exim.git
12 months agoSPF: harden against crafted DNS responses
Jeremy Harris [Tue, 10 Oct 2023 11:45:27 +0000 (12:45 +0100)]
SPF: harden against crafted DNS responses

(cherry picked from commit 4f07f38374f8662c318699fb30432273ffcfe0d3)

12 months agofix: proxy-protocol (CVE-2023-41227) Bug 3031
Heiko Schlittermann (HS12-RIPE) [Sat, 14 Oct 2023 21:33:07 +0000 (23:33 +0200)]
fix: proxy-protocol (CVE-2023-41227) Bug 3031

* fix-CVE-2023-42117:
  fix: string_is_ip_address (CVE-2023-42117) (closes 3031)
  Testsuite: Add testcases for string_is_ip_address (CVE-2023-42117)

12 months agofix: string_is_ip_address (CVE-2023-42117) Bug 3031
Heiko Schlittermann (HS12-RIPE) [Thu, 5 Oct 2023 20:49:57 +0000 (22:49 +0200)]
fix: string_is_ip_address (CVE-2023-42117) Bug 3031

12 months agoTestsuite: Add testcases for string_is_ip_address (CVE-2023-42117)
Heiko Schlittermann (HS12-RIPE) [Sat, 7 Oct 2023 11:07:59 +0000 (13:07 +0200)]
Testsuite: Add testcases for string_is_ip_address (CVE-2023-42117)

12 months agoHandle error on close of spool data file
Jeremy Harris [Sat, 14 Oct 2023 21:29:08 +0000 (22:29 +0100)]
Handle error on close of spool data file

12 months agoTidying: readability defines
Jeremy Harris [Sat, 14 Oct 2023 21:27:41 +0000 (22:27 +0100)]
Tidying: readability defines

12 months agoTestsuite: output changes resulting
Jeremy Harris [Sat, 14 Oct 2023 21:26:50 +0000 (22:26 +0100)]
Testsuite: output changes resulting

Broken-by: 06175ac09a1e
12 months agoSPF: harden against crafted DNS responses
Jeremy Harris [Tue, 10 Oct 2023 11:45:27 +0000 (12:45 +0100)]
SPF: harden against crafted DNS responses

12 months agoFix crash in SPF DNS usage
Simon Arlott [Tue, 10 Oct 2023 11:31:58 +0000 (12:31 +0100)]
Fix crash in SPF DNS usage

Broken-by: 8ab9474f0355
12 months agoTestsuite: retire perl smartmatch use exim-4.97-RC2
Bernard Quatermass [Thu, 5 Oct 2023 20:35:12 +0000 (21:35 +0100)]
Testsuite: retire perl smartmatch use

Recent perl versions whine that smartmatch is deprecated

12 months agoSPF: fix looking at RRs when dns lookup does not return success
Jeremy Harris [Thu, 5 Oct 2023 16:43:45 +0000 (17:43 +0100)]
SPF: fix looking at RRs when dns lookup does not return success

12 months agoDocs: Fix variable name,. Bug 3034
Jeremy Harris [Thu, 5 Oct 2023 12:25:01 +0000 (13:25 +0100)]
Docs: Fix variable name,.  Bug 3034

Broken-by: 8c226c7c8917
12 months agodoc: markup improvement for tcp:connect (closes 3034)
Heiko Schlittermann (HS12-RIPE) [Tue, 3 Oct 2023 22:33:22 +0000 (00:33 +0200)]
doc: markup improvement for tcp:connect (closes 3034)

suggested by: u34@net9.cf

12 months agomailmap: real name for bes-internal
Heiko Schlittermann (HS12-RIPE) [Tue, 3 Oct 2023 22:17:47 +0000 (00:17 +0200)]
mailmap: real name for bes-internal

12 months agofix spec typo
Vladimir Varlamov [Tue, 3 Oct 2023 22:15:09 +0000 (00:15 +0200)]
fix spec typo

