ACL to use the latest
http://www.openspf.org/Why API.
[ Debconf translations ]
* French completed and converted to UTF-8
* All remaining non UTF-8 translation switched to UTF-8
[ Marc Haber ]
* do not quote error message in lowuid router
* replace commented UPEX4CmacrosUPEX4C with UPEX4CmacrosUPEX4C exim
configuration macro definition as placeholder for ue4c-generated macros.
[ Christian Perrier ]
* Correct the invalid ${fqdn} variable in exim4-config.templates
-- Marc Haber <mh+debian-packages@zugschlus.de> Thu, 28 Jun 2007 09:22:04 +0200
exim4 (4.67-4) unstable; urgency=low
* update-exim4.conf:
* fix embarrassing typo in update-exim4.conf that broke macro
expansion for two values.
Thanks to Andrew Chittenden. Closes: #429828
* Allow ! and * in ue4cc.
Thanks to Dieter Hametner and Raf D'Halleweyn. Closes: #429986
* have @ and localhost added to local_domains list.
Thanks to a big number of people. Closes: #429939
* eliminate -e && chmod construct as a possible cause of #429617.
Thanks to Martin Ketzer and Silvestre Zabala
* Now barfs if DEBCONFsomethingDEBCONF is still found in the
configuration file. Thanks to a truckload of users who were too lazy
to read the docs, did not accept the suggested configuration file
changes and then complained about a non-working exim ("malformed macro
definition")
* README.Debian: Document the new low-UID handling mechanism.
Thanks to Johannes Rohr. Closes: #429878
* debian/rules: do not ignore make clean errors
* Debconf translation updates:
- Basque. Closes: #429626
- Czech.
- Brazilian Portuguese. Closes: #429867
-- Marc Haber <mh+debian-packages@zugschlus.de> Fri, 22 Jun 2007 13:55:15 +0200
exim4 (4.67-3) unstable; urgency=low
[ Andreas Metzler ]
* Initialize permissions of bug-script and exim-adduser as 755, since diff
does not preserve permissions. Both were shipped as 644 in binary packages
not built with svn-buildpackage. Closes: #420446
[ Marc Haber ]
* Merge experimental changes from revision 2018:2073
* Fix "Zahlendreher" in closure of #427690. Closes: #427690
* update-exim4.conf:
* finally get rid of the DEBCONFfooDEBCONF stuff. That information
is now passed to the configuration by ue4c by directly setting exim
macros in the configuration. This has caused both the configuration
and ue4c to be much shorter.
* run with -e, -C and -u.
* convert input read from update-exim4.conf.conf to lower case
* barf if strange characters are found in ue4cc. Closes: #400294
* Remove superfluous "x$foo" = "xbar" constructs from scripts
* Add routers to reject mail to accounts with low UID.
Closes: #400790.
* Make daily cron job barf if /usr/bin/mail is not found. Have
exim4-base recommend mailx. Closes: #427690
* Have all -daemon packages provide exim4-localscanapi-1.0 and
exim4-localscanapi-1.1 as requested by Magnus Holmgren while fixing
#426425. Also include exim4-localscan-plugin-config script with
exim4-dev. Thanks to Magnus for helping with this. Closes: #428274
* remove /etc/exim4/email-addresses symlink and document this.
Thanks to Josip Rodin. Closes: #420578
* introduce conf.d/250_exim4-config_lowuid which optionally allows
to reject (or alias away) mail to low-uid accounts that are not
listed in an exception list. Thanks to Dominic Hargreaves,
Marc Sherman and Ross Boylan. Closes: #400790, #307768, #331716
* remove versioned depends on cron, since the version we need is
well before sarge.
* Add cron | fcron dependency. Fcron is going to be removed again
at the first sign of trouble. Closes: #381806
* remove move_exim3_spool debconf template. Closes: #391762
* replace openssl gendh with openssl dhparam. Closes: #413235
* adapt docs, README and manpages
* have Hilko fix the lynx-dump postprocessing to repair generating
README.Debian text version. Thanks!
* increase README.Debian generation robustness. Thanks to Hilko.
* debconf:
* Partly apply Christian Perrier's patch for reviewed
templates and control file. Closes: #426980
* Other minor template changes.
* get rid of "mails" in debconf templates, use "messages" instead.
Re-word local_interface debconf template. Other minor changes.
Thanks to Jens Seidel and Christian Perrrier. Closes: #394976
* re-work exim4-config.config logic to have split/non-split config
asked last instead of first. This partly addresses #410756.
* Add exim4-daemon-heavy.templates, exim4-daemon-light.templates
and exim4.templates to POTFILES.in
* Re-Word dc_other_hostnames debconf template.
Thanks to Hans G. Ehrbar. Closes: #421860
[ Christian Perrier ]
* Debconf translation updates:
- French
- Ukrainian. Closes: #427793
- Bulgarian.
- Thai.
- Galician.
- Swedish.
- Punjabi.
- Indonesian.
- Italian.
- Khmer.
- Traditional Chinese. Closes: #428072, #428069.
- Portuguese.
- Simplified Chinese.
- Marathi
- Romanian. Closes: #429242
- Russian. Closes: #429352
-- Marc Haber <mh+debian-packages@zugschlus.de> Mon, 18 Jun 2007 10:26:20 +0200
exim4 (4.67-1) unstable; urgency=low
[ Marc Haber ]
* new upstream version
* remove 37_upstream-patch-384015-add_headers
* remove 80_disable_rsa_export
* remove 80_upstream_408174_4-64-PH18
* EDITME patch changes to allow for 4.67
* enable dovecot authentication
* Upstream patch from Magnus Holmgren included upstream.
Thanks to Simon Walter. Closes: #407957
* Upstream patch PH/18 included upstream.
Thanks to Marc Schiffbauer. Closes: #408174
* merge experimental changes
* exim man page patch changes for 4.67
* robustness patches for
* create-custom-package
* exim-gencert
* exim4-base.config
* exim4-base.postinst
* exim4-config.config
* exim4-config.postinst
* exim4-daemon-light.postinst
* update-exim4defaults
* replace backticks with $() notation
* Add patch to 50_localscan_dlopen to reduce dynamic symbol table.
Thanks to Magnus Holmgren. Closes: #413602
* remove woody compatibility hacks from
* exim4-daemon-light.postinst
* exim4-config.postinst
* Fix eximnext => exinext in man page.
* README.Debian:
* add warning to "IP addresses for incoming connections" section.
* add new chapter about how to influence exim's behavior.
* add missing closing bracket. Thanks to Martin Schwarz. Closes: #419700
* update-exim4.conf(8):
* clarify update-exim4.conf about how ue4cc and exim configuration
interface
* remote_smtp_smarthost transport: make hosts_try_auth host list
semicolon-separated to correctly handle IPv6
* multiple minor changes to lintian overrides
* debian/control: have exim4 depend on debconf (>= 1.4.69) | cdebconf
(>= 0.39) explicitly to allow usage of debconf error template type.
[ Christian Perrier ]
* Esperanto debconf translation update (Serge Leblanc). Closes: #415590
* Marathi debconf translation added (Priti Pathil). Closes: #416801
-- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 21 Apr 2007 11:48:48 +0200
exim4 (4.63-17) unstable; urgency=low
* 30_exim4-config_examples: add missing backslash in non-TLS client
login authenticator. Thanks to Kai Weber. Closes: #407567
-- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 20 Jan 2007 10:38:16 +0100
exim4 (4.63-16) unstable; urgency=low
* Add ta (Tamil) translation of Tirumurti Vasudevan
Closes: #406974
* exim4_refresh_gnutls-params: allow EXIM4_SPOOLDIR to be overridden from
the environment. Closes: #406989
* Re-work client authenticators to handle passwords containing
colons and circumflexes. Thanks to Steaphan Greene. Closes: #406686
* transport/30_exim4-config_remote_smtp_smarthost: feed
hosts_try_auth from $host and $host_address, avoiding issues with
round-robin DNS setup.
Thanks to Celejar and Heiko Schlittermann. Closes: #403583
-- Marc Haber <mh+debian-packages@zugschlus.de> Thu, 18 Jan 2007 21:10:34 +0100
exim4 (4.63-15) unstable; urgency=low
* keep config.h from being installed in exim4-base.
Thanks to Aaron M. Ucko. Closes: #405824
-- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 6 Jan 2007 22:12:05 +0100
exim4 (4.63-14) unstable; urgency=low
* patch LOCAL_SCAN_ABI_VERSION to 1.1 in 50_localscan_dlopen after
consulting with Magnus Holmgren.
* Fix update-exim4.conf.8 manpage
* FILES section is no longer doubled
* NAME is no longer multi-line
* proper reference to ue4cc in FILES section
* Thanks to Angus Mackenzie
* debian/rules
* allow buildbasepackages and extradaemonpackages to be set from
the environment
* fix buildbasepackages=no and extradaemonpackages which were
broken due to the new -dev binary package
* remove "" in various places, this is Make not shell
* add optional debugging output for variables that are meant to be set
externally
* clean now unpatches first, otherwise clean fails because files
are first deleted and then non-existing files are unpatched
* take config.h from first non-light daemon package built instead
of -heavy (we might not be building -heavy but still need -dev)
* Thanks to Gerfried Fuchs for actually using these features and
finding this bug group.
* exim4.init: Now returns 0 when starting and daemon already
running, and when stopping and daemon already stopped. This fixes LSB
compliance. Thanks to Heiko Schlittermann. Closes: #404182
-- Marc Haber <mh+debian-packages@zugschlus.de> Fri, 5 Jan 2007 16:34:58 +0100
exim4 (4.63-13) unstable; urgency=low
* Fix mangled sense in /etc/aliases exim4-config_files(5) man page.
Thanks to Angus Mackenzie.
* [update-exim4.conf.8] exim4-config_files manpage is in section 5 instead
of 8. Thanks to Angus Mackenzie. Closes: #404494 (am)
* Clarify /etc/exim4/passwd.client host name lookup to go after the
reverse DNS entry in exim4-config_files(5) man page.
* Update uk (Ukrainian) translation of debconf templates.
Thanks to Eugeniy Meshcheryakov and Yanovych Borys. Closes: #404481
* Update sl (Slovenian) translation of debconf templates.
Thanks to Matej Kovacic. Closes: #404481
* merge in experimental changes:
* create exim4-dev package for sa-exim and other packages. Closes: #401462
* fix broken usage of DPATCH_WORKDIR (dpatch-edit-patch didn't
work with tarballed upstream)
* don't use DPATCH_WORKDIR any more
* modify patches to apply to build-tree
* remove leftover debugging output from debian/patches/00_unpack.dpatch
-- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 2 Jan 2007 14:43:59 +0100
exim4 (4.63-12) unstable; urgency=low
* exim4-base.postinst: Redirect command -v's stdout to /dev/null
* update-exim4.conf: add lots of quoting to increase robustness.
Thanks to Paul Slootman. Closes: #403605
* Debconf templates translation updates and new translations:
- Esperanto
- Norwegian Nynorsk (Håvard Korsvoll).
- Punjabi (A.S. Alam).
- Malayalam (Praveen A). Closes: #402541
- Italian (typos corrected by Davide Viti). Closes: #403199
- see Last-Translator for rewards)
-- Marc Haber <mh+debian-packages@zugschlus.de> Wed, 20 Dec 2006 14:23:57 +0100
exim4 (4.63-11) unstable; urgency=low
* Remove patch to spec.txt for pkg-exim4-users, it is included
upstream. No idea why this patch even applied correctly.
* README.Debian:
* Fix wrong pidfile name
* Move FAQ to the Wiki
* Adapt "Using completely different configuration scheme" to also
mention /etc/exim4/exim4.conf.
* Move titles in the same line as the section statement, making it
easier to work with a code folding editor.
* exim4_files(5): fix recommended permissions for passwd[.client].
Thanks to Georg Neis. Closes: #398365
* Remove temporary gnutls parameters file if neither certtool nor
openssl are installed. Closes: #399023
* Fix path to gnutls-params file in exim4-base.postinst.
Thanks to J.L. Fernandez. Closes: #400794
* Translation updates (see Last-Translator for rewards).
- Punjabi (not yet complete)
- Hebrew (not yet complete)
- Portuguese. Closes: #399242
* merge changes from experimental:
* enable sqlite for exim4-daemon-heavy.
Thanks to Adrian Phillips. Closes: #398718
* Add Build-Dependency on libsqlite3-dev.
Thanks to Frank Lichtenheld. Closes: #398880
* Build-Depends
* add po-debconf
* add bzip2
* debian/rules:
* run debconf-updatepo in clean targets
* adapt build system to allow direct building from an upstream tarball
* needs tardy at build time on sarge, but not on newer distributions
* use dpatch-run for patches instead of locally programmed handling
* add lintian overrides:
* partially-translated-question exim4/dc_eximconfig_configtype for
cy, eo, et, he, mk, nn, pa, pl, sl, tl, uk - translators, move!
* possible-debconf-note-abuse config:15 */drec
* remove gratuitous exim4-daemon-heavy.postinst
(it is symlinked at build time)
-- Marc Haber <mh+debian-packages@zugschlus.de> Fri, 1 Dec 2006 11:16:34 +0000
exim4 (4.63-10) unstable; urgency=low
* The "praise Osamu Aoki" release.
* Translation updates (see Last-Translator for rewards).
- Dutch. Closes: #396725
* README.Debian:
* Add information about how to obtain reportbug information for
mailing list questions.
* Point people directly to passwd.client man page instead of the
file itself. Thanks to Osamu Aoki.
* Re-work the /etc/aliases section.
* Improve smarthost description in update-exim4.conf(8) man page.
Give examples. Thanks to Osamu Aoki.
* include documentation for /etc/aliases in exim4-config_files(5)
man page. Symlink to etc-aliases(5).
Thanks to Osamu Aoki. Closes: #397042
* Change symlink of exim4-config_files(5) to email-addresses(5) to
point to etc-email-addresses(5) for consistency.
* Use nwildlsearch to index into passwd.client to allow wildcards
here. Thanks to Osamu Aoki. This is another pain relief for #244724.
* use printf instead of echo in daily cron job.
Thanks to Ming Hua. Closes: #395448
* Add de-uglyfication request to man pages.
-- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 5 Nov 2006 10:36:28 +0000
exim4 (4.63-9) unstable; urgency=low
* Fix a spelling error in templates: s/adviseable/advisable
Thanks to Jens Seidel for spotting it
* Translation updates (see Last-Translator for rewards).
- Bosnian. Closes: #396592
- Bulgarian. Closes: #396558
- Greek.
- Lithuanian. Closes: #396478
- Norwegian Bokmål. Closes: #391768
- Wolof. Closes: #395944
* Have ue4c barf on more lookup types found in more ue4cc fields,
courtesy to regexp from hell.
-- Marc Haber <mh+debian-packages@zugschlus.de> Thu, 2 Nov 2006 18:07:24 +0000
exim4 (4.63-8) unstable; urgency=low
* Translation updates (see Last-Translator for rewards).
- Albanian. Closes: #394725
- Arabic
- Basque
- Catalan
- Chinese (Simplified)
- Chinese (Traditional)
- Croatian
- Czech
- Dzongkha
- Finnish. Closes: #393644
- German
- Italian.
- Korean. Closes: #394235
- Nepali
- Norwegian Bokmal. Closes: #394270
- Portuguese
- Romanian
- Russian.
- Slovak
- Turkish
* README.Debian
* remove wiki references from README.Debian
* remove dc_local_delivery FAQ entry since this is now debconfized
* Fix typos, replace "documented below" with a direct link.
Thanks to Olaf van der Spek. Closes: #394617
* exim4-config.templates
* Fixed typo: s/arbitrary/arbitrarily
* Extra space removed at the end of a line. Closes: #394569
* Change references to inexistent README.Debian.html and README.Debian,
both replaced by README.Debian.gz. Thanks to Eric Schanze for spotting
this.
* Various English use changes suggested by Jens Seidel. Closes: #394651
* update-exim4.conf: Fix wrong behavior if a debconf list answer already
starts with "<". Thanks to Vineet Kumar. Closes: #393843
* conf.d/main/02_exim4-config_options: Use upstream's wording for
rfc1413 configuration, fix wrongly commented timeout value.
Thanks to Andre Bischoff on IRC.
* conf.d/transports/35_exim4-config_address_directory: Add
delivery_date_add, streamline other options' syntax.
Thanks to Dominic Hargreaves. Closes: #393930
* Remove commented out inetd entries from maintainer scripts, we are
not going to support inetd again.
* Zap gnutls-params in postinst if old binary format is detected.
Exim cannot read that file any more since RSA_EXPORT has been removed.
Always kill the file if file(1) is not present, recommend file(1).
Thanks to John Goerzen. Closes: #394598
-- Marc Haber <mh+debian-packages@zugschlus.de> Mon, 23 Oct 2006 20:49:46 +0200
exim4 (4.63-7) unstable; urgency=low
* Translation updates (see Last-Translator for rewards). Closes: #391768
- Brazilian Portuguese
- Danish. Closes: #392548
- Galician
- Hungarian
- Indonesian
- Japanese
- Spanish
- Thai
* Do not ask for local delivery method if custom entry (i.e. neither
maildir_home nor mail_spool) has bin set in update-exim4.conf and continue
to use this custom setting instead of overwriting it with mail_spool. (am)
Closes: #392993
* Special-case "dsearch;" constructs in dc_other_hostnames, no
longer supported. Adapt documentation accordingly.
* Adapt docs and man pages so that they do not longer suggest that
answers to debconf questions might use all exim
host/address/domain list features.
* fix ue4c to handle more than one smarthost correctly.
* Handle spaces, commas and semicolons as separator in root alias
handling.
* Wolof translation contained a comma in the translation of a element of the
Choices list for the dc_eximconfig_configtype question, replace it with a
semicolon. (am)
-- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 14 Oct 2006 23:45:17 +0000
exim4 (4.63-6) unstable; urgency=low
* s/ipv6/IPv6 in templates (general writing consistency)
* Translation updates (see Last-Translator for rewards)
- Arabic (partial)
- Basque (partial)
- Croatian (partial)
- Greek (partial)
- Khmer
- Spanish (partial)
- Swedish
- Vietnamese. Closes: #392772
* README.Debian:
* Fine tuning of SMTP AUTH and TLS docs after user feedback
received over $BEVERAGE irl.
* Adapt configuration chapter to re-worded templates.
* Fix exim4_files man page names to not pollute name space.
* Clarify exim4-config_files man page to reflect that the host name
given there does not actually influence the routing decision.
Thanks to Sven Luther.
* Fix list separator handling for dc_other_hostnames in ue4c.
Thanks to Alexandre Fayolle. Closes: #392831
-- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 14 Oct 2006 07:40:05 +0000
exim4 (4.63-5) unstable; urgency=low
* define MAIN_LOG_SELECTOR conditionally.
Thanks to Aaron M. Ucko. Closes: #390758
* Fix typos in man pages. Thanks to A. Costa.
