Import Debian changes 4.92-8+deb10u4
[hcoop/debian/exim4.git] / debian / changelog
CommitLineData
798bcb8a
AM
1exim4 (4.92-8+deb10u4) buster-security; urgency=high
2
3 * Fix authentication bypass in SPA authenticator due to out-of-bound buffer
4 read. https://bugs.exim.org/show_bug.cgi?id=2571 CVE-2020-12783
5
6 -- Andreas Metzler <ametzler@debian.org> Wed, 13 May 2020 18:01:31 +0200
7
01e60269 8exim4 (4.92-8+deb10u3) buster-security; urgency=high
d1e9e98a 9
01e60269
AM
10 * 78_02-Fix-buffer-overflow-in-string_vformat.-Bug-2449.patch:
11 Fix buffer overflow in string_vformat.
12
13 -- Andreas Metzler <ametzler@debian.org> Fri, 27 Sep 2019 18:09:35 +0200
14
15exim4 (4.92-8+deb10u2) buster-security; urgency=high
16
17 * 78_01-string.c-do-not-interpret-before-0-CVE-2019-15846.patch Fix SNI
d1e9e98a
AM
18 related buffer overflow. CVE-2019-15846
19
01e60269 20 -- Andreas Metzler <ametzler@debian.org> Tue, 03 Sep 2019 19:51:11 +0200
d1e9e98a 21
01e60269 22exim4 (4.92-8+deb10u1) buster-security; urgency=high
b032efff
AM
23
24 * Fix remote command execution vulnerability related to
25 "${sort}"-expansion. CVE-2019-13917 OVE-20190718-0006
26
01e60269 27 -- Andreas Metzler <ametzler@debian.org> Sat, 20 Jul 2019 13:35:58 +0200
b032efff 28
01e60269 29exim4 (4.92-8) unstable; urgency=low
493d55f6 30
01e60269
AM
31 * Pulled from exim-4.92+fixes branch:
32 + 75_11-GnuTLS-fix-tls_out_ocsp-under-hosts_request_ocsp.patch
33 Fix expansion of $tls_out_ocsp under hosts_request_ocsp.
34 + 75_12-GnuTLS-fix-the-advertising-of-acceptable-certs-by-th.patch
35 When tls_verify_certificates was set to a directory instead of a file
36 exim/GnuTLS would still send out the list of accepted certificates,
37 This did not match documented behavior.
38 + 75_13-Use-dsn_from-for-success-DSN-messages.-Bug-2404.patch
39 The dsn_from option was not used for DSN success messages.
40 * Pulled from upstream GIT master:
41 + 75_14-Fix-smtp-response-timeout.patch
42 Fix the timeout on smtp response to apply to the whole response instead
43 of resetting for every byte received.
44 + 75_15-Fix-detection-of-32b-platform-at-build-time.-Bug-240.patch
45 https://bugs.exim.org/show_bug.cgi?id=2405
46 ${eval } was broken on 32bit archs.
493d55f6 47
01e60269 48 -- Andreas Metzler <ametzler@debian.org> Sat, 08 Jun 2019 17:37:43 +0200
493d55f6 49
01e60269 50exim4 (4.92-7) unstable; urgency=medium
493d55f6 51
01e60269 52 * Upload to unstable.
493d55f6 53
01e60269 54 -- Andreas Metzler <ametzler@debian.org> Tue, 07 May 2019 19:44:23 +0200
493d55f6 55
01e60269 56exim4 (4.92-6) experimental; urgency=medium
493d55f6 57
01e60269
AM
58 * Revert 90_localscan_dlopen.dpatch removal to give Magnus some chance for
59 debugging sa-exim.
60 * Set HAVE_LOCAL_SCAN=yes in EDITME.
61 * Upload to experimental.
62
63 -- Andreas Metzler <ametzler@debian.org> Tue, 16 Apr 2019 17:58:20 +0200
64
65exim4 (4.92-5) unstable; urgency=medium
66
67 * Improved spam-scanning example with accompaning information in
68 README.Debian. Explicitly warn about adding the default SpamAssassin
69 report in a header, which Closes: #774553
70 * Drop 90_localscan_dlopen.dpatch. (It has been non-functional for a couple
71 of months.) Closes: #925982 Add a Conflicts for sa-exim, which relied on
72 the (working) version of the patch. Drop exim4-dev package. Add a NEWS
73 entry for this change.
74
75 -- Andreas Metzler <ametzler@debian.org> Sun, 07 Apr 2019 13:39:31 +0200
76
77exim4 (4.92-4) unstable; urgency=medium
78
79 * Another patch from exim-4.92+fixes branch:
80 75_10-Harden-plaintext-authenticator.patch
81
82 -- Andreas Metzler <ametzler@debian.org> Fri, 22 Mar 2019 07:15:20 +0100
83
84exim4 (4.92-3) unstable; urgency=medium
85
86 * Pull fixes from exim-4.92+fixes branch.
87 + 75_05-Fix-expansions-for-RFC-822-addresses-having-comments.patch
88 + 75_06-Docs-Add-note-on-lsearch-for-IPv4-mapped-IPv6-addres.patch
89 + 75_07-Fix-crash-from-SRV-lookup-hitting-a-CNAME.patch
90 + 75_08-Logging-fix-initial-listening-on-log-line.patch
91 + 75_09-OpenSSL-Fix-aggregation-of-messages.patch
92
93 -- Andreas Metzler <ametzler@debian.org> Wed, 20 Mar 2019 17:01:29 +0100
94
95exim4 (4.92-2) unstable; urgency=medium
96
97 * Upload to unstable.
98
99 -- Andreas Metzler <ametzler@debian.org> Wed, 20 Feb 2019 19:23:11 +0100
100
101exim4 (4.92-1) experimental; urgency=medium
102
103 * Point watchfile to release directory again.
104 * New upstream stable release, identical to rc6 except for the version
105 string.
106 * Pull fixes from exim-4.92+fixes branch.
107 + 75_01-Fix-json-extract-operator-for-unfound-case.patch
108 + 75_02-Fix-transport-buffer-size-handling.patch
109 + 75_03-Fix-info-on-using-local_scan-in-the-default-Makefile.patch
110 + 75_04-GnuTLS-Fix-client-detection-of-server-reject-of-clie.patch
111 * Upload to experimental while waiting for rc6 to migrate.
112
113 -- Andreas Metzler <ametzler@debian.org> Sun, 17 Feb 2019 13:13:55 +0100
114
115exim4 (4.92~RC6-1) unstable; urgency=low
116
117 * New upstream snapshot rc6, includes
118 40_01-Fix-dkim_verify_signers-option.-Bug-2366.patch.
119
120 -- Andreas Metzler <ametzler@debian.org> Sat, 09 Feb 2019 14:33:15 +0100
121
122exim4 (4.92~RC5-2) unstable; urgency=high
123
124 * In init script use start-stop-daemon directly instead of lsb-base's
125 killproc which currently fails to pass on the executable name to s-s-d
126 (921558). This broke with s-s-d 1.19.2 which (for security reasons)
127 requires further filtering arguments in addition to --pidfile when the pid
128 file is not owned by root. Closes: #921205
129
130 -- Andreas Metzler <ametzler@debian.org> Thu, 07 Feb 2019 18:42:41 +0100
131
132exim4 (4.92~RC5-1) unstable; urgency=medium
133
134 * New upstream snapshot rc5.
135 * 40_01-Fix-dkim_verify_signers-option.-Bug-2366.patch: dkim_verify_signers
136 was ignored.
137
138 -- Andreas Metzler <ametzler@debian.org> Thu, 31 Jan 2019 19:25:03 +0100
139
140exim4 (4.92~RC4-3) unstable; urgency=medium
141
142 * Refresh debian/upstream/signing-key.asc from
143 https://downloads.exim.org/Exim-Maintainers-Keyring.asc.
144 * Drop outdated pointers to alioth package homepage from README.Debian.
145 * Update exim4-config Breaks to enforce upgrade to daemon binary package
146 with DANE support. Closes: #919902
147 * [lintian] Minimize upstream/signing-key.asc.
148
149 -- Andreas Metzler <ametzler@debian.org> Sun, 20 Jan 2019 17:52:39 +0100
150
151exim4 (4.92~RC4-2) unstable; urgency=medium
152
153 * Upload to unstable.
154
155 -- Andreas Metzler <ametzler@debian.org> Sat, 05 Jan 2019 15:35:38 +0100
156
157exim4 (4.92~RC4-1) experimental; urgency=low
158
159 * New upstream version.
160 + Drop 75_GnuTLS-repeat-lowlevel-read-and-write-operations-whi.patch.
161 + Unfuzz patches.
162
163 -- Andreas Metzler <ametzler@debian.org> Mon, 31 Dec 2018 13:13:45 +0100
164
165exim4 (4.92~RC3-1) unstable; urgency=low
166
167 * Add 75_GnuTLS-repeat-lowlevel-read-and-write-operations-whi.patch from
168 upstream GIT master, fixing outgoing TLS 1.3.
169 https://bugs.exim.org/show_bug.cgi?id=2359
170 * New upstream version.
171 * Upload to unstable.
172
173 -- Andreas Metzler <ametzler@debian.org> Wed, 26 Dec 2018 16:07:52 +0100
174
175exim4 (4.92~RC2-1) experimental; urgency=low
176
177 * New upstream version.
178 + Drop 75_01-Fix-parsing-of-option-type-Kint-integer-stored-in-K-.patch
179
180 -- Andreas Metzler <ametzler@debian.org> Tue, 18 Dec 2018 19:20:24 +0100
181
182exim4 (4.92~RC1-1) experimental; urgency=low
183
184 * Update upstream/signing-key.asc from
185 https://ftp.exim.org/pub/exim/Exim-Maintainers-Keyring.asc, adding
186 96E4754B8F93C1B239F1A95785BCF7AC6735A680 while removing
187 1F9C181B1E83D2099F02C95AC4F4F94804D29EBA and
188 FAA1C7F9CD077DC4304BC0C885AB833FDDC03262.
189 * New upstream release candidate:
190 + Point watchfile to test subdir.
191 + Update watchfile to handle -RC1 in addition to _RC1.
192 + Drop 75_fixes*.patch.
193 + Unfuzz 32_exim4.dpatch and 90_localscan_dlopen.dpatch
194 + Update configuration from upstream example, except for
195 tls_sni/tls_require_ciphers settings on remote_smtp_smarthost transport:
196 * Enable dns_dnssec_ok.
197 * Set dnssec_request_domains = * on dnslookup and
198 dnslookup_relay_to_domains routers.
199 * Set hosts_try_dane = */dnssec_request_domains = * on remote_smtp
200 transport unless REMOTE_SMTP_DISABLE_DANE is set.
201 * Set multi_domain on remote_smtp_smarthost transport.
202 * Post release updates:
203 + 75_01-Fix-parsing-of-option-type-Kint-integer-stored-in-K-.patch
204
205 -- Andreas Metzler <ametzler@debian.org> Sat, 15 Dec 2018 16:24:54 +0100
206
207exim4 (4.91-9) unstable; urgency=low
208
209 * Run "wrap-and-sort --max-line-length=72 --short-indent" and add back
210 autodeleted comments.
211 * Update from exim-4_91+fixes branch:
212 + 75_fixes_26-Fix-bad-use-of-library-copying-string-over-itself.patch
213 + 75_fixes_27-Fix-cyrus-sasl-authenticator-for-authenticated_fail_.patch
214 + 75_fixes_28-Avoid-leaving-domain-live-with-bogus-info-during-ser.patch
215 + 75_fixes_29-Fix-AUTH_GSASL-build.patch
216 + 75_fixes_30-Harden-string-list-handling.patch
217
218 -- Andreas Metzler <ametzler@debian.org> Thu, 06 Dec 2018 19:19:38 +0100
219
220exim4 (4.91-8) unstable; urgency=low
221
222 [ Andreas Metzler ]
223 * Update from exim-4_91+fixes branch:
224 + 75_fixes_18-Restore-Darwin-OS-configuration.patch
225 + 75_fixes_20-Fix-filter-noerror-command.-Bug-2318.patch
226 + 75_fixes_21-DANE-fix-TA-mode-verify-under-GnuTLS.-Bug-2311.patch
227 + 75_fixes_22-Testsuite-track-newer-GnuTLS-behaviour.patch
228 + 75_fixes_24-DANE-ignore-undersized-TLSA-records.patch
229 + 75_fixes_25-Logging-do-not-log-a-missing-proxy-address-on-delive.patch
230
231 [ Marc Haber ]
232 * Move definition of CHECK_RCPT_*_LOCALPARTS macro to acl file proper.
233
234 -- Andreas Metzler <ametzler@debian.org> Sat, 29 Sep 2018 19:08:52 +0200
235
236exim4 (4.91-7) unstable; urgency=low
237
238 * Update from exim-4_91+fixes branch:
239 + 75_fixes_16-Fix-non-EVENTS-build.patch
240 + 75_fixes_17-Fix-cutthrough-delivery-for-more-than-one-iteration-.patch
241
242 -- Andreas Metzler <ametzler@debian.org> Sun, 26 Aug 2018 11:33:15 +0200
243
244exim4 (4.91-6) unstable; urgency=low
245
246 * Update from exim-4_91+fixes branch:
247 + 75_fixes_13-DKIM-Fix-signing-for-body-lines-starting-with-a-pair.patch
248 + 75_fixes_14-ARC-Fix-verification-to-do-AS-checks-in-reverse-orde.patch
249 + 75_fixes_15-I18N-Fix-protocol-recorded-for-a-multi-SMTPUTF8-mess.patch
250 * [lintian] Do not run mininal testsuite with DEB_BUILD_OPTIONS=nocheck.
251 (override_dh_auto_test-does-not-check-DEB_BUILD_OPTIONS)
252
253 -- Andreas Metzler <ametzler@debian.org> Fri, 20 Jul 2018 11:21:24 +0200
254
255exim4 (4.91-5) unstable; urgency=medium
256
257 * Update from exim-4_91+fixes branch:
258 + 75_fixes_10-Use-serial-number-1-for-self-generated-selfsigned-ce.patch
259 + 75_fixes_11-Fix-logging-of-cmdline-args-when-starting-in-an-unli.patch
260 + 75_fixes_12-ARC-Fix-signing-for-case-when-DKIM-signing-failed.patch
261
262 -- Andreas Metzler <ametzler@debian.org> Sat, 09 Jun 2018 18:10:39 +0200
263
264exim4 (4.91-4) unstable; urgency=medium
265
266 * Update from exim-4_91+fixes branch:
267 + 75_fixes_06-Cutthrough-fix-race-resulting-in-duplicate-delivery..patch
268 + 75_fixes_07-tidying.patch
269 + 75_fixes_08-ARC-fix-crash-on-signing-with-missing-key-file.patch
270 + 75_fixes_09-Content-scanning-Fix-locking-on-message-spool-files..patch
271 * [lintian] Delete trailing empty lines in changelog.
272
273 -- Andreas Metzler <ametzler@debian.org> Thu, 17 May 2018 17:14:53 +0200
274
275exim4 (4.91-3) unstable; urgency=medium
276
277 * Update from exim-4_91+fixes branch:
278 + 75_fixes_01-Belated-README.UPDATING-notes-for-Exim-4.91.patch
279 + 75_fixes_02-Avoid-doing-logging-in-signal-handlers.-Bug-1007.patch
280 + 75_fixes_03-Fix-typo-in-arc.-Bug-2262.patch
281 + 75_fixes_04-Fix-OpenSSL-non-OCSP-build.patch
282 + 75_fixes_05-DKIM-enforce-limit-of-20-on-received-DKIM-Signature-.patch
283 + Move 50_localscan_dlopen.dpatch to end of patch series and rename to
284 90_... to preserve alphanumeric patch ordering.
285 * Add log_message for local blacklists to improve log readability. (Patch by
286 Dominic Hargreaves).
287
288 -- Andreas Metzler <ametzler@debian.org> Sat, 28 Apr 2018 14:59:36 +0200
289
290exim4 (4.91-2) unstable; urgency=low
291
292 * Upload to unstable.
293
294 -- Andreas Metzler <ametzler@debian.org> Sat, 21 Apr 2018 10:38:50 +0200
295
296exim4 (4.91-1) experimental; urgency=medium
297
298 * Point watchfile to release directory again and use downloads.exim.org
299 host.
300 * New upstream version.
301 * Tighten b-d on libgnutls28-dev to >= 3.5.7, earlier Debian packages did
302 not ship libgnutls-dane0.
303
304 -- Andreas Metzler <ametzler@debian.org> Sun, 15 Apr 2018 17:52:05 +0200
305
306exim4 (4.91~RC4-1) experimental; urgency=medium
307
308 * New upstream version.
309
310 -- Andreas Metzler <ametzler@debian.org> Mon, 09 Apr 2018 19:25:18 +0200
311
312exim4 (4.91~RC3-1) experimental; urgency=medium
313
314 * New upstream version.
315 * Point vcs* to salsa.
316
317 -- Andreas Metzler <ametzler@debian.org> Thu, 05 Apr 2018 19:43:39 +0200
318
319exim4 (4.91~RC2-1) experimental; urgency=medium
320
321 * New upstream version.
322 Drop 75_01-Fix-heavy-pipeline-SMTP-command-input-corruption.-Bu.patch
493d55f6 323
01e60269
AM
324 -- Andreas Metzler <ametzler@debian.org> Wed, 21 Mar 2018 19:25:44 +0100
325
326exim4 (4.91~RC1-1) experimental; urgency=medium
327
328 * Point watchfile to test subdirectory.
329 * New upstream version:
330 + Drop debian/patches/75_*.
331 + Update example.conf.md5.
332 Upstream now enables verify = header_syntax check in default config,
333 mirror this change in Debian, introduce
334 NO_CHECK_DATA_VERIFY_HEADER_SYNTAX macro to override this.
335 * Build with newly available (well, for GnuTLS) DANE support.
336 * Pull 75_01-Fix-heavy-pipeline-SMTP-command-input-corruption.-Bu.patch from
337 upstream master, fixing https://bugs.exim.org/show_bug.cgi?id=2250.
338
339 -- Andreas Metzler <ametzler@debian.org> Sat, 17 Mar 2018 17:41:51 +0100
340
341exim4 (4.90.1-5) unstable; urgency=medium
342
343 * Update from exim-4_90+fixes branch:
344 75_15-Pipe-transport-part-two.-Bug-2257.patch
345 75_16-Fix-spool_wireformat-final-dot-on-LMTP-transport.-Bu.patch
346 75_17-Cutthrough-enforce-non-use-in-combination-with-DKIM-.patch
347
348 -- Andreas Metzler <ametzler@debian.org> Sat, 31 Mar 2018 07:14:31 +0200
349
350exim4 (4.90.1-4) unstable; urgency=medium
351
352 * Update from exim-4_90+fixes branch:
353 75_11-DMARC-add-variables-to-list-of-those-now-unused-at-t.patch
354 75_12-Fix-heavy-pipeline-SMTP-command-input-corruption.-Bu.patch
355 75_13-Unbreak-DMARC.patch
356 75_14-Fix-pipe-transport-to-not-use-a-socket-only-syscall..patch
357
358 -- Andreas Metzler <ametzler@debian.org> Thu, 22 Mar 2018 07:44:05 +0100
359
360exim4 (4.90.1-3) unstable; urgency=medium
361
362 * Update from exim-4_90+fixes branch:
363 75_07-Fix-ldap-lookups-for-zero-length-attribute-value.-Bu.patch
364 75_08-Mark-variables-unused-before-release-of-store-in-the.patch
365 75_09-Mark-variables-unused-before-release-of-store-in-the.patch
366 75_10-Mark-variables-that-are-unused-before-release-of-sto.patch
367
368 -- Andreas Metzler <ametzler@debian.org> Fri, 16 Mar 2018 18:35:01 +0100
369
370exim4 (4.90.1-2) unstable; urgency=medium
371
372 * Update from exim-4_90+fixes branch:
373 75_01-ACL-Enforce-non-usability-of-control-utf8_downconver.patch
374 75_02-Fix-memory-leak-during-multi-message-reception-using.patch
375 75_03-OpenSSL-Fix-memory-leak-during-multi-message-connect.patch
376 75_04-Fix-exim_dbmbuild-to-permit-directoryless-filenames..patch
377 75_05-OpenSSL-revert-needless-free-of-certificate-list.-Th.patch
378 75_06-I18N-Fix-utf8_downconvert-propagation-through-a-redi.patch
379
380 -- Andreas Metzler <ametzler@debian.org> Sat, 10 Mar 2018 14:25:51 +0100
381
382exim4 (4.90.1-1) unstable; urgency=high
383
384 * New upstream version, fixing CVE-2018-6789. Closes: #890000
385 + Drop 75_*.patch.
386
387 -- Andreas Metzler <ametzler@debian.org> Sat, 10 Feb 2018 13:45:40 +0100
388
389exim4 (4.90-7) unstable; urgency=medium
390
391 * Update from exim-4_90+fixes branch. (exim-4.90.0.27)
392 + 75_21-DKIM-fix-buffer-overflow-in-verify.patch
393 + 75_22-Repair-Heimdal-GSSAPI-authenticator-init.patch
394 + 75_23-Repair-Heimdal-GSSAPI-authenticator-init-part-2.patch
395 * Typo fixes in old patch descriptions. (Thanks, lintian!)
396
397 -- Andreas Metzler <ametzler@debian.org> Sat, 10 Feb 2018 13:13:37 +0100
398
399exim4 (4.90-6) unstable; urgency=medium
400
401 * Update from exim-4_90+fixes branch.
402 + 75_17-Cutthrough-fix-for-port-number-defined-by-router.-Bu.patch
403 + 75_18-GnuTLS-fix-to-ignore-timeout-on-unrelated-callout-co.patch
404 Closes: #887489
405 + 75_19-Build-.git-may-be-a-file-when-this-repo-is-a-submodu.patch
406 + 75_20-Debugging-fix-potential-null-derefs-in-DSN-debug_pri.patch
407
408 -- Andreas Metzler <ametzler@debian.org> Wed, 07 Feb 2018 19:37:03 +0100
409
410exim4 (4.90-5) unstable; urgency=low
411
412 * Add 75_16-Cutthrough-fix-multi-message-initiating-connections.patch from
413 exim-4_90+fixes branch.
414 * Improved exim4-daemon-custom documentation by Gedalya. Closes: #887971
415 * [update-exim4.conf] stop converting variables set to an empty value in
416 /etc/exim4/update-exim4.conf.conf to exim macros with a literal value of
417 "empty" in the generated configuration. Thanks, Gedalya. Closes: #887972
418
419 -- Andreas Metzler <ametzler@debian.org> Sat, 27 Jan 2018 17:00:42 +0100
420
421exim4 (4.90-4) unstable; urgency=low
422
423 * Update from exim-4_90+fixes branch.
424 75_13-Lookups-fix-mysql-lookup-returns-for-no-data-queries.patch
425 75_14-Fix-D-string-expansion-to-not-use-millisec.patch
426 75_15-DKIM-DNS-records-having-no-v-tag-are-acceptable.-Bug.patch
427
428 -- Andreas Metzler <ametzler@debian.org> Sat, 20 Jan 2018 08:00:45 +0100
429
430exim4 (4.90-3) unstable; urgency=medium
431
432 * Three more patches from exim-4_90+fixes branch:
433 75_10-Fix-issue-with-continued-connections-when-the-DNS-sh.patch
434 75_11-MIME-ACL-fix-SMTP-response-for-non-accept-result-of-.patch
435 75_12-DKIM-permit-dkim_private_key-to-override-dkim_strict.patch
436
437 -- Andreas Metzler <ametzler@debian.org> Mon, 08 Jan 2018 18:55:28 +0100
438
439exim4 (4.90-2) unstable; urgency=medium
440
441 * Update to exim-4_90+fixes branch:
442 + Replace 75_Lookups-fix-pgsql-multiple-row-single-column-return.patch.
443 + 75_01-TLS-Fix-excessive-calling-of-smtp_auth_acl-under-AUT.patch
444 + 75_02-TLS-avoid-calling-smtp_auth_acl-on-client-cert-when-.patch
445 + 75_03-Debug-fix-coding-in-dnssec-reporting.-Bug-2205.patch
446 + 75_04-DKIM-Ignore-non-DKIM-TXT-records-in-DNS-response.-Bu.patch
447 + 75_05-Fix-build-of-nisplus-lookup.patch
448 + 75_06-Fix-const-issue-in-nisplus-lookup.patch
449 + 75_08-DKIM-tighter-checking-while-parsing-signature-header.patch
450 + 75_09-Fix-crash-associated-with-dnsdb-lookup-done-from-DKI.patch
451
452 -- Andreas Metzler <ametzler@debian.org> Sat, 30 Dec 2017 15:43:52 +0100
453
454exim4 (4.90-1) unstable; urgency=low
455
456 * rc4 released as 4.90.
457 * Point watchfile to release directory again.
458 * 75_Lookups-fix-pgsql-multiple-row-single-column-return.patch from upstream
459 GIT master branch. Fix pgsql lookup for multiple result-tuples with a
460 single column. Previously only the last row was returned.
461 https://lists.exim.org/lurker/message/20171223.102237.a53dd5bd.en.html
462 * Simplify debian/rules and make it usable with dh v10 compat. The
463 fine-grained support for selecting the to be built packages (-custom with
464 or without -base) was dropped. The build process is now controlled by
465 attaching tasks to dh-override hooks instead of using file dependencies,
466 makefile-style. The latter broke with dh v10 due to upstream's
467 build-system which always has the main targets out-of-date inter alia due
468 to the compile-number feature.
469 * Use hardening=+all instead of hardening=+bindnow,+pie. (Does not change
470 buildflags ATM.)
471 * Use debhelper v10 compat.
472 * Drop override_dh_strip-arch, we have had enough toolchain and
473 source changes to prevent file conflicts.
474
475 -- Andreas Metzler <ametzler@debian.org> Thu, 28 Dec 2017 13:42:23 +0100
476
477exim4 (4.90~RC4-1) unstable; urgency=medium
478
479 * New upstream version.
480
481 -- Andreas Metzler <ametzler@debian.org> Thu, 14 Dec 2017 18:11:40 +0100
482
483exim4 (4.90~RC3-2) unstable; urgency=low
484
485 * Upload to unstable.
486 * Point homepage to https URL.