13 months agoMerge branch 'exim-4.96+security'
Jeremy Harris [Mon, 2 Oct 2023 12:24:29 +0000 (13:24 +0100)]
Merge branch 'exim-4.96+security'

13 months agoDebug: more detail for ${reduce...} ${map...} ${filter...}
Jeremy Harris [Tue, 12 Sep 2023 19:52:35 +0000 (20:52 +0100)]
Debug: more detail for ${reduce...} ${map...} ${filter...}

13 months agoupdate Changelog about security fixes exim-4.96.1
Heiko Schlittermann (HS12-RIPE) [Sat, 30 Sep 2023 20:52:59 +0000 (22:52 +0200)]
update Changelog about security fixes

13 months agoAuths: fix possible OOB read in SPA authenticator. Bug 3001
Jeremy Harris [Thu, 11 May 2023 20:08:08 +0000 (21:08 +0100)]
Auths: fix possible OOB read in SPA authenticator.  Bug 3001

(cherry picked from commit 04107e98d58efb69f7e2d7b81176e5374c7098a3)

13 months agoAuths: fix possible OOB write in SPA authenticator. Bug 3000
Jeremy Harris [Thu, 11 May 2023 18:31:54 +0000 (19:31 +0100)]
Auths: fix possible OOB write in SPA authenticator.  Bug 3000

(cherry picked from commit e17b8b0f19b25a223b0cc41933b881c3a1073e61)

13 months agoAuths: use uschar more in spa authenticator
Jeremy Harris [Thu, 11 May 2023 17:53:25 +0000 (18:53 +0100)]
Auths: use uschar more in spa authenticator

(cherry picked from commit 0519dcfb5f149154a416b54865fd8026abb57791)

13 months agoAuths: fix possible OOB write in external authenticator. Bug 2999
Jeremy Harris [Thu, 11 May 2023 17:02:43 +0000 (18:02 +0100)]
Auths: fix possible OOB write in external authenticator.  Bug 2999

(cherry picked from commit 7bb5bc2c6592e062bf0b514cc71afd2d93e2e0dd)

13 months agoDocs: tidying
Hendrik Jäger [Fri, 29 Sep 2023 12:47:36 +0000 (13:47 +0100)]
Docs: tidying

13 months agoTestsute: output changes resulting
Jeremy Harris [Wed, 27 Sep 2023 09:44:10 +0000 (10:44 +0100)]
Testsute: output changes resulting

Broken-by: 06175ac09a1e
13 months agoDKIM: support list-version of $dkim_verify_status, and data ACL
Jeremy Harris [Mon, 25 Sep 2023 08:48:00 +0000 (09:48 +0100)]
DKIM: support list-version of $dkim_verify_status, and data ACL

13 months agotypo
Kurt Jaeger [Tue, 26 Sep 2023 20:13:39 +0000 (21:13 +0100)]
typo

13 months agoDocs: more detail for DKIM exim-4.97-RC1
Jeremy Harris [Tue, 26 Sep 2023 17:07:58 +0000 (18:07 +0100)]
Docs: more detail for DKIM

13 months agoTestsuite: munge for EXPERIMENTAL_DSN_INFO
Jeremy Harris [Sun, 24 Sep 2023 20:05:44 +0000 (21:05 +0100)]
Testsuite: munge for EXPERIMENTAL_DSN_INFO

Broken-by: e2fe20104068
13 months agomore detail in error messages
Jeremy Harris [Sun, 24 Sep 2023 19:50:26 +0000 (20:50 +0100)]
more detail in error messages

13 months agoTestsuite: use actual hostname in SRS testcase
Jeremy Harris [Sun, 24 Sep 2023 18:41:05 +0000 (19:41 +0100)]
Testsuite: use actual hostname in SRS testcase

13 months agoDocs: inbound_srs behavior for empty secret. Bug 3025
Dean Brooks [Sun, 24 Sep 2023 18:24:38 +0000 (19:24 +0100)]
Docs: inbound_srs behavior for empty secret.  Bug 3025