Closes: #390705, #390706, #390707
* Address #373786:
* cron.daily: Try UID change with start-stop-daemon, and fall
back to su if that fails. This should enhance compatibility
with libpam-tmpdir.
* exim4_refresh_gnutls-params: don't drop privileges any more,
generate gnutls-params as root and chown them later.
* Thanks to Piotr Kaczuba and Tollef Fog Heen. Closes: #373786
* Add debugging facility to exim4_refresh_gnutls-params
* Debconf-Rework
* update-exim4.conf: expand UE4CC_semicolon list to allow
semicolons in all debconf questions as list separators for consistency.
* Do template changes suggested by Christian Perrier. Closes: #260141
* new mail name template thanks to Jari Aalto. Closes: #275953
* relay templates changes thanks to Ross Boylan. Closes: #342061
* remove conftype exim3manual. Closes: #355265
* use semicolon as list separator in debconf templates. ue4.conf
handles both semicolons and colons since #360162. Thanks to Adam
Borowski. Closes: #365428
* Make existing templates style-compatible regarding developer's
reference.
* Lower priorities so that the Installer can do its work without
exim4 asking questions. Closes: #379485
* Modify templates saying that smarthost::port is a valid
notation. Modify transport/30_exim4-config_remote_smtp_smarthost to
take only the first part of DCsmarthost (up to first colon) as host
name for hosts_try_auth. This allows debconf configuration of a
different port to connect to the smarthost. Closes: #251949
* Add debconf template to packages telling people to dpkg-reconfigure
exim4-config.
* Allow choosing between delivery to /var/mail or ~/Maildir with debconf.
(am) Closes: #250980, #274560, #289959
* Translation updates (see Last-Translator for rewards)
- Brazilian Portuguese
- Danish
- Galician
- Slovak
- Thai
- Turkish
- Romanian
- Japanese
- French
* Patch by Florian Weimer which disables RSA_EXPORT support which
should eliminate the "exim blocking on entropy starvation" issue.
* update-exim4.conf: Take only the first word from /etc/mailname as
system mail name. Thanks to Mike Mestnik. Closes: #215319.
* init script: log_failure_message alert if non-zero paniclog is
found. Thanks to Andreas Barth.
* README.Debian: document cron job, including paniclog monitoring.
Thanks to Stephen Gran.
-- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 10 Oct 2006 16:50:27 +0000
exim4 (4.63-4) unstable; urgency=low
* Make update-exim4.conf man page also update-exim4.conf.conf man page.
* Fix SPF error message when $sender_address_domain is undefined (i.e. sender
is <>). (rm)
* Change debian/rules documentation for daemon-custom build.
Thanks to Guido Hennecke. Closes: #386135
* Rotate paniclog by size, not daily, to avoid rotating away
messages after complaining from the daily cron job.
Thanks to Dirk Meyer.
* Update Slovak translation.
Thanks to Peter Mann.
* Add Wolof translation.
Thanks to M Mamoune Mbacke
* Add a paragraph explaning the gnutls-bin suggestion to ease DH
parameter generation in case of entropy starvation.
Thanks to Andi Barth and Florian Weimer.
* Since a new version of sysvinit upload will move /var/run/ to a tmpfs
directories under /var/run/ and their permissions are not persistent
anymore but will be lost after a reboot. - Re-generate /var/run/exim4 in
the init script to compensate for this. (am) (closes: #387699)
* update-exim4.conf: Exit with an error if dc_use_split_config is neither
true nor false instead of replacing the configuration with an empty one.
(am) Closes: #386554
* More intelligence for exim4_refresh_gnutls-params:
* If certtool (from gnutls-bin) is unavailable but openssl is installed
use openssl to re-generate DH params. (am)
* Change exim4-base Suggests on gnutls-bin to gnutls-bin|openssl. (am)
* Move invocation and background mechanism to exim4_refresh_gnutls-params.
Script can now be called any time from the command line or any
other script.
* Only regenerate dh params if tls_advertise_hosts is non empty.
According to Florian Weimer, DH params are only needed for
incoming TLS connections.
* Thanks, Yuri D'Elia. This addresses #387448
* Improve entropy and gnutls-params docs.
* cron-daily:
* Invoke exim4_refresh_gnutls-params unconditionally.
* Send out e-mail alert if gnutls-params is older than 14 days.
* rename config varables to E4BCD_, source /etc/default/exim4
* introduce a E4BCD_PANICLOG_NOISE variable containing a regexp.
Paniclog is negatively filtered against that regexp and paniclog
warning is only sent out if unfiltered lines remain. This is to allow
work around http://www.exim.org/bugzilla/show_bug.cgi?id=92
* Prepare hosts_avoid_tls statement on SMTP transports
* Macroize log_selector, remove +tls_cipher from examples (it is on
by default) and always set tls_peerdn (we use TLS by default for
outgoing connections). Make it easier to enable debug logging.
* Mention in the comments of the default RCPT ACL that verification
is likely to have false negatives in smarthost/satellite setups. This
is the easiest way to fix #388460; the "real" fix would be very very
complicated and thus unsuitable for the default configuration.
Closes: #388460
* README.Debian:
* Re-Work "misc" section to contain subsection. Fix minor
formatting issues.
* Add a section about SELinux to the misc subsection saying that
we currently do not have an SELinux policy but would appreciate
people helping here. This is already bug #387327 and #390179.
-- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 1 Oct 2006 14:37:53 +0000
exim4 (4.63-3) unstable; urgency=low
* Have exim4-config conflict with exim4-daemon-* << 4.63.
Thanks to Yannick Roehlly. Closes: #383420, #384058
* Tweak NEWS.Debian formatting. Remove asterisks and make sure that
contents lines start with four spaces.
* exim4-config.NEWS: A pair of minor fixes in SPF entry. (rm) Closes: #383708
* Apply upstream fix allowing header names with an odd number of
characters in add_headers in filters.
Thanks to Tony Finch. Closes: #384015
* Add documentation for inaccessible home directories.
Thanks to Juha Jäykkä. Closes: #383469
-- Marc Haber <mh+debian-packages@zugschlus.de> Wed, 23 Aug 2006 17:16:38 +0000
exim4 (4.63-2) unstable; urgency=low
* upload to unstable
-- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 15 Aug 2006 20:35:55 +0000
exim4 (4.63-1) experimental; urgency=low
* New upstream version 4.63
+ Change PostgreSQL charset handling. Closes: #369351
+ Recognize SMTP codes at the start of "message" in ACLs and after
:fail: and :defer: in a redirect router. Add forbid_smtp_code to
suppress the latter. forbid_smtp_code is enabled in Debian's
default config. Closes: #378131
* Adapt configuration to current upstream
+ re-work RCPT ACL. Closes: #379155
+ add new comments to default authenticators
+ use $auth[123] instead of $[123] which are now deprecated
+ forbid_smtp_code on userforward router
* Add missing dependency on lsb-base (>= 3.0-3), needed for the new
init-script shipped in exim4-base. (am)
-- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 1 Aug 2006 10:47:44 +0000
exim4 (4.62-5) unstable; urgency=low
* Fix typo in exim4-base daily cron job.
Thanks to Salvatore Bonaccorso. Closes: #381048
* Fix language issues in package descriptions
-- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 8 Aug 2006 15:02:14 +0200
exim4 (4.62-4) unstable; urgency=low
* Add missing dependency on lsb-base (>= 3.0-3), needed for the new
init-script shipped in exim4-base. (am)
-- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 1 Aug 2006 11:03:57 +0000
exim4 (4.62-3) unstable; urgency=low
* remove pkg-exim4-user mail address from README.Debian, mention
that one needs to be subscribed to post.
Thanks to Ross Boylan. Closes: #368242
* re-word -o description in update-exim4.conf(8) man page.
Thanks to Ross Boylan.
* Flag update-exim4.conf(8) man page for a re-work in its BUGS
section.
* Give a - hopefully - better explanation of the mail name thingy in
README.Debian.
* Fix occurrences of default_acl file in documentation. Make part of
README.Debian less confusing.
Thanks to Ross Boylan. Closes: #376459
* When installing via apt using dpkg-preconfigure the value of
dc_hide_mailname was overwritten during the second run of the debconf
script (invoked by postinst), before the value was stored in the
configuration file. Fix this. (am) Closes: #376460
* Make spamassassin example in 40_exim4_config_check_data actually
work, add link to documentation for "really suiteable" configuration
examples. Thanks, again, to Ross Boylan.
* remove left-over "and a bunch" sentence from exim4-config_files.5
* Add a symlink from /etc/email-addresses to /etc/exim4/email-addresses
* Fix bad parsing of CHECK_RCPT_DOMAIN_DNSBLS.
Thanks to Robert Millan. Closes: #378581
* Note in README.Debian that other parts of the Debian system might
give outdated and/or wrong advice. See #378684, #378685.
* SPF support: (rm) Closes: #290464
* Add (disabled) template to check SPF in 30_exim4-config_check_rcpt.
* Add libmail-spf-query-perl (>= 1.999-1) to Suggests.
* Rewrite Q/A about SPF from README.Debian.
* Add a small note to exim4-config.NEWS.
* Add conf.d/acl/30_exim4-config_check_mail to reject mail without HELO/EHLO.
(rm) Closes: #378935
* Add LSBized init script. Thanks to Carlos Villegas. Closes: #376953
* re-order RCPT ACL statements to resemble Upstreams default config
a little more. This used to be the case in the beginning, but was
changed eventually, and I didn't find any rationale for our deviation.
Thus, we change back to upstream's default to see which things might
break.
* remove cron.d from exim4-base dirs - we do not have a cron.d job
any more for years.
* Re-work daily cron job:
* Make statistics configurable with a variable
* Comment that the log handling code is fragile and depending on
log rotation strategy
* Add code to generate warnings if paniclog non-empty.
Thanks to Andrew Ferrier. Closes: #379898
* Build -dbg packages.
* Updated vi (vietnamese) translation.
Thanks to Clytie Siddall. (am) Closes: #380357
-- Marc Haber <mh+debian-packages@zugschlus.de> Mon, 31 Jul 2006 06:10:51 +0000
exim4 (4.62-2) unstable; urgency=low
* Move explanation about using ";" as separator in lists from debian/NEWS to
debian/exim4-config.NEWS. (The former ends up as
/usr/share/doc/eximon4/NEWS.Debian.gz.) Also fix version-number of
entry. (am)
* have ue4.conf --verbose print split or non-split config.
Thanks to Florian Laws. (mh)
* Mention http://pkg-exim4.alioth.debian.org/ in package description.
Thanks to Florian Laws. (mh)
* Mention in package description that README.Debian has information
about how to configure the Debian packages.
* /etc/init.d/exim4: parse extended inetd.conf syntax from
openbsd-inetd. (mh) Closes: #365928
* New th (thai) translation.
Thanks to Theppitak Karoonboonyanan. (mh) Closes: #367351
* New dz (Dzongkha) translation.
Thanks to Pema Geyleg. (am) Closes: #368593
* New ne (Nepali) translation.
Thanks to Paras pradhan. (am) Closes: #369526
* New eo (Esperanto) translation.
Thanks to Serge Leblanc. (am) Closes: #369241
* Updated hu (hungarian) translation.
Thanks to Attila Szervac. (am) Closes: #374616
* Make documentation of CHECK_RCPT_LOCAL_LOCALPARTS and
CHECK_RCPT_REMOTE_LOCALPARTS more verbose and concentrate it in the
ACL file. Thanks to Klaus Muth. (mh) Closes: #366491
* README.Debian.xml (mh)
* Add new section documenting where to find documentation.
* Move misplaced sentence.
* Fix spelling errors in README.Debian.
Thanks to Salvatore Bonaccorso. Closes: #366003
Thanks to Ross Boylan. Closes: #374216
* remove "you can stop reading now" sentence.
Thanks to David Lawyer. Closes: #370790
* Mention Debian-specific man pages
* Give instructions about how to use apropos to find out about man
pages.
* Documentation changes inspired by Ross Boylan. Closes: #369126
* Add exim4-config_files(5) man page to aid as repository for file
explanations.
* /etc/email-addresses
* /etc/exim4/local_host_blacklist
* /etc/exim4/local_host_whitelist
* /etc/exim4/local_sender_blacklist
* /etc/exim4/local_sender_whitelist
* /etc/exim4/local_sender_callout
* /etc/exim4/local_rcpt_callout
* /etc/exim4/local_domain_dnsbl_whitelist
* /etc/exim4/hubbed_hosts
* /etc/exim4/passwd
* /etc/exim4/passwd.client
* /etc/exim4/exim.crt
* /etc/exim4/exim.key
If you find any files that might be missing in the man page,
please report a bug.
* mention exim4-config_files(5) in update-exim4.conf.8
* Explicitly mention README.Debian in exim man page.
* Remove /usr/share/doc/exim4-config/default_acl, move contents to
README.Debian and exim4-config_files.
* remove empty /usr/share/doc/exim4-config/examples.
* clarify docs in RCPT ACL.
* streamline docs:
* hubbed_hosts router.
* passwd.client.
* server side authentication examples
* Standard-Version: 3.7.2, no changes necessary.
-- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 24 Jun 2006 08:56:19 +0000
exim4 (4.62-1) unstable; urgency=low
* New upstream version
* remove !acl patch, bug is fixed upstream
* Some minor changes to README.Debian
* Downgrade priority of exim4/dc_eximconfig_configtype, exim4/no_config and
exim4/exim3_upgrade from critical to high, as there is a sane default.
Closes: #342077
* Allow single quotes in recipient mail addresses. Closes: #346222
* Update debian/mtalist to conflict with hula-mta. (mh)
* Move back man-pages (actually they are symlinks) related to the
mail-transport-agent virtual package from exim4-base to the daemon
packages. Other MTA packages also include these manpages and would
otherwise need to explicitly conflict with exim4-base. Add "Replaces:
exim4-base (<= 4.61-1)" to the daemon packages. Thanks to Justin Pryzby.
Closes: #362852 (am)
* Update km (Khmer) translation.
Thanks to Khoem Sokhem. (mh) Closes: #363672, #363671
* Update pa (Punjabi) translation.
Thanks to A S Alam. (am) Closes: #364268
* replace backticks with $() construct in ue4.conf. (mh)
* Allow ";" as separator in dc_local_interfaces and dc_relay_nets.
If a semicolon is found, "<;" is prepended to allow a semicolon as
separator. Thanks to Adam Borowski. (mh) Closes: #360162
* Link against libdb4.3 instead of 4.2. (am). Closes: #365467
* Standards-Version: 3.7.0, no changes required. (am)
* README.Debian: Add link to "how to use a completely different
configuration scheme" to the beginning of the chapter about Debian's
configuration to provide an easy way out for experienced exim people.
(mh)
* Fix grammar error in README.Debian. (Thanks, Ross Boylan) Closes: #365546
* Whennever changing major Berkeley DB versions we zap the exim hint
databases in exim4-base postinst. Change the code to also delete
__db.retry, __db.misc, __db.callout and __db.wait* (which afaik are
Berkeley DB internal files). If these are somehow broken strange errors
occur, e.g. #360696. As we are deleting the whole db, deleting these files
seems to be a good idea. (am)
-- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 2 May 2006 11:47:58 +0000
exim4 (4.61-1) unstable; urgency=low
* New upstream version
- Temporary files for content scanning subdirectory are now also mode 640
instead of 666. Closes: #280282
- If group was specified without a user on a router, and no group
or user was specified on a transport, the group from the router
was ignored. Closes: #343074
- .include statements now require an absolute path. Closes: #268083
* Apply upstream patch allowing !acl constructs
(http://www.exim.org/mail-archives/exim-cvs/2006-April/msg00008.html)
* Rename the Punjabi translation file name from pa_IN to pa
to fit a decision taken in -i18n
* README.Debian:
* mention that relay_nets does allow relaying without authentication.
* minor formatting fixes
* Add Khmer debconf translation (Thanks, Kakada Hok) (bubulle)
Closes: #359668
* Add linda overrides for libs-not-in-depends (see #357727)
-- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 4 Apr 2006 19:50:39 +0000
exim4 (4.60-5) unstable; urgency=low
* re-introduce inst_aliases, patch src/install_exim to prevent path
to inst_aliases to be put into example config file. (mh)
* Fix typo in README.Debian.xml, thanks to Frank S. Thomas. (mh)
* Fix Copy&Waste error in README.Debian.xml.
Thanks to Olaf van der Spek. (mh) Closes: #356354
* Added partial Punjabi debconf translation,
thanks to Amanpreet Singh Alam. (cp) Closes: #349644
* Fix wrong example in conf.d/acl/20_exim4-config_whitelist_local_deny.
Thanks to Kaare Hviid for pointing this out on IRC. (mh)
* Add documentation about Debconf templates to README.Debian to make
yath happy. (mh)
* exim4-refresh_gnutls-params: Use prefix for tempfile to make it
easier recognizeable. (mh)
-- Marc Haber <mh+debian-packages@zugschlus.de> Mon, 13 Mar 2006 15:30:07 +0000
exim4 (4.60-4) unstable; urgency=low
* add rationale to README.Debian explaining why using system
passwords for SMTP AUTH is a bad idea.
* streamline configuration to decrease differences to upstream default
example, and to adopt new things that were added since we last
looked there.
* Do not set inst_aliases for installation, this only affects
example.conf anyway.
* fail build if upstream's example configuration has changed.
* fix NEWS confusion. Thanks to Andreas for spotting this.
* exim4-base.exim4.init: invoke exim4 daemon with the environment
cleaned to avoid language confusion.
* document tls on connect in README.Debian.
* use adduser --quiet instead of > /dev/null in *.postinst.
* Add require_files directive to userforward router to avoid errors
when mailing uucp@hostname.
* Add comment about setting up TLS in conf.d/auth/30_exim4-config_examples
to keep people from blindly allowing cleartext auth.
* Replace 37_dns_disable_additional_section patch with
37_upstream_patch_342619, which is the nearly identical patch from
upstream CVS, approved by Philip. (mh) Closes: #342619
-- Marc Haber <mh+debian-packages@zugschlus.de> Wed, 22 Feb 2006 10:30:16 +0000
exim4 (4.60-3) unstable; urgency=low
* Have exim4-base replace exim4-daemon-light and -heavy. This is a
needed corollary to the movement of the man pages to -base. Let's
hope that this change doesn't introduce too much breakage. Thanks
to Hamish Moffatt for making me take a closer look at policy.
(mh) Closes: #347908, #348067
* Introduce Makefile variable to build with OpenSSL instead of
GnuTLS. This is a last minute maneuver to help sites suffering from
the GnuTLS entropy issue (#338319, #343085) whose only other chance is
disabling TLS completely. Please note that building exim4-daemon-heavy
with OpenSSL is a GPL violation since OpenSSL's license clashes with
the MySQL client library, which is GPL licensed without OpenSSL
exception. (mh)
* re-pack configuration diffs. (mh) Closes: #331698
* Fix wrong variable substitution in lt (Lithuanian) debconf
translation. Thanks to Davide Viti and Gintautas Miliauskas. (mh)
Closes: #342242
* Fix typo in exim.8 man page. Thanks to A Costa. (mh) Closes: #338579
* Honor dpkg-statoverride entries for run-time data in /var.