487
488 -- Andreas Metzler <ametzler@debian.org> Sat, 02 Dec 2017 17:37:13 +0100
489
490exim4 (4.90~RC3-1) experimental; urgency=medium
491
492 * New upstream version.
493 + Fix a use-after-free while reading smtp input for header lines.
494 A crafted sequence of BDAT commands could result in in-use memory
495 being freed. CVE-2017-16943. Closes: #882648
496 + Fix checking for leading-dot on a line during headers reading
497 from SMTP input. Previously it was always done; now only done for
498 DATA and not BDAT commands. CVE-2017-16944 Closes: #882671
499 * Drop 78_Disable-chunking-BDAT-by-default.patch again.
500
501 -- Andreas Metzler <ametzler@debian.org> Fri, 01 Dec 2017 19:14:08 +0100
502
503exim4 (4.90~RC2-3) experimental; urgency=medium
504
505 * As a workaround for the yet-unfixed security vulnerability resurrect (and
506 adapt for 4.90) 78_Disable-chunking-BDAT-by-default.patch (dropped in
507 4.89-4) to disable both incoming and outgoing BDAT/CHUNKING. #882648
508 https://lists.exim.org/lurker/message/20171125.034842.d1d75cac.en.html
509
510 -- Andreas Metzler <ametzler@debian.org> Sat, 25 Nov 2017 12:01:40 +0100
511
512exim4 (4.90~RC2-2) experimental; urgency=low
513
514 * B-d on lynx, instead of lynx-cur | lynx.
515
516 -- Andreas Metzler <ametzler@debian.org> Fri, 17 Nov 2017 17:03:10 +0100
517
518exim4 (4.90~RC2-1) experimental; urgency=low
519
520 * New upstream release candidate.
521 + Unfuzz patches, drop 40_reproducible_build.diff and
522 75_fix_ftbfs_SOURCE_DATE_EPOCH.diff.
523 + Refresh debian/example.conf.md5, No changes to Debian's configuration
524 needed, upstream added a (commented) entry to change OpenSSL ciphers.
525
526 -- Andreas Metzler <ametzler@debian.org> Thu, 16 Nov 2017 19:40:35 +0100
527
528exim4 (4.90~RC1-1) experimental; urgency=low
529
530 * New upstream release candidate.
531 + Point watchfile to test subdirectory.
532 + Update 40_reproducible_build.diff
533 + Drop 75_fixes*.patch and
534 80_Repair-manualroute-transport-name-not-last-option.patch.
535 + Unfuzz EDITME*.diff
536 + 75_fix_ftbfs_SOURCE_DATE_EPOCH.diff Fix build-error when
537 SOURCE_DATE_EPOCH is set.
538 * Drop trailing whitespace in debian/README.source, debian/changelog and
539 debian/rules. (Thanks, lintian)
540 * Drop debian/README.source and outdated parts of debian/copyright.
541
542 -- Andreas Metzler <ametzler@debian.org> Sun, 29 Oct 2017 10:52:30 +0100
543
544exim4 (4.89-13) unstable; urgency=high
545
546 * 75_fixes_21-Chunking-do-not-treat-the-first-lonely-dot-special.-.patch
547 from exim-4_89+fixes branch. Closes: #882671 CVE-2017-16944
548
549 -- Andreas Metzler <ametzler@debian.org> Wed, 29 Nov 2017 19:30:37 +0100
550
551exim4 (4.89-12) unstable; urgency=high
552
553 * Sync with exim-4_89+fixes branch:
554 + 75_fixes_19-Fix-mariadb-mysql-macro-confusion.patch
555 + 75_fixes_20-Avoid-release-of-store-if-there-have-been-later-allo.patch
556 Closes: #882648 (use-after-free, remote-code-execution) CVE-2017-16943
557 * Update EDITME* for 75_fixes_19-Fix-mariadb-mysql-macro-confusion.patch.
558
559 -- Andreas Metzler <ametzler@debian.org> Tue, 28 Nov 2017 20:04:23 +0100
560
561exim4 (4.89-11) unstable; urgency=critical
562
563 * B-d on lynx, instead of lynx-cur | lynx.
564
565 -- Andreas Metzler <ametzler@debian.org> Sat, 25 Nov 2017 13:02:43 +0100
566
567exim4 (4.89-10) unstable; urgency=critical
568
569 * As a workaround for the yet-unfixed security vulnerability resurrect
570 78_Disable-chunking-BDAT-by-default.patch (dropped in 4.89-4) to disable
571 both incoming and outgoing BDAT/CHUNKING. #882648
572 https://lists.exim.org/lurker/message/20171125.034842.d1d75cac.en.html
573
574 -- Andreas Metzler <ametzler@debian.org> Sat, 25 Nov 2017 11:43:24 +0100
575
576exim4 (4.89-9) unstable; urgency=medium
577
578 * Upload to unstable.
579
580 -- Andreas Metzler <ametzler@debian.org> Fri, 27 Oct 2017 19:23:25 +0200
581
582exim4 (4.89-8) experimental; urgency=low
583
584 * Sync with exim-4_89+fixes branch:
585 75_fixes_17-Fix-queue_run_in_order-to-ignore-the-PID-portion-of-.patch
586 75_fixes_18-Use-safer-routine-for-possibly-overlapping-copy.patch
587 * Point watchfile to https site.
588
589 -- Andreas Metzler <ametzler@debian.org> Mon, 23 Oct 2017 19:14:24 +0200
590
591exim4 (4.89-7) unstable; urgency=low
592
593 * In debian/rules' manually called update-mtaconflicts target use
594 grep-aptavail instead of hard-coding /var/lib/apt/lists/.
595 (Thanks, Julian Andres Klode) Closes: #874772
596 * Update debian/mtalist.
597 * Sync with exim-4_89+fixes branch:
598 75_fixes_13-Document-CVE-assignment-for-Berkeley-DB-issue.patch
599 75_fixes_14-DKIM-fix-signing-bug-induced-by-total-size-of-parame.patch
600 75_fixes_15-SOCKS-fix-unitialized-pointer.patch
601 75_fixes_16-Fix-crash-in-transport-on-second-smtp-connect-fail-f.patch.
602
603 -- Andreas Metzler <ametzler@debian.org> Wed, 27 Sep 2017 07:35:23 +0200
604
605exim4 (4.89-6) unstable; urgency=medium
606
607 * Use "runuser --command ..." instead of "su - --command ..." in
608 exim4-base.cron.daily to avoid invoking pam_systemd. Closes: #871688
609 (Thanks, Jakobus Schürz)
610 * Sync priorities with override file: exim4{,-base,-config,-daemon-light}
611 optional from standard, exim4-dev optional from extra.
612 * In debian/rules when setting up the build-tree for -custom also copy
613 EDITME.eximon to allow building based on EDITME.exim4-light with eximon
614 building *not* disabled. (Thanks, Marko von Oppen) Closes: #783813
615
616 -- Andreas Metzler <ametzler@debian.org> Sat, 09 Sep 2017 15:29:39 +0200
617
618exim4 (4.89-5) unstable; urgency=medium
619
620 * Update to exim-4_89+fixes branch:
621 75_fixes_01-Start-exim-4_89-fixes-to-cherry-pick-some-commits-fr.patch
622 75_fixes_02-Cleanup-prevent-repeated-use-of-p-oMr-to-avoid-mem-l.patch
623 (replaces 79_CVE-2017-1000369.patch)
624 75_fixes_03-Fix-log-line-corruption-for-DKIM-status.patch (replaces
625 81_Fix-log-line-corruption-for-DKIM-status.patch)
626 75_fixes_04-Openssl-disable-session-tickets-by-default-and-sessi.patch
627 75_fixes_05-Transport-fix-smtp-under-combo-of-mua_wrapper-and-li.patch
628 75_fixes_07-Openssl-disable-session-tickets-by-default-and-sessi.patch
629 75_fixes_08-Transport-fix-smtp-under-combo-of-mua_wrapper-and-li.patch
630 75_fixes_09-Use-the-BDB-environment-so-that-a-database-config-fi.patch
631 (CVE-2017-10140)
632 75_fixes_10-Fix-cache-cold-random-callout-verify.-Bug-2147.patch
633 75_fixes_11-On-callout-avoid-SIZE-every-time-but-noncacheable-rc.patch
634 75_fixes_12-Fix-build-for-earlier-version-Berkeley-DB.patch
635 * Simplify debian/rules by including buildflags.mk unconditionally which was
636 introduced in dpkg 1.16.1 released in October 2011.
637 * Use pkg-info.mk to get package-version, upstream-version and
638 SOURCE_DATE_EPOCH. For the latter fall back to current time if it is not
639 provided by pkg-info.mk.
640 * [lintian] In *daemon.postinst use which certtool instead of
641 [ -x /usr/bin/certtool ] to check for availablility of the command.
642
643 -- Andreas Metzler <ametzler@debian.org> Thu, 10 Aug 2017 10:17:05 +0200
644
645exim4 (4.89-4) unstable; urgency=low
646
647 * 80_Repair-manualroute-transport-name-not-last-option.patch from GIT
648 master: Starting with 4.85 a transport name needed to specified after
649 options in route_list. Closes: #865287
650 * Add 81_Fix-log-line-corruption-for-DKIM-status.patch from GIT master.
651 * Drop 78_Disable-chunking-BDAT-by-default.patch, enable BDAT/Chunking by
652 default.
653 * Standards-Version: 4.0.0
654 + Do not check for availability of invoke-rc.d, use it always and do not
655 fall back to invoking the init-script directly.
656 + Drop eximon menu file.
657 * Migrate to automatic debug packages. Bump b-d on debhelper since
658 --dbgsym-migration was introduced in debhelper 9.20160114.
659
660 -- Andreas Metzler <ametzler@debian.org> Sat, 15 Jul 2017 12:46:16 +0200
661
662exim4 (4.89-3) unstable; urgency=high
663
664 * Re-upload to unstable.
665
666 -- Andreas Metzler <ametzler@debian.org> Mon, 19 Jun 2017 18:51:13 +0200
0baa7b9d
SB
667
668exim4 (4.89-2+deb9u1) stretch-security; urgency=medium
669
670 * CVE-2017-100369
671
672 -- <jmm@debian.org> Wed, 14 Jun 2017 07:03:07 +0200
673
674exim4 (4.89-2) unstable; urgency=medium
675
676 * Revert addition of header "# pidfile: /var/run/exim4/exim.pid" to
677 initscript (#844178). It breaks when the initscript does not start a
678 daemon but only runs update-exim4.conf. (inetd or QUEUERUNNER='nodaemon').
679 Closes: #860317
680 * When reporting bugs also attach /etc/default/exim4 by default.
681
682 -- Andreas Metzler <ametzler@debian.org> Thu, 20 Apr 2017 17:14:04 +0200
683
684exim4 (4.89-1) unstable; urgency=medium
685
686 * Enable inbound (server-side) proxying for -heavy. Closes: #856712
687 * New upstream release, source identical to RC7.
688
689 -- Andreas Metzler <ametzler@debian.org> Thu, 09 Mar 2017 17:49:47 +0100
690
691exim4 (4.89~RC7-1) unstable; urgency=medium
692
693 * New upstream version.
694
695 -- Andreas Metzler <ametzler@debian.org> Wed, 01 Mar 2017 18:37:18 +0100
696
697exim4 (4.89~RC6-1) unstable; urgency=medium
698
699 * Document E4BCD_PANICLOG_LINES in README.Debian.
700 * New upstream version.
701
702 -- Andreas Metzler <ametzler@debian.org> Thu, 23 Feb 2017 18:24:33 +0100
703
704exim4 (4.89~RC5-1) unstable; urgency=medium
705
706 * New upstream version.
707
708 -- Andreas Metzler <ametzler@debian.org> Mon, 13 Feb 2017 19:04:46 +0100
709
710exim4 (4.89~RC4-1) unstable; urgency=medium
711
712 * New upstream version.
713 + Drop 92_CVE-2016-1238.diff.
714 * Use /run/exim4/ instead of legacy directory /var/run/exim4 for pidfile
715 while we are changing the init script.
716
717 -- Andreas Metzler <ametzler@debian.org> Sun, 12 Feb 2017 15:28:09 +0100
718
719exim4 (4.89~RC3-1) unstable; urgency=medium
720
721 * New upstream version.
722 + Unfuzz 92_CVE-2016-1238.diff.
723 * init file:
724 + Source /etc/default/exim4 *before* defining the shell
725 variables holding the pidfilenames. Overriding these via
726 /etc/default/exim4 is not supported.
727 + Add missing support for reload when QUEUERUNNER='queueonly'.
728 + For QUEUERUNNER='queueonly' use $PIDFILE instead of $QRPIDFILE. This way
729 $PIDFILE is used for the main exim process for all available QUEUERUNNER
730 choices.
731 + Add header "# pidfile: /var/run/exim4/exim.pid" for improved systemd
732 interaction. systemd-sysv-generator uses this pseudoheader to set
733 PIDFile in the generated service file and it also sets
734 RemainAfterExit=no instead of yes if it is present. Thanks, Michael
735 Biebl for suggestion and explanation. Closes: #844178
736
737 -- Andreas Metzler <ametzler@debian.org> Fri, 10 Feb 2017 19:08:52 +0100
738
739exim4 (4.89~RC2-1) unstable; urgency=medium
740
741 * New upstream version.
742 + Drop 75_add_bak_spec.txt.diff.
743
744 -- Andreas Metzler <ametzler@debian.org> Sat, 04 Feb 2017 15:24:44 +0100
745
746exim4 (4.89~RC1-1) unstable; urgency=low
747
748 * Refresh debian/upstream/signing-key.asc.
749 * New upstream bugfix release.
750 + Drop superfluous patches.
751 75_00_DKIM-More-validation-of-DNS-key-record.-Bug-1926.patch
752 75_01_DKIM-Under-debug-when-signing-do-an-extra-check-on-t.patch
753 75_02_Do-not-call-ldap_start_tls_s-on-ldapi-connections.patch
754 75_03_PROXY-fix-v2-protocol-decode.-Bugs-2003-1747.patch
755 75_04_CHUNKING-fix-non-pipelined-synch-checks.-Bug-2004.patch
756 + Unfuzz 31_eximmanpage.dpatch and
757 78_Disable-chunking-BDAT-by-default.patch.
758 + Add 75_add_bak_spec.txt.diff - spec.txt and filter.txt missing in rc
759 tarball.
760 + Unfuzz debian/EDITME.exim4-*.
761 + Update debian/example.conf.md5. - Upstream typo fix.
762
763 -- Andreas Metzler <ametzler@debian.org> Tue, 31 Jan 2017 19:52:50 +0100
764
765exim4 (4.88-5) unstable; urgency=medium
766
767 * 78_Disable-chunking-BDAT-by-default.patch: Change default value of main
768 option chunking_advertise_hosts and smtp transport option
769 hosts_try_chunking from "*" to empty.
770 This is a Debian specific change, we are right before the freeze and BDAT
771 needs a little time.
772
773 -- Andreas Metzler <ametzler@debian.org> Thu, 19 Jan 2017 19:18:15 +0100
774
775exim4 (4.88-4) unstable; urgency=medium
776
777 * Upload to unstable.
778
779 -- Andreas Metzler <ametzler@debian.org> Sat, 07 Jan 2017 14:38:00 +0100
780
781exim4 (4.88-3) experimental; urgency=medium
782
783 * Pull multiple patches from upstream GIT:
784 + 75_00_DKIM-More-validation-of-DNS-key-record.-Bug-1926.patch,
785 75_01_DKIM-Under-debug-when-signing-do-an-extra-check-on-t.patch
786 + 75_02_Do-not-call-ldap_start_tls_s-on-ldapi-connections.patch
787 + 75_03_PROXY-fix-v2-protocol-decode.-Bugs-2003-1747.patch
788 + 75_04_CHUNKING-fix-non-pipelined-synch-checks.-Bug-2004.patch
789 (Thanks, Bart Noordervliet for the pointer) Closes: #850175
790
791 -- Andreas Metzler <ametzler@debian.org> Fri, 06 Jan 2017 17:32:20 +0100
792
793exim4 (4.88-2) unstable; urgency=medium
794
795 * Upload to unstable.
796
797 -- Andreas Metzler <ametzler@debian.org> Tue, 27 Dec 2016 17:36:29 +0100
798
799exim4 (4.88-1) experimental; urgency=medium
800
801 * New upstream version.
802 * Upload to experimental, let (almost identical) 4.88~RC6-2 propagate to
803 testing.
804 * Drop 75_Fix-DKIM-information-leakage.patch.
805
806 -- Andreas Metzler <ametzler@debian.org> Sun, 25 Dec 2016 18:07:12 +0100
807
808exim4 (4.88~RC6-2) unstable; urgency=high
809
810 * Add macro IGNORE_SMTP_LINE_LENGTH_LIMIT to allow disabling the SMTP DATA
811 physical line limit check for both for SMTP DATA ACL and remote_smtp*
812 transports. Closes: #828801
813 Also update corresponding NEWS entry.
814 * [lintian] debian/changelog: s/lenght/length/
815 * Pull 75_Fix-DKIM-information-leakage.patch from upstream GIT, fixing DKIM
816 information leakage issue CVE-2016-9963.
817
818 -- Andreas Metzler <ametzler@debian.org> Thu, 22 Dec 2016 16:50:21 +0100
819
820exim4 (4.88~RC6-1) unstable; urgency=low
821
822 * New upstream version.
823
824 -- Andreas Metzler <ametzler@debian.org> Thu, 08 Dec 2016 07:19:18 +0100
825
826exim4 (4.88~RC5-1) unstable; urgency=low
827
828 * New upstream version.
829 + Drop 75_01-Ensure-socket-is-nonblocking-before-draining.diff.
830
831 -- Andreas Metzler <ametzler@debian.org> Sat, 19 Nov 2016 17:43:51 +0100
832
833exim4 (4.88~RC4-2) unstable; urgency=low
834
835 * Pull 75_01-Ensure-socket-is-nonblocking-before-draining.diff from upstream
836 GIT to fix exim bug 1914 (exim doesn't close connection after quit.
837 * Upload to unstable.
838
839 -- Andreas Metzler <ametzler@debian.org> Sat, 12 Nov 2016 07:26:14 +0100
840
841exim4 (4.88~RC4-1) experimental; urgency=low
842
843 * New upstream version.
844
845 -- Andreas Metzler <ametzler@debian.org> Mon, 07 Nov 2016 19:08:47 +0100
846
847exim4 (4.88~RC3-1) experimental; urgency=medium
848
849 * New upstream version.
850 Drop 75_01-Fix-check-for-commandline-macro-definition.patch
851 75_02_Fix-bug-with-aborted-server-TLS-connection-under-Gnu.patch.
852
853 -- Andreas Metzler <ametzler@debian.org> Mon, 24 Oct 2016 19:25:31 +0200
854
855exim4 (4.88~RC2-3) experimental; urgency=medium
856
857 * Fix thinko in exim4-daemon-*.postinst. Do not regenerate gnutls params on
858 every upgrade.
859 * 75_02_Fix-bug-with-aborted-server-TLS-connection-under-Gnu.patch: Fix
860 longstanding bug with aborted TLS server connection handling. Under
861 GnuTLS, when a session startup failed (eg because the client
862 disconnected) Exim did stdio operations after fclose. This was exposed by
863 a recent change which nulled out the file handle after the fclose.
864
865 -- Andreas Metzler <ametzler@debian.org> Sun, 23 Oct 2016 16:39:13 +0200
866
867exim4 (4.88~RC2-2) experimental; urgency=medium
868
869 * 75_01-Fix-check-for-commandline-macro-definition.patch - Fix permission
870 problems on commandline mail submission. Closes: #840355
871
872 -- Andreas Metzler <ametzler@debian.org> Thu, 13 Oct 2016 19:25:07 +0200
873
874exim4 (4.88~RC2-1) experimental; urgency=low
875
876 * New upstream version.
877 + Changed default Diffie-Hellman parameters to be Exim-specific, created
878 by Phil Pennock. Added RFC7919 DH primes as an alternative.
879 Closes: #839978
880 * Set tls_dhparam = historic to use site-specific DH parameters.
881 * Again, ship /usr/share/exim4/exim4_refresh_gnutls-params, use it in
882 -daemon postinst.
883 * Initialize /var/spool/exim4/gnutls-params-2048 at daemon install, either
884 by running certtool or by installing
885 /usr/share/exim4/gnutls-params-2048. Do not try to use
886 openssl dhparam, it takes too long.
887
888 -- Andreas Metzler <ametzler@debian.org> Sun, 09 Oct 2016 17:37:08 +0200
889
890exim4 (4.88~RC1-1) experimental; urgency=low
891
892 * Drop reference to removed (in 4.80-7) "what"-option in init script usage
893 message. (Thanks, Calum Mackay!) Closes: #823855
894 * 92_CVE-2016-1238.diff: eximstats: Remove . from @INC [CVE-2016-1238]
895 Closes: #832442
896 * [lintian] update-exim4.conf.8 - fix typo.
897 * [lintian] Drop unused override binaries-have-file-conflict.
898 * B-d on default-libmysqlclient-dev.
899 * New upstream version.
900 + Refresh patches: 31_eximmanpage.dpatch 32_exim4.dpatch 35_install.dpatch
901 50_localscan_dlopen.dpatch
902 + Drop superfluous patches.
903 71_01_configure.default-nice-message-for-overlong-lines-Bu.patch
904 71_02_Delivery-quieten-smtp-transport-conn-reuse-vs.-deliv.patch
905 71_03_Avoid-exposing-passwords-in-log-on-failing-ldap-look.patch
906 71_04_Avoid-exposing-passwords-in-log-on-failing-ldap-look.patch
907 + Fix crash in VRFY handling when handed an unqualified name
908 (lacking @domain). Apply the same qualification processing as RCPT.
909 Closes: #834699
910 + Fix a possible security hole, wherein a process operating with the Exim
911 UID can gain a root shell. Credit to http://www.halfdog.net/ for
912 discovery and writeup. LP: #1580454
913 * [lintian] exim4-config_files.5 - fix typo.
914
915 -- Andreas Metzler <ametzler@debian.org> Sun, 25 Sep 2016 15:44:00 +0200
916
917exim4 (4.87-3) unstable; urgency=medium
918
919 * Pull multiple patches from upstream GIT:
920 + 71_01_configure.default-nice-message-for-overlong-lines-Bu.patch
921 Improved message on overlong lines in example config.
922 + 71_02_Delivery-quieten-smtp-transport-conn-reuse-vs.-deliv.patch
923 Fix race condition related to connection reuse.
924 https://bugs.exim.org/show_bug.cgi?id=1810
925 + 71_03_Avoid-exposing-passwords-in-log-on-failing-ldap-look.patch
926 71_04_Avoid-exposing-passwords-in-log-on-failing-ldap-look.patch
927 Avoid exposing passwords in log on failing ldap lookup
928 expansion. https://bugs.exim.org/show_bug.cgi?id=165
929 * Copy information message on rejecting overlong lines in data ACL from
930 upstream example configuration. Closes: #823418
931 * Add NEWS entry on line-length-limit introduced in 4.87~RC1-1.
932 Closes: 821830
933
934 -- Andreas Metzler <ametzler@debian.org> Sun, 08 May 2016 14:03:10 +0200
935
936exim4 (4.87-2) unstable; urgency=medium
937
938 * Fix reference to README.Debian in 01_exim4-config_listmacrosdefs.
939 (Thanks, L. Guruprasad!) Closes: #821416
940 * Add REMOTE_SMTP_SMARTHOST_HOSTS_REQUIRE_TLS macro to enforce TLS
941 connections (hosts_require_tls option) in remote_smtp_smarthost
942 transport. Closes: #822174
943 * exim4-daemon-heavy: Disable WITH_OLD_DEMIME ("demime" ACL condition). It
944 is deprecated and will be removed in 4.88.
945 * README.Debian*: Fix minor issues found by lintian.
946 * Fix reference to spec.txt in 30_exim4-config_check_rcpt. Closes: #665399
947 * Drop exim4-base Recommends on perl-modules. This had been unnecessary
948 since 4.80~rc6-1 which dropped /usr/share/exim4/timeout.pl.
949
950 -- Andreas Metzler <ametzler@debian.org> Sat, 30 Apr 2016 13:38:29 +0200
951
952exim4 (4.87-1) unstable; urgency=medium
953
954 * Fix comment in
955 conf.d/transport/30_exim4-config_remote_smtp_smarthost. (Thanks,
956 Jörg-Volker Peetz!) Closes: #819780
957 * New upstream release.
958
959 -- Andreas Metzler <ametzler@debian.org> Thu, 07 Apr 2016 19:26:59 +0200
960
961exim4 (4.87~RC7-1) unstable; urgency=low
962
963 * Enable SOCKS support in both -light and -heavy. Closes: #818091
964 * Fix typos in configuration. (Thanks, Vincent Lefevre!) Closes: #819482
965 * New upstream version.
966 + Drop 74_Store-the-initial-working-directory.diff,
967 75_String-expansions-fix-extract.patch,
968 76_only_warn_on_nonempty_environment.diff.
969 + Update debian/example.conf.md5.
970
971 -- Andreas Metzler <ametzler@debian.org> Fri, 01 Apr 2016 19:04:07 +0200
972
973exim4 (4.87~RC6-3) unstable; urgency=medium
974
975 * Merge changelog entries for 4.86.2-1 and -2.
976 * Upload to unstable.
977 * Add link to CVE details to latest NEWS entry and bump its version and date
978 to match this upload. Closes: #818349, #817244
979
980 -- Andreas Metzler <ametzler@debian.org> Wed, 23 Mar 2016 18:44:22 +0100
981
982exim4 (4.87~RC6-2) experimental; urgency=medium
983
984 * 74_Store-the-initial-working-directory.diff,
985 76_only_warn_on_nonempty_environment.diff: Upstream followups on the
493d55f6
AM
986 CVE fix (Thanks, Heiko Schlittermann!):
987 + Runtime warning is only generated if (and only if) keep_environment
988 is unset and environment is nonempty.
989 + Store the initial working directory and make it available in the new
990 expansion variable $initial_cwd.
0baa7b9d
SB
991 * Merge all NEWS.Debian files into a single one, identical for all binary
992 packages. - Different NEWS files built from a single source package is not
993 and has not ever been supported by apt-listchanges which is the most
994 important frontend.
995 * Add a NEWS entry about the environment related runtime warning.