Additional docs commentary and code-tidying by committer

13 months agoDocs: remove claim that -Mg causes specific wording in bounce. Bug 3026
Jeremy Harris [Sun, 24 Sep 2023 16:02:52 +0000 (17:02 +0100)]
Docs: remove claim that -Mg causes specific wording in bounce.  Bug 3026

While investigating, ensure EXPERIMENTAL_DSN_INFO matches

13 months agoDocs: note that the match_ip condition sets $value
Jeremy Harris [Thu, 14 Sep 2023 17:46:15 +0000 (18:46 +0100)]
Docs: note that the match_ip condition sets $value

13 months agoFix ${tr...} and empty-strings. Bug 3023
Jeremy Harris [Mon, 11 Sep 2023 14:50:35 +0000 (15:50 +0100)]
Fix ${tr...} and empty-strings.  Bug 3023

13 months agotypo
Andreas Metzler [Sun, 10 Sep 2023 15:50:36 +0000 (16:50 +0100)]
typo

13 months agoFeature advertisements for radius and pwcheck
Jeremy Harris [Sun, 10 Sep 2023 09:06:56 +0000 (10:06 +0100)]
Feature advertisements for radius and pwcheck

13 months agoTestsuite: (Build) bring the autconf path up to current
Jeremy Harris [Fri, 8 Sep 2023 10:40:55 +0000 (11:40 +0100)]
Testsuite: (Build) bring the autconf path up to current

13 months agoTestsuite: add command cat2
Jeremy Harris [Fri, 8 Sep 2023 08:59:52 +0000 (09:59 +0100)]
Testsuite: add command cat2

The /dev/stderr trick manages to fail on Gnu HURD

13 months agotidying exim-4.97-RC0
Jeremy Harris [Thu, 7 Sep 2023 21:02:59 +0000 (22:02 +0100)]
tidying

13 months agoTestsuite: output changes resulting
Jeremy Harris [Thu, 7 Sep 2023 18:33:07 +0000 (19:33 +0100)]
Testsuite: output changes resulting

Broken-by: 7616c28d51aa
13 months agoDocs: example complex expansion for router domains condition
Jeremy Harris [Thu, 7 Sep 2023 15:40:39 +0000 (16:40 +0100)]
Docs: example complex expansion for router domains condition

13 months agoDocs: typo in comment in example config. Bug 3022
u34 [Thu, 7 Sep 2023 15:14:55 +0000 (16:14 +0100)]
Docs: typo in comment in example config.  Bug 3022

13 months agoBuild: check during make for perl script library requirements
Jeremy Harris [Thu, 7 Sep 2023 15:02:03 +0000 (16:02 +0100)]
Build: check during make for perl script library requirements

13 months agoTestsuite: munge for FreeBSD
Jeremy Harris [Wed, 6 Sep 2023 15:10:58 +0000 (16:10 +0100)]
Testsuite: munge for FreeBSD

13 months agoTestsuite: typo
Jeremy Harris [Wed, 6 Sep 2023 12:44:24 +0000 (13:44 +0100)]
Testsuite: typo

13 months agoTestsuite: unbreak use of explicit stderr on BSDs, redux
Jeremy Harris [Wed, 6 Sep 2023 08:55:30 +0000 (09:55 +0100)]
Testsuite: unbreak use of explicit stderr on BSDs, redux

13 months agoTestsuite: unbreak use of explicit stderr on BSDs
Jeremy Harris [Tue, 5 Sep 2023 20:46:17 +0000 (21:46 +0100)]
Testsuite: unbreak use of explicit stderr on BSDs

Broken-by: 09b9a4dfe0e5
13 months agoTestsuite: support "anything but" returncode script lines
Jeremy Harris [Tue, 5 Sep 2023 13:01:10 +0000 (14:01 +0100)]
Testsuite: support "anything but" returncode script lines

13 months agoTestsuite: try workaround for missing /dev/stderr symlink on Alpine
Jeremy Harris [Mon, 4 Sep 2023 09:47:35 +0000 (10:47 +0100)]
Testsuite: try workaround for missing /dev/stderr symlink on Alpine

13 months agoTestsuite: more munging for Alpine Linux
Jeremy Harris [Sun, 3 Sep 2023 14:48:54 +0000 (15:48 +0100)]
Testsuite: more munging for Alpine Linux

13 months agoTestsuite: add stderr file for one testcase.
Jeremy Harris [Sun, 3 Sep 2023 14:47:22 +0000 (15:47 +0100)]
Testsuite: add stderr file for one testcase.
THis is just so that perl "die" is visible from buildfarm animals.