Thanks to Peter Mottram. (mh) Closes: #269448
-- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 15 Jan 2006 00:23:47 +0000
exim4 (4.60-2) unstable; urgency=low
* Add, but not enable, 37_dns_disable_additional_section.dpatch,
which might be a possible fix for #342619
* conf.d/auth/30_exim4-config_examples: add hint to adapt public_name
string in support_broken_outlook_express_4_server authenticator if
other authencators than LOGIN and PLAIN are offered.
* Fix missing special characters in some debconf translations.
Thanks to Davide Viti. (mh) Closes: #341442
* Fix broken README reference in system_aliases router docs. (mh)
* remove references to alias files from the address_pipe transport. (mh)
* remove "Some-State" default from exim-gencert. (mh)
* Clarify split vs unsplit config in README.Debian. Thanks to Faheem
Mitha and Ross Boylan for helping. (mh)
* Update Build-Depends to libmysqlclient15-dev. (mh) Closes: #343767
* Fix wrong header in conf.d/routers/300_exim4-config_real_local.
Thanks to Ross Boylan for spotting this. (mh)
* Document headers_rewrite, return_path and dc_mailname_in_oh in
update-exim4.conf man page. (mh) Closes: #332520, #342233
* Re-Instate debian/patches/31_eximmanpage which was erroneously
removed in 4.60-1, we have local Debian patches in here. Thanks to
Ross Boylan for spotting this. (mh) Closes: #330967
* Mention relay permission from localhost in update-exim4.conf(8). (mh)
* Add more prose to relay control configuration. (mh)
* Update Greek debconf translation (Thanks, Kostas Papadimas) (am)
Closes: #344576
* Add cross-reference to README.Debian to better find macro docs.
Thanks to Shyamal Prasad. (mh) Closes: #329988
* Fix incorrect variable substitution in pt_BR debconf translation. (Thanks,
Felipe Augusto van de Wiel) (am) Closes: #345363
* [exim4-config.templates, po/*po] Replace reference to README.SMTP-AUTH
with one to its replacement README.Debian.html. (am) Closes: #344826
* Re-work long package descriptions. Move reference to README.Debian in
front, add hint to dpkg-reconfigure exim4-config, complete stub
sentences, remove non-referenced acronym MTA from the long
descriptions, move explanation what exim is to the very front.
* README.Debian: Add section about changing the configuration,
explain structure of conf.d and .conf.template, add hint that the SMTP
AUTH examples are documented.
* Introduce MAIN_TLS_CERTKEY to allow for single-file certificate/key
storage. Thanks to John Goerzen. (mh) Closes: #315126
* Mention entropy issue in README.Debian.
* Ship symlink to /usr/sbin/exim, see NEWS.Debian. (mh) Closes: 319316
* use dh_installinit -n instead of --noscripts to work around #347577. (mh)
* use dh_installinit --name instead of --init-script, rename init
script. (mh)
* move man pages from daemon packages to exim4-base, add lintian
and linda overrides to allow daemon packages not to contain man pages.
-- Marc Haber <mh+debian-packages@zugschlus.de> Thu, 12 Jan 2006 12:36:50 +0000
exim4 (4.60-1) unstable; urgency=low
* new upstream version 4.60
* assign value to UE4CC after command line processing. Only have
ue4c throw an error on not-existing UPEX4C_confd if split config is
seleted. Thanks to Ted Percival. (mh) Closes: #337229
* A number of man page fixes. Thanks to A Costa. (mh)
Closes: #338580, #338581, #338582, #338583, #338584
* Pull spool dir path from exim -bP instead of hard-coding it in
daily cron job and exim4_refresh_gnutls-params.
Thanks to Alex Hermann. (mh) Closes: 340002
* Corrected zh_CN translation by Ming Hua. (am) Closes: #338928
* Corrected pl translation by Jacek Politowski. (am) Closes: #339671
* Change README.Debian to clarify the exim as a client only uses
STARTTLS and not TLS on connect. Thanks to Rob Brenart and Marc
Sherman for pointing that out on exim-users.
* Clarify passwd.client format. Thanks to Osamu Aoki for providing a
good starting point in #244724, which is unfortunately not fixed just
now.
* remove patch 31_eximmanpage, fixes are included upstream.
-- Marc Haber <mh+debian-packages@zugschlus.de> Mon, 28 Nov 2005 18:16:12 +0000
exim4 (4.54-2) unstable; urgency=low
* debian/README.Debian* merged into one xml-file. Binary packages ship both
a html (generated by xsltproc) and plain-text version (lynx +
post processing) of the file. (Hilko Bengen)
* Switch to libmysqlclient14.
* Fix two typos in French debconf templates.
Thanks to Christian Perrier. (mh)
* Replace broken courier auth example with one that actually denies
access if a wrong password is given. Thanks to Peter Thomassen for
carrying that report from some colorful web forum to the people who
can fix it after like four months. (mh) Closes: #336979
* Fix minor typos in README.Debian.xml and changelog. (mh)
* Add 255.255.255.255 to ignore_target_hosts in dnslookup. (mh)
-- Marc Haber <mh+debian-packages@zugschlus.de> Wed, 2 Nov 2005 19:40:22 +0000
exim4 (4.54-1) unstable; urgency=low
* new upstream version 4.54. (mh)
* fix typo in router/real_local header
* add same_domain_copy_routing to router/hubbed_hosts
* [update-exim4.conf.8] false friend: s/sensible/sensitive/.
Thanks to Ross Boylan. (am) Closes: #330975
* modify broken outlook express 4 authenticator so that it only
advertises on encrypted connections, as the other plaintext
authenticators do. Thanks again, Fred Viles. (mh)
* update-exim4.conf.8: alphabetically sort REPLACEMENT PATTERNS and
CONFIGURATION VARIABLES sections, add documentation for
DEBCONFlocal_domainsDEBCONF.
Thanks to Ross Boylan. (mh) Closes: #330980
* fix bashism == in init script. Thanks to Adam D. Barratt and
Justin Pryzby. (mh) Closes: #331299
-- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 4 Oct 2005 09:59:24 +0000
exim4 (4.53-1) unstable; urgency=low
* new upstream version 4.53. (mh)
* Fix obviously unfinished sentence in update-exim4.conf.8
documenting dc_local_interfaces. (mh)
* Move SMTP authentication docs to README.Debian. (mh)
* Adapt reportbug script to be useable from the command line as well,
mention this in README.Debian mailing list paragraph. (mh)
* Remove /etc/default/exim4 in exim4-config's postrm instead of exim4-base's
one, as it is created in exim4-config's postinst. (am) Closes: #325901
* Fix error in README.Debian.xinetd.
Thanks to Diego Biurrun. (mh) Closes: #327847
* Fix substitute variable in Japanese (ja) debconf translation.
Thanks to Kenshi Muto. (mh) Closes: #329729
* Add lintian override for maintainer-script-needs-depends-on-netbase. We
don't need that depends since update-inetd.conf is checked for presence
before invocation and that invocation is only optional cleanup. (mh)
* add linda override to kill double shlib warning - libgnutls is
fully versioned and thus is not a problem. (mh)
* add lintian override to kill bashism "local" warning for
exim4-config.config and exim4-config.postinst (see #330548). (mh)
* add general package blurb to description of the exim4 meta package
as well. Thanks to Marc Sherman for pointing this out. (mh)
* remove code to escape dashes in the pod2man generated man pages.
That code makes the man pages syntactically invalid, we'd rather
live with suboptimal rendering (which is a pod2man bug anyway). (mh)
* change spacing for rewrite rules in configuration, man page and
ue4.conf to ease paragraph filling for the man page. (mh)
* re-pack config patches. (mh)
-- Marc Haber <mh+debian-packages@zugschlus.de> Wed, 28 Sep 2005 18:34:51 +0000
exim4 (4.52-2) unstable; urgency=low
* unpack/pack configs to get clear EDITME patches (mh)
* Update ca (Catalan) translation.
Thanks to Aleix Badia i Bosch. (mh) Closes: #317429
* Update mk (Macedonian) translation.
Thanks to Georgi Stanojevski. (mh) Closes: #320231
* Use certtool from gnutls-bin in cron.daily to re-generate gnutls-params
instead of only removing the file and letting exim4 re-generate it at SMTP
time after receiving STARTTLS. The maximum runtime of certtool is limited
to 2*1800 seconds per default by using timeout.pl by Piotr Roszatycki
(checked and beautified by Marc 'HE' Brockschmidt). Add gnutls-bin to
exim4-base' Suggests. (am) Closes: #285371
* Build-Depend on libgnutls-dev (from gnutls12) instead of libgnutls11.
* Drop compability with debhelper in woody (am):
- mv *.templates.master *.templates
- update po/POTFILES.in accordingly.
- no more manual invocation of po2debconf in debian/rules
- use dh_installppp instead of manual dh_installdirs/dh_install.
Closes: #212893
- Build-Depends: debhelper (>= 4.1.68)
* drop upgly passwd dependency introduced in 4.30-6. (am)
* shorten Build-Depends by replacing "libxfoo-dev|xlibs-dev' with just
'libxfoo-dev'. (am)
* Do not try to authenticate to smarthost if smarthost offers AUTH LOGIN but
passwd.client does not contain a matching entry. (am) Closes: #323565
-- Andreas Metzler <ametzler@debian.org> Sun, 21 Aug 2005 11:44:27 +0200
exim4 (4.52-1) unstable; urgency=low
* new upstream version 4.51. (mh)
* adapt 70_remove_exim-users_references
* remove 37_gnutlsparams
* adapt 36_pcre
* adapt 31_eximmanpage
* fix package priorities to have them in sync with override again. (mh)
* Fix error in nb (Norwegian) translation.
Thanks to Helge Hafting. (mh). Closes: #315775
* Standards-Version: 3.6.2, no changes needed. (mh)
-- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 2 Jul 2005 06:08:34 +0000
exim4 (4.51-2) unstable; urgency=low
* Fix typo in exiwhat.8. (am) Closes: #313246
* Clarify tls_verify_certificates documentation in
conf.d/main/03_exim4-config_tlsoptions. Thanks to Wenzhuo Zhang. (mh)
* Accept postmaster liberally for relay_to_domains. Thanks to
Roderick Schertler. (mh) Closes: #313023
* Improve update-exim4.conf's internal run-parts to warn about ignored files
if running in verbose-mode. (am) Closes: #315656
* Make it possible to purge a previously uninstalled exim4-suite if debconf
has between removed since. (am) Closes: #315173
- Stop useless sourcing of confmodule in exim4-config.postrm.
- Use debconf to ask about trashing the mailqueue if debconf is available,
keep the queue otherwise.
* exim failed to setup gnutls parameters if the gnutls-param file was
missing. This caused TLS breakage. (am) Closes: #315650
-- Andreas Metzler <ametzler@debian.org> Tue, 28 Jun 2005 19:35:35 +0200
exim4 (4.51-1) unstable; urgency=low
* new upstream version 4.51. (mh)
* remove 80_upstream_fix-296492
* remove 81_fix-kfreebsd-gnu
* remove 82_upstream_fix-299733
* remove 82_upstream_fix_299743
* remove 83_upstream_fix-strangelog
* build-depends: replace postgresql-dev with libpq-dev. (mh)
* apply patch to EDITME.exim4-heavy.diff from ubuntu for clearer
postgresql build. (mh)
* fix wrong dc_other_hostnames statement in manpage. Thanks to
Daniel Hermann. (mh) Closes: #311023
* give more directions how to use /etc/exim4/exim4.conf. (mh)
* Fix duplicated server_advertise_condition line in
login_saslauth_server. Thanks to Rich Aycock. (mh) Closes: #311906
* Conditional restarting the daemon in exim4-config.config now checks for
DEBCONF_RECONFIGURE=1 instead of (mis)using an internal
debconf-template. (am)
* Documentation Improvements for update-exim4.conf.8, exim4.conf.template
and 01_exim4-config_listmacrosdefs and README.Debian.
Thanks to Ross Boylan. (am/mh)
* New translation: et (Estonian) by Siim Põder. (mh) Closes: #312474
-- Marc Haber <mh+debian-packages@zugschlus.de> Fri, 10 Jun 2005 18:57:03 +0000
exim4 (4.50-8) unstable; urgency=low
* integrate TLS docs in README.Debian, remove README.TLS.
Thanks to Sam Morris. (mh) Closes: #310771
-- Marc Haber <mh+debian-packages@zugschlus.de> Fri, 27 May 2005 07:57:14 +0000
exim4 (4.50-7) unstable; urgency=low
* Documentation Only Fixes
- Fix grammar error in README.system_aliases. Thanks to Andreas
Barth on IRC. (mh)
- Optimize unencrypted authentication docs. Thanks to Drew Parsons.
(mh) Closes: #305443
- Clarify dc_smarthost host list processing in update-exim4.conf.8.
(mh) Closes: #307370
- Clarify split-config description in README.Debian.
Thanks to Luc Saffre. (mh)
- Fix a typo in README.Debian-accountname, thanks to Brett Parker. (mh)
- Fix an issue in the exim manpage creating the illusion that
whitespace is allowed between -d and its options.
Thanks to Greg Kochanski. (mh) Closes: #309174
- Start re-work of README.Debian FAQ.
- Add "should -config depend on -base" question to README.Debian FAQ.
- Link README.Debian to -daemon-light and -daemon-heavy, include a
copy of README.Debian in -config.
Thanks to Daniel Maier. (mh) Closes: #310118
* Translations
- Update: cy (Welsh) by Dafydd Harries. (mh) Closes: #306349
- New: vi (Vietnamese) by Clytie Siddall. (mh) Closes: #306613
- Fix typos in pt.po (Thanks, Miguel Figueire) (am) Closes: #310057
* Configuration Clarification
- move the regexps in the local part checks to macros, adapt docs.
Thanks to Adam M. Costello. (mh) Closes: #306094
* Bug Fixes
- preserve escape sequences like '\\N' in
/etc/exim4/update-exim4.conf.conf:
- use awk instead of sed in exim4-config.postinst (Thanks, Barry Kitson).
- use printf '%s\n' "$foo" instead of echo "$foo". (echo in dash would
swallow the second backslash)
- actually making this work requires changes in debconf, too,
see #306134.
- (Closes: #305957) (am)
- apply upstream patch from
http://www.exim.org/mail-archives/exim-users/Week-of-Mon-20050425/msg00035.html
in some circumstances, exim writes parts of /etc/passwd and/or
/etc/group to the reject log. This scares people. (mh)
- apply upstream patch from
http://www.exim.org/mail-archives/exim-dev/2005-April/msg00012.html to
only try SASL mechanisms that are actually specified in the
configurations. Thanks to Juergen Kreileder. (mh) Closes: #299743
- Build against libmysqlclient12-dev instead of libmysqlclient10-dev.
(am) Closes: #306970
- As "mail sent by smarthost; no local mail" aka satellite requires setting
dc_readhost always ask this question. (am) Closes: #304838
- Make nonsplit-config read /etc/exim4/exim4.conf.localmacros before
/etc/exim4/exim4.conf.template to allow macros here as well. (mh)
- Make it clear that "broken debconf" warning is issued by
exim4-config.postinst
- Make sure that "generated, do not touch" disclaimer in
/var/lib/exim4/config.autogenerated always appears
- [exim4-config] As the.config script stores answers in debconf's db and the
postinst actually generates configurations files from these values
restarting the daemon on dpkg-reconfigure has to be done in postinst. (am)
Closes: #310703
-- Marc Haber <mh+debian-packages@zugschlus.de> Thu, 26 May 2005 17:47:24 +0000
exim4 (4.50-6) unstable; urgency=low
* fix some errors in update-exim4.conf(8) manpage. (am)
* more macros in config. (mh)
* Apply upstream fix: $primary_hostname is now expanded in
cyrus_sasl authenticator. Thanks to Juergen Kreileder, and of
course Philip Hazel. (mh) Closes: 299733
* fix conftype none missing "| \" bug, again. Thanks to Andrew Nimmo
and Gabriel L. Briones III. (mh) Closes: 303351.
* The upstream fix for #296492 sometimes causes an endless loop. Update
patch with correction from Philip's commit, revision 1.10. (mh)
* Document real_local router. (mh)
* Add instructions about how to use inetd. Thanks to Ryan Underwood.
(mh) Closes: #304436
* Fix wrong file header in 100_exim4-config_domain_literal. (mh)
* Fix bad english in 01_exim4-config_listmacrosdefs. (mh)
* conf.d/main/02_exim4-config_options: Remove macro effort for options
that we leave at their default by default anyway, re-commenting them
for reference. (am)
* Allow cleartext client AUTH PLAIN and AUTH LOGIN by setting a
macro. (mh)
* Update information in README.SMTP-AUTH. (mh)
-- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 17 Apr 2005 19:10:26 +0000
exim4 (4.50-5) unstable; urgency=low
* move exim4-config-simple and exim4-config-medium from the main
source package to keep them from being released.
* document the fact that the check done by update-exim4.conf does
not detect all possible errors and fails with errors that are inside
expanded items in the config file. Thanks to Marc Sherman.
(mh) Closes: 286721
* Add examples for cyrus_sasl to conf.d/auth/30_exim4-config_examples.
Thanks to Juergen Kreileder. (mh) Closes: #299732
* remove --dry-run from 10_daemon_close_fds.dpatch so that failures
to patch cause failure. Thanks to Gergely Nagy, and apologies for
blaming it on dpatch (see #297670). (mh)
* remove ACL example file, incorporate DNSBL examples (without
actual DNSBL domains) into main config. The example file hasn't been
updated in ages, and the main config file has become quite
sophisticated by itself. (mh)
* add example authenticators for courier authdaemon. (mh)
* have exim4-base recommend psmisc. Thanks to Thiemo Seufer.
(mh) Closes: #299858
* apply upstream patch fixing fallback handling. Thanks to Laurent Fousse.
(mh) Closes: #296492
* add patch to allow building on kfreebsd-gnu. Thanks to Robert
Millan. (mh) Closes: #300967
* remove 10_daemon_close_fds since this might close FDs which might
be used by other libraries such as libnss-ldap. Thanks to Antonio
Kanouras for reporting and testing, and to Florian Weimer for
debugging. To avoid #297607 from happening again, use db_stop in
exim4-config.config and coordinate with the d-i team. Thanks to
Frans Pop for testing. (mh) Closes: #299051
* make pidfile paths in init script variables. (mh)
* Update bs (Bosnian) debconf templates. Thanks to Safir Secerovic.
(mh) Closes: #301940
* Fix update-exim4.conf to actually remove the DEBCONF stuff from
configuration. Thanks to Jason Spiro. (mh)
* correctly translate an empty debconf option visiblename to an
_unset_ qualify_domain, not a qualify_domain set to the empty string.