996
997 -- Andreas Metzler <ametzler@debian.org> Sat, 19 Mar 2016 18:11:32 +0100
998
999exim4 (4.87~RC6-1) experimental; urgency=medium
1000
1001 * New upstream version.
1002 * Add 75_String-expansions-fix-extract.patch from upstream GIT, fixing
1003 ${extract } string expansion for the numeric/3-string case. (Bug was
1004 introduced in 4.85.)
1005 * Set keep_environment to empty value instead of setting a minimal PATH in
1006 add_environment.
1007
1008 -- Andreas Metzler <ametzler@debian.org> Fri, 11 Mar 2016 19:50:07 +0100
1009
1010exim4 (4.87~RC5-2) experimental; urgency=medium
1011
1012 * Update debian/upstream/signing-key.asc, using the keys listed in
1013 ftp://ftp.exim.org/pub/exim/Exim-Maintainers-Keyring.asc. This adds
1014 Heiko Schlittermann's key.
1015 * Bump exim4-config Breaks to exim4-daemon-* (<< 4.87~RC5). Closes: #816790
1016
1017 -- Andreas Metzler <ametzler@debian.org> Sat, 05 Mar 2016 13:17:01 +0100
1018
1019exim4 (4.87~RC5-1) experimental; urgency=medium
1020
1021 * exim4-config.postinst: Test for existence of /etc/inetd.conf before trying
1022 to grep in it. Closes: #814998
1023 * New upstream version, includes the patch for CVE-2016-1531. (Local root
1024 exploit).
1025 * Add macros MAIN_KEEP_ENVIRONMENT and MAIN_ADD_ENVIRONMENT to set the new
1026 options. If neither is used we use add_environment to set a minimal
1027 PATH=/bin:/usr/bin to avoid a runtime warning.
1028
1029 -- Andreas Metzler <ametzler@debian.org> Wed, 02 Mar 2016 21:06:43 +0100
1030
1031exim4 (4.87~RC3-2) experimental; urgency=medium
1032
1033 * README.Debian: Refer to Exim specification by chapter name instead of
1034 chapter number. Closes: #813351
1035 * Fix some spelling errors found by lintian.
1036 * Minor debian/rules cleanup:
1037 + Restore originally intended behavior, upstream changelog is only
1038 shipped in exim4-base, symlinks to it elsewhere.
1039 + Drop workaround for #347577, fixed in debhelper 5.0.15.
1040 + Use "dh binary-arch" and "dh binary-indep" and a bunch of override
1041 targets instead of listing all dh-commands. While this is uglier and
1042 slows things down a bit it shortens debian/rules by 40 lines and has the
1043 huge benefit that we automatically use all suggested helpers in correct
1044 order.
1045 + Drop unused variables combinedidbgpackage/dhcombinedidbgpackage.
1046 + Delete unused, commented code.
1047 + Drop (exported) variable MTACONFLICTS, used only once.
1048 * Bugfix: Stop build if generation of EDITME.exim4-heavy fails.
1049 * Refresh debian/EDITME.*, -heavy was missing ldap and sql support.
1050
1051 -- Andreas Metzler <ametzler@debian.org> Sat, 13 Feb 2016 20:10:53 +0100
1052
1053exim4 (4.87~RC3-1) experimental; urgency=medium
1054
1055 * Move Vcs-* from git/http to https.
1056 * [lintian] README.Debian: s/desireable/desirable/.
1057 * [lintian] README.Debian: Fix grammar error "allow + infinitive".
1058 * [lintian] exim4-config.postinst: Use which foo > /dev/null
1059 instead of [ -x /path/to/foo ].
1060 * Update list of patches in debian/README.Debian.xml
1061 * Drop 66_enlarge-dh-parameters-size.dpatch: It does not have any effect
1062 with GnuTLS >= 2.12 and even stable has GnuTLS 3.x.
1063 * New upstream version.
1064 + Upstream's default rcpt ACL now requires that a HELO/EHLO was accepted,
1065 merge this change and drop CHECK_MAIL_HELO_ISSUED macro.
1066
1067 -- Andreas Metzler <ametzler@debian.org> Thu, 21 Jan 2016 17:44:00 +0100
1068
1069exim4 (4.87~RC2-1) experimental; urgency=medium
1070
1071 * New upstream version.
1072
1073 -- Andreas Metzler <ametzler@debian.org> Sat, 19 Dec 2015 17:51:39 +0100
1074
1075exim4 (4.87~RC1-1) experimental; urgency=medium
1076
1077 * New upstream version.
1078 + Refresh patches.
1079 + Drop debian/patches/75_00xx*.patch from exim-4_86+fixes branch.
1080 + Sync with upstream default configuration: Check maximum (physical, i.e.
1081 before unfolding) line length in default spec file data ACL and smtp
1082 transport. Bug 1684 Closes: #797919
1083 + HS/02 Add the Exim version string to the process info. This way exiwhat
1084 gives some more detail about the running daemon. Closes: #240883
1085 * Override upstream's new default of tls_advertise_hosts = * if
1086 MAIN_TLS_ENABLE is not set.
1087
1088 -- Andreas Metzler <ametzler@debian.org> Fri, 11 Dec 2015 20:15:30 +0100
1089
1090exim4 (4.86.2-2) unstable; urgency=high
1091
1092 * Bump exim4-config Breaks to exim4-daemon-* (<< 4.86.2). Closes: #816790
1093
1094 -- Andreas Metzler <ametzler@debian.org> Sat, 05 Mar 2016 13:07:31 +0100
1095
1096exim4 (4.86.2-1) unstable; urgency=high
1097
1098 * Pull 75_0012_Cutthrough-Fix-bug-with-dot-only-line.patch from upstream
1099 4.86+fixes branch.
1100 * New upstream security release for CVE-2016-1531.
1101 + New options keep_environment/add_environment which are empty by default,
1102 i.e. any subprocesses start in a clean (empty) environment.
1103 + -C requires an absolute path.
1104 + Exim changes it's working directory to / right after startup.
1105 * Add macros MAIN_KEEP_ENVIRONMENT and MAIN_ADD_ENVIRONMENT to set the new
1106 options. If neither is used we use add_environment to set a minimal
1107 PATH=/bin:/usr/bin to avoid a runtime warning.
1108
1109 -- Andreas Metzler <ametzler@debian.org> Tue, 01 Mar 2016 19:34:39 +0100
1110
1111exim4 (4.86-7) unstable; urgency=medium
1112
1113 * Allow arch-indep build (dpkg-buildpackage -A). Closes: #806023
1114 * 75_0011_MIME-fix-crash-on-filenames-having-null-charset.-Bug.patch from
1115 exim-4_86+fixes branch fixes another MIME ACL related crash.
1116 https://bugs.exim.org/show_bug.cgi?id=1730
1117
1118 -- Andreas Metzler <ametzler@debian.org> Sat, 28 Nov 2015 18:45:31 +0100
1119
1120exim4 (4.86-6) unstable; urgency=medium
1121
1122 * Cleanup (actual patch is identical): Use
1123 75_0009_Avoid-misaligned-access-in-cached-lookup.-Bug-1708.patch from
1124 exim-4_86+fixes branch instad of
1125 76_Avoid-misaligned-access-in-cached-lookup.-Bug-1708.patch.
1126 * Pull 75_0010_DKIM-ignore-space-tab-embedded-in-base64-during-deco.patch,
1127 DKIM: ignore space & tab embedded in base64 during decode. Bug 1700
1128
1129 -- Andreas Metzler <ametzler@debian.org> Sun, 08 Nov 2015 07:55:51 +0100
1130
1131exim4 (4.86-5) unstable; urgency=high
1132
1133 * Pull 76_Avoid-misaligned-access-in-cached-lookup.-Bug-1708.patch from GIT
1134 head to avoid misaligned access in cached lookup. Closes: #803255
1135
1136 -- Andreas Metzler <ametzler@debian.org> Tue, 03 Nov 2015 19:33:49 +0100
1137
1138exim4 (4.86-4) unstable; urgency=medium
1139
1140 * Fix documentation of lowuid_aliases router, exceptions are in
1141 CONFDIR/lowuid-aliases not CONFDIR/lowuid_aliases. (Thanks, Tim Krah)
1142 Closes: #799672
1143 * fcron has been removed from Debian in 2011, stop listing it as an
1144 alternative dependency of exim4-base (Thanks, Alexandre Detiste).
1145 Closes: #798236
1146 * Update to upstream exim-4_86+fixes branch:
1147 + Drop 75_Fix-ESMTP-MAIL-command-option-processing.patch,
1148 76_Fix-post-transport-crash.patch,
1149 77_Fix-post-transport-crash-safeguard-for-missing-spool.patch,
1150 78_Close-logs-after-daemon-process-exceptional-write.patch.
1151 + Add 75_0001-Fix-post-transport-crash.patch
1152 75_0002-Fix-post-transport-crash-safeguard-for-missing-spool.patch
1153 75_0003-Fix-ESMTP-MAIL-command-option-processing.patch
1154 75_0005-Close-logs-after-daemon-process-exceptional-write.-B.patch
1155 75_0007-DNS-time-limit-cached-returns-using-TTL.-Bug-1395.patch
1156 75_0008-Retry-always-use-interface-if-set-for-retry-DB-key.-.patch
1157 * Use dh v9.
1158
1159 -- Andreas Metzler <ametzler@debian.org> Sat, 17 Oct 2015 15:01:01 +0200
1160
1161exim4 (4.86-3) unstable; urgency=medium
1162
1163 * Pull three patches from upstream git:
1164 + 75_Fix-ESMTP-MAIL-command-option-processing.patch:
1165 Corrects handling of mail-addresses with whitespace.
1166 <http://article.gmane.org/gmane.mail.exim.user/97069>
1167 + 76_Fix-post-transport-crash.patch
1168 77_Fix-post-transport-crash-safeguard-for-missing-spool.patch
1169 <https://bugs.exim.org/show_bug.cgi?id=1671>
1170 * Fix spelling error in copyright file. (Thanks, lintian)
1171 * Pull 77_Fix-post-transport-crash-safeguard-for-missing-spool.patch from
1172 upstream git, exim was keeping logfiles open after after a "too many
1173 connections" event. Closes: #796524, #476958 (Thanks to Andreas Pflug for
1174 chasing this.)
1175 * When saving the berkeley DB version at build-time pass -P option to cpp,
1176 to prevent linebreaks.
1177
1178 -- Andreas Metzler <ametzler@debian.org> Tue, 25 Aug 2015 20:05:59 +0200
1179
1180exim4 (4.86-2) unstable; urgency=high
1181
1182 * Update exim4-config Breaks, PRDR support is was moved from being
1183 Experimental into the mainline with 4.83.
1184 Closes: #794320
1185
1186 -- Andreas Metzler <ametzler@debian.org> Sun, 02 Aug 2015 07:40:24 +0200
1187
1188exim4 (4.86-1) unstable; urgency=medium
1189
1190 * New upstream version, identical to RC5 (except for the version string).
1191
1192 -- Andreas Metzler <ametzler@debian.org> Sun, 26 Jul 2015 18:35:33 +0200
1193
1194exim4 (4.86~RC5-1) unstable; urgency=medium
1195
1196 * New upstream version.
1197 + Drop 75_Bump-LOCAL_SCAN_ABI_VERSION.patch.
1198
1199 -- Andreas Metzler <ametzler@debian.org> Sat, 18 Jul 2015 11:46:11 +0200
493d55f6 1200
0baa7b9d 1201exim4 (4.86~RC4-2) unstable; urgency=medium
493d55f6 1202
0baa7b9d
SB
1203 * Drop libmysqlclient15-dev alternative build-dependency. Closes: #790463
1204 * Update list of upstream gpg-keys (0x4D1E900E14C1CC04 Phil Pennock,
1205 0x85AB833FDDC03262 Nigel Metheringham, 0xFFC0F14C84C71B6E Tony Finch,
1206 0xC4F4F94804D29EBA Todd Lyons, 0xBCE58C8CE41F32DF Jeremy Harris,
1207 0x63762CDA67E2F359 David Woodhouse, 0xAD5EDBB793EC57E4 Graeme Fowler),
1208 transition from debian/upstream-signing-key.pgp to
1209 debian/upstream/signing-key.asc.
1210 * Pull 75_Bump-LOCAL_SCAN_ABI_VERSION.patch from upstream GIT and update
1211 exim4-localscanapi-x.y provides to 2.0. A binNMU of sa-exim will then
1212 properly fix the issue. Closes: #790616
493d55f6 1213
0baa7b9d 1214 -- Andreas Metzler <ametzler@debian.org> Sun, 05 Jul 2015 11:47:47 +0200
493d55f6 1215
0baa7b9d 1216exim4 (4.86~RC4-1) unstable; urgency=medium
493d55f6 1217
0baa7b9d
SB
1218 * unexport/undefine TZ in debian/rules for reproducible build. It would be
1219 used as default value for TIMEZONE_DEFAULT.
1220 * New upstream version.
1221 + Unfuzz 31_eximmanpage.dpatch.
1222
1223 -- Andreas Metzler <ametzler@debian.org> Mon, 29 Jun 2015 07:43:19 +0200
1224
1225exim4 (4.86~RC3-2) unstable; urgency=medium
1226
1227 * Upload to unstable.
1228
1229 -- Andreas Metzler <ametzler@debian.org> Tue, 23 Jun 2015 19:11:19 +0200
1230
1231exim4 (4.86~RC3-1) experimental; urgency=medium
1232
1233 * Don't provide default-mta on Ubuntu and Ubuntu-derivatives. See LP-bug
1234 1166671.
1235 * New upstream version.
1236
1237 -- Andreas Metzler <ametzler@debian.org> Mon, 22 Jun 2015 20:39:11 +0200
1238
1239exim4 (4.86~RC2-1) experimental; urgency=medium
1240
1241 * Drop nowadays unneeded XS-Testsuite: autopkgtest in debian/control
1242 (Thanks, lintian).
1243 * New upstream version:
1244 +Drop included patches.
1245 (-72_0001-Guard-routing-against-a-null-deref.-Bug-1639.patch,
1246 72_0002-Spamd-add-missing-initialiser.-Rspamd-mode-was-incor.patch,
01e60269 1247 72_0003-DSN-fix-null-deref-when-bounce-is-due-to-conn-timeou.patch,
0baa7b9d
SB
1248 72_0004-Content-scan-Use-ETIMEDOUT-not-ETIME-as-having-bette.patch)
1249 * Sync Debian config with upstream default config:
1250 + Set prdr_enable.
1251 + Add +smtp_protocol_error +smtp_syntax_error +tls_certificate_verified to
1252 log_selector option value.
1253
1254 -- Andreas Metzler <ametzler@debian.org> Wed, 17 Jun 2015 19:49:58 +0200
1255
1256exim4 (4.86~RC1-3) experimental; urgency=medium
1257
1258 * Get time and date of latest debian/changelog entry and patch exim(on) to
1259 use these instead of __DATE__ and __TIME__.
1260 * Pull 72_0004-Content-scan-Use-ETIMEDOUT-not-ETIME-as-having-bette.patch
1261 from GIT to fix FTBFS on kfreebsd.
1262
1263 -- Andreas Metzler <ametzler@debian.org> Sat, 13 Jun 2015 15:22:47 +0200
1264
1265exim4 (4.86~RC1-2) experimental; urgency=medium
1266
1267 * Pull three post-release fixes from upstream GIT. (null pointer
1268 derefencing, and spam scanning defaulting to rspam mode)
1269 + 72_0001-Guard-routing-against-a-null-deref.-Bug-1639.patch
1270 + 72_0002-Spamd-add-missing-initialiser.-Rspamd-mode-was-incor.patch
1271 + 72_0003-DSN-fix-null-deref-when-bounce-is-due-to-conn-timeou.patch
1272
1273 -- Andreas Metzler <ametzler@debian.org> Sun, 07 Jun 2015 07:26:13 +0200
1274
1275exim4 (4.86~RC1-1) experimental; urgency=medium
1276
1277 * New upstream release.
1278 + Drop 84_Fix-truncation-of-items-in-headers_remove-lists-this.patch,
1279 refresh patches.
1280 + Update EDITME*, enable AUTH_TLS for -heavy.
1281 + Sync Debian config with upstream default config, rfc1413 calls are now
1282 disabled by default.
1283 + Uses MIME format bounce messages (RFC 3461). Closes: #230284,#400741
1284 + The spamd_address main option now supports an optional timeout value per
1285 server (tmo=timespec), it defaults two 2 minutes. Closes: #297915
1286 + spamd_address also accepts hostnames and IPv6 addresses. Closes: #751687
1287 + log reason for defer, on a hostlist dns-lookup temporary error.
1288 Closes: #670035
1289
1290 -- Andreas Metzler <ametzler@debian.org> Sat, 06 Jun 2015 15:41:33 +0200
1291
1292exim4 (4.85-3) unstable; urgency=medium
1293
1294 * Upload to unstable.
1295
1296 -- Andreas Metzler <ametzler@debian.org> Tue, 28 Apr 2015 19:34:16 +0200
1297
1298exim4 (4.85-2) experimental; urgency=medium
493d55f6 1299
0baa7b9d
SB
1300 * Merge from unstable 4.84-8.
1301 + Tighten dependency of exim4 on exim4-base to (>= ${source:Version}) and
1302 (<< ${source:Version}.1), at least source version, but not the next
1303 sourceful upload. Closes: #777246
1304 + Pull 84_Fix-truncation-of-items-in-headers_remove-lists-this.patch from
1305 upstream GIT which fixes breakage of string-expansion in headers_remove
1306 commands. (Thanks Gordon Dickens, for the pointer.) -
1307 83_Remove-limit-on-remove_headers-item-size.-Bug-1533.patch not added
1308 here since it already part of 4.85.
1309
1310 -- Andreas Metzler <ametzler@debian.org> Sat, 21 Feb 2015 15:38:47 +0100
1311
1312exim4 (4.85-1) experimental; urgency=medium
1313
1314 * exim4-config_files.5: Escape dots in regex. (Thanks, ael)
1315 * New upstream version.
1316
1317 -- Andreas Metzler <ametzler@debian.org> Tue, 13 Jan 2015 18:48:45 +0100
1318
1319exim4 (4.85~RC4-1) experimental; urgency=medium
1320
1321 * update-exim4.conf:
1322 + Drop unused variable UPEX4C_internal_tmp.
1323 + Use tempfile(1) if the generated file will not be written to
1324 /var/lib/exim4/.
1325 + Add --check option.
1326 * init-script: On restart use update-exim4.conf --check before stopping the
1327 daemon. (This is a no-op with systemd since its sysv compat layer
1328 translates "foo restart" into "foo stop" "foo start" instead of using the
1329 init scripts restart target.)
1330 * Handle _RC in watchfile with uversionmangle.
1331 * New upstream version.
1332 + Stop repacking source, rfcs have been dropped.
1333
1334 -- Andreas Metzler <ametzler@debian.org> Wed, 31 Dec 2014 14:24:35 +0100
1335
1336exim4 (4.85~RC3+dfsg-1) experimental; urgency=medium
1337
1338 * New upstream version.
1339
1340 -- Andreas Metzler <ametzler@debian.org> Thu, 18 Dec 2014 19:07:59 +0100
1341
1342exim4 (4.85~RC2+dfsg-1) experimental; urgency=medium
1343
1344 * New upstream version.
1345 * Unfuzz patches: 50_localscan_dlopen.dpatch 67_unnecessaryCopt.diff
1346 70_remove_exim-users_references.dpatch.
1347
1348 -- Andreas Metzler <ametzler@debian.org> Mon, 01 Dec 2014 18:54:17 +0100
1349
1350exim4 (4.85~RC1+dfsg-1) experimental; urgency=medium
1351
1352 * Unset message_prefix/message_sufix in maildrop_pipe transport. Maildrop
1353 neither expects a mbox-style From nor an empty line add the end. (Thanks,
1354 Edward Betts) Closes: #769396
1355 * Change the init script's restart order from { regenerate_config; stop;
1356 start ; } to { stop; regenerate_config; start ; }. (Thanks, Jakub Warmuz)
1357 Closes: #768874
1358 * New upstream version.
1359 + Unfuzz 66_enlarge-dh-parameters-size.dpatch
1360 + Drop 80_mime_empty_charset.diff.
1361 * Remove rfc from upstream source and repack it.
493d55f6 1362
0baa7b9d 1363 -- Andreas Metzler <ametzler@debian.org> Tue, 18 Nov 2014 19:28:20 +0100
493d55f6 1364
de45f55a
AM
1365exim4 (4.84-8) unstable; urgency=medium
1366
1367 * Pull 83_Remove-limit-on-remove_headers-item-size.-Bug-1533.patch and
1368 84_Fix-truncation-of-items-in-headers_remove-lists-this.patch from
1369 upstream GIT which fix breakage of string-expansion in headers_remove
1370 commands. (Thanks Gordon Dickens, for the pointer.)
1371
1372 -- Andreas Metzler <ametzler@debian.org> Tue, 17 Feb 2015 18:00:42 +0100
1373
1374exim4 (4.84-7) unstable; urgency=medium
1375
1376 * Tighten dependency of exim4 on exim4-base to (>= ${source:Version}) and
1377 (<< ${source:Version}.1), at least source version, but not the next
1378 sourceful upload. Closes: #777246
1379
1380 -- Andreas Metzler <ametzler@debian.org> Sat, 07 Feb 2015 15:12:33 +0100
1381
1382exim4 (4.84-6) unstable; urgency=medium
1383
1384 * Revert init script's restart order change in 4.84-4 for the time being.
1385 This needs a slightly more involved change than I want to push into jessie
1386 right now.
1387
1388 -- Andreas Metzler <ametzler@debian.org> Sun, 21 Dec 2014 14:07:12 +0100
1389
1390exim4 (4.84-5) unstable; urgency=medium
1391
1392 * 82_quoted-or-r-2047-encoded.diff pulled from upstream git (sans
1393 testsuite), extends the fix in 4.84-2.
1394
1395 -- Andreas Metzler <ametzler@debian.org> Wed, 17 Dec 2014 19:03:39 +0100
1396
1397exim4 (4.84-4) unstable; urgency=medium
1398
1399 * Unset message_prefix/message_sufix in maildrop_pipe transport. Maildrop
1400 neither expects a mbox-style From nor an empty line add the end. (Thanks,
1401 Edward Betts) Closes: #769396
1402 * Change the init script's restart order from { regenerate_config; stop;
1403 start ; } to { stop; regenerate_config; start ; }. (Thanks, Jakub Warmuz)
1404 Closes: #768874
1405 * 81_buffer-overrun-in-spam-acl.diff from upstream git. Fix a buffer overrun
1406 with control characters in argument of spam= acl condition.
1407 <http://bugs.exim.org/show_bug.cgi?id=1552>
1408
1409 -- Andreas Metzler <ametzler@debian.org> Sun, 30 Nov 2014 08:24:04 +0100
1410
1411exim4 (4.84-3) unstable; urgency=medium
1412
1413 * Apply patch to Italian (it) debconf template translation, thanks to
1414 s3v <c0llapsed@yahoo.it>. Closes: #764925
1415 * Let virtual package cron-daemon fulfill exim4-base's dependency now that
1416 bcron provides it instead of "cron" and systemd-cron is fixed.
1417 Closes: #765720
1418
1419 -- Andreas Metzler <ametzler@debian.org> Sun, 19 Oct 2014 13:35:56 +0200
1420
1421exim4 (4.84-2) unstable; urgency=high
1422
1423 * Add 80_mime_empty_charset.diff from upstream GIT (the parts that change
1424 the code, not the testsuite) to handle empty content-type charset.
1425
1426 -- Andreas Metzler <ametzler@debian.org> Fri, 29 Aug 2014 19:41:38 +0200
1427
1428exim4 (4.84-1) unstable; urgency=medium
1429
1430 * New upstream release.
1431
1432 -- Andreas Metzler <ametzler@debian.org> Thu, 14 Aug 2014 19:33:01 +0200
1433
1434exim4 (4.84~RC2-1) unstable; urgency=medium
1435
1436 * New upstream release candidate.
1437
1438 -- Andreas Metzler <ametzler@debian.org> Sat, 09 Aug 2014 07:42:00 +0200
1439
1440exim4 (4.84~RC1-3) unstable; urgency=medium
1441
1442 * Third try. Simply comment *custom* in debian/control.
1443
1444 -- Andreas Metzler <ametzler@debian.org> Sat, 02 Aug 2014 09:29:13 +0200
1445
1446exim4 (4.84~RC1-2) unstable; urgency=medium
1447
1448 * Re-upload, after manually removing *custom* from the changes file to avoid
1449 false detection of NEW packages due to the changes in the archive
1450 infrastructure related source-only uploads.
1451
1452 -- Andreas Metzler <ametzler@debian.org> Sat, 02 Aug 2014 08:14:54 +0200
1453
1454exim4 (4.84~RC1-1) unstable; urgency=medium
1455
1456 * New upstream release candidate, fixing a regression in the MIME handling
1457 code.
1458
1459 -- Andreas Metzler <ametzler@debian.org> Sat, 02 Aug 2014 07:45:26 +0200
1460
1461exim4 (4.83-2) unstable; urgency=medium
1462
1463 * Upload to unstable.
1464
1465 -- Andreas Metzler <ametzler@debian.org> Sat, 26 Jul 2014 09:25:15 +0200
1466
1467exim4 (4.83-1) experimental; urgency=medium
1468
1469 * New upstream release which includes the fix for CVE-2014-2972.
1470
1471 -- Andreas Metzler <ametzler@debian.org> Wed, 23 Jul 2014 08:13:22 +0200
1472
1473exim4 (4.83~RC3-1) experimental; urgency=medium
1474
1475 * New upstream release candidate.
1476
1477 -- Andreas Metzler <ametzler@debian.org> Tue, 08 Jul 2014 19:07:52 +0200
1478
1479exim4 (4.83~RC2-1) experimental; urgency=medium
1480
1481 * New upstream release candidate.
1482 + JH/26 Port service names are now accepted for tls_on_connect_ports, to
1483 align with daemon_smtp_ports. Bug 72. Closes: #316441
1484
1485
1486 -- Andreas Metzler <ametzler@debian.org> Fri, 06 Jun 2014 19:11:24 +0200
1487
1488exim4 (4.83~RC1-1) experimental; urgency=medium
1489
1490 * New upstream feature release candidate.