13 months agoTestsuite: hunt harder for more DB utility binaries
Jeremy Harris [Sun, 3 Sep 2023 13:56:56 +0000 (14:56 +0100)]
Testsuite: hunt harder for more DB utility binaries

13 months agoDocs: typo. Bug 3019
Jeremy Harris [Sun, 3 Sep 2023 12:50:04 +0000 (13:50 +0100)]
Docs: typo.  Bug 3019

See also 578c0ad36e07

14 months agoTaint: track SASL auth intermediate inputs
Jeremy Harris [Fri, 1 Sep 2023 10:44:32 +0000 (11:44 +0100)]
Taint: track SASL auth intermediate inputs

14 months agoTestsuite: munging for Alpine Linux
Jeremy Harris [Thu, 31 Aug 2023 19:11:48 +0000 (20:11 +0100)]
Testsuite: munging for Alpine Linux

14 months agoTaint: de-taint $2 (fixed part of key) from a matching partial-search
Jeremy Harris [Thu, 31 Aug 2023 18:06:05 +0000 (19:06 +0100)]
Taint: de-taint $2 (fixed part of key) from a matching partial-search

14 months agoAvoid sending DSN when message was accepted under fakereject or fakedefer. Bug 3016
Jeremy Harris [Thu, 31 Aug 2023 14:16:09 +0000 (15:16 +0100)]
Avoid sending DSN when message was accepted under fakereject or fakedefer.  Bug 3016

14 months agoDocs: typoes
u34 [Tue, 29 Aug 2023 18:15:09 +0000 (19:15 +0100)]
Docs: typoes

14 months agoDocs: tweak description of message-id. Bug 3020
Arkadiusz Miśkiewicz [Tue, 29 Aug 2023 18:05:44 +0000 (19:05 +0100)]
Docs: tweak description of message-id.  Bug 3020

14 months agoDMARC: add ARC info to history records
Jeremy Harris [Thu, 24 Aug 2023 19:22:43 +0000 (20:22 +0100)]
DMARC: add ARC info to history records

14 months agoRe-fix live variable $value free. The inital fix resulted in $value from ${run....
Jeremy Harris [Thu, 24 Aug 2023 14:51:21 +0000 (15:51 +0100)]
Re-fix live variable $value free.  The inital fix resulted in $value from ${run...} not
being available later, which is a documented feature.

Broken=by: cf3fecb9e873

14 months agoRevert "Fix free of $value after ${run...}"
Jeremy Harris [Thu, 24 Aug 2023 14:44:31 +0000 (15:44 +0100)]
Revert "Fix free of $value after ${run...}"

This reverts commit cf3fecb9e873df38a9245775a3887e73a8716083.

14 months agotidying: specified-initializers
Jeremy Harris [Tue, 22 Aug 2023 14:26:04 +0000 (15:26 +0100)]
tidying: specified-initializers

14 months agotidying
Jeremy Harris [Thu, 17 Aug 2023 16:02:18 +0000 (17:02 +0100)]
tidying

14 months agoDMARC: for version 1.4.x libraries, add selector to dkim lines in history file
Victor Ustugov [Sat, 19 Aug 2023 22:08:58 +0000 (23:08 +0100)]
DMARC: for version 1.4.x libraries, add selector to dkim lines in history file

14 months ago Testsuite: add with-dkim case to DMARC testcase
Jeremy Harris [Sun, 20 Aug 2023 12:12:26 +0000 (13:12 +0100)]
Testsuite: add with-dkim case to DMARC testcase