Thanks to Miquel van Smoorenburg. (mh) Closes: #302060
* update-exim4.conf ignored the setting of dc_use_split_config and
always used the data from split config for conftype none. (am)
* Document #301988 (base-config) in README.Debian to offer an
explanation for a long delay restarting exim right after Debian
installation. (mh)
* Fix exim4-config.NEWS and exim4-config.postinst, documenting the
mailname change there. This should act as a heads-up to people who
do funky things with their ue4.conf.conf which might overwrite the
fixup intrduced by the maintainer script. Thanks to Vincent
Lefevre. (mh) Closes: #301906
* Make Maildir location configurable via exim macro. Thanks to
Frederic Lehobey. (mh) Closes: #302215
* pull update-exim4.conf.conf file name in shell variables
* liberally use .ifdef in conf.d files which changed in this release
anyway. This is part of the process to fix #297603. (mh)
* Adapt formatting policy to conf.d files which were changed. (mh)
* Improve on Debconf documentation in update-exim4.conf.conf and
the configuration templates. This partly addresses #289959. (mh)
* re-work ue4.conf man page, also addressing #289959. (mh)
* add a comment about caseless postmaster to
conf.d/router/400_exim4-config_system_aliases. (mh)
* print script name and parameters when debugging. (mh)
* update-exim4.conf now gives a better error message if
ue4.conf.conf does not exist. (mh)
* ue4.conf.template: If a relative output path is given, actually
put the file there and not in a path relative to
/etc/exim4/conf.d. (mh)
-- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 3 Apr 2005 07:20:17 +0000
exim4 (4.50-4) unstable; urgency=low
* fix 10_daemon_close_fds.dpatch to actually apply again. Sheesh.
Thanks to Joey Hess. (mh) Closes: #297607
-- Marc Haber <mh+debian-packages@zugschlus.de> Wed, 2 Mar 2005 07:38:52 +0000
exim4 (4.50-3) unstable; urgency=low
* actually enable dlopen patch, show this in package descriptions.
Thanks to Andrej KOLESNIKOV. (mh) Closes: #297282
* Have exim4-config conflict with -daemon (<<4.50), as we use
submission/sender_retain which is not supported by earlier daemons.
Thanks to Echo Nolan. (mh) Closes: #297501
-- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 1 Mar 2005 06:45:26 +0000
exim4 (4.50-2) unstable; urgency=low
* now use WITH_OLD_DEMIME as discussed on pkg-exim4-devel. (mh)
* postinst: add "This is a Debian specific file" to ue4.c.c. (mh)
* fix exim.8 manpage to point to exim4 instead of exim.
(mh) Closes: #296864
* fix update-exim4.conf.8 man page to correctly document that
multiple smarthosts are supported and non-SMTP ports are not. Thanks
to Dan Jacobson. (mh) Closes: #283560
* Add --output option to update-exim4.conf.template. Thanks to Marc
Sherman. (mh/am) Closes: #296597
* Compile with cyrus_sasl authentication mechanism, add libsasl2-dev to
Build-Depends. Thanks to Sean Middleditch and Gergely Risko. (mh)
Closes: #296203, #292906.
* document that dc_localdelivery does not have a corresponding
Debconf option.
* Introduce ue4c_comments for /etc/exim4/update-exim4.conf.conf to
set default for keepcomments/removecomments from the config file.
Thanks to Greg Folkert. (mh) Closes: #295735
* Use "control = submission/sender_retain" to fixup relayed messags instead
of only adding a Message-ID with a warn-statement. (am) Closes: #285235
* Add force-stop to the init script. Thanks to Jari Aalto. (mh)
Closes: 271686
* tighten local parts checks. Thanks to Jari Aalto. (mh) Closes: #273302
-- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 27 Feb 2005 16:33:05 +0000
exim4 (4.50-1) experimental; urgency=low
* new upstream version
* kill exiscan patch as it is now included upstream
* deliver configuration which will compile daemon-heavy with the
built-in exiscan
* convert package to svn on svn.debian.org with a debian/-only
layout. (mh)
* remove 37_kbsd-gnu patch on bug submitter's request (doesn't apply
cleanly). (mh)
* fix bad German translation of a debconf template. Thanks to Hanno
Wagner. (mh) Closes: #291671
* allow option passing to updatex-exim4.conf from init script.
Thanks to Stephen Gran. (mh) Closes: #285973
* change commented out example for reverse DNS RCPT check to catch
deferrals as well. Thanks to Marc Sherman. (mh) Closes: #291832
* Update ko (Korean) debconf templates. Thanks to Seo Sanghyeon.
(mh) Closes: #292607
* Update sq (Albanian) debconf templates. Thanks to Elian Myftiu.
(am) Closes: #284529
* New gl (Galician) debconf templates. Thanks to Jacobo Tarrío.
(mh) Closes: #295562
* use #!/bin/bash in reportbug script as a quick fix until #294954
is fixed one way or the other in reportbug.
* Minor fix to de (German) debconf templates. Thanks to Dennis
Stampfer. (mh) Closes: #294815
* add bad hack authenticator to support outlook express 4.xx. (mh)
* streamline server authenticator names. (mh)
* 60_convert4r4.dpatch: patch convert4r4 to prevent execution of the
script without people reading a prominent warning. (mh)
* re-work debian/control again, pointing people towards
pkg-exim4-users to make upstream a little bit less unhappy.
-- Marc Haber <mh+debian-packages@zugschlus.de> Fri, 18 Feb 2005 15:31:12 +0000
exim4 (4.44-2) unstable; urgency=low
* re-work debian/control to make lintian happy, make descriptions
more orthogonal. (mh)
* kill build-conflicts on libperl-dev (=5.8.4-1). (mh)
-- Andreas Metzler <ametzler@debian.org> Thu, 27 Jan 2005 13:45:45 +0100
exim4 (4.44-1) experimental; urgency=low
* New upstream bugfix-only release (exiscan-acl 4.44-28).
- Fixes eximstats' generation of pie charts by volume. (Closes: #286074)
- Reset the locale to "C" after calling embedded Perl. (Closes: #283538)
- includes 66_cipherpreferences.dpatch,
66_can2005-0021_can2005-0022.dpatch, 65_tidydb-spool.dpatch,
62_statvfs.dpatch.
* Fix (commented) example for AUTH LOGIN with saslauthd (Thanks, Maik
Broemme). (Closes: #291205)
* tl (Tagalog) translation of debconf templates by eric pareja.
(Closes: #291184)
* Use db4.2. (Closes: #258311)
-- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 23 Jan 2005 15:42:20 +0000
exim4 (4.43-4) unstable; urgency=low
* Change update-exim4.conf to again generate a valid return_path (instead
of defering any mail to remote systems) if dc_hide_mailname='true'.
(Closes: #290954)
* Fix typo in changelog and exim4-config's NEWS.
* Some changes (most notably changing the interfaces exim listens on)
require restarting exim instead of just sending HUP. Change documentation
and exim4-config.config accordingly. (Closes: #290945)
-- Andreas Metzler <ametzler@debian.org> Tue, 18 Jan 2005 12:57:58 +0100
exim4 (4.43-3) unstable; urgency=low
* Now that 4.44 is released upload 4.43 to unstable. ;-) Merge experimental
and unstable changelog.
* More lintian overrides. ("X" in eximon4's description has to be capital,
and we take care to only use settitle if it is available.
* make nullmailer setup and the way we use mailname a lot more sensible,
attacking #244095 and #280207:
- mailname is not implicitely made a local domain, instead it is listed
explicitly in dc_other_hostnames, where users can easily remove it
from. (This is basically what postfix does, too.) When upgrading
existing installations mailname is automatically added _once_ to
dc_other_hostnames, on fresh installations mailname is the default
value of dc_other_hostnames. We store the fact that we have added
mailname to dc_other_hostnames in $dc_mailname_in_oh in
update-exim4.conf.conf.
- Make exim work correctly if dc_readhost ("visible, rewritten domain name
for local users") ends up as part of local_domain, which happens if
the same value is chosen for mailname and dc_readhost. This
implemented by new router, hub_user_smarthost. Previously users were
required to use something different (my.invalid.domain) for mailname.
- Special thanks to Christian Perrier for taking care of the
template translation updates.
* We did not substitute the current value into the debconf templates with
db_subst but showed the old ones from the previous debconf run.
* /etc/exim4/email-addresses is ignored now, please use /etc/email-addresses!
* Bosnian (bs.po) translation is complete (Thanks Adis Nezirovic).
* Includes de.po change suggested in #286525.
* One-line fix for incorrect fi.po translation by Kalle Olavi Niemitalo.
(Closes: #288930)
-- Andreas Metzler <ametzler@debian.org> Sat, 15 Jan 2005 19:38:16 +0100
exim4 (4.43-2) experimental; urgency=low
* Resync against sarge/sid (4.34-10).
* Translation updates:
- he (Hebrew) by Lior Kaplan (am) (Closes: #281249)
* cy (Welsh) translation of debconf templates by Dafydd Harries.
(am) (Closes: #282731)
* sq (Albanian) translation of debconf templates by Elian Myftiu. (am)
(Closes: #284529)
* allow arbitrary Sender: and envelope headers in locally submitted
messages, no longer force them to be the local account name at the
local host name. (mh)
* delete /var/spool/exim4/gnutls-params in cron.daily. (mh)
(Closes: #224269)
* run debian/rules update-mtaconflicts. (mh)
* remove outdated info from README.SMTP-AUTH and clarify corresponding
comments in configuration file (Closes: #281249). (am)
* Add an example for AUTH LOGIN using saslauthd. (Closes: #276450). (am)
* exim4-base.cron.daily: Use find | xargs -0r (Closes: #279205). (am)
* Document /etc/email-addresses in README.Debian (Closes: #276958) (am).
* exim_tidydb did not work properly with split spool directory. (am)
* Make exim prefer stronger ciphers. (AES_256 AES_128 3DES ARCFOUR).
* Make the prefered local transport (maildir/mailspool) configurable in
update-exim4.conf.conf, attacking #250980. Document this, therefore
(Closes: #274597) (am)
* Move slightly more expensive tests in rcpt ACL further down. (This only
changes commented out example code.) (Closes: #267708)
* Fix 62_statvfs to work with older versions of dpatch. (Closes: #286302)
* Version dpatch build-dependency to safeguard against reintroducing this
bug.
* In comment point out that using saslauthd for SMTP AUTH requires giving
exim privileges to use it.
* New patch 66_can2005-0021_can2005-0022.dpatch from
http://www.exim.org/mail-archives/exim-users/Week-of-Mon-20050103/msg00028.html
fixing two buffer overflows labeled CAN-2005-0021 and CAN-2005-0022
(mh/am).
-- Andreas Metzler <ametzler@debian.org> Thu, 6 Jan 2005 12:33:27 +0100
exim4 (4.43-1) experimental; urgency=low
* targeted for experimental since we need unstable to get new 4.34
versions in sarge. unstable upload will happen as soon as t-p-u is in
working condition.
* New upstream version. (am) (Closes: #274246, #267994)
- no more unescaped hyphens in exim.8. (Closes: #262592)
- no more warnings in exipick.8 (Closes: #277817)
- New option tls_on_connect_ports. (Closes: #265818)
- better documentation about differences in configuring for GnuTLS or
OpenSSL. (Closes: #241725)
- verify = header_sender now respects callout options. (Closes: #260114)
- There is now an overall timeout for performing a callout verification.
(Closes: #261511)
- Less typos in filter.txt. (Closes: #230545)
- New ACL: acl_smtp_predata, useful for greylisting. (Closes: #237947)
* exiscan patch 4.43-28 (mh)
* Use statvsf() instead of statfs(), fixing complete breakage on
alpha/ReiserFS (Closes: #280213). Thanks to John Goerzen for finding and
debugging this. (am)
* Use getconf LFS_CFLAGS instead of hardcoding -D_FILE_OFFSET_BITS=64 to
prevent similar bugs. (am)
* Translation updates:
- tr (Turkish) by Recai Oktas (#281840) (am)
* add lintian and linda overrides to get rid of warnings and errors. (mh)
* delete debian/files from config-custom, make config-custom's
debian/rules delete debian/files on clean. (mh)
-- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 21 Nov 2004 19:26:11 +0000
exim4 (4.34-10) unstable; urgency=high
* urgency high because this upload fixes two minor security issues.
* more documentation for dc_localdelivery in update-exim4.conf.8.
* Move slightly more expensive tests in rcpt ACL further down. (This only
changes commented out example code.) (Closes: #267708)
* Fix 62_statvfs to work with older versions of dpatch. (Closes: #286302)
* Version dpatch build-dependency to safeguard against reintroducing this
bug.
* In comment point out that using saslauthd for SMTP AUTH requires giving
exim privileges to use it.
* New patch 66_can2005-0021_can2005-0022.dpatch from
http://www.exim.org/mail-archives/exim-users/Week-of-Mon-20050103/msg00028.html
fixing two buffer overflows labeled CAN-2005-0021 and CAN-2005-0022
(mh/am).
-- Andreas Metzler <ametzler@debian.org> Wed, 5 Jan 2005 10:39:03 +0100
exim4 (4.34-9) unstable; urgency=low
* Translation updates:
- he (Hebrew) by Lior Kaplan (am) (Closes: #281249)
* cy (Welsh) translation of debconf templates by Dafydd Harries.
(am) (Closes: #282731)
* sq (Albanian) translation of debconf templates by Elian Myftiu. (am)
(Closes: #284529)
* new patch 64_pipeliningfixup pulled from 4.42. Exim was forgetting that it
had advertised PIPELINING for the second and subsequent messages on an
SMTP connection. Thanks to Christoph Barbian. (am) (Closes: #283230)
* allow arbitrary Sender: and envelope headers in locally submitted
messages, no longer force them to be the local account name at the
local host name. (mh)
* delete /var/spool/exim4/gnutls-params in cron.daily. (mh).
* remove outdated info from README.SMTP-AUTH and clarify corresponding
comments in configuration file (Closes: #283568) (am).
* Add an example for AUTH LOGIN using saslauthd. (Closes: #276450) (am).
* exim4-base.cron.daily: Use find | xargs -0r (Closes: #279205) (am).
* run debian/rules update-mtaconflicts
* Document /etc/email-addresses in README.Debian (Closes: #276958) (am).
* exim_tidydb did not work properly with split spool directory. (am)
* Make the prefered local transport (maildir/mailspool) configurable in
update-exim4.conf.conf, attacking #250980. Document this, therefore
(Closes: #274597) (am)
-- Andreas Metzler <ametzler@debian.org> Tue, 7 Dec 2004 12:40:49 +0100
exim4 (4.34-8) unstable; urgency=medium
* The real-life-takes-its-toll-release.
* Use statvsf() instead of statfs(), fixing complete breakage on
alpha/ReiserFS (Closes: #280213). Thanks to John Goerzen for finding and
debugging this.
* Use getconf LFS_CFLAGS instead of hardcoding -D_FILE_OFFSET_BITS=64 to
prevent similar bugs.
* Translation updates:
- tr (Turkish) by Recai Oktas (Closes: #281840)
* new patch 63_nomorecrashongnutlserror pulled from 4.40: "If a server
dropped the connection unexpectedly when an Exim client was using GnuTLS
and trying to read a response, the client delivery process crashed while
trying to generate an error log message." (Closes: #280647)
-- Andreas Metzler <ametzler@debian.org> Sat, 20 Nov 2004 10:52:18 +0100
exim4 (4.34-7) unstable; urgency=low
* Update README.Debian.UUCP (thanks, Andreas Barth) (Closes: #271179)
* The hack to fix the infinite debconf loop on woody (#246742) broke
dpkg-reconfigure. Add an additional [ "reconfigure" != "$1" ] condition to
the abort clause. (Closes: #271864) (am)
* apply patch fixing Italian debconf translation by Danilo
Piazzalunga. (mh) (Closes: #274398)
* ro (Romanian) translation of debconf templates by Eddy Petrisor.
(mh) (Closes: #275414)
* sl (Slovenian) translation of debconf templates by Jure Cuhalev.
(mh) (Closes: #275090)
* uk (Ukrainian) translation of debconf templates by Eugeniy
Meshcheryakov. (mh) (Closes: #273505)
* mk (Macedonian) translation of debconf templates by Georgi
Stanojevski. (mh) (Closes: #275772)
* fix encoding problem in hu.po. Thanks to Christian Perrier. (mh)
* Hebrew translation updated. Closes: #277682 (Lior Kaplan)
* Norwegian Nynorsk translation fixed (commas removed and replaced by
dashes). Closes: #278011 (Christian Perrier)
* Fix commas in Macedonian, Polish, Russian translations which broke the
Choices list the same way they were in Norwegian Nynorsk (Christian
Perrier)
* Fix error in README.SMTP-AUTH, thanks Jari Aalto. (Closes: #276448) (am)
* Make update-exim4.conf more forgiving, working with files that are missing
the final newline. (Closes: #273279) (am)
* Use procmail for delivery if /either/ etc/procmailrc or ~/.procmailrc
exist. (Closes: #267706) (am)
* Shorten overlong template in Catalan (Closes: #277686) (Jordi Mallach) and
Brazilian translation (Closes: #278016) (Andre Luis Lopes)
-- Andreas Metzler <ametzler@debian.org> Sun, 7 Nov 2004 19:56:01 +0100
exim4 (4.34-6) unstable; urgency=low
* Uploaded to test changes before we break tpu.
* zh_TW translation of debconf templates by Tetralet. (Closes: #267524)
* bg (Bulgarian) translation of debconf templates by Ognyan Kulev
(Closes: #267603)
* updated translations:
- nl (Dutch) by Bart Cornelis. (Closes: #268168)
* remove osirusoft from dnsbl examples. Thanks to Greg Kochanski for
noticing. Add dnsbl disclaimer. (mh) (Closes: #269501)
* add an example for exim-adduser. (Thanks to Jonas Meurer for the initial
idea, the commited version is different, though.) (mh/am) (Closes: #267792)
* hr (Croatian) translation of debconf templates by Krunoslav Gernhard
(Closes: #270578)
* Do not remove the Debian-exim user in "exim4-config.postrm purge".
Package dependencies are only effective for packages in status installed,
but it is clearly not sane to remove the user until all exim4-packages
are purged. e.g. this can completely break logrotate (Closes: #270681).
-- Andreas Metzler <ametzler@debian.org> Sat, 11 Sep 2004 10:29:26 +0200
exim4 (4.34-5) unstable; urgency=low
* The let's test the changes before we upload to tpu release.