1491 + JH/06 Log outbound-TLS and port details, subject to log selectors, for a
1492 failed delivery. Closes: #712987
1493 * Unfuzz 31_eximmanpage.dpatch and 50_localscan_dlopen.dpatch.
1494 * Drop superfluous patches: 75_unbind-ldap-connection.diff
1495 76_fix_ldap_option_setting.diff 77_close-the-server-side-of-TLS.diff
1496 80_fix_ftbfs_hurd.diff
1497 * Since exim4-base currently only includes daily cronjobs let anacron
1498 fulfill the dependency, too. Systems with missing recommends (anacron
1499 recommends cron) that are *not* restarted regularily will therefore not
1500 run the cron-job regularily. Exim should not break horribly in this case
1501 and we can assume the local system administrator knows what (s)he is doing
1502 by disabling installation of recommends. (Policy: "[...] packages that
1503 would be found together with this one in all but unusual installations")
1504 Closes: #733929
1505
1506 -- Andreas Metzler <ametzler@debian.org> Thu, 29 May 2014 13:09:04 +0200
1507
1508exim4 (4.82.1-2) unstable; urgency=high
1509
1510 * [87_double_expansion.diff] from upstream. Stop unwanted double expansion
1511 of arguments to mathematical comparison operations. CVE-2014-2972
1512
1513 -- Andreas Metzler <ametzler@debian.org> Sun, 20 Jul 2014 19:05:48 +0200
1514
1515exim4 (4.82.1-1) unstable; urgency=high
1516
1517 * New upstream security release, fixing CVE-2014-2957. This is a remote
1518 code execution flaw in Exim version 4.82 (only) when built with DMARC
1519 support. Debian's binary packages are not built with DMARC support and
1520 therefore not vulnerable. However we want to fix this for people building
1521 their own binaries based on Debian's packaging.
1522
1523 -- Andreas Metzler <ametzler@debian.org> Wed, 28 May 2014 19:01:43 +0200
1524
1525exim4 (4.82-8) unstable; urgency=medium
1526
1527 * Now that GMP has been relicensed to LGPLv3+/GPLv2+ build exim against
1528 GnuTLS v3.
1529
1530 -- Andreas Metzler <ametzler@debian.org> Sat, 12 Apr 2014 16:19:05 +0200
1531
1532exim4 (4.82-7) unstable; urgency=high
1533
1534 [ Martin Pitt ]
1535 * debian/tests/control: Add missing python test dependency, as
1536 debian/tests/security calls python. Closes: #740092
1537
1538 [ Andreas Metzler ]
1539 * 4.82 deprecated $tls_bits, $tls_certificate_verified, $tls_cipher,
1540 $tls_peerdn, $tls_sni and introduced tls_in_*/tls_out_* variants of these
1541 variables which describe the respective status of the current incoming or
1542 outgoing TLS connection. The rationale for this is that a single exim
1543 process can now use both an incoming (message reception) and outgoing
1544 TLS connection (callout or cutthrough delivery) concurrently. With this
1545 change the "old" variables were mapped to tls_in_*, i.e. they expand to
1546 empty values on outgoing connections. (This is not yet documented.)
1547 Outgoing tls-connections can therefore not be detected by nonempty
1548 $tls_cipher anymore. exim4-config << 4.82 used this mechanism to prevent
1549 sending of plaintext AUTH information on unencrypted connections. Force a
1550 lockstep upgrade of exim4-config by bumping the version of exim4-base's
1551 dependency on exim4-config to >= 4.82.
1552 Closes: #742901, #736081
1553
1554 -- Andreas Metzler <ametzler@debian.org> Sun, 06 Apr 2014 08:32:11 +0200
1555
1556exim4 (4.82-6) experimental; urgency=medium
1557
1558 [ Martin Pitt ]
1559 * debian/tests/control: Add missing python test dependency, as
1560 debian/tests/security calls python. Closes: #740092
1561
1562 [ Andreas Metzler ]
1563 * Now that GMP has been relicensed to LGPLv3+/GPLv2+ build exim against
1564 GnuTLS v3.
1565
1566 -- Andreas Metzler <ametzler@debian.org> Sat, 05 Apr 2014 14:18:11 +0200
1567
1568exim4 (4.82-5) unstable; urgency=medium
1569
1570 * Upgrade to libdb5.3-dev. Closes: #738637 Be paranoid and bump BDBVERSION
1571 in exim4-base.postinst from 3.0 (no idea why this did not read 5.1) to
1572 5.3, therefore purging hints db on upgrades.
1573
1574 -- Andreas Metzler <ametzler@debian.org> Wed, 12 Feb 2014 19:31:55 +0100
1575
1576exim4 (4.82-4) unstable; urgency=medium
1577
1578 * Correct title/name of exim4-config_files(5). (Thanks, Heiko Schlittermann)
1579 Closes: #734212
1580 * 80_fix_ftbfs_hurd.diff by Samuel Thibault fixes FTBFS on GNU/hurd due to
1581 missing support for TCLASS. Closes: #738445
1582 * Add debian/upstream-signing-key.pgp (listed in
1583 debian/source/include-binaries) and update watchfile to check
1584 upstream signature.
1585
1586 -- Andreas Metzler <ametzler@debian.org> Sun, 09 Feb 2014 19:41:34 +0100
1587
1588exim4 (4.82-3) unstable; urgency=low
1589
1590 * Upload to unstable.
1591
1592 -- Andreas Metzler <ametzler@debian.org> Wed, 27 Nov 2013 19:51:26 +0100
1593
1594exim4 (4.82-2) experimental; urgency=low
1595
1596 * Pull two post-release fixes from upstream git master:
1597 + 75_unbind-ldap-connection.diff - Only unbind ldap connection if bind
1598 succeeded.
1599 + 77_close-the-server-side-of-TLS.diff - Correctly close the server side
1600 of TLS when forking for delivery.
1601 * Pull 76_fix_ldap_option_setting.diff from Todd Lyons testing tree. See
1602 <http://mid.gmane.org/20131029200309.GA277075%40zedat.fu-berlin.de>.
1603
1604 -- Andreas Metzler <ametzler@debian.org> Sat, 09 Nov 2013 17:24:59 +0100
1605
1606exim4 (4.82-1) experimental; urgency=low
1607
1608 * New upstream stable release.
1609 * Drop exim4-config_files.5 symlinks for local_host_whitelist and
1610 local_sender_whitelist, add symlinks for host_local_deny_exceptions and
1611 sender_local_deny_exceptions instead. Closes: #661365
1612
1613 -- Andreas Metzler <ametzler@debian.org> Sat, 09 Nov 2013 11:52:58 +0100
1614
1615exim4 (4.82~rc5-1) experimental; urgency=low
1616
1617 * New upstream version.
1618
1619 -- Andreas Metzler <ametzler@debian.org> Sat, 26 Oct 2013 08:50:58 +0200
1620
1621exim4 (4.82~rc3-1) experimental; urgency=low
1622
1623 * New upstream version.
1624 + TL/15 Fix exiqsumm summary for corner case. Patch provided by Richard
1625 Hall.
1626 + TL/16 Bugzilla 1289 - Clarify host/ip processing when have errors
1627 looking up a hostname or reverse DNS when processing a host list. Used
1628 suggestions from multiple comments on this bug.
1629 + TL/17 Bugzilla 1057 - Multiple clamd TCP targets patch from Mark Zealey.
1630 * Add macros for sending a client certificate on outgoing TLS connections.
1631 (REMOTE_SMTP_TLS_CERTIFICATE/REMOTE_SMTP_PRIVATEKEY,
1632 REMOTE_SMTP_SMARTHOST_TLS_CERTIFICATE/REMOTE_SMTP_SMARTHOST_PRIVATEKEY)
1633 Closes: #677826
1634
1635 -- Andreas Metzler <ametzler@debian.org> Sat, 12 Oct 2013 09:30:28 +0200
1636
1637exim4 (4.82~rc2-1) experimental; urgency=low
1638
1639 * exim-gencert: Generate 2048bit key by default. LP: #1200581
1640 * New upstream version.
1641 + Drop 80_addmanuallybuiltdocs.diff
1642
1643 -- Andreas Metzler <ametzler@debian.org> Thu, 03 Oct 2013 19:24:59 +0200
1644
1645exim4 (4.82~rc1-1) experimental; urgency=low
1646
1647 * New upstream version.
1648 + TL/02 Add +smtp_confirmation as a default logging option.
1649 Closes: #649600
1650 + JH/05 Permit multiple router/transport headers_add/remove lines.
1651 Closes: #276126
1652 + See /usr/share/doc/exim4-base/NewStuff.gz for other newly added
1653 features.
1654 * Upload to experimental.
1655 * Drop unnecessary patches (30_dontoverridecflags.dpatch
1656 75_openssl_sni.diff 76_tls_dh_min_bits.diff 77_docsfortls_dh_min_bits.diff
1657 78_pkcs11_init.diff 84_CVE-2012-5671.patch 85_server_set_id_SPA.diff
1658 86_Dovecot-robustness.diff 87_localinjected_mimeacl.diff), unfuzz patches.
1659 * Applying upstream's default configuration updates to Debian configuration
1660 change 30_exim4-config_examples to use tls_in_cipher/tls_out_cipher
01e60269 1661 instead of tls_out_cipher. - exim4-config therefore Breaks
de45f55a
AM
1662 exim daemon << 4.82~rc1.
1663 * 80_addmanuallybuiltdocs.diff: Upstream rc tarball ships empty filter.txt
1664 and spec.txt, replace these with correct handbuilt versions.
1665
1666 -- Andreas Metzler <ametzler@debian.org> Sun, 29 Sep 2013 14:43:25 +0200
1667
1668exim4 (4.80-9) unstable; urgency=low
1669
1670 * Upload to unstable.
1671
1672 -- Andreas Metzler <ametzler@debian.org> Sat, 14 Sep 2013 08:05:18 +0200
1673
1674exim4 (4.80-8) experimental; urgency=low
1675
1676 * Import updated watchfile by Bart Martens. (Handles more compression types
1677 and x.y.revision versioning.)
1678 * In initscript invoke pidofproc with a pathname argument as it is
1679 documented in LSB and required by lsb-base (>= 4.1+Debian9).
1680 Closes: #693696, #718871
1681 * Improve exim4-config_files.5 and README.Debian - Warn about unresolvable
1682 items in host lists. Closes: #627988
1683 * Drop support for "/etc/init.d/exim4 what". It offers zero benefit to
1684 invoking exiwhat directly and throws an error mesage, too. (Thanks Regid
1685 Ichira for the diagnosis.) Closes: #643720
1686 * Set "host_find_failed = ignore" (instead of defer) on smarthost and
1687 hub_user_smarthost router. Now if one (of the possibly multiple) listed
1688 smarthosts is not resolvable (NXDOMAIN) ignores it and and tries the next
1689 listed one. If all listed hosts are unresolvable the mail is still
1690 defered, since host_all_ignored is set to defer by default. Therefore the
1691 behavior does not change for single-smarthost systems. Closes: #658878
1692 * Remove obsolete conffile /etc/cron.monthly/exim4-base which was only
1693 shipped in 4.69-3. Closes: #689334
1694 * Update exim_db.8, syncing against spec.txt from exim 4.80.
1695 * 87_localinjected_mimeacl.diff from upstream GIT. When injecting a message
1696 locally in non-SMTP mode, and with MIME ACLs configured, if the ACL
1697 rejected the message, Exim would try to `fprintf(NULL, "%s",
1698 the_message)`. This fixes that.
1699 * [lintian] Escape some dashes in exim4-config_files.5.
1700 * Point vcs-* to anonscm.
1701 * Remove pidfile after stopping the daemon, exim does not remove it itself.
1702 Closes: #702988
1703 * eu.po: Fix last reference to /usr/share/doc/exim4-base/README.Debian
1704 (without either .html or .gz suffix). Closes: #394975
1705 * Merge autopkgtests from Ubuntu (Thanks Yolanda Robla for the pointer)
1706 Closes: #710018
1707 + tests/CVE-2010-4344.py is GPLv2 - Add license header.
1708 + tests/daemon and tests/security do not use bashisms, change shebang
1709 to /bin/sh.
1710 * Upload to experimental, due to perl transition.
1711
1712 -- Andreas Metzler <ametzler@debian.org> Sun, 01 Sep 2013 15:58:49 +0200
1713
1714exim4 (4.80-7) unstable; urgency=low
1715
1716 * Use exim's ${quote:xxx} operator when invoking spfquery to disallow
1717 bypassing of SPF validation by using special mailbox names. (Thanks to
1718 Lekensteyn for diagnosis and testing.) Closes: #697057
1719
1720 -- Andreas Metzler <ametzler@debian.org> Wed, 02 Jan 2013 19:37:21 +0100
1721
1722exim4 (4.80-6) unstable; urgency=low
1723
1724 * Cherrypick two changes from GIT:
1725 + 85_server_set_id_SPA.diff: server_set_id was not stored in
1726 $authenticated_id when using SPA authentication.
1727 http://article.gmane.org/gmane.mail.exim.user/92181
1728 + 86_Dovecot-robustness.diff: robustness fixes for the Dovecot
1729 authenticator.
1730
1731 -- Andreas Metzler <ametzler@debian.org> Wed, 21 Nov 2012 19:08:53 +0100
1732
1733exim4 (4.80-5.1) unstable; urgency=high
1734
1735 * Non-maintainer upload by the Security Team.
1736 * CVE-2012-5671: Fix heap-based buffer overflow in DKIM handling.
1737
1738 -- Nico Golde <nion@debian.org> Thu, 25 Oct 2012 20:11:11 +0200
1739
1740exim4 (4.80-5) unstable; urgency=low
1741
1742 * Fix grammar error in debian/manpages/exim4-config_files.5. (Thanks,
1743 Regid Ichira)
1744 * Fix hardening support. (Thanks, Simon Ruderich)
1745 + Append $(CPPFLAGS) to CFLAGS, the exim buildsystem does not use it.
1746 + Set LFLAGS += $(LDFLAGS) in debian/rules.
1747 Closes: #687645
1748 * Correct typo in Russian debconf translation. (Thanks, Krasu)
1749 Closes: #683385
1750 * Point Vcs-* to git repository.
1751
1752 -- Andreas Metzler <ametzler@debian.org> Sun, 23 Sep 2012 12:20:16 +0200
1753
1754exim4 (4.80-4) unstable; urgency=low
1755
1756 * Disable autoloading of PKCS#11 modules. Closes: #678238
1757
1758 -- Andreas Metzler <ametzler@debian.org> Sat, 23 Jun 2012 18:35:03 +0200
1759
1760exim4 (4.80-3) unstable; urgency=low
1761
1762 * Pull 75_openssl_sni.diff from upstream. - Segfault caused by NULL
1763 dereference if Exim is built using OpenSSL, tls_sni is used and a
1764 forced expansion failure is configured.
1765 * Pull 76_tls_dh_min_bits.diff (and the corresponding doc change
1766 77_docsfortls_dh_min_bits.diff) from upstream. Adds a new SMTP transport
1767 option tls_dh_min_bits for setting the minimal size of DH parameters.
1768 * Add macro TLS_DH_MIN_BITS for setting the tls_dh_min_bits smtp transport
1769 option. Closes: #676563
1770 * [lintian] Stop shipping empty directory /usr/share/exim4 in exim4-base.
1771
1772 -- Andreas Metzler <ametzler@debian.org> Fri, 08 Jun 2012 12:37:05 +0200
1773
1774exim4 (4.80-2) unstable; urgency=low
1775
1776 * [Brown paper bag] actually target unstable in changelog.
1777
1778 -- Andreas Metzler <ametzler@debian.org> Sun, 03 Jun 2012 17:24:05 +0200
1779
1780exim4 (4.80-1) experimental; urgency=low
1781
1782 * New upstream version, identical to rc7.
1783 * Add a missing piece of documentation to update-exim4.conf.8. DCreadhost
1784 is not only used for rewriting, in satellite setup it is also
1785 the host where local mail is delivered to. (Thanks, Regid Ichira).
1786 Closes: #675712
1787
1788 -- Andreas Metzler <ametzler@debian.org> Sun, 03 Jun 2012 16:49:51 +0200
1789
1790exim4 (4.80~rc7-1) experimental; urgency=low
1791
1792 * New upstream version.
1793 * Let debian/EDITME.openssl.exim4-light.diff apply again.
1794
1795 -- Andreas Metzler <ametzler@debian.org> Tue, 29 May 2012 19:33:07 +0200
1796
1797exim4 (4.80~rc6-1) experimental; urgency=low
1798
1799 * Ship newly available GnuTLS-FAQ.txt in exim4-base.
1800 * Upstream's handling of GnuTLS DH parameters has changed, hardcoded
1801 parameters (from RFCs are used by default. See
1802 /usr/share/doc/exim4-base/README.UPDATING* for details. Stop shipping
1803 /usr/share/exim4/exim4_refresh_gnutls-params /usr/share/exim4/timeout.pl
1804 and /var/spool/exim4/gnutls-params-2236.
1805
1806 -- Andreas Metzler <ametzler@debian.org> Sun, 27 May 2012 18:46:48 +0200
1807
1808exim4 (4.80~rc5-1) experimental; urgency=low
1809
1810 * New upstream version.
1811
1812 -- Andreas Metzler <ametzler@debian.org> Thu, 24 May 2012 20:20:24 +0200
1813
1814exim4 (4.80~rc4-1) experimental; urgency=low
1815
1816 * New upstream version.
1817 + Unfuzz 50_localscan_dlopen.dpatch
1818 + Drop 80_revert_stringformatprintf.diff, superseded upstream.
1819 + Default DH param size switched to 2236 for NSS compat. Update
1820 generation script and shipped parameters.
1821
1822 -- Andreas Metzler <ametzler@debian.org> Mon, 21 May 2012 20:00:18 +0200
1823
1824exim4 (4.80~rc2-1) experimental; urgency=low
1825
1826 * Fix typo in retry/30_exim4-config (s/frequenzy/frequency/) (Thanks, Regid
1827 Ichira). Closes: #646338
1828 * dpkg-buildflags supersedes hardening-wrapper. set
1829 DEB_BUILD_MAINT_OPTIONS := hardening=+bindnow,+pie to use features enabled
1830 by hardening-wrapper by default. Make sure to always set -Wall.
1831 * List mapppings between debconf choices ("mail sent by smarthost; no local
1832 mail" et al.) and corresponding values of the DC_eximconfig_configtype
1833 macro in update-exim4.conf(8). Closes: #651883
1834 * README.Debian.*: Correct documentation of the lowuid_aliases router. - The
1835 macro is named FIRST_USER_ACCOUNT_UID instead of FIRST_USER_UID. (Thanks,
1836 Yubao Liu) Closes: #653058
1837 * add more verbose help to /etc/default/exim4. Closes: #653272
1838 * Updated French debconf templates translation. (thanks for proofreading,
1839 debian-l10n-french!) Closes: #668475
1840 * Fix typo usualy in update-exim4.conf.8.
1841 * Add source lintian override (debian/source/lintian-overrides) for
1842 binaries-have-file-conflict exim4-daemon-heavy-dbg exim4-daemon-light-dbg.
1843 *-daemon-dbg depends on the respective -daemon, and the daemon-packages
1844 conflict with each other.
1845 * New upstream version:
1846 + Unfuzz patches
1847 + Update 66_enlarge-dh-parameters-size.dpatch. This is now a noop if built
1848 against gnutls >= 2.12.
1849 + Default DH param size is 2432, update generation script and shipped
1850 parameters.
1851 + Unfuzz/update */EDITME/*. Update debian/example.conf.md5.
1852 + 80_revert_stringformatprintf.diff. Do not mark string_format() as
1853 PRINTF_FUNCTION(3,4) to allow compilation with -Wformat
1854 -Werror=format-security
1855 + Sets accept_8bitmime = true by default. Closes: #445013
1856 + Uses GnuTLS priority string for configuration. (See NEWS.Debian)
1857 Closes: #624041
1858
1859 -- Andreas Metzler <ametzler@debian.org> Sun, 20 May 2012 15:57:15 +0200
1860
1861exim4 (4.77-1) unstable; urgency=low
1862
1863 * Fix typo in exim4-config_files.5. (Thanks, Regid Ichira) Closes: #645283
1864 * New upstream stable release. (No major changes compared to rc4)
1865 * Upload to unstable.
1866
1867 -- Andreas Metzler <ametzler@debian.org> Sat, 22 Oct 2011 18:00:11 +0200
1868
1869exim4 (4.77~rc4-1) experimental; urgency=low
1870
1871 * New upstream release candidate.
1872 + drop patches included in this release.
1873 (80_gnutls_certificate_verify_peers2.diff 80_gnutls_initrc.diff
1874 80_TLS1.2-and-TLS1.1-support.diff)
1875 + New expansion conditions, "inlist", "inlisti".
1876 + Exim no longer performs string expansion on the second string of
1877 the match_* expansion conditions: "match_address", "match_domain",
1878 "match_ip" & "match_local_part". Named lists can still be used. The
1879 previous behavior made it too easy to create (remotely) vulnerable
1880 configurations. A more detailed rationale and explanation can be found
01e60269 1881 on
de45f55a
AM
1882 https://lists.exim.org/lurker/message/20111003.122326.fbcf32b7.en.html
1883 + doc/pcrepattern.txt is not shipped anymore as part of the exim tarball
1884 (and therefore the Debian package suite.)
1885 * Make use of /usr/share/dpkg/buildflags.mk if available.
1886 * Change build system to build each binary variant in a separate copy of
1887 the source tree instead of re-using the copy and moving away the results
1888 after build. The old approach stopped working since upstream added a
1889 dependency on make all to make install. - As we were changing parts of
1890 tree (Local/Makefile) after the build this caused an (incorrect) rebuild
1891 on make install.
1892
1893 -- Andreas Metzler <ametzler@debian.org> Sat, 08 Oct 2011 13:07:35 +0200
1894
1895exim4 (4.76-4) experimental; urgency=low
1896
1897 * 80_TLS1.2-and-TLS1.1-support.diff (pulled from upstream GIT gnutls_fixes
1898 branch): Enable TLS1.2 and TLS1.1
1899 * 80_gnutls_certificate_verify_peers2.diff, 80_gnutls_initrc.diff (pulled
1900 from upstream GIT gnutls_fixes branch): Use
1901 gnutls_certificate_verify_peers2() instead of
1902 gnutls_certificate_verify_peers(). The deprecated function was dropped in
1903 GnuTLS 3.x. Closes: #624082
1904
1905 -- Andreas Metzler <ametzler@debian.org> Sat, 24 Sep 2011 18:36:08 +0200
1906
1907exim4 (4.76-3) unstable; urgency=low
1908
1909 * [exim4-base.cron.daily] Correct invocation of mail(1), options need to be
1910 specified before arguments for compatibility with heirloom-mailx (Thanks,
1911 Andreas Schiweck). Closes: #629314
1912 * [exim4-base.exim4.init] Use echo instead of log_failure_msg for the panic
1913 log warning. Closes: #629610
1914 * [exim4-base.postinst] Also take care of ratelimit db on bdbd upgrades.
1915 Closes: #630985
1916 * Update Debian exim webpage URL. Closes: #641126
1917 * Do not run upgrade test for 4.67-5 on exim4.conf.template if split config
1918 is used and vice versa. Closes: #577633
1919 * [lintian] Do not specify priority in binary package stanzas, unless it
1920 deviates from the source package priority setting.
1921 * [lintian] Drop unused lintian override binary-without-manpage
1922 usr/sbin/exim.
1923 * [lintian] Improve on short descriptions of *-dbg packages.
1924
1925 -- Andreas Metzler <ametzler@debian.org> Sun, 18 Sep 2011 11:49:13 +0200
1926
1927exim4 (4.76-2) unstable; urgency=low
1928
1929 * debian/rules: Remove test/ and test-stamp on clean.
1930 * Handle BerkeleyDB upgrades more gracefully. Instead of checking Debian
1931 version numbers compare DB-version of old exim (stored by postinst in
1932 /var/lib/exim4/berkeleydbvers.txt) with currently used DB-version
1933 (hardcoded at build time in exim4-base.postinst).
1934 * [exim4-base.postinst exim4-config.postinst] Do away with unnecessary
1935 chowns by dropping them or limiting to upgrades from 4.30.
1936
1937 -- Andreas Metzler <ametzler@debian.org> Sun, 29 May 2011 18:21:03 +0200
1938
1939exim4 (4.76-1) unstable; urgency=low
1940
1941 * New upstream version.
1942 * Drop 80_match_isinlist.diff (included upstream).
1943
1944 -- Andreas Metzler <ametzler@debian.org> Mon, 09 May 2011 19:12:09 +0200
1945
1946exim4 (4.76~RC1-3) experimental; urgency=low
1947
1948 * 80_match_isinlist.diff pulled from upstream git.
1949
1950 -- Andreas Metzler <ametzler@debian.org> Sun, 08 May 2011 14:44:20 +0200
1951
1952exim4 (4.76~RC1-2) experimental; urgency=low
1953
1954 * Fix testsuite error.
1955 * Disable verification of DKIM signatures if DC_minimaldns or the (newly
1956 added) DISABLE_DKIM_VERIFY macro are set. Closes: #609764
1957 * [lintian] Drop useless comments from debian/watch.
1958
1959 -- Andreas Metzler <ametzler@debian.org> Sun, 08 May 2011 08:58:24 +0200
1960
1961exim4 (4.76~RC1-1) experimental; urgency=low
1962
1963 * New upstream version.
1964 * Drop superfluous patches. 80_ldap_require_cert-work.diff
1965 81_negatebool.diff 82_dkimpercent.diff
1966 * [Lintian] Fix grammar error in manpage (spelling-error-in-manpage
1967 update-exim4defaults.8.gz allows to allows one to).
1968 * [debian/minimaltest]: Added. Try to run a minimal functionality test after
1969 building exim. (Currently only supported if the build-system has a
1970 Debian-exim user.)
1971
1972 -- Andreas Metzler <ametzler@debian.org> Fri, 06 May 2011 20:27:56 +0200
1973
1974exim4 (4.75-3) unstable; urgency=high
1975
1976 * [debian/rules] Fix dependencies and targets, speeding up package build.
1977 Previously everything was compiled twice.
1978 * Patches pulled from upstream git:
1979 +81_negatebool.diff Negating the $bool expansion condition did not work.