* updated translations:
- eu (Basque) by Piarres Beobide Egaña. (Closes: #261912)
- ca (Catalan) by Jordi Mallach. (Closes: #264842)
* Fix broken permissions (not readable for group/other) in upstream tarball
in clean target (thanks to Steve Langasek for help with find). This fixes
"dpkg-buildpackage -rsudo && dpkg-buildpackage -rsudo". (Closes: #262607)
* Stop daemon in "exim4-base.postrm remove". - Under specific circumstances
apt seems to purge -base before removing the depending package (-daemon),
therefore the daemon would not be stopped. (Closes: #261994)
* Build against libgnutls11-dev. (Closes: #263665)
-- Andreas Metzler <ametzler@debian.org> Wed, 11 Aug 2004 09:17:35 +0200
exim4 (4.34-4) unstable; urgency=high
* Urgency high because upgrades from woody were broken.
* Exim4 triggers a bug in woody's debconf. - With dialog frontend, invoked
by dpkg-preconfigure you are stuck in a loop, always being asked the same
two questions (split config, and basic configtype) again and again until
you give up and choose split_config=yes although being discouraged from
doing so. I am working around this by making the config-script abort if
debconf is old and we are running in preconfigure mode. (Thanks to Dan
Weber, Adrian Bunk and whoever else wasted brainpower on this.)
(Closes: #246742) (am).
* Arabic (ar.po) translation of debconf templates by the translation team
of Arabeyes.org (Abdulaziz Al-Arfaj). (Closes: #261014)
* Change maintainer address to a mailinglist, add myself to uploaders (am)
* Quote ${dc_mailname} in exim4-config.config. (am)
* Fix grammar error in the original English templates (found by Adam D.
Barratt ages ago). Duplicate fix in .po files.(am)
* Typo/thinko in exim4-config (two 35-clauses) prevented showing a
(unimportant) question for satellite config. Thanks to Fabio Massimo Di
Nitto for finding this.
-- Andreas Metzler <ametzler@debian.org> Tue, 27 Jul 2004 16:38:54 +0200
exim4 (4.34-3) unstable; urgency=low
* updated translations:
- es (Spanish) by Javier Fernández-Sanguino Peña (Closes: #251987). Also
shorten overlong string. (Closes: #251316)
- tr (Turkish) by Recai Oktas, fixing overlong translations.
(Closes: #251932)
- de (German) corrected and scrutinized by Helge Kreutzmann.
(Closes: #254038)
- ru (Russian), too long templates shortened by Dmitry Beloglazov.
(Assuming I read Last-Translator correctly) (Closes: #259148)
* Hebrew (he.po) translation of debconf templates by Lior Kaplan.
(Closes: #254026, #257508)
* introduce .ifndef hacks to allow MESSAGE_SIZE_LIMIT, DCreadhost
and DCsmarthost to be changed by the local admin without having to
change dpkg-conffiles (mh).
* Use byname on the smarthost route list (mh). (Closes: #250367)
* Make build-dependency on libldap2-dev unversioned. This was just a paranoia
measure and the buildds are using this version anyway (am).
* escape some dashes in manpages (am).
* Replace the three test -a/-o with &&/|| constructs, and egrep with grep
-E (am).
* Use symbolic name instead of signal numbers for trap (am).
* Add explanation on missing SPF-support to README.Debian (am).
* remove MESSAGE_SIZE_LIMIT rule from DATA acl, use global
message_size_limit instead. Thanks to Matthias Gärtner for pointing
this out to me (mh).
* Increase MAX_NAMED_LIST to 32 for daemon-heavy (am). (Closes: #253959)
* add a reportbug-script to gather additional information. This way we do
not rely on possibly out of date information in debconf (am).
(Closes: #255645)
* Fix off-by-one error in queryprogram router (am).
* set "tls_tempfail_tryclear = false" on remote_smtp_smarthost transport
(am, Thanks to Dan Jacobson for the suggestion). (Closes: #253931)
-- Andreas Metzler <ametzler@debian.org> Mon, 19 Jul 2004 15:16:28 +0200
exim4 (4.34-2) unstable; urgency=medium
* Urgency medium because CAN-2004-0400 isstill not fixed in testing and
because this version gets almost every single translation up to date.
* Norwegian nynorsk translation of debconf templates by Håvard Korsvoll.
(Closes: #248810)
* fix debug_print in remote_smtp_smarthost transport. (Closes: #248922)
* For minimal_dns update-exim4.conf(8) now tries to find out the primary
hostname itself and hardcodes this value in the generated configuration
file. (Closes: #241475,#248854)
* updated translations:
- ko (Korean) by Changwoo Ryu (Closes: #249026)
- it (Italian) by Danilo Piazzalunga
- lt (Lithuanian) by Gintautas Miliauskas (Closes: #249269)
- ru (Russian) by Nikolai Prokoschenko (Closes: #249298)
- es (Spanish) by Javier Fernández-Sanguino Peña
- nl (Dutch) by Bart Cornelis
- de (German) doublechecked and corrected by Dennis Stampfer
(Closes: #249925)
- fi (Finnish) by Tapio Lehtonen
- nb (Norwegian bokmål) by Klaus Ade Johnstad (Closes: #250344)
* New bugfix by upstream: "drop" in the DATA acl did not send 550 but dropped
the connection immediately.
* add a debian/watch file.
* Catalan (ca.po) translation of debconf templates by Aleix Badia i Bosch.
(Closes: #250113)
* Polish (pl.po) translation of debconf templates by Tomasz Z. Napierala.
(Closes: #250908)
* Rudimentary (5/58) Bosnian debconf templates translation by Safir
Šećerović (Closes: #251137)
* Document why exim tries to make an AAAA lookup at startup and how to stop
this in README.Debian. (Closes: #243822)
* Compile with -fno-strict-aliasing. Exim uses lots of casts that are not
allowed: "(char **)(&foo)" where foo is a pointer to unsigned char
(sourcecode: CSS(foo) with foo being a uchar), which results in lots of
"dereferencing type-punned pointer will break strict-aliasing rules".
Thanks to Andrew Suffield for the explanation.
* exim4-config uses features introduced in 4.33 - conflict with earlier
versions. (Closes: #249550)
-- Andreas Metzler <ametzler@debian.org> Mon, 31 May 2004 10:31:51 +0200
exim4 (4.34-1) unstable; urgency=low
* remove cruft from source
* New upstream version 4.34, exiscan -21
* includes fix for buffer overflow (CAN-2004-0400) fixed in previous
upload
* Again adds a received header before local_scan() is invoked.
* Adds a missing fclose() that was causing scan directories not
to be deleted on NFS spools.
* add debug_print statements on various routers (mh)
* add docs to smarthost router regarding secondary MX setup (see
#248370) (mh)
* don't ask any more for relay_to_domains if configuring for
smarthost and satellite setup. (Closes: #248370) (am)
* straighten out remote_smtp transport by adding remote_smtp_smarthost
and using that in the smarthost router. (mh)
* add hubbed_hosts router for more flexible routing. (mh)
* add update-exim4.conf.template and use it in debian/rules (Closes:
#248338). (mh)
* remove debian/patches/60_upstream_fixes as the fix is already
included upstream now. (mh)
* add README.Debian-accountname (mh)
* updated translations:
- zh_CN (Simplified Chinese) by Carlos Z.F. Liu (Closes: #248464). (mh)
* Temporarily add a Build-Conflicts with libperl-dev 5.8.4-1. - This version
included a dyna-loader incompatible with programs linked against 5.8.3.(am)
-- Andreas Metzler <ametzler@debian.org> Wed, 12 May 2004 22:30:19 +0200
exim4 (4.33-1) unstable; urgency=low
* new upstream version 4.33, exiscan -20:
- includes the patches for rewriting and sighandler.
- new expansion conditions to e.g. match a domain in named domainlist.
* updated translations:
- fr (French) by Christian Perrier (Closes: #245342)
- el (Greek) by Konstantinos Margaritis.
* Document known configuration variables in update-exim4.conf(8).
* Make use of ${if match_domain to get rid of the ugly hack (two transports
and two routers) to rewrite the envelope from.
* Apply fix for verify=header_syntax buffer overflow (CAN-2004-0400).
-- Andreas Metzler <ametzler@debian.org> Thu, 6 May 2004 18:17:05 +0200
exim4 (4.32-2) unstable; urgency=low
* updated translations:
- pt (Portuguese) by Nuno Sénica. (Closes: #244296,#245694)
- el (Greek) by Konstantinos Margaritis (Closes: #244354)
- cs (Czech) by Miroslav Kure (Closes: #244368)
- da (Danish) by Claus Hindsgaul (Closes: #244508)
- it (Italian) by Danilo Piazzalunga (Closes: #245174)
- fr (French) by eric-m(at)wanadoo.fr (Closes: #245342) and Christian
Perrier
- ja (Japanese) by Kenshi Muto (Closes: #245430)
- hu (Hungarian) by VEROK Istvan
- nb (Norwegian Bokmål) by Steinar H. Gunderson
- pt_BR (Brazilian Portuguese) by André Luís Lopes
- ja (Japanese) by Kenshi Muto
- cs (Czech) by Miroslav Kure
- sv (Swedish) by André Dahlqvist (Closes: #245716)
* Basque (eu.po) translation of debconf templates by Piarres Beobide Egaña.
(Closes: #244401)
* Indonesian (id.po) translation of debconf templates by I Gede Wijaya S.
(Closes: #245120), updated (Closes: #245491)
* Turkish (tr.po) translation of debconf templates by Recai Oktas.
(Closes: #245751)
* Slovak translation of debconf templates by Peter Mann (Closes: #245809)
* Add comment in configuration file documenting that effective retry times
depend on _both_ retry-rules and frequency of queue running. Keep
default QUEUEINTERVAL at 30m because running the queue can be quite
expensive and because therespective RFCs suggest 30m as minimal waiting
time. (Closes: #242426)
* Installation over serial console/minicom only has a screen size of 80
characters x 24 lines available. Sigh. Shorten config-type question by
cutting down the introduction. (Closes: #244464). Shorten relay-net
question by replacing a unnecessarily complicated formulation with a
clearer one which closes: #226809.
* Debconf supports masquerading as a different host with rewriting not only
for "satellite" but also for "smarthost" system. (Closes: #229911).
- Introduces another but hopefully last pre-sarge template change.
(This includes final versions of the templates without the dead
references to "satellite" which closes: #229902.)
- Rewrite /this/ stuff at smtp transport time. /etc/email-addresses
rewriting still uses normal rewriting because it always has and because
it is easier to setup.
- This still does not address one basic issue, the misuse of /etc/mailname
for qualifying recipeints because this needs clarification in policy
_and_ changing MUAs to not do this. Therefore I declare this post-sarge.
- Thanks to Chris Cheney for the kick, and to Adam Conrad and Wouter
Verhelst for their help.
* Add two fixes from upstream:
- Change 4.31/55 was buggy and broke sender address rewriting and caching.
- Change 4.24/6 broke the SIGALRM handler with deliver_drop_privilege.
* README.TLS.gz and the actual configuration disagreed (Thanks, Richard
Lamont).
* Fix thinko in update-exim4defaults that made --queuetime a no-op.
-- Andreas Metzler <ametzler@debian.org> Mon, 26 Apr 2004 09:12:23 +0200
exim4 (4.32-1) unstable; urgency=low
* New upstream version 4.32 (exiscan 4.32-17)
- includes the fix for the caching bug and uses MAIL FROM <> as default
value for recipient callouts again.
- new exiscan adds a local "Received:" header to the copy passed to
spamassassin tofix evaluation of DNS lists, compensating for
ChangeLog 4.31/66. (Closes: #242730)
* Remove obsolete reference to auth_over_tls_hosts from documentation.
(Thanks Jonas Meurer)
* Enable SMTP authentication (hosts_try_auth) per default when sending
mail to smarthost. No need to edit the configuration-file anymore if you
just need to forward all mail to a smarthost with AUTH. (Closes: #203307)
* Hungarian translation of debconf templates by VEROK Istvan.
(Closes: #242931)
* remove "exim 3 will stay default MTA for Debian sarge" from
README.Debian as TPTB have decided otherwise. (Closes: #243687).
* Rewrite "Sender:"-header for "satellite" configuration profile, too.
(Closes: #228978)
* Use the normal user account set-up during installation as default
destination for delivery of mail for root. (Joey Hess)
* Shorten exim4/dc_postmaster template to fit on console. (Joey Hess)
(Closes: #242303)
* In template suggest using real-foo to force local delivery.
(Closes: #229909)
* Template changes reviewed by debian-l10n-english. There might still be
more changes, translators should probably wait a little bit longer before
updating the translation.
* On fresh installations smarthost profile only listens on loopback per
default. - There are valid uses of "smarthost" that require listening on
public interfaces but the most common one (dialup) does not.
* Ship README.Debian.UUCP by Andreas Barth in /usr/share/doc/exim4-base. -
This resolves our part of #201153.
-- Andreas Metzler <ametzler@debian.org> Sat, 17 Apr 2004 18:02:42 +0200
exim4 (4.31-2) unstable; urgency=low
* Fix caching bug in recipient callouts. (Nico Erfurth).
* Document removal of local_scan perl-plugin in NEWS.Debian file.
(Closes: #242227)
-- Andreas Metzler <ametzler@debian.org> Mon, 5 Apr 2004 15:55:12 +0200
exim4 (4.31-1) unstable; urgency=low
* New upstream version 4.31 (exiscan 4.31-16)
- Supports CRL (Certificate Revocation List) (Closes: #229063)
- exim_dbmbuild does not crash on _very_ long RHS values.
(Closes: #231597)
- route_list does not use a fixed length buffer anymore. (Closes: #231979)
- An empty tls_verify_certificates file is correctly interpreted as empty
list instead of breaking TLS. (Closes: #236478)
* Korean translation of debconf templates by Changwoo Ryu (Closes: #241499)
* Minor changes to rcpt_acl:
* add missing message = qualifiers. (Closes: #240862)
* resync against upstream default, incorporating change 4.23/30, allowing
"/" and "|" in nonlocal addresses.
-- Andreas Metzler <ametzler@debian.org> Mon, 5 Apr 2004 12:00:54 +0200
exim4 (4.30-8) unstable; urgency=low
* remove dc_never_users from /etc/exim4/u-ex.conf.conf and the corresponding
pattern DEBCONFnever_usersDEBCONF from the template. The code is
superfluous since 4.24 introduced FIXED_NEVER_USERS and was broken, user
changes were not preserved. (am)
* Link against libmysqlclient10 instead of libmysqlclient12 to circumvent
symbol-clashes when using PAM with libpam-mysql. (Closes: #235938) (am)
* Dump temporary build-conflict with broken po-debconf. (am)
* Copy ugly passwd-dependency from -base to -config. (am)
* Do not throw away adduser's errormessages. Together with the added
dependency noted above this (Closes: #237657). (am)
* Installed copy of default configuration-file (example.conf) refered to the
temporary install-directory. Ugly hotfix. (Closes: #236483)
* Italian translation of debconf templates by Danilo Piazzalunga.
(Closes: #237500)
* Rewrite generation of /etc/aliases because it was broken when running
under debbian-installer/debootstrap, which installs the packages with
DEBIAN_FRONTEND=nointeractive and reconfigures them later (report by
Florian Effenberger). (am)
Instead of generating it _once_ and touching it never again ask for and
add alias for root if it is missing. Debconf template
exim4/dc_noalias_regenerate is not used any more. (Closes: #237524)
* Norwegian Bokmål translation of debconf templates by Steinar H. Gunderson.
(Closes: #237680)
* Dump local_scan perl-plugin. Upstream development has stopped. (am)
* Maintainer scripts now run with -x if environment variable EX4DEBUG
is set (mh).
* Minor clarifications of debian/README (mh).
* rm -rf Local on debian/rules clean (mh).
* Swedish translation of debconf templates by André Dahlqvist.
(Closes: #238987)
* Portuguese (pt) translation of debconf templates by Nuno Sénica.
(Closes: #239030)
* Lithuanian translation of debconf templates by Kęstutis Biliūnas.
(Closes: #239118)
* Add examples for client certificate-checking by J.H.M. Dassen (Ray)
(Closes: #236609)
* Adapt README.* to /etc/exim4/exim4.conf.template (am)
* Update to exiscan v16
-- Andreas Metzler <ametzler@debian.org> Wed, 24 Mar 2004 15:39:35 +0100
exim4 (4.30-7) unstable; urgency=low
* 4.30-6 was rejected, we use | and || for OR in dependency fields.
* libldap2 now uses GnuTLS10. Follow suit. (Temporarily bumped libldap2-dev
build-dependencies for paranoia's sake.)
-- Andreas Metzler <ametzler@debian.org> Mon, 23 Feb 2004 17:03:58 +0100
exim4 (4.30-6) unstable; urgency=low
* Finnish translation of debconf templates by Tapio Lehtonen.
(Closes: #229792)
* Simplified Chinese translation of debconf templates by Carlos Z.F. Liu.
(Closes: #229910)
* Spanish translation of debconf templates by Javi Castelo. (Closes: #232207)
* To increase robustness set explicit "domains = +local_domains" on all the
routers that are supposed to be handling _only_ local mail (i.e. anything
after dnslookup or smarthost) instead of relying on the no_more.
If the router handling remote addresses was modified by adding a
precondition the address would have wrongly been handled by the later
routers if the precondition failed, breaking at least "verify = sender".
(Closes: #230403) (am)
* In the data ACL add a Message-ID header to mails injected with SMTP from
+relay_from_hosts. (Exim stopped doing this by default in 4.30.) (mh)
* binary-all metapackage exim4 does not depend anymore on exim4-base with
exactly the same version. There is no necessity for dependencies that
strict and it broke both binary NMUs and installability on lagging
architectures. (Closes: #231678) (am)
* Give way to the "I use sid but keep it outdated by not running apt-get
upgrade ever."-fraction. exim4-base now depends on working versions of
passwd i.e. the version in woody or the one that has been in sid
for more than 6 months. (Closes: #230423,#230836,#231111) (am)
* in source-package symlink identical maintainerscripts. (am/mh)
* Ship README.Debian.xinetd, explaning why we do not use (x)inetd and how to
use xinetd properly if you insist. (Closes: #226627)
* Update Build-Depencies to fit the XFree86 4.3 packages.
* Make new lintian happy by quoting section and needs in eximon's
menu-file.
-- Andreas Metzler <ametzler@debian.org> Mon, 23 Feb 2004 15:48:56 +0100
exim4 (4.30-5) unstable; urgency=low
* Only use db_settitle if available (Closes: #226992) (am)
* Up to date debconf translations for all nine supported languages, thanks
to the translators: Miroslav Kure (Czech), Claus Hindsgaul (Danish),
Konstantinos Margaritis (Greek), Christian Perrier (French),
Kenshi Muto (Japanese), Bart Cornelis (Dutch), André Luís Lopes
(Brazilian Portuguese) and Ilgiz Kalmetev (Russian) (am)
* After merging translations split the configtype-template, using the
__Choices trick. I don't think I made any errors because podebconf's
output has not changed. (am)
* Don't use /etc/mailname (DEBCONFvisiblenameDEBCONF) as primary_hostname
for minimaldns option. (Closes: #225477)
* (Re)introduce /etc/exim4/exim4.conf.template as alternative to the
multiple small files in /etc/exim4/conf.d/ and make it the default choice
for fresh installations. This trades in a loss of comfort (you will again
need to merge in each small change manually) for increased stability.