1980 +82_dkimpercent.diff dkim sig logged to paniclog. Closes: #624670
1981 (CVE-2011-1764)
1982
1983 -- Andreas Metzler <ametzler@debian.org> Fri, 06 May 2011 20:08:51 +0200
1984
1985exim4 (4.75-2) unstable; urgency=low
1986
1987 * clamav socket on Debian is clamd:/var/run/clamav/clamd.ctl, fix
1988 configuration example accordingly. (Thanks, Roman V. Nikolaev)
1989 Closes: #622111
1990 * Use on libdb5.1-dev (instead of 4.8), zap hints db on upgrade from <=
1991 4.75-1. Closes: #621388
1992 * Enable hardening options. (Last difference to Ubuntu except for not being
1993 the default-mta there.) Closes: #542726
1994
1995 -- Andreas Metzler <ametzler@debian.org> Sat, 16 Apr 2011 14:45:36 +0200
1996
1997exim4 (4.75-1) unstable; urgency=low
1998
1999 * New upstream version.
2000 * 80_ldap_require_cert-work.diff Pulled from upstream git. The new
2001 ldap_require_cert option would segfault if used.
2002
2003 -- Andreas Metzler <ametzler@debian.org> Mon, 28 Mar 2011 19:24:55 +0200
2004
2005exim4 (4.75~rc3-1) experimental; urgency=low
2006
2007 * New upstream version.
2008
2009 -- Andreas Metzler <ametzler@debian.org> Thu, 03 Mar 2011 19:10:06 +0100
2010
2011exim4 (4.75~rc2-1) experimental; urgency=low
2012
2013 * New upstream version.
2014 + Fixes exiqgrep "Line mismatch" error on messages without size info.
2015 Closes: #528625
2016 + Restore default SIGPIPE handler for child_open_uid. Closes: #573779
2017 * Enable verbose compilation.
2018
2019 -- Andreas Metzler <ametzler@debian.org> Sun, 27 Feb 2011 11:59:45 +0100
2020
2021exim4 (4.74-2) unstable; urgency=low
2022
2023 * Upload to unstable.
2024
2025 -- Andreas Metzler <ametzler@debian.org> Thu, 24 Feb 2011 19:02:07 +0100
2026
2027exim4 (4.74-1) experimental; urgency=low
2028
2029 * 4.74 release, should build on hurd again.
2030 * Fix some lintian --pedantic issues: copyright-refers-to-symlink-license
2031 maintainer-script-without-set-e debian-control-has-unusual-field-spacing
2032
2033 -- Andreas Metzler <ametzler@debian.org> Sat, 29 Jan 2011 15:39:51 +0100
2034
2035exim4 (4.74~rc2-1) experimental; urgency=low
2036
2037 * In spf example use spf-tools-perl's spfquery instead of the one from
2038 libmail-spf-query-perl. Do not try to use unimplemented best-guess
2039 support. Update Suggests accordingly. Closes: #608336
2040 * Add headers in ACL by using the add_header modifier instead of "message".
2041 (This modifier has been available since 4.61.) Closes: #609308
2042 * New upstream version.
2043 + includes the fix for CVE-2011-0017
2044 + If a non-debug daemon was invoked with a non-whitelisted macro, then
2045 logs from after attempting delivery would be silently lost, including
2046 for successful delivery. This log-loss bug was introduced in 4.73
2047 as part of the security lockdown. Closes: #610611
2048 + Update some patches.
2049
2050 -- Andreas Metzler <ametzler@debian.org> Sun, 23 Jan 2011 14:02:36 +0100
2051
2052exim4 (4.73~rc1-1) experimental; urgency=low
2053
2054 * New upstream release candidate.
2055 * Drop included patches. 80_4.73rc1_*, 40_dkimnotinpaniclog.diff.
2056 * Update 31_eximmanpage.dpatch.
2057 * exim4 now uses INSTREAM (added in clamav 0.95) instead of STREAM when
2058 talking to clamav. exim4-daemon-heavy therefore Breaks: clamav-daemon
2059 (<< 0.95).
2060 * Unfuzz EDITME*diff.
2061 * Dependency changes:
2062 + Drop exim4-config's conflicts with bash (<< 2.05). This was relevant
2063 pre-sarge.
2064 + Drop exim4-daemon-* dependency on exim4-base (>> 4.71-2). This one is
01e60269 2065 superfluous because of of the dependency on
de45f55a
AM
2066 exim4-base (>= ${Upstream-Version}).
2067 + exim4-config breaks instead of conflicts with pre-DKIM (i.e. << 4.69.1)
2068 exim4-daemon.
2069 + exim4-base breaks instead of conflicts with <<${Upstream-Version} daemon
2070 packages.
2071 * Add Vcs-Svn and Vcs-Browser fields to debian/control.
01e60269 2072 * Build depend on libmysqlclient-dev | libmysqlclient15-dev instead of
de45f55a
AM
2073 libmysqlclient15-dev. libmysqlclient-dev is not a virtual package
2074 anymore. Closes: #590218
2075 * Use db_settitle unconditionally, even etch supports this. Drop unneeded
2076 lintian override exim4-config: settitle-requires-versioned-depends.
2077
2078 -- Andreas Metzler <ametzler@debian.org> Mon, 27 Dec 2010 19:48:19 +0100
2079
2080exim4 (4.72-6) unstable; urgency=high
2081
2082 * 80_4.74_filtertesting.diff: Do not abort when setgid fails if privileges
2083 were dropped. This fixes a regression from 4.72-2, it was not possible to
2084 test filter files with exim4 -bf anymore. Closes: #611572
2085
2086 -- Andreas Metzler <ametzler@debian.org> Mon, 31 Jan 2011 19:05:48 +0100
2087
2088exim4 (4.72-5) unstable; urgency=medium
2089
2090 * 80_4.74_deliverylogging.patch (Pulled from upstream git): If a non-debug
2091 daemon was invoked with a non-whitelisted macro, then logs from after
2092 attempting delivery would be silently lost, including for successful
2093 delivery. This log-loss bug was introduced as part of the security
2094 lockdown for fixing CVE-2010-4345. Closes: #610611
2095
2096 -- Andreas Metzler <ametzler@debian.org> Sat, 29 Jan 2011 14:33:36 +0100
2097
2098exim4 (4.72-4) unstable; urgency=medium
2099
2100 * In spf example use spf-tools-perl's spfquery instead of the one from
2101 libmail-spf-query-perl. Do not try to use unimplemented best-guess
2102 support. Update Suggests accordingly. Closes: #608336
2103 * 80_4.74_CVE-2011-0017.patch (Pulled from upstream git): Check return
2104 values of setgid/setuid. This is a privilege escalation vulnerability
2105 whereby the Exim run-time user can cause root to append content of the
2106 attacker's choosing to arbitrary files.
2107
2108 -- Andreas Metzler <ametzler@debian.org> Sat, 22 Jan 2011 17:48:19 +0100
2109
2110exim4 (4.72-3) unstable; urgency=low
2111
2112 * [README.Debian*] Correct command for manual paniclog rotation. (Thanks,
2113 Jörg Sommer) Closes: #602188
2114 * 67_unnecessaryCopt.diff: Do not use exim's -C option in utility scripts.
2115 This would not work with ALT_CONFIG_PREFIX.
2116 * Pull changes related to fixing CVE-2010-4345 from exim 4.73 rc1.
2117 Closes: #606527
2118 + 1_cfile_norw_eximuid: Don't allow a configure file which is writeable by
2119 the Exim user or group.
2120 + 2_permcheck_configurefile: Check configure file permissions even for
2121 non-default files if still privileged.
2122 + 3_remove_ALT_CONFIG_ROOT_ONLY: Remove ALT_CONFIG_ROOT_ONLY build option,
2123 effectively making it always true.
2124 + 4_FD_CLOEXEC: Set FD_CLOEXEC on SMTP sockets after forking in the
2125 daemon, to ensure that rogue child processes cannot use them.
2126 + 5_TRUSTED_CONFIG_LIST: Add TRUSTED_CONFIG_LIST compile option.
2127 + 6_nonroot_system_filter_user: If the system filter needs to be run as
2128 root, let that be explicitly configured. The default is now the Exim
2129 run-time user.
2130 + 7_filter_D_option: Add a (compiletime) whitelist of acceptable values
2131 for the -D option.
2132 + 8_updatedocumentation: Update documentation to reflect the changes.
2133 * Build with WHITELIST_D_MACROS=OUTGOING. Post patch 7_filter_D_option exim
2134 will not regain root privileges (usually necessary for local delivery) if
2135 the -D option was used. Macro identifiers listed in WHITELIST_D_MACROS are
2136 exempted from this restriction. mailscanner (4.79.11-2.2) uses -DOUTGOING.
2137 * Build with TRUSTED_CONFIG_LIST=/etc/exim4/trusted_configs. Post patch
2138 3_remove_ALT_CONFIG_ROOT_ONLY exim will not re-gain root privileges
2139 (usually necessary for local delivery) if the -C option was used. This
2140 makes it impossible to start a fully functional damon with an alternate
2141 configuration file. /etc/exim4/trusted_configs (can) contain a list of
2142 filenames (one per line, full path given) to which this restriction does
2143 not apply.
2144
2145 -- Andreas Metzler <ametzler@debian.org> Sun, 26 Dec 2010 15:13:08 +0100
2146
2147exim4 (4.72-2) unstable; urgency=low
2148
2149 [ Marc Haber ]
2150 * Apply patch to russian (ru) debconf template, thanks to Тим
2151 Алексеевский and Tim Alexeevsky. Closes: #576202
2152 * fix exim4-config_files man page, mention
2153 {host|sender}_local_deny_exceptions instead of
2154 local_{host|sender}_whitelist. Thanks to Fabien André in #578176
2155 * add !acl = acl_local_deny_exceptions to defer stanzas in SPF code.
2156 Thanks to Fabien André. Closes: #578176
2157 * Re-work config.autogenerated header to more exactly reflect
2158 configuration source. (mh) Closes: #593984
01e60269 2159
de45f55a
AM
2160 [ Andreas Metzler ]
2161 * Fix getopt invocation to make update-exim4.conf.template -o work. (Thank
2162 you Matthew W. S. Bell) Closes: #590333
2163 * 40_dkimnotinpaniclog.diff pulled from upstream git. Stop logging
2164 non-critical DKIM errors in paniclog. Closes: #567876
2165 * Debconf translations:
2166 - Danish. Closes: #592792
2167
2168 -- Andreas Metzler <ametzler@debian.org> Sat, 30 Oct 2010 13:38:26 +0200
2169
2170exim4 (4.72-1) unstable; urgency=low
2171
01e60269 2172 * New upstream release. (Identical to the git snapshot previously
de45f55a
AM
2173 uploaded to experimental.)
2174
2175 -- Andreas Metzler <ametzler@debian.org> Thu, 03 Jun 2010 17:42:52 +0200
2176
2177exim4 (4.72~20100529-1) experimental; urgency=low
2178
2179 * Git snapshot 20100529.
2180 + Fix documentation for exipick -bpra. #574778
2181 + CVE-2010-2024: Protect against symlink attacks on MBX lockfile in /tmp.
2182 (Debian's default configuration does not use MBX format, but the
2183 exim4-daemon-heavy binary supports MBX.)
2184 + CVE-2010-2023 Prevent hardlink attack on mbox sticky mail directory.
2185 (Probably not relevant for Debian systems at all, since the mail spool
2186 is 2775 root:mail.)
2187 + Dovecot authenticator ignores unknown keywords, making it compatible
2188 with version 1.1 of Dovecot authentication protocol. (= dovecot 2.0).
2189 See Changelog for complete list.
2190 * Drop patches included upstream: 36_typoinexipick.diff
2191 20_PDKIM-Upgrade-PolarSSL.diff.
2192
2193 -- Andreas Metzler <ametzler@debian.org> Sun, 30 May 2010 14:01:52 +0200
2194
2195exim4 (4.71-4) unstable; urgency=low
2196
2197 * Drop unneeded lintian overrides.
2198 + description-contains-homepage
2199 + debian/source.lintian-overrides dbg-package-missing-depends exim4-dbg.
2200 + partially-translated-question
2201 + maintainer-script-needs-depends-on-update-inetd
2202 + possible-bashism-in-maintainer-script
2203 + binary-without-manpage
2204 + possible-debconf-note-abuse
2205 + changelog-not-compressed-with-max-compression
2206 * Lintian informational hints:
2207 + hyphen-used-as-minus-sign. debian/manpages/exim4-config_files.5
2208 debian/manpages/update-exim4.conf.8 debian/manpages/exiwhat.8
2209 * Use dh_lintian.
2210 * Fix sourcing of lsb-functions in init-script. Test for existence of
2211 /usr/lib/exim4/exim4 first. Unconditionally read /lib/lsb/init-functions.
2212 If they are not present the package's dependencies are not installed.
2213 Bump dependency on lsb-base to 3.0-6. (log_action_*)
2214 * Update reference to spec.txt in README.Debian. Closes: #568051
2215 * Invoke spfquery as spfquery.mail-spf-query-perl. There are three different
2216 implementations of spfquery in Debian, with incompatible commandline
2217 switches and different exit codes. Closes: #573956
2218
2219 -- Andreas Metzler <ametzler@debian.org> Thu, 25 Mar 2010 17:34:30 +0100
2220
2221exim4 (4.71-3) unstable; urgency=low
2222
2223 * exim4-base.cron.daily: Do not run exim_tidydb on Berkeley DB logfiles.
2224 Closes: #501892
2225 * exim4-base.postinst: If exim_dumpdb fails to read a hints-db also remove
2226 Berkeley DB logfiles.
2227 * Switch to Berkeley DB 4.8 (from 4.6). Zap hints db on upgrade. Temporarily
2228 make -daemon packages depend on exim4-base >> 4.71-2. (This can be removed
2229 after the next upstream release.)
2230 Closes: #548479
2231 * control: Drop bzip2 from Build-Depends. Use line-wrapping for
2232 Build-Depends.
2233 * 36_typoinexipick.diff: Fix a typo in exipick manpage. (Lintian).
2234 * exim4-base.postinst: Redirect status message to stderr.
2235
2236 -- Andreas Metzler <ametzler@debian.org> Fri, 01 Jan 2010 13:41:44 +0100
2237
2238exim4 (4.71-2) unstable; urgency=low
2239
2240 * Pulled from upstream: 20_PDKIM-Upgrade-PolarSSL.diff. Update files copied
2241 from PolarSSL to 0.12.1.
2242 * Add example file to set smarthost from /etc/network/interfaces (mh)
2243 * Add DKIM_* macros on remote smtp transports for setting the corresponding
2244 dkim_* options.
2245 * Upload to unstable.
2246
2247 -- Andreas Metzler <ametzler@debian.org> Sat, 12 Dec 2009 13:24:21 +0100
2248
2249exim4 (4.71-1) experimental; urgency=low
2250
2251 * New upstream version.
2252 + Drop patches included upstream. 51_dkimrelatedcrash.diff
2253 51_noreject_unsigned.diff.
2254
2255 -- Andreas Metzler <ametzler@debian.org> Sat, 28 Nov 2009 12:03:50 +0100
2256
2257exim4 (4.70-2) experimental; urgency=low
2258
2259 * 51_noreject_unsigned.diff Fix a dkim related expansion error that appears
2260 when the expanded value of dkim_verify_signers winds up empty and
2261 acl_smtp_dkim is defined. (This has the effect of rejecting any mail
2262 without DKIM signature.)
2263 * Work around 490937 by removing CHANGES.
2264
2265 -- Andreas Metzler <ametzler@debian.org> Sat, 21 Nov 2009 10:15:41 +0100
2266
2267exim4 (4.70-1) experimental; urgency=low
2268
2269 * Point watchfile to ftp.exim.org.
2270 * Use dpkg-source v3 instead of dpatch, simplifying debian/rules a little
2271 bit.
2272 * New upstream version.
2273 + Pull 51_dkimrelatedcrash.diff fixing a segfault only applying to the
2274 4.7x series. http://bugs.exim.org/show_bug.cgi?id=912
2275 * debhelper v7 mode.
2276 + Use -XCHANGES to Keep dh_installchangelogs v7 from insisting to install
2277 ./CHANGES as upstream changelog.
2278 + Bump build-dependency.
2279 + Use dh_prep instead of dh_clean -k.
2280
2281 -- Andreas Metzler <ametzler@debian.org> Sun, 15 Nov 2009 13:10:32 +0100
2282
2283exim4 (4.70~rc4-1) experimental; urgency=low
2284
2285 * New upstream version.
2286
2287 -- Andreas Metzler <ametzler@debian.org> Wed, 11 Nov 2009 19:04:35 +0100
2288
2289exim4 (4.70~cvs+20091030-1) experimental; urgency=low
2290
2291 * New upstream snapshot.
2292
2293 -- Andreas Metzler <ametzler@debian.org> Sat, 31 Oct 2009 10:08:55 +0100
2294
2295exim4 (4.70~cvs+20091026-1) experimental; urgency=low
2296
2297 * New snapshot.
2298 + Fixes segfault in dovecot authenticator. Closes: #551106
2299 + Improved documentation regarding certifacte verification on outgoing
2300 SMTP connections. Closes: #544472
2301 * Drop 40_boolean_redefine_protect.dpatch - included upstream.
2302 * Drop unapplied superfluous patches from diff: 36_pcre 37_exiwhatpsmisc.
2303
2304 -- Andreas Metzler <ametzler@debian.org> Mon, 26 Oct 2009 16:09:32 +0100
2305
2306exim4 (4.70~cvs+20091017-1) experimental; urgency=low
2307
2308 * Fix syntax errors in README.Debian.xml. (Thank's, Daniel Leidert)
2309 * New upstream cvs snapshot.
2310 + Drop unnecessary patches: 36_pcre 37_exiwhatpsmisc.
2311 + Close dovecot socket after wrong password was given. Closes: #515503
01e60269 2312 + Standalone DKIM support. Obsoletes and therefore
de45f55a
AM
2313 Closes: #486437,#459883
2314 * Drop upstream URL from package descriptions. Closes: #471425
2315 * [patches/00_unpack.dpatch] Drop workaround for tar 1.14, even oldstable
2316 has 1.16. Closes: #486436.
2317 * Do not set 'tls_try_verify_hosts = *' by default anymore. Some clients
2318 (e.g Outlook) will terminate the SSL connection when the server presents
2319 the long list of accepted TLS certificates after STARTTLS. If TLS
2320 certificate validation of clients is needed you'll need to set
2321 MAIN_TLS_TRY_VERIFY_HOSTS again and point MAIN_TLS_VERIFY_CERTIFICATES to
2322 a file containing only the accepted certificates.
2323 Closes: #515999, #316522, #482012
2324 * Add debian/README.source. (Policy 3.8.3)
2325 * Fix typo in update-exim4.conf.8.
2326 Thanks to Calum Mackay. Closes: #543354
2327 * Listen on IPv6 loopback interface by default. (Only applies to fresh
2328 installations.) Closes: #544292
2329 * upstream default configure file explicitly disables dkim in some
2330 instances. Merge into Debian config and update debian/example.conf.md5.
2331 Bump Conflicts of exim4-config package.
2332
2333 -- Andreas Metzler <ametzler@debian.org> Sat, 17 Oct 2009 14:26:54 +0200
2334
2335exim4 (4.69-11) unstable; urgency=medium
2336
2337 * Build-Depend on lynx-cur|lynx instead of lynx. (lynx is just a dummy
2338 package currently, and due its strict dependencies uninstallable until
2339 the most recent version of lynx-cur has been built.)
2340 * Work around sed's improved unicode support, not accepting latin1
2341 characters as pattern delimiters in UTF-8 locales anymore. Closes: #527445
2342 + [update-exim4.conf] Go for / as separator instead. - This might have
2343 served a purpose in earlier releases with free-form replacements but is
2344 just overcomplicated now.
2345 + [update-exim4defaults]: The tricky bits for exim options are the
2346 ones that take a filename as argument (e.g. -C and -oX) or -D for
2347 overriding macros. Use LC_CTYPE=C.
2348 + [exim4-config.config] The sed commands deals with (lists of) hostnames
2349 and IP(v6) addresses and nets. Use LC_CTYPE=C.
2350
2351 -- Andreas Metzler <ametzler@debian.org> Sun, 10 May 2009 10:15:34 +0200
2352
2353exim4 (4.69-10) unstable; urgency=low
2354
2355 [ Andreas Metzler ]
2356 * Use macro CONFDIR in lowuid_aliases router, too. Closes: #507124
2357 * Disable shell filename expansion in update-exim4.conf using set -f.
2358 Closes: #515668
2359 * Stop using set -u in update-exim4.conf. With version 4.0 bash changed its
2360 behavior to throw an error on expansion of $* or $@ with set -u if no
2361 positional parameters were given. Working around this is obnoxious and
2362 harms readability, imho doing away with set -u's benefits. Closes: #518752
2363 * Allow setting outgoing smtp helo/ehlo by setting
2364 REMOTE_SMTP_HELO_DATA macro directly. Previously this was just supposed
2365 to be used as a helper macro for REMOTE_SMTP_HELO_FROM_DNS.
2366 REMOTE_SMTP_HELO_FROM_DNS overrides a manual REMOTE_SMTP_HELO_DATA data
2367 setting. Closes: #514113
2368 * [README.Debian] Bring documentation for Diffie-Hellman parameters up to
2369 current practice, mainly by deleting most of the outdated docs.
2370 Closes: #508749
2371 * [exim4 init-script]. Modify check for smtp inetd entry to use an anchored
2372 pattern, matching "smtp" but not "smtp-foo". Closes: #516146
2373 * exim4-daemon-light now Provides: default-mta. See #508644.
01e60269 2374 * Ship both transport-filter.pl and ratelimit.pl in
de45f55a
AM
2375 /usr/share/doc/exim4-base/examples. Closes: #518836
2376 * [lintian] Add ${misc:Depends} to all Depends.
2377 * [lintian] Add override for dbg-package-missing-depends exim4-dbg.
2378 * Sync debian/control with override file by moving *-dbg to section debug.
2379 * Fix grammar error in update-exim4.conf.8. (Thank's, Gerfried Fuchs)
2380 Closes: #525248
2381
2382 [ Christian Perrier ]
2383 * Debconf translations:
2384 - Asturian. Closes: #511624
2385 - Belarusian. Closes: #516049
2386 - Kazakh added. Closes: #520996
2387 - Slovak. Closes: #523447
2388 - Bengali added.
2389
2390 -- Andreas Metzler <ametzler@debian.org> Sat, 02 May 2009 09:05:56 +0200
2391
2392exim4 (4.69-9) unstable; urgency=medium
2393
2394 * [update-exim4.conf]: Use POSIX character classes [:alnum:] or explicit
2395 listing ("ABCDEF..") instead of a-z, since the latter does not work as
2396 expected in some locales. Closes: #500691
2397
2398 -- Andreas Metzler <ametzler@debian.org> Tue, 30 Sep 2008 20:12:27 +0200
2399
2400exim4 (4.69-8) unstable; urgency=low
2401
2402 [ Andreas Metzler ]
2403 * Quote last n lines (configurable by changing the value of
2404 E4BCD_PANICLOG_LINES, defaults to 10) of paniclog in warning
2405 email sent out on non-empty paniclog. Closes: #499492
2406 * Fix evaluation logic of E4BCD_WATCH_PANICLOG for sending out warning
2407 e-mails about non-empty paniclog in daily cron-job to match documentation:
2408 + yes: Send daily warning e-mails, do not touch panniclog.
2409 + once: Send out the mail and rotate paniclog afterwards.
2410 + no: Do nothing. (Logfile is rotated when its size reaches 10 MB.)
2411 (Previously the interpretations of "once" and yes were mixed up.)
2412
2413 [ Debconf translations ]
2414 * Catalan. Closes: #499299
2415
2416 -- Andreas Metzler <ametzler@debian.org> Sun, 28 Sep 2008 12:01:39 +0200
2417
2418exim4 (4.69-7) unstable; urgency=low
2419
2420 [ Andreas Metzler ]
01e60269 2421 * Sync from ubuntu: Refer to spec.txt.gz instead of spec.txt in
de45f55a
AM
2422 README.Debian.xml.
2423
2424 [ Debconf translations ]
2425 * Korean. Closes: #491518
2426 * Lithuanian. Closes: #497402
2427 * Greek. Closes: #498466
2428 * Esperanto. Closes: #498796
2429
2430 -- Andreas Metzler <ametzler@debian.org> Tue, 16 Sep 2008 19:14:08 +0200
2431
2432exim4 (4.69-6) unstable; urgency=high
2433
2434 [ Debconf translations ]
2435 * Malayalam. Closes: #479466
2436 * Albanian. Closes: #480282
2437 * Polish. Closes: #481638
2438 * Vietnamese. Closes: #482641
2439 * Turkish. Closes: #482714
2440 * Brazilian Portuguese. Closes: #485384
2441 * Finnish. Closes: #489171
2442
2443 [ Marc Haber ]
2444 * Have timeout.pl print a meaningful error message if perl-modules
2445 is not installed. Have exim4-base recommend perl-modules.
2446 Thanks to Tom Schouten. Closes: #482319
2447 * Create gnutls-params with mode 644 in the first place.
2448 Thanks to Jean-Luc Coulon. Closes: #481765
2449 * Replace ~/.rnd with $HOME/.rnd in exim_gencerts. Thanks to
2450 Ross Boylan for noticing this.
2451 * exim4-config.config: send hostname --fqdn stderr to /dev/null,
2452 we handle errors properly. Thanks to Andrew Vaughan in #481597.
2453
2454 [ Andreas Metzler ]
2455 * Fix typos/other errors in README.Debian.xml. Improve formatting.
2456 (Thank's Georg Neis and Paul Menzel) Closes: #486105, #486106, #486116
2457 * Revert fancy quoting in initscript. Closes: #486667,#482752
2458 (fixes rc-bugs).
2459 * [debian/control README.Debian.xml] Spelling fix ("metapackage" instead of
2460 "meta-package"). Thank's lintian
2461
2462 -- Andreas Metzler <ametzler@debian.org> Sat, 19 Jul 2008 19:56:36 +0200
2463
2464exim4 (4.69-5) unstable; urgency=low
2465
2466 * remove chmod/chown code from exim4_refresh_gnutls-params completely
2467 * do not remove gnutls-params in exim4-base.postinst
2468
2469 -- Marc Haber <mh+debian-packages@zugschlus.de> Mon, 28 Apr 2008 21:46:18 +0200
2470
2471exim4 (4.69-4) unstable; urgency=low
2472
2473 * update-exim4.conf: Fix impossible code path in guessed_name check. Ouch.
2474 Thanks to Anand Kumria. Closes: #478066
2475 * Regenerating the 2048 bits DH parameters takes too long for slow
2476 systems, disable (both in the monthly cron job and postinst) and
2477 document that paranoid people will want to regenerate them manually.
2478
2479 -- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 27 Apr 2008 10:06:39 +0200
2480
2481exim4 (4.69-3) unstable; urgency=low
2482
2483 * The "please do not file duplicate bugs" release
2484
2485 [ Marc Haber ]
2486 * Work around lsb-base regression (#477055, "wontfix") by changing
2487 the way we quote exim's arguments in the init script, hoping that
2488 this does not sacrifice robustness.
2489 Closes: #477194, #477236, #477239, #477258, #477562, #476987
2490 * README.Debian.xml: Fix router/transport pair typo.
2491 Thanks to Georg Neis. Closes: #463573
2492 * Have exim4-base Suggest swaks
2493 * Relax exim4-dbg dependency on eximon4 to a recommends (see #463929).
2494 * 30_exim4-config_check_rcp: Remove mention of /usr/share/doc/exim4-
2495 config/default_acl in favor of exim4-config_files(5).
2496 Thanks to Jon Dowland. Closes: #464539
2497 * Move paniclog log rotation to /etc/logrotate.d/exim4-paniclog to
2498 allow people to manually rotate the paniclog only by calling
2499 logrotate -f /etc/logrotate.d/exim4-paniclog. Thanks to Josip Rodin
2500 (#396003) for this nice idea. Implement E4BCD_WATCH_PANICLOG=once
2501 as suggested by Vasilis Vasaitis.
2502 * activate dlfunc. Closes: #471314
2503 * set LC_ALL=C in debian/rules. Thanks to Michael Meskes. Closes: #471486
2504 * Document that Incredimail's TLS "implementation" breaks on a
2505 certificate request. Thanks to Andrew McGlashan. Closes: #459323
2506 * Fix parenthesis mismatch in README.Debian
2507 * exim4_refresh_gnutls-params: Call openssh dhparam with
2508 HOME=$EXIM4_SPOOLDIR so that openssl's .rnd file is placed there.
2509 * update-exim4.conf: print a warning if dc_minimaldns and hostname
2510 --fqdn does not print a fully qualified name. Thanks to Lothar
2511 Ketterer. Closes: #476249
2512 * DH parameters handling: Closes: #475194
2513 * add dpatch to have exim use 2048 bit DH parameters
2514 * ship static gnutls-params file with the package.
2515 * Override resulting lintian warning.
2516 * generate new gnutls-params only monthly and in postinst on configure.
2517 * exim4_refresh_gnutls-params:
2518 * generate 2048 bit DH parameters
2519 * dh-params file can be world readable
2520 * Filter out noise from mainlog before handing it off to eximstats
2521 in daily cron job. Thanks to Justin Pryzby. Closes: #476541
2522 * Move docs from Apps/Net to Network/Communication
2523 * linda R.I.P.
01e60269 2524
de45f55a
AM
2525 [ Robert Millan ]
2526 * Process acl_local_deny_exceptions ACL before rejecting a message in SPF
2527 check. Thanks to Miklos Szeredi. Closes: #451633
2528
2529 [ Andreas Metzler ]
01e60269 2530 * Fix typos in exinext's man page (/s/eximnext/exinext/). (Thanks,
de45f55a
AM
2531 Filipus Klutiero) Closes: #471113
2532 * exiwhat: Check at runtime whether killall is available. Fall back to a
2533 combination of 'ps ax' and regular kill otherwise.
2534 Closes: #476455
2535 * Fix wrong logic in testing for existence of lsb-base functions in init
2536 script. (Thanks, Tim Cross) Closes: #477578
2537
2538 -- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 26 Apr 2008 00:00:30 +0200
2539
2540exim4 (4.69-2) unstable; urgency=low
2541
2542 [ Marc Haber ]
2543 * update-exim4.conf: fix bashism echo -n in preprocess_macro.
2544 Thanks to Michal Politowski. Closes: #462173
2545
2546 [ Christian Perrier ]
2547 * Debconf translations updates:
2548 - German. Thanks to Eric Schanze. Closes: #462673
2549
2550 [Andreas Metzler]
2551 * Add missing .P to exim_db.8 to fix indenting. (Thanks, David L. Anselmi)
2552 Closes: #462712
2553 * Add (disabled) patch to save random seed to a file
2554
2555 -- Marc Haber <mh+debian-packages@zugschlus.de> Wed, 30 Jan 2008 09:26:56 +0100
2556
2557exim4 (4.69-1) unstable; urgency=low
2558
2559 [ Marc Haber ]
2560 * New upstream version.
2561 - improve --help handling. Closes: 438435
2562 * Debconf translations updates:
2563 - Dutch. Thanks to Bart Cornelis. Closes: #448924
2564 - Norwegian Bokmål. Thanks to Hans Fredrik Nordhaug. Closes: #452383
2565 - Slovak. Thanks to Peter Mann. Closes: #460502
2566 - Catalan: fix some semicolon issues and most obvious fuzzy strings.
2567 Thanks to Jordà Polo. Closes: #447765.
2568 * Add support for smtp_accept_max_nonmail_hosts to ease external
2569 relay testing.
2570 * Make Change to init script dependencies as suggested by Petter
2571 Reinholdtsen. Closes: #460229
2572 * debian/control:
2573 * Add Homepage field to Source Package stanza.
2574 * Standards-Version: 3.7.3 (no changes necessary)
2575 * lintian/overrides:
2576 - Override all description-contains-homepage messages,
2577 we're going to keep this field around until post-lenny.
2578 - Override exim4-daemon-heavy: package-contains-empty-directory
2579 usr/lib/exim4/local_scan/, the directory should be there to show
2580 people where to put local extensions (and I am not sure how exim
2581 behaves if that directory is not there).
2582 * linda/overrides:
2583 - Override menu section Applications, which is a false alert.
2584 - Override complaint about newer standards version.
2585 - This override does not work due to #386647
2586 * exim4-base.NEWS: fix Debian's typo
2587 * exim4-base.dirs: remove usr/bin, we do not ship any files there.
2588 * Generate exim macros from every definition found in ue4cc that
2589 starts with a capital letter (sans CFILEMODE) to cater for an
2590 obviously very common user error. This feature is going to stay
2591 undocumented.
2592
2593 [ Christian Perrier ]
2594 * Debconf translations updates:
2595 - Dzongkha. Thanks to Tenzin Dendup. Closes: #455871
2596 - Slovak. Thanks to Peter Mann. Closes: #460502
2597
2598 [ Andreas Metzler ]
2599 * Fix typo in acl/20_exim4-config_local_deny_exceptions. (Thanks, Roderick
2600 Schertler) Closes: #456343
2601
2602 -- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 22 Jan 2008 09:19:14 +0100
2603
2604exim4 (4.68-2) unstable; urgency=low
2605
2606 [ Marc Haber ]
2607 * Fix changelog: lowuid router does not close #420217. Closes: #440217
2608
2609 [ Andreas Metzler ]
2610 * Mention /etc/exim4/exim4.conf in FILES section of update-exim4.conf.8.
2611 * Fix syntax error in real-local router. Closes: #446346
2612 * Configuring exim as configtype="internet host" asks a different set of
2613 questions than e.g. satellite. However some of the settings controlled by
2614 these hidden questions still have effects on exim's behavior. Change
2615 exim4-config to ask these hidden questions if they have been set to a
2616 non-default value. (Either manually, or by switching configtype after
2617 setting the values.) Closes: #443210
2618 These questions have been added conditionally:
2619 - internet site with smarthost:
2620 + dc_relay_domains
2621 - satellite
2622 + dc_relay_domains
2623 + dc_localdelivery
2624
2625 -- Marc Haber <mh+debian-packages@zugschlus.de> Thu, 01 Nov 2007 19:17:36 +0100
2626
2627exim4 (4.68-1) unstable; urgency=low
2628
2629 * new upstream version. Closes: #444195
2630 * Documents tls_verify_hosts during TLS sessions. Closes: #422419
2631 * new example.conf md5 sum
2632 * Move lowuid router to a later place, handle real- only for
2633 locally generated messages. Thanks to Andreas Metzler and others
2634 on pkg-exim4-devel. Closes: #440217
2635 * /etc/init.d/exim4:
2636 * Use start_daemon and killproc from lsb-base
2637 as a new plunge at #396944
2638 * Do not clean the environment as severly as before (functions
2639 need to survive).
2640 * README.Debian:
2641 * Document that using client certificates needs extra
2642 configuration. Thanks to John Goerzen. Closes: #440663
2643 * conf.d/main/03_exim4-config_tlsoptions: Make it clear that this
2644 file only concerns exim as an SMTP server.
2645 * exim4-config.preinst: Add EX4DEBUG facility, add rm_conffile
2646 function
2647 * Rename acl_whitelist_local_deny to acl_local_deny_exceptions
2648 as suggested by Ross Boylan. Closes: #387078.
2649 * Switch Build-Depends to db4.6. Closes: #442645
2650 * Debconf translations updates:
2651 - Portuguese. Thanks to Miguel Figueiredo. Closes: #441895, #445494
2652 - Norwegian Nynorsk. Thanks to Håvard Korsvoll.
2653 * exim4-config.NEWS: Explicitly mention that .dpkg-old and
2654 .dpkg-dist files are included in the DEBCONFsomethingDEBCONF check to
2655 allow lazy people to only grep the docs instead of actually reading
2656 them. This was requested by Hamish Moffatt in #445327.
2657
2658 -- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 07 Oct 2007 21:38:22 +0200
2659
2660exim4 (4.67-8) unstable; urgency=low
2661
2662 [ Marc Haber ]
2663 * Define REMOTE_SMTP_HELO_DATA and REMOTE_SMTP_HELO_FROM_DNS macros
2664 to have exim pull its HELO name from DNS automatically.
2665 Thanks to Jari Aalto and Magnus Holmgren. Closes: #275975
2666 * Enable DNSDB in exim4-daemon-light (needed by the HELO magic)
2667 * update-exim4.conf: Allow [] in ascii strings (needed for @[])
2668 * Improve domain literal docs
2669 * Remove debconf template noalias_regenerate
2670 * Fix PRIMARY_HOSTNAME typo in main/02_exim4-config_options.
2671 Thanks to Tim Krah. Closes: #434337
2672 * fix alphabet salad in README.Debian. Closes: #434640
2673 * Add E4BCD_DAILY_REPORT_TO to daily cron job.
2674 Thanks to Florian Schlichting. Closes: #426840
2675 * Fix /etc/exim paths in exim4-config_files(5).
2676 Thanks to Marques Johansson.
2677 * Debconf translations updates:
2678 - Japanese. Closes: #433070
2679 - Spanish. Thanks to Javier Fernández-Sanguino Peña. Closes: #433084
2680 - Thai. Thanks to Theppitak Karoonboonyanan. Closes: #433177
2681 - Arabic. Thanks to Ossama Khayat. Closes: #433222
2682 - Hebrew. Thanks to Baruch Even. Closes: #433291
2683 - Italian. Closes: #433200
2684 - Galician. Closes: #433218
2685 - Portuguese. Thanks to Miguel Figueiredo. Closes: #433293
2686 - Hungarian. Thanks to Josip Rodin. Closes: #433336
2687 - Punjabi. Thanks to Amanpreet Singh Alam. Closes: #433578
2688 - Marathi. Thanks to Priti Patil.
2689 - Wolof. Thanks to M Mamoune Mbacke. Closes: #433701
2690 - Indonesian. Thanks to Arief S Fitrianto. Closes: #433758
2691 - Romanian. Thanks to Eddy Petrisor. Closes: #433854
2692 - Nepali. Thanks to shyam krishna bal. Closes: #435345
2693 - Swedish. Thanks to Daniel Nylander. Closes: #435705
2694
2695 [ Andreas Metzler ]
2696 * Update eximon menu file for menu 2.1.35 hierarchy.
2697
2698 [ Christian Perrier ]
2699 * Fix typo in README.Debian.xml. Thanks to <shaulka@012.net.il>
2700 Closes: #434961
2701
2702 -- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 19 Aug 2007 09:25:10 +0200
2703
2704exim4 (4.67-7) unstable; urgency=low
2705
2706 * only generate HIDE_MAILNAME macro if its value is really non-empty
2707
2708 -- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 14 Jul 2007 08:47:40 +0200
2709
2710exim4 (4.67-6) unstable; urgency=low
2711
2712 * Add some more debugging output to maintainer scipts, hopefully
2713 nailing #396944 which has surfaced again.
2714 * Improve wording in NEWS.Debian for exim4-config.
2715 Closes: #431019, #431130
2716 * Issue DEBCONFfooDEBCONF warning as well for
2717 DEBCONFheaders_rewriteDEBCONF.
2718 Thanks to John Goerzen. Closes: #431088
2719 * fix localhost inserted twice into local_domains. Closes: #432394
2720 * fix MAIN_RELAY_TO_DOMAINS in update-exim4.conf.
2721 Thanks to Ben Wheeler. Closes: #432521
2722 * Document that special handling is needed for host lists that only
2723 consist of a single IPv6 address. Thanks to Frederic Daniel Luc
2724 Lehobey. Closes: #432229
2725 * Add forgotten (conditional) definition of REMOTE_SMTP_HEADERS_REWRITE
2726 and REMOTE_SMTP_RETURN_PATH for remote_smtp transports.
2727 Thanks to Miguel Martins Feitosa Filho. Closes: #432716
2728 * Debconf translations
2729 * Bulgarian completed. Closes: #431957, #430521
2730 * Update Tamil. Thanks to Tirumurti Vasudevan. Closes: #432181
2731 * Update Spanish.
2732 Thanks to Javier Fernández-Sanguino Peña. Closes: #429940
2733
2734 -- Marc Haber <mh+debian-packages@zugschlus.de> Fri, 13 Jul 2007 22:22:09 +0200
2735
2736exim4 (4.67-5) unstable; urgency=low
2737
2738 * the "verderben viele Koeche den Brei?" release
01e60269 2739
de45f55a
AM
2740 [ Andreas Metzler ]
2741 * Point to exim4_passwd(5) instead of non-existing exim_passwd(5) in AUTH
2742 section of configuration. (Thanks Arkadiusz Dykiel, #430149)
2743 * update-exim4.conf check_ascii_pipe(): Accept < since we use it for list
2744 construction. Closes: #430391
2745 * Anchor UPEX4CmacrosUPEX4C in update-exim4.conf
2746
2747 [ Robert Millan ]
2748 * Update informational message in SPF ACL to use the latest
2749 http://www.openspf.org/Why API.
2750
2751 [ Debconf translations ]
2752 * French completed and converted to UTF-8
2753 * All remaining non UTF-8 translation switched to UTF-8
2754
2755 [ Marc Haber ]
2756 * do not quote error message in lowuid router
2757 * replace commented UPEX4CmacrosUPEX4C with UPEX4CmacrosUPEX4C exim
2758 configuration macro definition as placeholder for ue4c-generated macros.
2759
2760 [ Christian Perrier ]
2761 * Correct the invalid ${fqdn} variable in exim4-config.templates
2762
2763 -- Marc Haber <mh+debian-packages@zugschlus.de> Thu, 28 Jun 2007 09:22:04 +0200
2764
2765exim4 (4.67-4) unstable; urgency=low
2766
2767 * update-exim4.conf:
2768 * fix embarrassing typo in update-exim4.conf that broke macro
2769 expansion for two values.
2770 Thanks to Andrew Chittenden. Closes: #429828
2771 * Allow ! and * in ue4cc.
2772 Thanks to Dieter Hametner and Raf D'Halleweyn. Closes: #429986
2773 * have @ and localhost added to local_domains list.
2774 Thanks to a big number of people. Closes: #429939
2775 * eliminate -e && chmod construct as a possible cause of #429617.
2776 Thanks to Martin Ketzer and Silvestre Zabala
2777 * Now barfs if DEBCONFsomethingDEBCONF is still found in the
2778 configuration file. Thanks to a truckload of users who were too lazy
2779 to read the docs, did not accept the suggested configuration file
2780 changes and then complained about a non-working exim ("malformed macro
2781 definition")
2782 * README.Debian: Document the new low-UID handling mechanism.
2783 Thanks to Johannes Rohr. Closes: #429878
2784 * debian/rules: do not ignore make clean errors
2785 * Debconf translation updates:
2786 - Basque. Closes: #429626
2787 - Czech.
2788 - Brazilian Portuguese. Closes: #429867
2789
2790 -- Marc Haber <mh+debian-packages@zugschlus.de> Fri, 22 Jun 2007 13:55:15 +0200
2791
2792exim4 (4.67-3) unstable; urgency=low
2793
2794 [ Andreas Metzler ]
2795 * Initialize permissions of bug-script and exim-adduser as 755, since diff
2796 does not preserve permissions. Both were shipped as 644 in binary packages
2797 not built with svn-buildpackage. Closes: #420446
2798
2799 [ Marc Haber ]
2800 * Merge experimental changes from revision 2018:2073
2801 * Fix "Zahlendreher" in closure of #427690. Closes: #427690
2802 * update-exim4.conf:
2803 * finally get rid of the DEBCONFfooDEBCONF stuff. That information
2804 is now passed to the configuration by ue4c by directly setting exim
2805 macros in the configuration. This has caused both the configuration
2806 and ue4c to be much shorter.
2807 * run with -e, -C and -u.
2808 * convert input read from update-exim4.conf.conf to lower case
2809 * barf if strange characters are found in ue4cc. Closes: #400294
2810 * Remove superfluous "x$foo" = "xbar" constructs from scripts
2811 * Add routers to reject mail to accounts with low UID.
2812 Closes: #400790.
2813 * Make daily cron job barf if /usr/bin/mail is not found. Have
2814 exim4-base recommend mailx. Closes: #427690
2815 * Have all -daemon packages provide exim4-localscanapi-1.0 and
2816 exim4-localscanapi-1.1 as requested by Magnus Holmgren while fixing
2817 #426425. Also include exim4-localscan-plugin-config script with
2818 exim4-dev. Thanks to Magnus for helping with this. Closes: #428274
2819 * remove /etc/exim4/email-addresses symlink and document this.
2820 Thanks to Josip Rodin. Closes: #420578
2821 * introduce conf.d/250_exim4-config_lowuid which optionally allows
2822 to reject (or alias away) mail to low-uid accounts that are not
2823 listed in an exception list. Thanks to Dominic Hargreaves,
2824 Marc Sherman and Ross Boylan. Closes: #400790, #307768, #331716
2825 * remove versioned depends on cron, since the version we need is
2826 well before sarge.
2827 * Add cron | fcron dependency. Fcron is going to be removed again
2828 at the first sign of trouble. Closes: #381806
2829 * remove move_exim3_spool debconf template. Closes: #391762
2830 * replace openssl gendh with openssl dhparam. Closes: #413235
2831 * adapt docs, README and manpages
2832 * have Hilko fix the lynx-dump postprocessing to repair generating
2833 README.Debian text version. Thanks!
2834 * increase README.Debian generation robustness. Thanks to Hilko.
2835 * debconf:
2836 * Partly apply Christian Perrier's patch for reviewed
2837 templates and control file. Closes: #426980
2838 * Other minor template changes.
2839 * get rid of "mails" in debconf templates, use "messages" instead.
2840 Re-word local_interface debconf template. Other minor changes.
2841 Thanks to Jens Seidel and Christian Perrrier. Closes: #394976
2842 * re-work exim4-config.config logic to have split/non-split config
2843 asked last instead of first. This partly addresses #410756.
2844 * Add exim4-daemon-heavy.templates, exim4-daemon-light.templates
2845 and exim4.templates to POTFILES.in
2846 * Re-Word dc_other_hostnames debconf template.
2847 Thanks to Hans G. Ehrbar. Closes: #421860
2848
2849 [ Christian Perrier ]
2850
2851 * Debconf translation updates:
2852 - French
2853 - Ukrainian. Closes: #427793
2854 - Bulgarian.
2855 - Thai.
2856 - Galician.
2857 - Swedish.
2858 - Punjabi.
2859 - Indonesian.
2860 - Italian.
2861 - Khmer.
2862 - Traditional Chinese. Closes: #428072, #428069.
2863 - Portuguese.
2864 - Simplified Chinese.
2865 - Marathi
2866 - Romanian. Closes: #429242
2867 - Russian. Closes: #429352
2868
2869 -- Marc Haber <mh+debian-packages@zugschlus.de> Mon, 18 Jun 2007 10:26:20 +0200
2870
2871exim4 (4.67-1) unstable; urgency=low
2872
2873 [ Marc Haber ]
2874 * new upstream version
2875 * remove 37_upstream-patch-384015-add_headers
2876 * remove 80_disable_rsa_export
2877 * remove 80_upstream_408174_4-64-PH18
2878 * EDITME patch changes to allow for 4.67
2879 * enable dovecot authentication
2880 * Upstream patch from Magnus Holmgren included upstream.
2881 Thanks to Simon Walter. Closes: #407957
2882 * Upstream patch PH/18 included upstream.
2883 Thanks to Marc Schiffbauer. Closes: #408174
2884 * merge experimental changes
2885 * exim man page patch changes for 4.67
2886 * robustness patches for
2887 * create-custom-package
2888 * exim-gencert
2889 * exim4-base.config
2890 * exim4-base.postinst
2891 * exim4-config.config
2892 * exim4-config.postinst
2893 * exim4-daemon-light.postinst
2894 * update-exim4defaults
2895 * replace backticks with $() notation
2896 * Add patch to 50_localscan_dlopen to reduce dynamic symbol table.
2897 Thanks to Magnus Holmgren. Closes: #413602
2898 * remove woody compatibility hacks from
2899 * exim4-daemon-light.postinst
2900 * exim4-config.postinst
2901 * Fix eximnext => exinext in man page.
2902 * README.Debian:
2903 * add warning to "IP addresses for incoming connections" section.
2904 * add new chapter about how to influence exim's behavior.
2905 * add missing closing bracket. Thanks to Martin Schwarz. Closes: #419700
2906 * update-exim4.conf(8):
2907 * clarify update-exim4.conf about how ue4cc and exim configuration
2908 interface
2909 * remote_smtp_smarthost transport: make hosts_try_auth host list
2910 semicolon-separated to correctly handle IPv6
2911 * multiple minor changes to lintian overrides
2912 * debian/control: have exim4 depend on debconf (>= 1.4.69) | cdebconf
2913 (>= 0.39) explicitly to allow usage of debconf error template type.
2914
2915 [ Christian Perrier ]
2916 * Esperanto debconf translation update (Serge Leblanc). Closes: #415590
2917 * Marathi debconf translation added (Priti Pathil). Closes: #416801
2918
2919 -- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 21 Apr 2007 11:48:48 +0200
2920
2921exim4 (4.63-17) unstable; urgency=low
2922
2923 * 30_exim4-config_examples: add missing backslash in non-TLS client
2924 login authenticator. Thanks to Kai Weber. Closes: #407567
2925
2926 -- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 20 Jan 2007 10:38:16 +0100
2927
2928exim4 (4.63-16) unstable; urgency=low
2929
2930 * Add ta (Tamil) translation of Tirumurti Vasudevan
2931 Closes: #406974
2932 * exim4_refresh_gnutls-params: allow EXIM4_SPOOLDIR to be overridden from
2933 the environment. Closes: #406989
2934 * Re-work client authenticators to handle passwords containing
2935 colons and circumflexes. Thanks to Steaphan Greene. Closes: #406686
2936 * transport/30_exim4-config_remote_smtp_smarthost: feed
2937 hosts_try_auth from $host and $host_address, avoiding issues with
2938 round-robin DNS setup.
2939 Thanks to Celejar and Heiko Schlittermann. Closes: #403583
2940
2941 -- Marc Haber <mh+debian-packages@zugschlus.de> Thu, 18 Jan 2007 21:10:34 +0100
2942
2943exim4 (4.63-15) unstable; urgency=low
2944
2945 * keep config.h from being installed in exim4-base.
2946 Thanks to Aaron M. Ucko. Closes: #405824
2947
2948 -- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 6 Jan 2007 22:12:05 +0100
2949
2950exim4 (4.63-14) unstable; urgency=low
2951
2952 * patch LOCAL_SCAN_ABI_VERSION to 1.1 in 50_localscan_dlopen after
2953 consulting with Magnus Holmgren.
2954 * Fix update-exim4.conf.8 manpage
2955 * FILES section is no longer doubled
2956 * NAME is no longer multi-line
2957 * proper reference to ue4cc in FILES section
2958 * Thanks to Angus Mackenzie
2959 * debian/rules
2960 * allow buildbasepackages and extradaemonpackages to be set from
2961 the environment
2962 * fix buildbasepackages=no and extradaemonpackages which were
2963 broken due to the new -dev binary package
2964 * remove "" in various places, this is Make not shell
2965 * add optional debugging output for variables that are meant to be set
2966 externally
2967 * clean now unpatches first, otherwise clean fails because files
2968 are first deleted and then non-existing files are unpatched
2969 * take config.h from first non-light daemon package built instead
2970 of -heavy (we might not be building -heavy but still need -dev)
2971 * Thanks to Gerfried Fuchs for actually using these features and
2972 finding this bug group.
2973 * exim4.init: Now returns 0 when starting and daemon already
2974 running, and when stopping and daemon already stopped. This fixes LSB
2975 compliance. Thanks to Heiko Schlittermann. Closes: #404182
2976
2977 -- Marc Haber <mh+debian-packages@zugschlus.de> Fri, 5 Jan 2007 16:34:58 +0100
2978
2979exim4 (4.63-13) unstable; urgency=low
2980
2981 * Fix mangled sense in /etc/aliases exim4-config_files(5) man page.
2982 Thanks to Angus Mackenzie.
2983 * [update-exim4.conf.8] exim4-config_files manpage is in section 5 instead
2984 of 8. Thanks to Angus Mackenzie. Closes: #404494 (am)
2985 * Clarify /etc/exim4/passwd.client host name lookup to go after the
2986 reverse DNS entry in exim4-config_files(5) man page.
2987 * Update uk (Ukrainian) translation of debconf templates.