(Closes: #224828) (am)
* Disable piping to programs in /etc/aliases per default, because they would
run as Debian-exim:Debian-exim per default. Add README.system_aliases
suggesting dedicated router/transport pairs (am/mh) (Closes: #228062)
* modify create-custom-package and adapt debian/rules to allow
building multiple named custom packages in a single build. (mh)
* "dpkg-reconfigure exim4-config" actually tells exim4 to read the updated
configuration. (am)
* Use -qqf instead of -qf in the ip-up.d file to force delivery of all
messages over a single SMTP connection. (Closes: #228001)
-- Andreas Metzler <ametzler@debian.org> Wed, 21 Jan 2004 15:09:00 +0100
exim4 (4.30-4) unstable; urgency=low
* Updated Japanese debconf template translation by Kenshi Muto
(Closes: #224584)
* Remove bashism from update-exim4.conf (Closes: #224617) (Jochen Voss)
* Czech translation of debconf templates by Miroslav Kure (Closes: #225713)
* Fix typos in README.Debian. (Closes: #225149) (Vincent Lefevre)
* Replace first, too long debconf question with three short ones (Joey
Hess) (Closes: #222720)
* Use a custom debconf title. (Closes: #222715)
* Greek translation of debconf templates by Konstantinos Margaritis
(Closes: #226844)
-- Andreas Metzler <ametzler@debian.org> Fri, 9 Jan 2004 09:12:07 +0100
exim4 (4.30-3) unstable; urgency=low
* update debian/copyright from NOTICE. (No substantial changes, credits
for new code) (am)
* missing \| made exim4-base.postinst configure hang. (Closes: #224294) (am)
* update-exim4.conf: Don't try chown if not running as root. (mh)
* Remove useless definition of an auth_over_tls_hosts hostlist in
03_exim4-config_tlsoptions. - It was probably a leftover from somebody
running convert4r4. (am)
* Make it possible to override spooldir in another config-file snippet, too.
(Closes: #223973)
-- Andreas Metzler <ametzler@debian.org> Fri, 19 Dec 2003 15:27:50 +0100
exim4 (4.30-2) unstable; urgency=low
* Fix exim4-base.logrotate to create logfiles accessible for the new
exim-user. (Closes: #223860,#223862)
* comment in 03_exim4-config_tlsoptions refered to the user "mail" too.
-- Andreas Metzler <ametzler@debian.org> Sat, 13 Dec 2003 15:01:20 +0100
exim4 (4.30-1) unstable; urgency=low
* Exim now runs under its own uid (Debian-exim) instead of using
mail:mail. (am)
WARNING: You cannot downgrade this version to an older one without
manual chown|chgrp all files owned by Debian-exim to mail.
- control: dependency on adduser and virtual package exim4-config-2 to
force review of external -config packages.
- use a statoverride for passwd.client.
- different postinst scripts:
* adduser.
* chown|chgrp files/directories owned by mail (group|user) to
Debian-exim.
* update-exim4.conf does not exit immidiately if /etc/exim4/exim4.conf
exists AND -o is specified. (Bill Moseley)
* Brazilian Portuguese debconf template translation by André Luís Lopes
(Closes: #219781)
* Dutch debconf template translation by Bart Cornelis (cobaco)
(Closes: #220694)
* Pull Dansk debconf template translation from ddtp.
* Use a macro to make it possible to overide the value of spool_directory
with -DSPOOLDIR=. Needed for mailscanner, (Closes: #221468), suggested by
Matthias Klose.
* enable support for Cyrus saslauthd (package sasl2-bin,
/var/run/saslauthd/mux) for SMTP AUTH against /etc/shadow. (am)
* Christian Perrier has reviewed the debconf-templates and changed them to
follow the "Debconf Templates Style Guide". (Closes: #221838) Thanks to
the (ru|nl|fr|pt_BR) translators for updating their translations.
* New upstream version 4.30 with exiscan 4.30-14 (am)
- option table for -d in exim(8) readable (but not perfect).
(Closes: #214853)
- Messages for configuration errors now include the name of the main
configuration files (Closes: #202136)
- does not reject IPv6 address literals in EHLO/HELO anymore
(Closes: #222521)
* exim4-config.config: support going back to previous *package* when invoked
by base-config 2.0. (Closes: #222773). Suggested by Joey Hess. (am)
* exim4-config now conflicts with non-exim4 packages providing MTA, to keep
dselect from automatically installing it (and -base) on dist-upgrades on
systems that use a different MTA. (mh)
* exim4-base depends on netbase again because exim requires
/etc/services.(mh)
* reindent init-script with two spaces instead of tabs to fit it in 80
chars/line. (Closes: #221458)
-- Andreas Metzler <ametzler@debian.org> Mon, 8 Dec 2003 16:52:32 +0100
exim4 (4.24-3) unstable; urgency=low
* rename create-custom-package to create-custom-config-package (mh)
* add create-custom-package to create renamed exim4-daemon-custom (mh)
* README.TLS: Don't suggest to use commands messing up the local terminal
(Sander Smeenk)
* Pull Dansk debconf translation from ddtp (not yet up to date)
* correct last references to uncompressed /u/s/d/e/README.Debian
(Closes: #216639), also kill references to exim-tls. (Closes: #216979)
(Kevin "Starfox" Arima). (am)
* add exim4-config-medium template package to sources, document (mh)
* Update to exiscan 4.24-13 (bugfix-release).
* Ask about mailname after configtype. (Closes: #217931) (am)
* minor thinko in debconf "local mail only"-config. (am)
* update-exim4.conf: now add comment indicating the source file
(Closes: #202040) (mh)
* add --confdir option to update-exim4.conf (mh)
* add "nodaemon" and "queueonly" option to /etc/default/exim4 and
init script (mh).
* Fix po2debconf on woody systems with old debhelper and po2debconf. (am)
* exim4-config does not depend on exim4-base. (am)
* Use "command -v" to check for existence of invoke-rc.d instead of
hardcoding its path. (am)
* Russian debconf translation by Ilgiz Kalmetev (Closes: #219101)
-- Andreas Metzler <ametzler@debian.org> Tue, 4 Nov 2003 12:18:38 +0100
exim4 (4.24-2) unstable; urgency=low
* Grammar of debconf-templates rectified by Ben Foley.
* Handholded by Denis Barbier I have imported debconf translations from
postfix: fr.po (Philippe Batailler), ja.po (Kenshi Muto), nl.po (Bart
Cornelis) and pt_BR.po (André Luís Lopes). It is just 5 translated
messages, 4 fuzzy translations, but it's a start.
* No more first person in debconf-templates (Adam D. Barratt)
* README.TLS was updated.
* pseudopackage libxaw-dev is gone in sid (and libxaw7-dev is already
available in woody) - Removed from build-depends.
* French debconf translation by Christian Perrier (Thanks for the other
hints, too.)
* Build-Conflict with broken po-debconf (= 0.8.0). (Closes: #215432)
* Add menu-entry for eximon (Artur R. Czechowski) (Closes: #215579).
* Resolve name-clash between client- and server-side authenticators (Bug
found by Rob Ristroph)
-- Andreas Metzler <ametzler@debian.org> Wed, 15 Oct 2003 12:45:49 +0200
exim4 (4.24-1) unstable; urgency=low
* New upstream version
- 55_fixesfrom-4.23.dpatch is not needed anymore.
- most interesting new feature: $acl_xx are now saved with the
message, and can be accessed later in routers, transports, and filters.
- Cannot run deliveries as root anymore. If you don't redirect mail for
root via /etc/aliases or other means to a nonpriviledged account the
mail will be delivered to /var/mail/mail with permissions 0600 and owner
mail:mail. Change to local_user router to keep it from trying to route
mail for root.
* debconf for exim4-config pointed to /u/s/d/e/README.Debian but the
file is available as README.Debian.gz (Closes: #211934)
* exim(8) manpage provides correct NAME section for mailq/runq/... to
generate corresponding whatis/apropos info (Thanks to Dan Jacobson
<jidanni@jidanni.org> for mentioning lexgrog(1))
* polish and crosslink documentation about SMTP AUTH in config-files,
documentation and debconf templates. (Closes: #202920)
* Ship README.SIEVE (Thanks to Ross Boylan)
* Sync some debconf templates against the respective ones in postfix
2.0.16, to limit the work of translators.
* update-exim4defaults/init-script: Add a new value fuer QUEUERUNNER,
"ppp". - Don't run queue by daemon but still run it from
/etc/ppp/ip-up.d/exim4. (Dan Jacobson pointed out that this was very
akward to accomplish with old setup.) update-exim4defaults now exits with
an error if the argument for --queuerunner is invalid.
* Enable gettext-style localisation of debconf templates with
compatibility code for woody
* Add German debconf-translation. (Some strings were copied from Martin A.
Godischs translation of postfix's templates).
-- Andreas Metzler <ametzler@debian.org> Sun, 5 Oct 2003 13:41:30 +0200
exim4 (4.22-5) unstable; urgency=low
* Sorry, this is not 4.23. Tom is on holidays and because 4.23 changes
some ACL code, exiscan needs in depth checking and not just applying the
patch by hand.
* exim4-config conflicts with bash (<< 2.05), because it cannot handle
aliases in functions. This does not necessarily fix dist-upgrades
from potato to sarge because debconf-config might happen before the
new bash is installed but will keep people running potato from
trying to install exim4-config. (Closes: #209720)
* sanitize /usr/sbin/exim4's permissions, building with 007 umask
could have installed it -rws--x--x
* evaluation -oP option for specifying pid-file is broken in 4.22, use fix
from 4.23 (Closes: #210847)
* "warn log_message blah" in DATA acl triggered dumping of full headers
to reject.log, although the message was not rejected by this acl
statement. Take fix from 4.23. (Closes: #208782)
* On cross-upgrades from exim3 unfold lines continued with a backslash
in the old exim3 configuration before trying to parse it to preanswer the
debconf-questions. (Closes: #210404) First instance of using perl in our
maintainer-scripts, but I could not do it with sed.
-- Andreas Metzler <ametzler@debian.org> Fri, 19 Sep 2003 13:55:07 +0200
exim4 (4.22-4) unstable; urgency=low
* Update to exiscan-acl revision -12. (Emergency fix: When you were using
'discard', and it was the last verb affecting a message, the mbox spool
files in the scan directory were not cleaned up.)
* Add syslog2eximlog by Martin Godisch, a script to make logfiles produced
with exim option "log_file_path = syslog" readable for eximstats.
(Closes: #208524)
* Enhance description of -heavy and light a little bit. (Closes: #208404)
* Standards-Version: 3.6.1, no changes required, we already prompt with
debconf.
-- Andreas Metzler <ametzler@debian.org> Thu, 4 Sep 2003 19:19:25 +0200
exim4 (4.22-3) unstable; urgency=low
* Add copright notice of exiscan-acl to debian/copyright.
-- Andreas Metzler <ametzler@debian.org> Wed, 27 Aug 2003 17:49:46 +0200
exim4 (4.22-2) unstable; urgency=low
* Include exiscan-acl patch 4.22-10 http://duncanthrax.net/exiscan-acl/
in -heavy and -custom (Closes: #204698)
* clean up gnutls-params on purge of base-package.
-- Andreas Metzler <ametzler@debian.org> Wed, 27 Aug 2003 12:50:59 +0200
exim4 (4.22-1) unstable; urgency=low
* new upstream version 4.22. Please take a look at README.UPDATING
and NewStuff in /usr/share/doc/exim4-base/
-- Andreas Metzler <ametzler@debian.org> Mon, 18 Aug 2003 16:51:47 +0200
exim4 (4.20-5) unstable; urgency=low
* Fix EHLO/HELO buffer-overflow CAN-2003-0698 (Closes: #205716)
* exim-gencert was using '.' as separator for chown.
* "head -n 1" instead of "head -1" in scripts
* install /etc/exim4/passwd.client as root:mail 0640 (Closes: #205104)
(it needs to be readable for the exim-user or -group, i.e. mail:mail)
* set mode_fail_narrower = false for mail_spool and maildir_home transports
(Closes: #204228)
* Standards-Version: 3.6.0, no changes required.
-- Andreas Metzler <ametzler@debian.org> Sat, 16 Aug 2003 17:40:17 +0200
exim4 (4.20-4) unstable; urgency=low
* CFILEMODE and dc_local_interfaces were not saved in update-exim4.conf.conf
on fresh installations.
* update-exim4.conf: Remove comments _after_ doing DEBCONFpatternDEBCONF
replacement.
* conf.d/auth/30_exim4-config_examples: Fix forced failure of AUTH LOGIN
client on non-encrypted connections.
-- Andreas Metzler <ametzler@debian.org> Tue, 5 Aug 2003 10:38:16 +0200
exim4 (4.20-3) unstable; urgency=low
* hub_user router: set correct .ifdef, remove superficial condition=
* don't generate main/03_exim4-config_neverusers dynamically, use
a DEBCONF_foo pattern that is replaced by up-ex4.conf. exim4 should
now play nicely with readonly /etc.
* Enable exim-filter in .forward per default. (Closes: #201827)
* Enable maildrop-delivery for users with ~/.mailfilter
* Easier setup of client side SMTP authentification:
-short README file.
-passwd.client example shipped in CONFDIR
-30_exim4-config_examples:
+change order, prefer cram-md5.
+enable by default (auth-plain and -login only for TLS protected
connections). They remain inactive while hosts_try_auth is
disabled.
* add comments listing the filename to the files in conf.d that were
changed anyway. Addresses part of 202040.
* remove misleading comments about "bottom of file" or "see below"
from config-snippets. (Closes: #202165)
* Disable orphaned inetd-entries from exim (v3) caused by bugs #202670 and
#182206 in exim4-config's postinst. I'll close #201143 manually.
* Restructure and clarify README.Debian and polish update-exim4.conf(8).
Thanks to Ross Boylan for pushing me in the correct direction.
-- Andreas Metzler <ametzler@debian.org> Thu, 24 Jul 2003 10:29:19 +0200
exim4 (4.20-2) unstable; urgency=low
* update-exim4.conf works without daemon-package (Closes:#195329)
* Add dnslookup_relay_to_domains router for "internet" config to
allow relaying for domains with an MX pointing to an rfc1918
address. (Closes: #198410) (MH)
* update-exim4.conf would hang if one of the subdirectories in conf.d
was empty. (Report and fix by Marc Merlin)
* Build-Depend on libgnutls7
* Preserve comments in update-exim4.conf.conf by first adding missing
items and replacing the values with sed instead of regenerating file
from scratch (Closes: #184099)
* Set return_path_add, delivery_date_add and envelope_to_add for
maildir-transport (Closes: #196178)
* Use email-addresses file in /etc/ instead of in /etc/exim4 as exim3 does,
exim4-config now needs to conflict with exim,exim-tls. We still include
code for evaluating the old file if it exist, but suggest moving the
contents to the new file in NEWS.Debian. postinst will remove old orphaned
file if it is unmodified. (Closes: #197136)
* Set return_fail_output instead of return_output on address_pipe transport.
(Closes: #201280)
* Stop generating rewriting rules dynamically, exim4 accepts any
"address-list" item as source-pattern for rewriting. (Changelog entry
obfuscated on purpose, read exim4debian for painful details.). Remove old
dynamically generated files in postinst if they were managed by upex4conf.
* daemon-light supports TLS (Closes: #193596)
-- Andreas Metzler <ametzler@debian.org> Wed, 16 Jul 2003 13:36:27 +0200
exim4 (4.20-1) unstable; urgency=low
* New upstream
* Standards-version 3.5.10 (no changes required)
* The doc packages have got new sane names - update Suggests.
* Fix a endless loop (currently ownly showing when upgrading from old
experimental packages) - Thanks to Marc Langer for the report.
* introduce ${Upstream-Version} as substitution variable for
debian/control (MH)
* Make dependencies less strict, *-daemon-* 12.34-1 can be installed with
-base 12.34-5.
-- Andreas Metzler <ametzler@debian.org> Mon, 19 May 2003 14:14:16 +0200
exim4 (4.14-1) unstable; urgency=low
* Upload to sid (Closes: #179066)
* Ship an (empty) acl_check_data with commented out examples. Add
Infrastructure to ease their activation. (MH)
-- Andreas Metzler <ametzler@debian.org> Fri, 16 May 2003 18:02:46 +0200
exim4 (4.14-0.6) experimental; urgency=low
* Don't link to gnutls' (tasn,gcrypt) dependencies directly
(Closes: #193018)
* fix AUTH PLAIN server side example to work if the data is not given
in initial-response (exim-bug 193094)
* ACL-updates (MH)
-- Andreas Metzler <ametzler@debian.org> Wed, 14 May 2003 12:16:06 +0200
exim4 (4.14-0.5) experimental; urgency=low
* updated version of dlopen patch (Marc Merlin)
* don't regenerate files managed by update-exim4.conf on package
updates if the local admin had deleted them.
* replace the listenonpublic yes/no question with one that allows one to
specify on which interfaces to listen to (Closes: #190498)
* new dc-question for dial-on-demand-users to minimize DNS lookups
-- Andreas Metzler <ametzler@debian.org> Thu, 1 May 2003 16:03:59 +0200
exim4 (4.14-0.4) experimental; urgency=low
* Renamed conf.d files from *exim4-base* to *exim4-config* since
they can now be found in the exim4-config package.
WARNING, this breaks updates. After installation, execute
something like the following bash snipped to rename your files:
for i in `find . -name *exim4-base*`; do mv $i ${i/exim4-base/exim4-config}; done
(MH)
* Include more sophisticated check_rcpt ACL, include documentation,
include even more sophisticate check_rcpt ACL in
/u/s/d/e4-config/examples/acl. (MH)
* update-exim4.conf now filters out consecutive empty lines (MH)
* make update-exim4.conf's behaviour for configtype=none more consistent,
respect CFILEMODE and --removecomments. (Thanks to Marc Merlin)
* add warning about editing /etc/exim4/exim4.conf in place (Marc Merlin)
* use .rul instead of .disabled to override/disable configfiles in
/etc/exim4/conf.d/ (Suggested by Marc Merlin)
* fix smtp auth client-side examples (Closes: #188828), thanks to Karl
M. Hegbloom for the bug report (AM)
* add @DPATCH@-tag to patches, as required by dpath-edit-patch in
dpatch 1.17 (AM)
-- Andreas Metzler <ametzler@debian.org> Fri, 25 Apr 2003 12:37:50 +0200
exim4 (4.14-0.3) experimental; urgency=low
* add '|| true' to every call of db_input. (Thanks to Pierfrancesco Caci for
the bugreport.) (Closes: #187008)
* Don't set received_header_text in 02_exim4-base_options, use upstream's
default.
* renumber routers to have more space for local customization.
WARNING WARNING upgrade is broken, execute this in
/etc/exim4/conf.d/router to get rid of the superfluous files:
mv 20_exim4-base_domain_literal 100_exim4-base_domain_literal
mv 22_exim4-base_primary 200_exim4-base_primary
mv 24_exim4-base_real_local 300_exim4-base_real_local
mv 26_exim4-base_system_aliases 400_exim4-base_system_aliases
mv 28_exim4-base_hubuser 500_exim4-base_hubuser
mv 30_exim4-base_userforward 600_exim4-base_userforward
mv 32_exim4-base_procmail 700_exim4-base_procmail
mv 34_exim4-base_maildrop 800_exim4-base_maildrop
mv 36_exim4-base_local_user 900_exim4-base_local_user
* add *syntax_errors* directives to userforward router, to use partially
valid .forward files instead of skipping them. (Marc Haber)
* update mysql build-depends
-- Andreas Metzler <ametzler@debian.org> Wed, 9 Apr 2003 16:19:46 +0200
exim4 (4.14-0.2) experimental; urgency=low
* upstream fix for crash with AUTH PLAIN
* upgrade to policy 3.5.9.0 (CFLAGS in debian/rules)
* Add (maildir) transport for handling file addresses generated by
alias or .forward files if the path ends in "/", enabled for .forward per
default, but not for /etc/aliases. Thanks to Andreas Horter.
* add debconf question to move files from exim3 spool to exim4 spool
* run exim_tidydb as mail:mail using start-stop-daemon
* Make manpages UTF-8 compatible with nicer quotes and escaped dashes.
* fakeroot debian/rules builddaemonpackages=exim4-daemon-custom \
buildbasepackages=no binary produced a broken exim4-config package.
(Bug found by Soren Andersen)
* introduce new replacement item DEBCONFpackageversionDEBCONF holding
the complete version number, might be useful for Received headers (Marc
Haber)
-- Andreas Metzler <ametzler@debian.org> Thu, 27 Mar 2003 17:04:02 +0100
exim4 (4.14-0.1) experimental; urgency=low
* New upstream version
* 20_fix.lsearch.dpatch not needed anymore
* use new feature .ifdef instead of simulating it with condition=...
* change priority of exim4-daemon-light to important
-- Andreas Metzler <ametzler@debian.org> Thu, 13 Mar 2003 15:03:41 +0100
exim4 (4.12-0.2) experimental; urgency=low
* instead of generating 22_exim4-base_primary by copying the correct
file into it, use condition=... to select the correct one. Similar
change to 28_exim4-base_hubuser
-- Andreas Metzler <ametzler@debian.org> Thu, 6 Mar 2003 11:55:55 +0100
exim4 (4.12-0.1) experimental; urgency=low
* minimal doc-updates
* init-script: output status-message before starting upex4conf()
* polish smtp-auth examples - don't hardcode passwords in main
configuration file.
* change default file-permissions of configfile to 0644. This can be changed
by setting CFILEMODE in the default file.
* rename debian/patches/*, giving each one an unambiguous number
* ignore private rfc1918 and APIPA addresses in internet router (MH)
* correct info about authorship of dlopen patch
* don't link exim4-daemon-light against PAM (explicitly link it against libdl)
* same_domain_copy_routing = yes for primrout-internet, primrout-satellite
and primrout-smarthost (MH)
* rename debconf.results to update-exim4.conf.conf, add upgrading-magic for
upgrading from 4.12-0 and earlier (marked as REMOVEMEBEFORERELEASE)
* introduce REMOVEMEBEFORERELEASE-tag, grep -r on debian/ will show us all
the cruft that needs to be removed before uploading to unstable.
-- Andreas Metzler <ametzler@debian.org> Wed, 5 Mar 2003 19:03:59 +0100
exim4 (4.12-0) experimental; urgency=low
* removed TODO marker from the copyright file
* version number for first Debian upload
* built i386 binary package on sid
-- Marc Haber <mh+debian-packages@zugschlus.de> Fri, 21 Feb 2003 14:40:42 +0100
exim4 (4.12-0.0.21) experimental; urgency=low
* update copyright
* exim-gencert: generate certificates valid for three years instead 30
days
* remove debian/debconf/exim4.conf.template
* enable LMTP, LOOKUP_NIS and mailstore for daemon-light
-- Andreas Metzler <ametzler@logic.univie.ac.at> Fri, 21 Feb 2003 12:55:40 +0100
exim4 (4.12-0.0.20) experimental; urgency=low
* ship /usr/lib/exim4/exim4 and use it to check whether daemon package
is installed.
* Exim doesn't require a HUP after logrotation. (See spec 44.2) (MH)
-- Andreas Metzler <ametzler@downhill.at.eu.org> Thu, 20 Feb 2003 19:23:45 +0100
exim4 (4.12-0.0.19) experimental; urgency=low
* Ship upstream-changelog only in exim4-base, Symlinks in packages depending
on it. Split off changelog entries up to 3.34-1 to changelog.Debian.old
which is only included in exim4-base. - Spares about 100KB.
* Ship ACKNOWLEDGMENTS in exim4-base docs.
* remove debian/exim4-config.docs, files are already shipped in exim4-
base
* disable some the unneeded dh_* commands from binary-indep target.
* make exim4 a metapackage
-- Andreas Metzler <ametzler@downhill.at.eu.org> Thu, 20 Feb 2003 12:41:17 +0100
exim4 (4.12-0.0.18) experimental; urgency=low
* split off all configuration to exim4-config
* include exim4-config-simple source package
* include script to generate exim4-config source package
* changed distribution to experimental
* Add patch by Phil Hazel to fix lsearch*@ lookups. (AM)
* Remove exim4-daemon-perl; merge it into exim4-daemon-heavy (AM)
* Prepare removal of "exim4" daemon-flavour: Exchange the roles of
"exim4" and "exim4-daemon-light" in debian/rules: build helper
binaries, eximon, et.al. while building exim4-daemon-light. Rename
EDITME.exim4-base.diff to EDITME.exim4.diff. (AM)
-----
WARNING: This breaks your debian/EDITME.exim4-custom.diff, as it was
generated to show the differences to debian/EDITME.exim4-base instead of
EDITME.exim4-light. (AM)
-----
-- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 18 Feb 2003 16:16:45 +0100
exim4 (4.12-0.0.17) unstable; urgency=low
* mv 26_exim4-base_aliases 26_exim4-base_system_aliases (MH)
* mv 30_exim4-base_forward 30_exim4-base_userforward (MH)
* WARNING: upgrades are broken!
-After ugrading delete conffiles no longer in package in directories
below /etc/exim4/conf.d/:
router/26_exim4-base_aliases
router/30_exim4-base_forward
* all file names for transports and routers are now consistent with
Transport/Router defined inside (MH)
* add debug_print to all transports/routers (MH)
* add cut -d\ -f1 to all md5sum calls in pipes (MH)
* add man page for exiqgrep (MH)
* fix typos in exiqsumm and exicyclog man page (MH)
* Don't install exim.8.diff as manpage, apply the patch instead. (AM)
-- Andreas Metzler <ametzler@logic.univie.ac.at> Sat, 15 Feb 2003 16:35:26 +0100
exim4 (4.12-0.0.16) unstable; urgency=low
* Define CONFDIR-macro and use it in update-exim4.conf and some files in
CONFDIR. (AM)
* Enhance update-exim4.conf: remove comments by default, allow to write
output to a different file. (AM)
* update-exim4.conf: check validity of configfile before installing it
* fix breakage with newer md5sum - thanks to Sander (AM)
* check in init-script for smtp-service in inetd that is compatible with
openbsd-inetd's extended syntax (Hubert Chan) (AM)
* Don't link against libwrap, exim3 doesn't either (Alexander Koch) (AM)
-- Andreas Metzler <ametzler@downhill.at.eu.org> Fri, 14 Feb 2003 19:55:54 +0100
exim4 (4.12-0.0.15) unstable; urgency=low
* If exim4/dc_listenonpublic=false add an explaing line to the
resulting configfile instead of a blank-line (Marc Haber)
* In postinst and cronjob make sure that db files are owned by
mail:mail
* Add buzzword convert4r4 to description of "No configuration" profile
* Body of manpage exim_convert4r4: s/convert4r4/exim_convert4r4/g
* Change maintainer, add Marc Haber to Uploaders
-- Andreas Metzler <ametzler@downhill.at.eu.org> Sun, 2 Feb 2003 22:06:06 +0100
exim4 (4.12-0.0.14) unstable; urgency=low
* fix bugs found by Marc Haber:
- search for email-addresses file in /etc/exim4/
- s/hostname -fqdn/hostname --fqdn/
* exim4-base.config: don't grep in /etc/aliases if does not exist yet.
* clear up config-script, using both $mailname and $dc_mailname was
irritating.
* fix wrong logic for aliases generation (= instead of !=)
* fix major breakage of debconf code: config-script is called two times
_before_ postinst writes debconf.results, db_set-commands (for sane
defaults) in the second-run overwrote the answers given by the user.
-- Andreas Metzler <ametzler@downhill.at.eu.org> Sat, 1 Feb 2003 15:06:58 +0100
exim4 (4.12-0.0.13) unstable; urgency=low
* link against GNUTLS
-- Andreas Metzler <ametzler@downhill.at.eu.org> Fri, 31 Jan 2003 16:32:31 +0100
exim4 (4.12-0.0.12) unstable; urgency=low
* clean up at purge: Remove logfiles, ask about removing
undelivered mails in spool directory.
-- Andreas Metzler <ametzler@downhill.at.eu.org> Fri, 31 Jan 2003 13:32:37 +0100
exim4 (4.12-0.0.11) unstable; urgency=low
* clean up update-exim4.conf:
+ fix unconditional overwriting 03_exim4-base_neverusers
+ one central `tempfile -m...`
+ add skeleton function example
* add missing 'set -e' to exim4-base.postrm
* If there are no debconf answers and we are making a cross upgrade
from exim3, try to parse its config file to seed debconf db.
-- Andreas Metzler <ametzler@downhill.at.eu.org> Sun, 26 Jan 2003 12:22:23 +0100
exim4 (4.12-0.0.10) unstable; urgency=low
* Get rid of error messages: don't call chmod/chown in
debconf/update-exim4.conf if the respective files don't exist. Don't try
to kill non running daemons.
* Don't start unconfigured daemon in init script, ie. require either
${dc_eximconfig_configtype}" != "xnone or existence of handcrafted
/etc/exim4/exim4.conf.
Thanks to Alexander Koch for firmly pushing me this way.
* dc_listenonpublic was overwritten to true in config script.
* Typo in exim4-base.postrm prevented removal of
/etc/exim4/conf.d/router/28_exim4-base_hubuser
* Clean up /var/spool/exim4 properly; at least if there are just empty
directories.
* hub_user was broken because of unescaped $.
* import updated 10_daemon_close_fds.dpatch from Steve.
* only set neverusers if root is aliased somewhere.
-- Andreas Metzler <ametzler@logic.univie.ac.at> Fri, 24 Jan 2003 17:14:13 +0100
exim4 (4.12-0.0.9) unstable; urgency=low
* update-exim4defaults: Fix bugs, add option --init
* /etc/default/exim4 is no conffile anymore, it is generated with
update-exim4defaults.
-- Andreas Metzler <ametzler@logic.univie.ac.at> Fri, 17 Jan 2003 13:39:46 +0100
exim4 (4.12-0.0.8) unstable; urgency=low
* Don't ship now unneeded empty /var/lib/exim4/masquerade and
/var/lib/exim4/email_addresses
* move hub_user router to /etc/e4/c.d/
* move primary-router definition to /etc/e4/c.d/
* code in debian/rules installing /etc/exim4/conf.d/ tree ignores CVS
directories
* WARNING: upgrades from 0.0.6 and 0.0.7 are broken!
-After ugrading delete conffiles no longer in package in directories
below /etc/exim4/conf.d/:
rewrite/30_exim4-base
router/28_exim4-base_hub_user
- replace router/22_exim4-base_primary with a file containg only
the line "# d41d8cd98f00b204e9800998ecf8427e"
run update-exim4.conf afterwards and start daemon.
-- Andreas Metzler <ametzler@logic.univie.ac.at> Tue, 14 Jan 2003 17:44:50 +0100
exim4 (4.12-0.0.7) unstable; urgency=low
* Add configuration file managment code using md5sums stored in the file
itself to update-exim4.conf(8). Use it and move files for evaluation of
/e/e4/email-addresses and the masquerading rules from /var/lib/exim4 to
/etc/. Gets rid of /etc/exim4/conf.d/rewrite/30_exim4-base and its two
.includes.
-- Andreas Metzler <ametzler@downhill.at.eu.org> Tue, 14 Jan 2003 13:05:51 +0100
exim4 (4.12-0.0.6) unstable; urgency=low
* generate up to date manpage for eximstats with pod2man.
* EXPERIMENTAL: Split /etc/exim4/exim4.conf.template to little files
in /etc/exim4/conf.d/ - update docs accordingly.
* fix wrong path in exim4-base.doc-base.spec
-- Andreas Metzler <ametzler@downhill.at.eu.org> Sun, 12 Jan 2003 18:25:40 +0100
exim4 (4.12-0.0.5) unstable; urgency=low
* enhance default-file a lot.
* ship update-exim4defaults(8) - a script to allow other packages to modify
the default-file.
-- Andreas Metzler <ametzler@downhill.at.eu.org> Mon, 6 Jan 2003 23:00:15 +0100
exim4 (4.12-0.0.4) unstable; urgency=low
* Compile perl plugin with -fPIC
* Enable IPv6 support (Andrew Mulholland)
* remove exim4-base.cron.d, it only contained comments (no inetd support).
* enhance default-file: Allow disabling any queue runs and passing
additional options to exim daemon and/or the queuerunner.
-- Andreas Metzler <ametzler@logic.univie.ac.at> Sun, 5 Jan 2003 13:16:37 +0100
exim4 (4.12-0.0.3) unstable; urgency=low
* Keep patches separate to make upgrading easier, using dpatch.
* Rename eximon to eximon4: Otherwise this would force anybody who has
installed eximon and runs exim v3 to switch to exim v4
* Polish package descriptions a little bit.
* Drop Recommends for netbase. We don't support inetd anyway.
-- Andreas Metzler <ametzler@downhill.at.eu.org> Tue, 31 Dec 2002 14:31:14 +0100
exim4 (4.12-0.0.2) unstable; urgency=low
* Actually compile with -O2 (Matthias Klose)
* Apply localscan_dlopen.patch from
http://marc.merlins.org/linux/exim/files/sa-exim-current/ to make it
possible to switch local_scan functions *without* recompiling exim.
* compile local_scan.c perl plugin as shared object that is dlopened,
document this in exim4-daemon-perl's description and doc-directory.
-- Andreas Metzler <ametzler@downhill.at.eu.org> Sat, 21 Dec 2002 14:01:24 +0100
exim4 (4.12-0.0.1) unstable; urgency=low
* New upstream 4.12, a strict maintenance release. Without any new features
(Don't worry - this is the real release i.e. Phil's third shot ;-)
-- Andreas Metzler <ametzler@logic.univie.ac.at> Wed, 18 Dec 2002 12:17:51 +0100
exim4 (4.11-0.0.4) unstable; urgency=low
* Get rid of /usr/lib/exim4/exim (see README.Debian for patched files)
* Use relative paths in debian/eximon.dirs
-- Andreas Metzler <ametzler@downhill.at.eu.org> Tue, 17 Dec 2002 13:40:19 +0100
exim4 (4.11-0.0.3) unstable; urgency=low
* fix dbm lookups (one-line patch to src/search.c)
-- Andreas Metzler <ametzler@logic.univie.ac.at> Fri, 13 Dec 2002 13:38:31 +0100
exim4 (4.11-0.0.2) unstable; urgency=low
* Fresh installs were broken, as the initial test in update-exim4.conf
failed.
* update-exim4.conf exits silently if /etc/exim4/exim4.conf exists.
* don't invoke update-exim4.conf in postinst if configtype=none.
-- Andreas Metzler <ametzler@logic.univie.ac.at> Wed, 11 Dec 2002 16:32:47 +0100
exim4 (4.11-0.0.1) unstable; urgency=low
* New upstream version 4.11:
includes spec und util/* in orig.tar.gz, diff is small again.
see NewStuff items 49 to 57 for new features since snapshot 4.10.13.
-- Andreas Metzler <ametzler@logic.univie.ac.at> Wed, 11 Dec 2002 13:01:07 +0100
exim4 (4.10.13-0.0.4) unstable; urgency=low
* reformat manpages a little bit, start each sentence on a new line, refer
to /usr/share/doc/exim4-base/
* remove the %s from PID_FILE_PATH
* apply debian/fix-pid.issue.patch to fix minor security issue
http://www.exim.org/pipermail/exim-users/Week-of-Mon-20021202/046978.html
* test in init-script for working config before reloading/restarting
(Andreas Piesk)
-- Andreas Metzler <ametzler@downhill.at.eu.org> Thu, 5 Dec 2002 13:04:51 +0100
exim4 (4.10.13-0.0.3) unstable; urgency=low
* update copyright from NOTICE
* Typos in exim(8)
-- Andreas Metzler <ametzler@downhill.at.eu.org> Wed, 4 Dec 2002 10:35:18 +0100
exim4 (4.10.13-0.0.2) unstable; urgency=low
* Fix path for eximon.bin in eximon script (Andreas Piesk)
* Add comments at the head of exim4.conf.template, containing a short
introduction to the configuration scheme.
-- Andreas Metzler <ametzler@downhill.at.eu.org> Tue, 3 Dec 2002 23:52:28 +0100
exim4 (4.10.13-0.0.1) unstable; urgency=low
* Snapshot 4.10.13
* CONFIGURE_FILE=/etc/exim4/exim4.conf:/var/lib/exim4/config.autogenerated
* update update-exim4.conf* and documentation accordingly.
* Generate config.autogenerated with same permissions as
/etc/exim4/exim4.conf.template (it might conatain passwords)
* Add BIG FAT warning at head of autogenerated file.
* don't ship /var/lib/exim4/config.autogenerated, simply remove it on
purge if it exists.
-- Andreas Metzler <ametzler@logic.univie.ac.at> Mon, 2 Dec 2002 12:45:58 +0100
exim4 (4.10.12-0.0.1) unstable; urgency=low
* Upgrade to testing snapshot 4.10.12
* patches accepted/superseded by upstream: exim4-MID-expanded.patch, hmac*,
perl.c.patch
* patches that do not apply cleanly anymore: bV_shows_openssl_version.txt,
daemon_close_fds.txt, gcc_attributes-eximon.diff, gcc_attributes.txt,
tls_common.txt, tls_misc.txt, tls_session_cache.txt.
* minimize changes to scripts/exim_install - use INSTALL_ARG=-no_symlink instead.
* no util/cramtest.pl util/logargs.sh util/unknownuser.sh in upstream
tarball - perhaps only in testing version?