2988 Thanks to Eugeniy Meshcheryakov and Yanovych Borys. Closes: #404481
2989 * Update sl (Slovenian) translation of debconf templates.
2990 Thanks to Matej Kovacic. Closes: #404481
2991 * merge in experimental changes:
2992 * create exim4-dev package for sa-exim and other packages. Closes: #401462
2993 * fix broken usage of DPATCH_WORKDIR (dpatch-edit-patch didn't
2994 work with tarballed upstream)
2995 * don't use DPATCH_WORKDIR any more
2996 * modify patches to apply to build-tree
2997 * remove leftover debugging output from debian/patches/00_unpack.dpatch
2998
2999 -- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 2 Jan 2007 14:43:59 +0100
3000
3001exim4 (4.63-12) unstable; urgency=low
3002
3003 * exim4-base.postinst: Redirect command -v's stdout to /dev/null
3004 * update-exim4.conf: add lots of quoting to increase robustness.
3005 Thanks to Paul Slootman. Closes: #403605
3006 * Debconf templates translation updates and new translations:
3007 - Esperanto
3008 - Norwegian Nynorsk (Håvard Korsvoll).
3009 - Punjabi (A.S. Alam).
3010 - Malayalam (Praveen A). Closes: #402541
3011 - Italian (typos corrected by Davide Viti). Closes: #403199
3012 - see Last-Translator for rewards)
3013
3014 -- Marc Haber <mh+debian-packages@zugschlus.de> Wed, 20 Dec 2006 14:23:57 +0100
3015
3016exim4 (4.63-11) unstable; urgency=low
3017
3018 * Remove patch to spec.txt for pkg-exim4-users, it is included
3019 upstream. No idea why this patch even applied correctly.
3020 * README.Debian:
3021 * Fix wrong pidfile name
3022 * Move FAQ to the Wiki
3023 * Adapt "Using completely different configuration scheme" to also
3024 mention /etc/exim4/exim4.conf.
3025 * Move titles in the same line as the section statement, making it
3026 easier to work with a code folding editor.
3027 * exim4_files(5): fix recommended permissions for passwd[.client].
3028 Thanks to Georg Neis. Closes: #398365
3029 * Remove temporary gnutls parameters file if neither certtool nor
3030 openssl are installed. Closes: #399023
3031 * Fix path to gnutls-params file in exim4-base.postinst.
3032 Thanks to J.L. Fernandez. Closes: #400794
3033 * Translation updates (see Last-Translator for rewards).
3034 - Punjabi (not yet complete)
3035 - Hebrew (not yet complete)
3036 - Portuguese. Closes: #399242
3037 * merge changes from experimental:
3038 * enable sqlite for exim4-daemon-heavy.
3039 Thanks to Adrian Phillips. Closes: #398718
3040 * Add Build-Dependency on libsqlite3-dev.
3041 Thanks to Frank Lichtenheld. Closes: #398880
3042 * Build-Depends
3043 * add po-debconf
3044 * add bzip2
3045 * debian/rules:
3046 * run debconf-updatepo in clean targets
3047 * adapt build system to allow direct building from an upstream tarball
3048 * needs tardy at build time on sarge, but not on newer distributions
3049 * use dpatch-run for patches instead of locally programmed handling
3050 * add lintian overrides:
3051 * partially-translated-question exim4/dc_eximconfig_configtype for
3052 cy, eo, et, he, mk, nn, pa, pl, sl, tl, uk - translators, move!
3053 * possible-debconf-note-abuse config:15 */drec
3054 * remove gratuitous exim4-daemon-heavy.postinst
3055 (it is symlinked at build time)
3056
3057 -- Marc Haber <mh+debian-packages@zugschlus.de> Fri, 1 Dec 2006 11:16:34 +0000
3058
3059exim4 (4.63-10) unstable; urgency=low
3060
3061 * The "praise Osamu Aoki" release.
3062 * Translation updates (see Last-Translator for rewards).
3063 - Dutch. Closes: #396725
3064 * README.Debian:
3065 * Add information about how to obtain reportbug information for
3066 mailing list questions.
3067 * Point people directly to passwd.client man page instead of the
3068 file itself. Thanks to Osamu Aoki.
3069 * Re-work the /etc/aliases section.
3070 * Improve smarthost description in update-exim4.conf(8) man page.
3071 Give examples. Thanks to Osamu Aoki.
3072 * include documentation for /etc/aliases in exim4-config_files(5)
3073 man page. Symlink to etc-aliases(5).
3074 Thanks to Osamu Aoki. Closes: #397042
3075 * Change symlink of exim4-config_files(5) to email-addresses(5) to
3076 point to etc-email-addresses(5) for consistency.
3077 * Use nwildlsearch to index into passwd.client to allow wildcards
3078 here. Thanks to Osamu Aoki. This is another pain relief for #244724.
3079 * use printf instead of echo in daily cron job.
3080 Thanks to Ming Hua. Closes: #395448
3081 * Add de-uglyfication request to man pages.
3082
3083 -- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 5 Nov 2006 10:36:28 +0000
3084
3085exim4 (4.63-9) unstable; urgency=low
3086
3087 * Fix a spelling error in templates: s/adviseable/advisable
3088 Thanks to Jens Seidel for spotting it
3089 * Translation updates (see Last-Translator for rewards).
3090 - Bosnian. Closes: #396592
3091 - Bulgarian. Closes: #396558
3092 - Greek.
3093 - Lithuanian. Closes: #396478
3094 - Norwegian Bokmål. Closes: #391768
3095 - Wolof. Closes: #395944
3096 * Have ue4c barf on more lookup types found in more ue4cc fields,
3097 courtesy to regexp from hell.
3098
3099 -- Marc Haber <mh+debian-packages@zugschlus.de> Thu, 2 Nov 2006 18:07:24 +0000
3100
3101exim4 (4.63-8) unstable; urgency=low
3102
3103 * Translation updates (see Last-Translator for rewards).
3104 - Albanian. Closes: #394725
3105 - Arabic
3106 - Basque
3107 - Catalan
3108 - Chinese (Simplified)
3109 - Chinese (Traditional)
3110 - Croatian
3111 - Czech
3112 - Dzongkha
3113 - Finnish. Closes: #393644
3114 - German
3115 - Italian.
3116 - Korean. Closes: #394235
3117 - Nepali
3118 - Norwegian Bokmal. Closes: #394270
3119 - Portuguese
3120 - Romanian
3121 - Russian.
3122 - Slovak
3123 - Turkish
3124 * README.Debian
3125 * remove wiki references from README.Debian
3126 * remove dc_local_delivery FAQ entry since this is now debconfized
3127 * Fix typos, replace "documented below" with a direct link.
3128 Thanks to Olaf van der Spek. Closes: #394617
3129 * exim4-config.templates
3130 * Fixed typo: s/arbitrary/arbitrarily
3131 * Extra space removed at the end of a line. Closes: #394569
3132 * Change references to inexistent README.Debian.html and README.Debian,
3133 both replaced by README.Debian.gz. Thanks to Eric Schanze for spotting
3134 this.
3135 * Various English use changes suggested by Jens Seidel. Closes: #394651
3136 * update-exim4.conf: Fix wrong behavior if a debconf list answer already
3137 starts with "<". Thanks to Vineet Kumar. Closes: #393843
3138 * conf.d/main/02_exim4-config_options: Use upstream's wording for
3139 rfc1413 configuration, fix wrongly commented timeout value.
3140 Thanks to Andre Bischoff on IRC.
3141 * conf.d/transports/35_exim4-config_address_directory: Add
3142 delivery_date_add, streamline other options' syntax.
3143 Thanks to Dominic Hargreaves. Closes: #393930
3144 * Remove commented out inetd entries from maintainer scripts, we are
3145 not going to support inetd again.
3146 * Zap gnutls-params in postinst if old binary format is detected.
3147 Exim cannot read that file any more since RSA_EXPORT has been removed.
3148 Always kill the file if file(1) is not present, recommend file(1).
3149 Thanks to John Goerzen. Closes: #394598
3150
3151 -- Marc Haber <mh+debian-packages@zugschlus.de> Mon, 23 Oct 2006 20:49:46 +0200
3152
3153exim4 (4.63-7) unstable; urgency=low
3154
3155 * Translation updates (see Last-Translator for rewards). Closes: #391768
3156 - Brazilian Portuguese
3157 - Danish. Closes: #392548
3158 - Galician
3159 - Hungarian
3160 - Indonesian
3161 - Japanese
3162 - Spanish
3163 - Thai
3164 * Do not ask for local delivery method if custom entry (i.e. neither
3165 maildir_home nor mail_spool) has bin set in update-exim4.conf and continue
3166 to use this custom setting instead of overwriting it with mail_spool. (am)
3167 Closes: #392993
3168 * Special-case "dsearch;" constructs in dc_other_hostnames, no
3169 longer supported. Adapt documentation accordingly.
3170 * Adapt docs and man pages so that they do not longer suggest that
3171 answers to debconf questions might use all exim
3172 host/address/domain list features.
3173 * fix ue4c to handle more than one smarthost correctly.
3174 * Handle spaces, commas and semicolons as separator in root alias
3175 handling.
3176 * Wolof translation contained a comma in the translation of a element of the
3177 Choices list for the dc_eximconfig_configtype question, replace it with a
3178 semicolon. (am)
3179
3180 -- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 14 Oct 2006 23:45:17 +0000
3181
3182exim4 (4.63-6) unstable; urgency=low
3183
3184 * s/ipv6/IPv6 in templates (general writing consistency)
3185 * Translation updates (see Last-Translator for rewards)
3186 - Arabic (partial)
3187 - Basque (partial)
3188 - Croatian (partial)
3189 - Greek (partial)
3190 - Khmer
3191 - Spanish (partial)
3192 - Swedish
3193 - Vietnamese. Closes: #392772
3194 * README.Debian:
3195 * Fine tuning of SMTP AUTH and TLS docs after user feedback
3196 received over $BEVERAGE irl.
3197 * Adapt configuration chapter to re-worded templates.
3198 * Fix exim4_files man page names to not pollute name space.
3199 * Clarify exim4-config_files man page to reflect that the host name
3200 given there does not actually influence the routing decision.
3201 Thanks to Sven Luther.
3202 * Fix list separator handling for dc_other_hostnames in ue4c.
3203 Thanks to Alexandre Fayolle. Closes: #392831
3204
3205 -- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 14 Oct 2006 07:40:05 +0000
3206
3207exim4 (4.63-5) unstable; urgency=low
3208
3209 * define MAIN_LOG_SELECTOR conditionally.
3210 Thanks to Aaron M. Ucko. Closes: #390758
3211 * Fix typos in man pages. Thanks to A. Costa.
3212 Closes: #390705, #390706, #390707
3213 * Address #373786:
3214 * cron.daily: Try UID change with start-stop-daemon, and fall
3215 back to su if that fails. This should enhance compatibility
3216 with libpam-tmpdir.
3217 * exim4_refresh_gnutls-params: don't drop privileges any more,
3218 generate gnutls-params as root and chown them later.
3219 * Thanks to Piotr Kaczuba and Tollef Fog Heen. Closes: #373786
3220 * Add debugging facility to exim4_refresh_gnutls-params
3221 * Debconf-Rework
3222 * update-exim4.conf: expand UE4CC_semicolon list to allow
3223 semicolons in all debconf questions as list separators for consistency.
3224 * Do template changes suggested by Christian Perrier. Closes: #260141
3225 * new mail name template thanks to Jari Aalto. Closes: #275953
3226 * relay templates changes thanks to Ross Boylan. Closes: #342061
3227 * remove conftype exim3manual. Closes: #355265
3228 * use semicolon as list separator in debconf templates. ue4.conf
3229 handles both semicolons and colons since #360162. Thanks to Adam
3230 Borowski. Closes: #365428
3231 * Make existing templates style-compatible regarding developer's
3232 reference.
3233 * Lower priorities so that the Installer can do its work without
3234 exim4 asking questions. Closes: #379485
3235 * Modify templates saying that smarthost::port is a valid
3236 notation. Modify transport/30_exim4-config_remote_smtp_smarthost to
3237 take only the first part of DCsmarthost (up to first colon) as host
3238 name for hosts_try_auth. This allows debconf configuration of a
3239 different port to connect to the smarthost. Closes: #251949
3240 * Add debconf template to packages telling people to dpkg-reconfigure
3241 exim4-config.
3242 * Allow choosing between delivery to /var/mail or ~/Maildir with debconf.
3243 (am) Closes: #250980, #274560, #289959
3244 * Translation updates (see Last-Translator for rewards)
3245 - Brazilian Portuguese
3246 - Danish
3247 - Galician
3248 - Slovak
3249 - Thai
3250 - Turkish
3251 - Romanian
3252 - Japanese
3253 - French
3254 * Patch by Florian Weimer which disables RSA_EXPORT support which
3255 should eliminate the "exim blocking on entropy starvation" issue.
3256 * update-exim4.conf: Take only the first word from /etc/mailname as
3257 system mail name. Thanks to Mike Mestnik. Closes: #215319.
3258 * init script: log_failure_message alert if non-zero paniclog is
3259 found. Thanks to Andreas Barth.
3260 * README.Debian: document cron job, including paniclog monitoring.
3261 Thanks to Stephen Gran.
3262
3263 -- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 10 Oct 2006 16:50:27 +0000
3264
3265exim4 (4.63-4) unstable; urgency=low
3266
3267 * Make update-exim4.conf man page also update-exim4.conf.conf man page.
3268 * Fix SPF error message when $sender_address_domain is undefined (i.e. sender
3269 is <>). (rm)
3270 * Change debian/rules documentation for daemon-custom build.
3271 Thanks to Guido Hennecke. Closes: #386135
3272 * Rotate paniclog by size, not daily, to avoid rotating away
3273 messages after complaining from the daily cron job.
3274 Thanks to Dirk Meyer.
3275 * Update Slovak translation.
3276 Thanks to Peter Mann.
3277 * Add Wolof translation.
3278 Thanks to M Mamoune Mbacke
3279 * Add a paragraph explaning the gnutls-bin suggestion to ease DH
3280 parameter generation in case of entropy starvation.
3281 Thanks to Andi Barth and Florian Weimer.
3282 * Since a new version of sysvinit upload will move /var/run/ to a tmpfs
3283 directories under /var/run/ and their permissions are not persistent
3284 anymore but will be lost after a reboot. - Re-generate /var/run/exim4 in
3285 the init script to compensate for this. (am) (closes: #387699)
3286 * update-exim4.conf: Exit with an error if dc_use_split_config is neither
3287 true nor false instead of replacing the configuration with an empty one.
3288 (am) Closes: #386554
3289 * More intelligence for exim4_refresh_gnutls-params:
3290 * If certtool (from gnutls-bin) is unavailable but openssl is installed
3291 use openssl to re-generate DH params. (am)
3292 * Change exim4-base Suggests on gnutls-bin to gnutls-bin|openssl. (am)
3293 * Move invocation and background mechanism to exim4_refresh_gnutls-params.
3294 Script can now be called any time from the command line or any
3295 other script.
3296 * Only regenerate dh params if tls_advertise_hosts is non empty.
3297 According to Florian Weimer, DH params are only needed for
3298 incoming TLS connections.
3299 * Thanks, Yuri D'Elia. This addresses #387448
3300 * Improve entropy and gnutls-params docs.
3301 * cron-daily:
3302 * Invoke exim4_refresh_gnutls-params unconditionally.
3303 * Send out e-mail alert if gnutls-params is older than 14 days.
3304 * rename config varables to E4BCD_, source /etc/default/exim4
3305 * introduce a E4BCD_PANICLOG_NOISE variable containing a regexp.
3306 Paniclog is negatively filtered against that regexp and paniclog
3307 warning is only sent out if unfiltered lines remain. This is to allow
3308 work around http://www.exim.org/bugzilla/show_bug.cgi?id=92
3309 * Prepare hosts_avoid_tls statement on SMTP transports
3310 * Macroize log_selector, remove +tls_cipher from examples (it is on
3311 by default) and always set tls_peerdn (we use TLS by default for
3312 outgoing connections). Make it easier to enable debug logging.
3313 * Mention in the comments of the default RCPT ACL that verification
3314 is likely to have false negatives in smarthost/satellite setups. This
3315 is the easiest way to fix #388460; the "real" fix would be very very
3316 complicated and thus unsuitable for the default configuration.
3317 Closes: #388460
3318 * README.Debian:
3319 * Re-Work "misc" section to contain subsection. Fix minor
3320 formatting issues.
3321 * Add a section about SELinux to the misc subsection saying that
3322 we currently do not have an SELinux policy but would appreciate
3323 people helping here. This is already bug #387327 and #390179.
3324
3325 -- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 1 Oct 2006 14:37:53 +0000
3326
3327exim4 (4.63-3) unstable; urgency=low
3328
3329 * Have exim4-config conflict with exim4-daemon-* << 4.63.
3330 Thanks to Yannick Roehlly. Closes: #383420, #384058
3331 * Tweak NEWS.Debian formatting. Remove asterisks and make sure that
3332 contents lines start with four spaces.
3333 * exim4-config.NEWS: A pair of minor fixes in SPF entry. (rm) Closes: #383708
3334 * Apply upstream fix allowing header names with an odd number of
3335 characters in add_headers in filters.
3336 Thanks to Tony Finch. Closes: #384015
3337 * Add documentation for inaccessible home directories.
3338 Thanks to Juha Jäykkä. Closes: #383469
3339
3340 -- Marc Haber <mh+debian-packages@zugschlus.de> Wed, 23 Aug 2006 17:16:38 +0000
3341
3342exim4 (4.63-2) unstable; urgency=low
3343
3344 * upload to unstable
3345
3346 -- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 15 Aug 2006 20:35:55 +0000
3347
3348exim4 (4.63-1) experimental; urgency=low
3349
3350 * New upstream version 4.63
3351 + Change PostgreSQL charset handling. Closes: #369351
3352 + Recognize SMTP codes at the start of "message" in ACLs and after
3353 :fail: and :defer: in a redirect router. Add forbid_smtp_code to
3354 suppress the latter. forbid_smtp_code is enabled in Debian's
3355 default config. Closes: #378131
3356 * Adapt configuration to current upstream
3357 + re-work RCPT ACL. Closes: #379155
3358 + add new comments to default authenticators
3359 + use $auth[123] instead of $[123] which are now deprecated
3360 + forbid_smtp_code on userforward router
3361 * Add missing dependency on lsb-base (>= 3.0-3), needed for the new
3362 init-script shipped in exim4-base. (am)
3363
3364 -- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 1 Aug 2006 10:47:44 +0000
3365
3366exim4 (4.62-5) unstable; urgency=low
3367
3368 * Fix typo in exim4-base daily cron job.
3369 Thanks to Salvatore Bonaccorso. Closes: #381048
3370 * Fix language issues in package descriptions
3371
3372 -- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 8 Aug 2006 15:02:14 +0200
3373
3374exim4 (4.62-4) unstable; urgency=low
3375
3376 * Add missing dependency on lsb-base (>= 3.0-3), needed for the new
3377 init-script shipped in exim4-base. (am)
3378
3379 -- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 1 Aug 2006 11:03:57 +0000
3380
3381exim4 (4.62-3) unstable; urgency=low
3382
3383 * remove pkg-exim4-user mail address from README.Debian, mention
3384 that one needs to be subscribed to post.
3385 Thanks to Ross Boylan. Closes: #368242
3386 * re-word -o description in update-exim4.conf(8) man page.
3387 Thanks to Ross Boylan.
3388 * Flag update-exim4.conf(8) man page for a re-work in its BUGS
3389 section.
3390 * Give a - hopefully - better explanation of the mail name thingy in
3391 README.Debian.
3392 * Fix occurrences of default_acl file in documentation. Make part of
3393 README.Debian less confusing.
3394 Thanks to Ross Boylan. Closes: #376459
3395 * When installing via apt using dpkg-preconfigure the value of
3396 dc_hide_mailname was overwritten during the second run of the debconf
3397 script (invoked by postinst), before the value was stored in the
3398 configuration file. Fix this. (am) Closes: #376460
3399 * Make spamassassin example in 40_exim4_config_check_data actually
3400 work, add link to documentation for "really suiteable" configuration
3401 examples. Thanks, again, to Ross Boylan.
3402 * remove left-over "and a bunch" sentence from exim4-config_files.5
3403 * Add a symlink from /etc/email-addresses to /etc/exim4/email-addresses
3404 * Fix bad parsing of CHECK_RCPT_DOMAIN_DNSBLS.
3405 Thanks to Robert Millan. Closes: #378581
3406 * Note in README.Debian that other parts of the Debian system might
3407 give outdated and/or wrong advice. See #378684, #378685.
3408 * SPF support: (rm) Closes: #290464
3409 * Add (disabled) template to check SPF in 30_exim4-config_check_rcpt.
3410 * Add libmail-spf-query-perl (>= 1.999-1) to Suggests.
3411 * Rewrite Q/A about SPF from README.Debian.
3412 * Add a small note to exim4-config.NEWS.
3413 * Add conf.d/acl/30_exim4-config_check_mail to reject mail without HELO/EHLO.
3414 (rm) Closes: #378935
3415 * Add LSBized init script. Thanks to Carlos Villegas. Closes: #376953
3416 * re-order RCPT ACL statements to resemble Upstreams default config
3417 a little more. This used to be the case in the beginning, but was
3418 changed eventually, and I didn't find any rationale for our deviation.
3419 Thus, we change back to upstream's default to see which things might
3420 break.
3421 * remove cron.d from exim4-base dirs - we do not have a cron.d job
3422 any more for years.
3423 * Re-work daily cron job:
3424 * Make statistics configurable with a variable
3425 * Comment that the log handling code is fragile and depending on
3426 log rotation strategy
3427 * Add code to generate warnings if paniclog non-empty.
3428 Thanks to Andrew Ferrier. Closes: #379898
3429 * Build -dbg packages.
3430 * Updated vi (vietnamese) translation.
3431 Thanks to Clytie Siddall. (am) Closes: #380357
3432
3433 -- Marc Haber <mh+debian-packages@zugschlus.de> Mon, 31 Jul 2006 06:10:51 +0000
3434
3435exim4 (4.62-2) unstable; urgency=low
3436
3437 * Move explanation about using ";" as separator in lists from debian/NEWS to
3438 debian/exim4-config.NEWS. (The former ends up as
3439 /usr/share/doc/eximon4/NEWS.Debian.gz.) Also fix version-number of
3440 entry. (am)
3441 * have ue4.conf --verbose print split or non-split config.
3442 Thanks to Florian Laws. (mh)
3443 * Mention http://pkg-exim4.alioth.debian.org/ in package description.
3444 Thanks to Florian Laws. (mh)
3445 * Mention in package description that README.Debian has information
3446 about how to configure the Debian packages.
3447 * /etc/init.d/exim4: parse extended inetd.conf syntax from
3448 openbsd-inetd. (mh) Closes: #365928
3449 * New th (thai) translation.
3450 Thanks to Theppitak Karoonboonyanan. (mh) Closes: #367351
3451 * New dz (Dzongkha) translation.
3452 Thanks to Pema Geyleg. (am) Closes: #368593
3453 * New ne (Nepali) translation.
3454 Thanks to Paras pradhan. (am) Closes: #369526
3455 * New eo (Esperanto) translation.
3456 Thanks to Serge Leblanc. (am) Closes: #369241
3457 * Updated hu (hungarian) translation.
3458 Thanks to Attila Szervac. (am) Closes: #374616
3459 * Make documentation of CHECK_RCPT_LOCAL_LOCALPARTS and
3460 CHECK_RCPT_REMOTE_LOCALPARTS more verbose and concentrate it in the
3461 ACL file. Thanks to Klaus Muth. (mh) Closes: #366491
3462 * README.Debian.xml (mh)
3463 * Add new section documenting where to find documentation.
3464 * Move misplaced sentence.
3465 * Fix spelling errors in README.Debian.
3466 Thanks to Salvatore Bonaccorso. Closes: #366003
3467 Thanks to Ross Boylan. Closes: #374216
3468 * remove "you can stop reading now" sentence.
3469 Thanks to David Lawyer. Closes: #370790
3470 * Mention Debian-specific man pages
3471 * Give instructions about how to use apropos to find out about man
3472 pages.
3473 * Documentation changes inspired by Ross Boylan. Closes: #369126
3474 * Add exim4-config_files(5) man page to aid as repository for file
3475 explanations.
3476 * /etc/email-addresses
3477 * /etc/exim4/local_host_blacklist
3478 * /etc/exim4/local_host_whitelist
3479 * /etc/exim4/local_sender_blacklist
3480 * /etc/exim4/local_sender_whitelist
3481 * /etc/exim4/local_sender_callout
3482 * /etc/exim4/local_rcpt_callout
3483 * /etc/exim4/local_domain_dnsbl_whitelist
3484 * /etc/exim4/hubbed_hosts
3485 * /etc/exim4/passwd
3486 * /etc/exim4/passwd.client
3487 * /etc/exim4/exim.crt
3488 * /etc/exim4/exim.key
3489 If you find any files that might be missing in the man page,
3490 please report a bug.
3491 * mention exim4-config_files(5) in update-exim4.conf.8
3492 * Explicitly mention README.Debian in exim man page.
3493 * Remove /usr/share/doc/exim4-config/default_acl, move contents to
3494 README.Debian and exim4-config_files.
3495 * remove empty /usr/share/doc/exim4-config/examples.
3496 * clarify docs in RCPT ACL.
3497 * streamline docs:
3498 * hubbed_hosts router.
3499 * passwd.client.
3500 * server side authentication examples
3501 * Standard-Version: 3.7.2, no changes necessary.
3502
3503 -- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 24 Jun 2006 08:56:19 +0000
3504
3505exim4 (4.62-1) unstable; urgency=low
3506
3507 * New upstream version
3508 * remove !acl patch, bug is fixed upstream
3509 * Some minor changes to README.Debian
3510 * Downgrade priority of exim4/dc_eximconfig_configtype, exim4/no_config and
3511 exim4/exim3_upgrade from critical to high, as there is a sane default.
3512 Closes: #342077
3513 * Allow single quotes in recipient mail addresses. Closes: #346222
3514 * Update debian/mtalist to conflict with hula-mta. (mh)
3515 * Move back man-pages (actually they are symlinks) related to the
3516 mail-transport-agent virtual package from exim4-base to the daemon
3517 packages. Other MTA packages also include these manpages and would
3518 otherwise need to explicitly conflict with exim4-base. Add "Replaces:
3519 exim4-base (<= 4.61-1)" to the daemon packages. Thanks to Justin Pryzby.