-- Andreas Metzler <ametzler@downhill.at.eu.org> Thu, 28 Nov 2002 16:11:52 +0100
exim4 (4.10-0.srh20.19) unstable; urgency=low
* ship convert4r4 as /usr/sbin/exim_convert4r4 (with manpage)
* eximon does not provides/Conflicts: exim4-daemon
* switch AGAIN *-daemon provides MTA:
- *-daemon depends on -base instead of the other way round
- explicit "conflicts/replaces: exim, exim-tls" for the base package -
these need to add this the other way round, too (TODO).
- move symlinks for sendmail, mailq, rmail, rsmtp and their manpages (+the one
for newaliases) to the daemon-packages.
- no more non-debhelper-generated exim4-base.prerm, simplified
*daemon.postinst
* try to start daemon in postinst no matter whether configtype=none, people
might use it with a handcrafted exim4.conf.
* register /var/lib/exim4/email_addresses for dpkg.
-- Andreas Metzler <ametzler@downhill.at.eu.org> Sun, 24 Nov 2002 15:04:32 +0100
exim4 (4.10-0.srh20.18) unstable; urgency=low
* add "Replaces: exim4-daemon" to all the daemon flavours, needed for
switching.
* Marc Haber:
make exim4-daemon-custom actually work.
building from CVS was broken
clean target missed Local/eximon.conf
* exim-daemon-perl recommends libexim-localscan-perl
-- Andreas Metzler <ametzler@downhill.at.eu.org> Thu, 21 Nov 2002 17:04:54 +0100
exim4 (4.10-0.srh20.17) unstable; urgency=low
* add support for building a customized daemon (exim4-daemon-custom)
* tighten build-depends: official exim4-base linked against db3 won't
work well together with exim4-daemon-custom linked against libdb2
* ship compile time configuration (EDITME-files) in /usd/daemon-flavour.
* use /var/mail instead of /var/spool/mail (#169747)
* make uucp a trusted user. (#169545)
-- Andreas Metzler <ametzler@downhill.at.eu.org> Sun, 17 Nov 2002 23:06:29 +0100
exim4 (4.10-0.srh20.16) unstable; urgency=low
* fix Gecos pattern: 'From: "Andreas Metzler,,," <am...'#
* _big_ update for README.Debian: Document which patches were applied. Short
note about PAM.
* document that the perl flavour won't deliver any mail without
/etc/exim4/local_scan.pl in package description.
* fix examples for server-side SMTP AUTH
-- Andreas Metzler <ametzler@downhill.at.eu.org> Sat, 9 Nov 2002 10:12:34 +0100
exim4 (4.10-0.srh20.15) unstable; urgency=low
* Fix crash with perl 5.8 (threads), thanks to Eckebrecht von Pappenheim
<evp@heise.de>
* perl-package: search local_scan.pl in /etc/exim4 instead of /etc/exim.
-- Andreas Metzler <ametzler@downhill.at.eu.org> Wed, 6 Nov 2002 22:46:12 +0100
exim4 (4.10-0.srh20.14) unstable; urgency=low
* add /etc/default/exim4 (#123184, #95325)
* Don't start a queue runner with cron per default, exim runs as daemon.
* polish config-script: more states, strip blanks.
* Ask whether to bind to all local interfaces or only to localhost with sane
default depending on configtype. (#108853)
-- Andreas Metzler <ametzler@downhill.at.eu.org> Thu, 31 Oct 2002 14:05:50 +0100
exim4 (4.10-0.srh20.13) unstable; urgency=low
* send stdout of logrotate postrotate-script to /dev/null
* polish exim4-base.postinst and exim4-base.templates
* use tcp-wrappers
* simplify update-exim4.conf. There is no need to only add remote_smtp
transport for special configurations. It does not hurt and should make it
easy for users to activate smtp-auth.
* install configration example to examples subdirectory
-- Andreas Metzler <ametzler@downhill.at.eu.org> Tue, 29 Oct 2002 08:42:42 +0100
exim4 (4.10-0.srh20.12) unstable; urgency=low
* linked against external pcre
* clean up a little bit - move all manpages to debian/manpages/
* ship template /etc/exim4/email-addresses
* LFS support (-D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE)
* Don't force sender verification by default
* I actually use this version.
-- Andreas Metzler <ametzler@downhill.at.eu.org> Sun, 27 Oct 2002 17:10:16 +0100
exim4 (4.10-0.srh20.11) unstable; urgency=low
* if HUPed exim will rexec itself as /usr/lib/exim4/exim, changing the name
to exim - start-stop-daemon-daemon would not recognize it. Changed
init.script to exec /usr/lib/exim4/exim to set the processname to "exim".
This needs to be deuglified.
* use black magic in daemon-$flavour postinst to only start it there if
switching flavours.
* support for inetd has to wait for sarge+1
* fix description of 'exim4' daemon flavour.
-- Andreas Metzler <ametzler@downhill.at.eu.org> Sat, 26 Oct 2002 11:09:14 +0200
exim4 (4.10-0.srh20.10) unstable; urgency=low
* don't provide symlink /usr/sbin/exim anymore - this broke coinstallation
with uninstalled exim 3 - the exim3-init script started the exim4-daemon.
Ship symlink /usr/lib/exim4/exim -> /usr/sbin/exim4 and set BIN_DIRECTORY
to /usr/lib/exim4. This is a little bit ugly but the alterative would be to
patch 7 files in src.
* the daemon packages conflict with each other by each having
Conflicts/Provides: exim4-daemon
* Add doc base support for spec and filter.txt (bug 165961)
* Switching daemon flavours restarts them.
-- Andreas Metzler <ametzler@balrog.logic.univie.ac.at> Fri, 25 Oct 2002 16:14:44 +0200
exim4 (4.10-0.srh20.9) unstable; urgency=low
* apply exim4-MID-expanded.patch - make domain part of M-ID configurable.
Shipped in debian-subdir so it can be easily patch -R'd before official
debian release.
* set spool to /var/spool/exim4 in EDITME
* remove /var/run/exim4 on purge
* remove /var/(spool|log)/exim4 on purge if empty
* added manpages.
* allow relay for 127.0.0.1 : ::::1
* set host_find_failed = defer for smarthost router and mimick exim3. It
really sucks to get a frozen message and error to the postmaster _every_
time I try to send a message offline.
-- Andreas Metzler <ametzler@downhill.at.eu.org> Thu, 24 Oct 2002 14:00:05 +0200
exim4 (4.10-0.srh20.8) unstable; urgency=low
* info and html doc generated from separate source package - diff is
small
* remove m4 and texinfo from build-depends
-- Andreas Metzler <ametzler@downhill.at.eu.org> Thu, 24 Oct 2002 12:22:56 +0200
exim4 (4.10-0.srh20.7) unstable; urgency=low
* config script as state machine - allows going back!
* hopefully last forgotten entry of /var/{spool,log,run}/exim in postinst
and cron.* fixed.
-- Andreas Metzler <ametzler@downhill.at.eu.org> Thu, 24 Oct 2002 09:16:12 +0200
exim4 (4.10-0.srh20.6) unstable; urgency=low
* generate /etc/aliases with debconf
* remove dpkg-statoverride managment with debconf, ship exim binary as 4755
root:root.
* update debian/copyright from NOTICE.
* add (commented out) maildrop-transport to template
* add (commented out) maildir-transport to template
* Remove some backslashes in template
* Fix *lots of* cut and paste errors, introduced by generating the
configuration template from the debconf_eximconfig perl script.
$local_delivery is wrong, define macro LOCAL_DELIVERY and use it instead.
Remove erranous backslashes.
* Add comments from the example configuration file to template.
* host and domain lists are colon separated.
-- Andreas Metzler <ametzler@downhill.at.eu.org> Mon, 21 Oct 2002 22:37:45 +0200
exim4 (4.10-0.srh20.5) unstable; urgency=low
* new debconf-code:
- shell scripts
- debconf-results are saved (and read from) /etc/exim4/debconf.results
- /etc/exim4/exim4.conf.template is a dpkg-conffile
- update-exim4.conf(8) merges these two files and generates exim's main
configuration file /var/lib/exim4/exim4.conf.
-- Andreas Metzler <ametzler@downhill.at.eu.org> Sat, 19 Oct 2002 19:23:35 +0200
exim4 (4.10-0.srh20.4) unstable; urgency=low
* symlink usr/sbin/exim4 <-> usr/sbin/exim in -base package was wrong.
* move invoke-rc.d to -base package - _it_ contains the init-script
* move stat-overide-stuff to -base package. - The values are filled in _its_
config.
* missing stuff from log/exim4 run/exim4 transition: exim-base
maintainerscripts.
* Daemon-packages have only debconf stuff left as maintainerscripts. How
about letting dh_installinit manage the initscript?
* exim4-base.postrm has no business removing /etc/exim/exim.conf
-- Andreas Metzler <ametzler@balrog.logic.univie.ac.at> Fri, 18 Oct 2002 14:40:46 +0200
exim4 (4.10-0.srh20.3) unstable; urgency=low
* /etc/exim4/...
* fix cronjob: Test for existence of /etc/exim4/exim4.conf - it formerly
tested for exim3's configuration file
* /usr/lib/exim/ --> /usr/lib/exim4/ -- Put eximon.bin there, too.
-- Andreas Metzler <ametzler@logic.univie.ac.at> Fri, 18 Oct 2002 13:43:37 +0200
exim4 (4.10-0.srh20.2) unstable; urgency=low
* more changes:
* /var/log/exim/ --> /var/log/exim4/
* /var/run/exim/ --> /var/run/exim4/
* /etc/init.d/exim --> /etc/init.d/exim4
* Use files named after the real package (exim4-base instead of) exim for
cron and logrotate. - use dh_installlogrotate and dh_installcron
* Don't install exim.8 manpages in daemon packages - symlink is enough, ship
real manpage in base-package. - use dh_installman.
* Get rid of m4-magic - without the alternatives there is no need.
-- Andreas Metzler <ametzler@downhill.at.eu.org> Thu, 17 Oct 2002 23:52:31 +0200
exim4 (4.10-0.srh20.1) unstable; urgency=low
* rename package, replace dependencies.
- src: exim4
- binary exim(-something) --> exim4-something
- Remove Provides: exim - does not make sense anymore, dselect/apt
would take the real exim instead of the provided one.
- Revamp Dependencies and contents
* exim4-base provides/confl/repl: mta and depends on one of *our*
flavours
* each of the flavours only contains only /usr/sbin/exim4 and a manpagelink
exim4--->exim - there is no need to provides/confl/repl: mta, because
we ship no common file with the same name as in the original
exim4-package
- drop alternatives.
- install configuration example to /usr/share/doc/exim4-doc/examples
-- Andreas Metzler <ametzler@downhill.at.eu.org> Thu, 17 Oct 2002 17:58:08 +0200
exim (4.10-0.srh20) unstable; urgency=low
* exim-base.config fixes during testing-- need to run debconf subs in a
list context to get their numeric return code.
* enqueue_question(): $code == 0 is ok too
* main: call fetch_default() not find_default() [when did I last test this?]
* install debconf_eximconfig (!!!!!!)
-- Steve Haslam <araqnid@debian.org> Wed, 16 Oct 2002 21:50:27 +0100
exim (4.10-0.srh19) unstable; urgency=low
* Move the eximon binary into the eximon package!
-- Steve Haslam <araqnid@debian.org> Wed, 16 Oct 2002 19:36:48 +0100
exim (4.10-0.srh18) unstable; urgency=low
* The clean: target now deletes doc/tmp
-- Steve Haslam <araqnid@debian.org> Wed, 16 Oct 2002 18:10:29 +0100
exim (4.10-0.srh17) unstable; urgency=low
* Slave alternatives for "rmail" too.
* Changed libxaw-dev in build-depends to libxaw7-dev | libxaw-dev
* Added libperl-dev and m4 to build-depends
-- Steve Haslam <araqnid@debian.org> Wed, 16 Oct 2002 17:19:40 +0100
exim (4.10-0.srh16) unstable; urgency=low
* Put --exec $DAEMON back on the start-stop-daemon --stop calls, since
start-stop-daemon complains about the process not being found after it
just killed it. (Due to Exim not removing its own pid file?)
* Point slave alternatives at .gz versions of manpages
-- Steve Haslam <araqnid@debian.org> Wed, 16 Oct 2002 16:12:08 +0100
exim (4.10-0.srh15) unstable; urgency=low
* Fix "update-alternatives --remove" invocation.
* Remove alternatives AFTER stopping daemon.
* Use logrotate to cycle logs.
* Manually install logrotate/cron stuff, to call it "exim" instead of "exim-base".
* Install upstream exim.8 manpage, and slave alternatives.
-- Steve Haslam <araqnid@debian.org> Wed, 16 Oct 2002 15:44:56 +0100
exim (4.10-0.srh14) unstable; urgency=low
* dh_installinit: pass --noscripts, put the script invocation etc. in
ourselves. This is still pretty nasty, but ensures that the deamons
are stopped/started themselves, not by exim-base.
* Also, pass --init-script=exim to use /etc/init.d/exim, not
/etc/init.d/exim-base.
* Fix some inconsistencies in the postsinst related to the above that
made lintian scream
* Remove the --exec option when stopping the daemon in the init script,
so that we still stop the daemon if the symlink changed to point to a
different version (hacky).
-- Steve Haslam <araqnid@debian.org> Wed, 16 Oct 2002 14:51:19 +0100
exim (4.10-0.srh13) unstable; urgency=low
* Bah, fix paths of mailq etc. to be in /usr/bin, not /usr/lib
-- Steve Haslam <araqnid@debian.org> Wed, 16 Oct 2002 14:08:45 +0100
exim (4.10-0.srh12) unstable; urgency=low
* The postinsts were totally broken, doing everything off the "install"
target, and nothing off "configure". Since they're all pracitcally the
same, they are now generated from daemon-postinst.m4.
* Fix invocations of dpkg-statoverride (sysuser??)
* Added slave alternatives for mailq, sendmail etc.
* Removed daemon packages conflicting with mail-transport-agent,
although this isn't good-- the deamon packages don't conflict with
each other (they use alternatives to arrange themselves), but do
conflict with other MTAs that install
/usr/lib/sendmail|/usr/sbin/sendmail links. Urnf.
* Similar generation system for prerms as postinsts
-- Steve Haslam <araqnid@debian.org> Wed, 16 Oct 2002 13:47:53 +0100
exim (4.10-0.srh11) unstable; urgency=low
* Urnf, nasty circular dependencies. Removed exim-base's dependency on exim-daemon.
* Fix "use strict" errors in exim-base.config (oops)
-- Steve Haslam <araqnid@debian.org> Wed, 16 Oct 2002 13:10:25 +0100
exim (4.10-0.srh10) unstable; urgency=low
* Patch src/expand.c with HMAC support
* Rename exim-daemon-default package to just "exim", so upgrading works
better, and exim isn't made into a pure virtual package while other
packages depend on it. Moreover, mail-transport-agent is provided by
each of the daemon packages, not exim-base, since having exim-base
alone is not sufficient to have an MTA.
* Each exim daemon package depends on exim-base, not exim.
-- Steve Haslam <araqnid@debian.org> Wed, 16 Oct 2002 12:52:19 +0100
exim (4.10-0.1) unstable; urgency=low
* Heavy changes to build system.
* Split package into:
- exim-base: This package contains all utility programs and
documentation in plain text format.
- exim-daemon-$FOO: (Currently for FOO in light, default, heavy,
perl): Conain only the exim daemon in different configurations
- exim-doc-info: Contains exim documentation in Info format.
- eximon: The X11 monitor for Exim
-- Hilko Bengen <bengen@toplink-plannet.de> Wed, 2 Oct 2002 17:23:04 +0200
exim (4.10-0.srh4) unstable; urgency=low
* exim.c: Show the OpenSSL version number if TLS compiled in and the tls
debug selector enabled.
* exim.postinst et al: Keep the alternatives configured between upgrades
(naughty) since exim-light will fail to start if exim-heavy keywords
are in the config file
-- Steve Haslam <araqnid@debian.org> Fri, 13 Sep 2002 16:08:47 +0100
exim (4.10-0.srh3) unstable; urgency=low
* tls.c: Some debug output changes to verify_callback()
* debconf_eximconfig: add more escaping when writing acl_check_rcpt
* tls.c and others: ${tls_peercn} now expands to the CN part of the
peer's certificate subject when using TLS.
* transports/smtp.c and others: Added tls_verify_hostname option to
verify the hostname we connected to against the CN/subjectAltName
of the peer certificate.
-- Steve Haslam <araqnid@debian.org> Fri, 13 Sep 2002 15:44:07 +0100
exim (4.10-0.srh2) unstable; urgency=low
* exim-heavy.postinst: had duplicate sendmail alternative, removed. Had
a priority the same as exim-light too... increased.
* Replace LOOKUP_CDB=yes in exim-light configuration, since it was in
the Exim 3 package and doesn't bring in any dependencies.
* exim.postinst: delete files from /var/spool/exim/db if they cannot be
read by exim_dumpdb (some DB compatibility lossage)
-- Steve Haslam <araqnid@debian.org> Tue, 3 Sep 2002 13:28:44 +0100
exim (4.10-0.srh1) unstable; urgency=low
* My stab at an Exim 4 package. Features include:
* An exim-heavy package that contains an Exim binary with LDAP,
MySQL, PostgreSQL etc. in, so that the main Exim package's
dependencies are kept thin but users can easily get hold of
the extra lookup types.
* Debconf-based configuration, although it has priority=high
questions, so not completely noninteractive yet, and not
all features of eximconfig have been ported/checked
* Automated conversion of Exim 3 configuration files
(using PH's convert4r4)
-- Steve Haslam <araqnid@debian.org> Tue, 3 Sep 2002 10:20:24 +0100
exim (3.35-1.srh1) unstable; urgency=low
* Reconfigured to include MySQL and PostgreSQL lookups
-- Steve Haslam <araqnid@debian.org> Fri, 9 Aug 2002 15:52:37 +0100
exim (3.35-1) unstable; urgency=low
* New upstream version, fixes buffer overflow (Closes: #135069)
* debian/config: Added receiver_try_verify (Closes: #136276)
* debian/init.d: Use --retry 30 option for start-stop-daemon when
stopping exim (Closes: #136450)
* debian/postinst: "noninteractive" in correct case (Closes: #134379)
* debian/init.d: Use -n option for echo (from patch in #133288)
* debian/exim_lock.8: Manpage for exim_lock - thanks Nick Philips
(Closes: #131679)
* debian/config: Fixed comment on smtp_accept_queue_per_connection
(Closes: #136756)
* debian/exim.8,debian/eximon.8: Fixed hyphenation (Closes: #132068)
* debian/control: Short description improved (Closes: #130698)
-- Mark Baker <mark@mnb.org.uk> Mon, 4 Mar 2002 23:04:52 +0000
View git blame Copy permalink