3520 Closes: #362852 (am)
3521 * Update km (Khmer) translation.
3522 Thanks to Khoem Sokhem. (mh) Closes: #363672, #363671
3523 * Update pa (Punjabi) translation.
3524 Thanks to A S Alam. (am) Closes: #364268
3525 * replace backticks with $() construct in ue4.conf. (mh)
3526 * Allow ";" as separator in dc_local_interfaces and dc_relay_nets.
3527 If a semicolon is found, "<;" is prepended to allow a semicolon as
3528 separator. Thanks to Adam Borowski. (mh) Closes: #360162
3529 * Link against libdb4.3 instead of 4.2. (am). Closes: #365467
3530 * Standards-Version: 3.7.0, no changes required. (am)
3531 * README.Debian: Add link to "how to use a completely different
3532 configuration scheme" to the beginning of the chapter about Debian's
3533 configuration to provide an easy way out for experienced exim people.
3534 (mh)
3535 * Fix grammar error in README.Debian. (Thanks, Ross Boylan) Closes: #365546
3536 * Whennever changing major Berkeley DB versions we zap the exim hint
3537 databases in exim4-base postinst. Change the code to also delete
3538 __db.retry, __db.misc, __db.callout and __db.wait* (which afaik are
3539 Berkeley DB internal files). If these are somehow broken strange errors
3540 occur, e.g. #360696. As we are deleting the whole db, deleting these files
3541 seems to be a good idea. (am)
3542
3543 -- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 2 May 2006 11:47:58 +0000
3544
3545exim4 (4.61-1) unstable; urgency=low
3546
3547 * New upstream version
3548 - Temporary files for content scanning subdirectory are now also mode 640
3549 instead of 666. Closes: #280282
3550 - If group was specified without a user on a router, and no group
3551 or user was specified on a transport, the group from the router
3552 was ignored. Closes: #343074
3553 - .include statements now require an absolute path. Closes: #268083
3554 * Apply upstream patch allowing !acl constructs
3555 (http://www.exim.org/mail-archives/exim-cvs/2006-April/msg00008.html)
3556 * Rename the Punjabi translation file name from pa_IN to pa
3557 to fit a decision taken in -i18n
3558 * README.Debian:
3559 * mention that relay_nets does allow relaying without authentication.
3560 * minor formatting fixes
3561 * Add Khmer debconf translation (Thanks, Kakada Hok) (bubulle)
3562 Closes: #359668
3563 * Add linda overrides for libs-not-in-depends (see #357727)
3564
3565 -- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 4 Apr 2006 19:50:39 +0000
3566
3567exim4 (4.60-5) unstable; urgency=low
3568
3569 * re-introduce inst_aliases, patch src/install_exim to prevent path
3570 to inst_aliases to be put into example config file. (mh)
3571 * Fix typo in README.Debian.xml, thanks to Frank S. Thomas. (mh)
3572 * Fix Copy&Waste error in README.Debian.xml.
3573 Thanks to Olaf van der Spek. (mh) Closes: #356354
3574 * Added partial Punjabi debconf translation,
3575 thanks to Amanpreet Singh Alam. (cp) Closes: #349644
3576 * Fix wrong example in conf.d/acl/20_exim4-config_whitelist_local_deny.
3577 Thanks to Kaare Hviid for pointing this out on IRC. (mh)
3578 * Add documentation about Debconf templates to README.Debian to make
3579 yath happy. (mh)
3580 * exim4-refresh_gnutls-params: Use prefix for tempfile to make it
3581 easier recognizeable. (mh)
3582
3583 -- Marc Haber <mh+debian-packages@zugschlus.de> Mon, 13 Mar 2006 15:30:07 +0000
3584
3585exim4 (4.60-4) unstable; urgency=low
3586
3587 * add rationale to README.Debian explaining why using system
3588 passwords for SMTP AUTH is a bad idea.
3589 * streamline configuration to decrease differences to upstream default
3590 example, and to adopt new things that were added since we last
3591 looked there.
3592 * Do not set inst_aliases for installation, this only affects
3593 example.conf anyway.
3594 * fail build if upstream's example configuration has changed.
3595 * fix NEWS confusion. Thanks to Andreas for spotting this.
3596 * exim4-base.exim4.init: invoke exim4 daemon with the environment
3597 cleaned to avoid language confusion.
3598 * document tls on connect in README.Debian.
3599 * use adduser --quiet instead of > /dev/null in *.postinst.
3600 * Add require_files directive to userforward router to avoid errors
3601 when mailing uucp@hostname.
3602 * Add comment about setting up TLS in conf.d/auth/30_exim4-config_examples
3603 to keep people from blindly allowing cleartext auth.
3604 * Replace 37_dns_disable_additional_section patch with
3605 37_upstream_patch_342619, which is the nearly identical patch from
3606 upstream CVS, approved by Philip. (mh) Closes: #342619
3607
3608 -- Marc Haber <mh+debian-packages@zugschlus.de> Wed, 22 Feb 2006 10:30:16 +0000
3609
3610exim4 (4.60-3) unstable; urgency=low
3611
3612 * Have exim4-base replace exim4-daemon-light and -heavy. This is a
3613 needed corollary to the movement of the man pages to -base. Let's
3614 hope that this change doesn't introduce too much breakage. Thanks
3615 to Hamish Moffatt for making me take a closer look at policy.
3616 (mh) Closes: #347908, #348067
3617 * Introduce Makefile variable to build with OpenSSL instead of
3618 GnuTLS. This is a last minute maneuver to help sites suffering from
3619 the GnuTLS entropy issue (#338319, #343085) whose only other chance is
3620 disabling TLS completely. Please note that building exim4-daemon-heavy
3621 with OpenSSL is a GPL violation since OpenSSL's license clashes with
3622 the MySQL client library, which is GPL licensed without OpenSSL
3623 exception. (mh)
3624 * re-pack configuration diffs. (mh) Closes: #331698
3625 * Fix wrong variable substitution in lt (Lithuanian) debconf
3626 translation. Thanks to Davide Viti and Gintautas Miliauskas. (mh)
3627 Closes: #342242
3628 * Fix typo in exim.8 man page. Thanks to A Costa. (mh) Closes: #338579
3629 * Honor dpkg-statoverride entries for run-time data in /var.
3630 Thanks to Peter Mottram. (mh) Closes: #269448
3631
3632 -- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 15 Jan 2006 00:23:47 +0000
3633
3634exim4 (4.60-2) unstable; urgency=low
3635
3636 * Add, but not enable, 37_dns_disable_additional_section.dpatch,
3637 which might be a possible fix for #342619
3638 * conf.d/auth/30_exim4-config_examples: add hint to adapt public_name
3639 string in support_broken_outlook_express_4_server authenticator if
3640 other authencators than LOGIN and PLAIN are offered.
3641 * Fix missing special characters in some debconf translations.
3642 Thanks to Davide Viti. (mh) Closes: #341442
3643 * Fix broken README reference in system_aliases router docs. (mh)
3644 * remove references to alias files from the address_pipe transport. (mh)
3645 * remove "Some-State" default from exim-gencert. (mh)
3646 * Clarify split vs unsplit config in README.Debian. Thanks to Faheem
3647 Mitha and Ross Boylan for helping. (mh)
3648 * Update Build-Depends to libmysqlclient15-dev. (mh) Closes: #343767
3649 * Fix wrong header in conf.d/routers/300_exim4-config_real_local.
3650 Thanks to Ross Boylan for spotting this. (mh)
3651 * Document headers_rewrite, return_path and dc_mailname_in_oh in
3652 update-exim4.conf man page. (mh) Closes: #332520, #342233
3653 * Re-Instate debian/patches/31_eximmanpage which was erroneously
3654 removed in 4.60-1, we have local Debian patches in here. Thanks to
3655 Ross Boylan for spotting this. (mh) Closes: #330967
3656 * Mention relay permission from localhost in update-exim4.conf(8). (mh)
3657 * Add more prose to relay control configuration. (mh)
3658 * Update Greek debconf translation (Thanks, Kostas Papadimas) (am)
3659 Closes: #344576
3660 * Add cross-reference to README.Debian to better find macro docs.
3661 Thanks to Shyamal Prasad. (mh) Closes: #329988
3662 * Fix incorrect variable substitution in pt_BR debconf translation. (Thanks,
3663 Felipe Augusto van de Wiel) (am) Closes: #345363
3664 * [exim4-config.templates, po/*po] Replace reference to README.SMTP-AUTH
3665 with one to its replacement README.Debian.html. (am) Closes: #344826
3666 * Re-work long package descriptions. Move reference to README.Debian in
3667 front, add hint to dpkg-reconfigure exim4-config, complete stub
3668 sentences, remove non-referenced acronym MTA from the long
3669 descriptions, move explanation what exim is to the very front.
3670 * README.Debian: Add section about changing the configuration,
3671 explain structure of conf.d and .conf.template, add hint that the SMTP
3672 AUTH examples are documented.
3673 * Introduce MAIN_TLS_CERTKEY to allow for single-file certificate/key
3674 storage. Thanks to John Goerzen. (mh) Closes: #315126
3675 * Mention entropy issue in README.Debian.
3676 * Ship symlink to /usr/sbin/exim, see NEWS.Debian. (mh) Closes: 319316
3677 * use dh_installinit -n instead of --noscripts to work around #347577. (mh)
3678 * use dh_installinit --name instead of --init-script, rename init
3679 script. (mh)
3680 * move man pages from daemon packages to exim4-base, add lintian
3681 and linda overrides to allow daemon packages not to contain man pages.
3682
3683 -- Marc Haber <mh+debian-packages@zugschlus.de> Thu, 12 Jan 2006 12:36:50 +0000
3684
3685exim4 (4.60-1) unstable; urgency=low
3686
3687 * new upstream version 4.60
3688 * assign value to UE4CC after command line processing. Only have
3689 ue4c throw an error on not-existing UPEX4C_confd if split config is
3690 seleted. Thanks to Ted Percival. (mh) Closes: #337229
3691 * A number of man page fixes. Thanks to A Costa. (mh)
3692 Closes: #338580, #338581, #338582, #338583, #338584
3693 * Pull spool dir path from exim -bP instead of hard-coding it in
3694 daily cron job and exim4_refresh_gnutls-params.
3695 Thanks to Alex Hermann. (mh) Closes: 340002
3696 * Corrected zh_CN translation by Ming Hua. (am) Closes: #338928
3697 * Corrected pl translation by Jacek Politowski. (am) Closes: #339671
3698 * Change README.Debian to clarify the exim as a client only uses
3699 STARTTLS and not TLS on connect. Thanks to Rob Brenart and Marc
3700 Sherman for pointing that out on exim-users.
3701 * Clarify passwd.client format. Thanks to Osamu Aoki for providing a
3702 good starting point in #244724, which is unfortunately not fixed just
3703 now.
3704 * remove patch 31_eximmanpage, fixes are included upstream.
3705
3706 -- Marc Haber <mh+debian-packages@zugschlus.de> Mon, 28 Nov 2005 18:16:12 +0000
3707
3708exim4 (4.54-2) unstable; urgency=low
3709
3710 * debian/README.Debian* merged into one xml-file. Binary packages ship both
3711 a html (generated by xsltproc) and plain-text version (lynx +
3712 post processing) of the file. (Hilko Bengen)
3713 * Switch to libmysqlclient14.
3714 * Fix two typos in French debconf templates.
3715 Thanks to Christian Perrier. (mh)
3716 * Replace broken courier auth example with one that actually denies
3717 access if a wrong password is given. Thanks to Peter Thomassen for
3718 carrying that report from some colorful web forum to the people who
3719 can fix it after like four months. (mh) Closes: #336979
3720 * Fix minor typos in README.Debian.xml and changelog. (mh)
3721 * Add 255.255.255.255 to ignore_target_hosts in dnslookup. (mh)
3722
3723 -- Marc Haber <mh+debian-packages@zugschlus.de> Wed, 2 Nov 2005 19:40:22 +0000
3724
3725exim4 (4.54-1) unstable; urgency=low
3726
3727 * new upstream version 4.54. (mh)
3728 * fix typo in router/real_local header
3729 * add same_domain_copy_routing to router/hubbed_hosts
3730 * [update-exim4.conf.8] false friend: s/sensible/sensitive/.
3731 Thanks to Ross Boylan. (am) Closes: #330975
3732 * modify broken outlook express 4 authenticator so that it only
3733 advertises on encrypted connections, as the other plaintext
3734 authenticators do. Thanks again, Fred Viles. (mh)
3735 * update-exim4.conf.8: alphabetically sort REPLACEMENT PATTERNS and
3736 CONFIGURATION VARIABLES sections, add documentation for
3737 DEBCONFlocal_domainsDEBCONF.
3738 Thanks to Ross Boylan. (mh) Closes: #330980
3739 * fix bashism == in init script. Thanks to Adam D. Barratt and
3740 Justin Pryzby. (mh) Closes: #331299
3741
3742 -- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 4 Oct 2005 09:59:24 +0000
3743
3744exim4 (4.53-1) unstable; urgency=low
3745
3746 * new upstream version 4.53. (mh)
3747 * Fix obviously unfinished sentence in update-exim4.conf.8
3748 documenting dc_local_interfaces. (mh)
3749 * Move SMTP authentication docs to README.Debian. (mh)
3750 * Adapt reportbug script to be useable from the command line as well,
3751 mention this in README.Debian mailing list paragraph. (mh)
3752 * Remove /etc/default/exim4 in exim4-config's postrm instead of exim4-base's
3753 one, as it is created in exim4-config's postinst. (am) Closes: #325901
3754 * Fix error in README.Debian.xinetd.
3755 Thanks to Diego Biurrun. (mh) Closes: #327847
3756 * Fix substitute variable in Japanese (ja) debconf translation.
3757 Thanks to Kenshi Muto. (mh) Closes: #329729
3758 * Add lintian override for maintainer-script-needs-depends-on-netbase. We
3759 don't need that depends since update-inetd.conf is checked for presence
3760 before invocation and that invocation is only optional cleanup. (mh)
3761 * add linda override to kill double shlib warning - libgnutls is
3762 fully versioned and thus is not a problem. (mh)
3763 * add lintian override to kill bashism "local" warning for
3764 exim4-config.config and exim4-config.postinst (see #330548). (mh)
3765 * add general package blurb to description of the exim4 meta package
3766 as well. Thanks to Marc Sherman for pointing this out. (mh)
3767 * remove code to escape dashes in the pod2man generated man pages.
3768 That code makes the man pages syntactically invalid, we'd rather
3769 live with suboptimal rendering (which is a pod2man bug anyway). (mh)
3770 * change spacing for rewrite rules in configuration, man page and
3771 ue4.conf to ease paragraph filling for the man page. (mh)
3772 * re-pack config patches. (mh)
3773
3774 -- Marc Haber <mh+debian-packages@zugschlus.de> Wed, 28 Sep 2005 18:34:51 +0000
3775
3776exim4 (4.52-2) unstable; urgency=low
3777
3778 * unpack/pack configs to get clear EDITME patches (mh)
3779 * Update ca (Catalan) translation.
3780 Thanks to Aleix Badia i Bosch. (mh) Closes: #317429
3781 * Update mk (Macedonian) translation.
3782 Thanks to Georgi Stanojevski. (mh) Closes: #320231
3783 * Use certtool from gnutls-bin in cron.daily to re-generate gnutls-params
3784 instead of only removing the file and letting exim4 re-generate it at SMTP
3785 time after receiving STARTTLS. The maximum runtime of certtool is limited
3786 to 2*1800 seconds per default by using timeout.pl by Piotr Roszatycki
3787 (checked and beautified by Marc 'HE' Brockschmidt). Add gnutls-bin to
3788 exim4-base' Suggests. (am) Closes: #285371
3789 * Build-Depend on libgnutls-dev (from gnutls12) instead of libgnutls11.
3790 * Drop compability with debhelper in woody (am):
3791 - mv *.templates.master *.templates
3792 - update po/POTFILES.in accordingly.
3793 - no more manual invocation of po2debconf in debian/rules
3794 - use dh_installppp instead of manual dh_installdirs/dh_install.
3795 Closes: #212893
3796 - Build-Depends: debhelper (>= 4.1.68)
3797 * drop upgly passwd dependency introduced in 4.30-6. (am)
3798 * shorten Build-Depends by replacing "libxfoo-dev|xlibs-dev' with just
3799 'libxfoo-dev'. (am)
3800 * Do not try to authenticate to smarthost if smarthost offers AUTH LOGIN but
3801 passwd.client does not contain a matching entry. (am) Closes: #323565
3802
3803 -- Andreas Metzler <ametzler@debian.org> Sun, 21 Aug 2005 11:44:27 +0200
3804
3805exim4 (4.52-1) unstable; urgency=low
3806
3807 * new upstream version 4.51. (mh)
3808 * adapt 70_remove_exim-users_references
3809 * remove 37_gnutlsparams
3810 * adapt 36_pcre
3811 * adapt 31_eximmanpage
3812 * fix package priorities to have them in sync with override again. (mh)
3813 * Fix error in nb (Norwegian) translation.
3814 Thanks to Helge Hafting. (mh). Closes: #315775
3815 * Standards-Version: 3.6.2, no changes needed. (mh)
3816
3817 -- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 2 Jul 2005 06:08:34 +0000
3818
3819exim4 (4.51-2) unstable; urgency=low
3820
3821 * Fix typo in exiwhat.8. (am) Closes: #313246
3822 * Clarify tls_verify_certificates documentation in
3823 conf.d/main/03_exim4-config_tlsoptions. Thanks to Wenzhuo Zhang. (mh)
3824 * Accept postmaster liberally for relay_to_domains. Thanks to
3825 Roderick Schertler. (mh) Closes: #313023
3826 * Improve update-exim4.conf's internal run-parts to warn about ignored files
3827 if running in verbose-mode. (am) Closes: #315656
3828 * Make it possible to purge a previously uninstalled exim4-suite if debconf
3829 has between removed since. (am) Closes: #315173
3830 - Stop useless sourcing of confmodule in exim4-config.postrm.
3831 - Use debconf to ask about trashing the mailqueue if debconf is available,
3832 keep the queue otherwise.
3833 * exim failed to setup gnutls parameters if the gnutls-param file was
3834 missing. This caused TLS breakage. (am) Closes: #315650
3835
3836 -- Andreas Metzler <ametzler@debian.org> Tue, 28 Jun 2005 19:35:35 +0200
3837
3838exim4 (4.51-1) unstable; urgency=low
3839
3840 * new upstream version 4.51. (mh)
3841 * remove 80_upstream_fix-296492
3842 * remove 81_fix-kfreebsd-gnu
3843 * remove 82_upstream_fix-299733
3844 * remove 82_upstream_fix_299743
3845 * remove 83_upstream_fix-strangelog
3846 * build-depends: replace postgresql-dev with libpq-dev. (mh)
3847 * apply patch to EDITME.exim4-heavy.diff from ubuntu for clearer
3848 postgresql build. (mh)
3849 * fix wrong dc_other_hostnames statement in manpage. Thanks to
3850 Daniel Hermann. (mh) Closes: #311023
3851 * give more directions how to use /etc/exim4/exim4.conf. (mh)
3852 * Fix duplicated server_advertise_condition line in
3853 login_saslauth_server. Thanks to Rich Aycock. (mh) Closes: #311906
3854 * Conditional restarting the daemon in exim4-config.config now checks for
3855 DEBCONF_RECONFIGURE=1 instead of (mis)using an internal
3856 debconf-template. (am)
3857 * Documentation Improvements for update-exim4.conf.8, exim4.conf.template
3858 and 01_exim4-config_listmacrosdefs and README.Debian.
3859 Thanks to Ross Boylan. (am/mh)
3860 * New translation: et (Estonian) by Siim Põder. (mh) Closes: #312474
3861
3862 -- Marc Haber <mh+debian-packages@zugschlus.de> Fri, 10 Jun 2005 18:57:03 +0000
3863
3864exim4 (4.50-8) unstable; urgency=low
3865
3866 * integrate TLS docs in README.Debian, remove README.TLS.
3867 Thanks to Sam Morris. (mh) Closes: #310771
3868
3869 -- Marc Haber <mh+debian-packages@zugschlus.de> Fri, 27 May 2005 07:57:14 +0000
3870
3871exim4 (4.50-7) unstable; urgency=low
3872
3873 * Documentation Only Fixes
3874 - Fix grammar error in README.system_aliases. Thanks to Andreas
3875 Barth on IRC. (mh)
3876 - Optimize unencrypted authentication docs. Thanks to Drew Parsons.
3877 (mh) Closes: #305443
3878 - Clarify dc_smarthost host list processing in update-exim4.conf.8.
3879 (mh) Closes: #307370
3880 - Clarify split-config description in README.Debian.
3881 Thanks to Luc Saffre. (mh)
3882 - Fix a typo in README.Debian-accountname, thanks to Brett Parker. (mh)
3883 - Fix an issue in the exim manpage creating the illusion that
3884 whitespace is allowed between -d and its options.
3885 Thanks to Greg Kochanski. (mh) Closes: #309174
3886 - Start re-work of README.Debian FAQ.
3887 - Add "should -config depend on -base" question to README.Debian FAQ.
3888 - Link README.Debian to -daemon-light and -daemon-heavy, include a
3889 copy of README.Debian in -config.
3890 Thanks to Daniel Maier. (mh) Closes: #310118
3891 * Translations
3892 - Update: cy (Welsh) by Dafydd Harries. (mh) Closes: #306349
3893 - New: vi (Vietnamese) by Clytie Siddall. (mh) Closes: #306613
3894 - Fix typos in pt.po (Thanks, Miguel Figueire) (am) Closes: #310057
3895 * Configuration Clarification
3896 - move the regexps in the local part checks to macros, adapt docs.
3897 Thanks to Adam M. Costello. (mh) Closes: #306094
3898 * Bug Fixes
3899 - preserve escape sequences like '\\N' in
3900 /etc/exim4/update-exim4.conf.conf:
3901 - use awk instead of sed in exim4-config.postinst (Thanks, Barry Kitson).
3902 - use printf '%s\n' "$foo" instead of echo "$foo". (echo in dash would
3903 swallow the second backslash)
3904 - actually making this work requires changes in debconf, too,
3905 see #306134.
3906 - (Closes: #305957) (am)
3907 - apply upstream patch from
3908 http://www.exim.org/mail-archives/exim-users/Week-of-Mon-20050425/msg00035.html
3909 in some circumstances, exim writes parts of /etc/passwd and/or
3910 /etc/group to the reject log. This scares people. (mh)
3911 - apply upstream patch from
3912 http://www.exim.org/mail-archives/exim-dev/2005-April/msg00012.html to
3913 only try SASL mechanisms that are actually specified in the
3914 configurations. Thanks to Juergen Kreileder. (mh) Closes: #299743
3915 - Build against libmysqlclient12-dev instead of libmysqlclient10-dev.
3916 (am) Closes: #306970
3917 - As "mail sent by smarthost; no local mail" aka satellite requires setting
3918 dc_readhost always ask this question. (am) Closes: #304838
3919 - Make nonsplit-config read /etc/exim4/exim4.conf.localmacros before
3920 /etc/exim4/exim4.conf.template to allow macros here as well. (mh)
3921 - Make it clear that "broken debconf" warning is issued by
3922 exim4-config.postinst
3923 - Make sure that "generated, do not touch" disclaimer in
3924 /var/lib/exim4/config.autogenerated always appears
3925 - [exim4-config] As the.config script stores answers in debconf's db and the
3926 postinst actually generates configurations files from these values
3927 restarting the daemon on dpkg-reconfigure has to be done in postinst. (am)
3928 Closes: #310703
3929
3930 -- Marc Haber <mh+debian-packages@zugschlus.de> Thu, 26 May 2005 17:47:24 +0000
3931
3932exim4 (4.50-6) unstable; urgency=low
3933
3934 * fix some errors in update-exim4.conf(8) manpage. (am)
3935 * more macros in config. (mh)
3936 * Apply upstream fix: $primary_hostname is now expanded in
3937 cyrus_sasl authenticator. Thanks to Juergen Kreileder, and of
3938 course Philip Hazel. (mh) Closes: 299733
3939 * fix conftype none missing "| \" bug, again. Thanks to Andrew Nimmo
3940 and Gabriel L. Briones III. (mh) Closes: 303351.
3941 * The upstream fix for #296492 sometimes causes an endless loop. Update
3942 patch with correction from Philip's commit, revision 1.10. (mh)
3943 * Document real_local router. (mh)
3944 * Add instructions about how to use inetd. Thanks to Ryan Underwood.
3945 (mh) Closes: #304436
3946 * Fix wrong file header in 100_exim4-config_domain_literal. (mh)
3947 * Fix bad english in 01_exim4-config_listmacrosdefs. (mh)
3948 * conf.d/main/02_exim4-config_options: Remove macro effort for options
3949 that we leave at their default by default anyway, re-commenting them
3950 for reference. (am)
3951 * Allow cleartext client AUTH PLAIN and AUTH LOGIN by setting a
3952 macro. (mh)
3953 * Update information in README.SMTP-AUTH. (mh)
3954
3955 -- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 17 Apr 2005 19:10:26 +0000
3956
3957exim4 (4.50-5) unstable; urgency=low
3958
3959 * move exim4-config-simple and exim4-config-medium from the main
3960 source package to keep them from being released.
3961 * document the fact that the check done by update-exim4.conf does
3962 not detect all possible errors and fails with errors that are inside
3963 expanded items in the config file. Thanks to Marc Sherman.
3964 (mh) Closes: 286721
3965 * Add examples for cyrus_sasl to conf.d/auth/30_exim4-config_examples.
3966 Thanks to Juergen Kreileder. (mh) Closes: #299732
3967 * remove --dry-run from 10_daemon_close_fds.dpatch so that failures
3968 to patch cause failure. Thanks to Gergely Nagy, and apologies for
3969 blaming it on dpatch (see #297670). (mh)
3970 * remove ACL example file, incorporate DNSBL examples (without
3971 actual DNSBL domains) into main config. The example file hasn't been
3972 updated in ages, and the main config file has become quite
3973 sophisticated by itself. (mh)
3974 * add example authenticators for courier authdaemon. (mh)
3975 * have exim4-base recommend psmisc. Thanks to Thiemo Seufer.