14 months agoDMARC: write history file even under testsuite
Jeremy Harris [Sat, 19 Aug 2023 21:52:27 +0000 (22:52 +0100)]
DMARC: write history file even under testsuite

14 months agoTestsuite: DMARC history-file
Jeremy Harris [Sat, 19 Aug 2023 21:37:25 +0000 (22:37 +0100)]
Testsuite: DMARC history-file

14 months agoTestsuite: tweak domain in DKIM testcase
Jeremy Harris [Sun, 20 Aug 2023 11:42:21 +0000 (12:42 +0100)]
Testsuite: tweak domain in DKIM testcase

14 months agoDocs: add note for experimental LIMITS extension
Jeremy Harris [Fri, 4 Aug 2023 20:33:12 +0000 (21:33 +0100)]
Docs: add note for experimental LIMITS extension

14 months agoGnuTLS: fix autogen cert expiry date. Bug 3014
Andreas Metzler [Mon, 14 Aug 2023 16:27:16 +0000 (17:27 +0100)]
GnuTLS: fix autogen cert expiry date.  Bug 3014

Broken-by: 48e9099006
14 months agoDocs: combine option definitions
Jeremy Harris [Sat, 4 Jun 2022 21:02:40 +0000 (22:02 +0100)]
Docs: combine option definitions

14 months agoMake printf of gstring null-safe
Jeremy Harris [Fri, 11 Aug 2023 12:24:57 +0000 (13:24 +0100)]
Make printf of gstring null-safe

Broken-by: 00392be0e7cf
14 months agotypoes
Jeremy Harris [Wed, 9 Aug 2023 13:43:34 +0000 (14:43 +0100)]
typoes

Broken-by: 3b6774c818ba
14 months agotypoes
Jeremy Harris [Wed, 9 Aug 2023 13:03:38 +0000 (14:03 +0100)]
typoes

Briken-by: 3b6774c818ba
14 months agoUnbreak FreeBSD buld
Jeremy Harris [Wed, 9 Aug 2023 12:08:50 +0000 (13:08 +0100)]
Unbreak FreeBSD buld

Broken-by: 4e871f9b28df
14 months agoTestsuite: support TLS cross-library testing
Jeremy Harris [Fri, 20 Jan 2023 17:41:14 +0000 (17:41 +0000)]
Testsuite: support TLS cross-library testing

14 months agoLogging: connection_id
Jeremy Harris [Tue, 8 Aug 2023 22:33:41 +0000 (23:33 +0100)]
Logging: connection_id

14 months agoNew $recipients_list. Bug 2726
Jeremy Harris [Sun, 6 Aug 2023 13:50:36 +0000 (14:50 +0100)]
New $recipients_list.  Bug 2726

14 months agoLogging: convert an internal element from static to allocated buffer
Jeremy Harris [Mon, 7 Aug 2023 14:51:38 +0000 (15:51 +0100)]
Logging: convert an internal element from static to allocated buffer

14 months agoFix $recipients expansion when used within ${run...}. Bug 3013
Jeremy Harris [Thu, 3 Aug 2023 17:40:42 +0000 (18:40 +0100)]
Fix $recipients expansion when used within ${run...}.  Bug 3013

Broken-by: cfe6acff2ddc
14 months agoFix free of $value after ${run...}
Jeremy Harris [Thu, 3 Aug 2023 17:34:06 +0000 (18:34 +0100)]
Fix free of $value after ${run...}

14 months agoTestsuite: testcase for 3013
Jeremy Harris [Thu, 3 Aug 2023 19:52:15 +0000 (20:52 +0100)]
Testsuite: testcase for 3013

14 months agoDocs: typoes
Jeremy Harris [Mon, 24 Jul 2023 20:01:22 +0000 (21:01 +0100)]
Docs: typoes

15 months agoFix DYNLOOKUP build for lsearch. Bug 3012
Jeremy Harris [Mon, 24 Jul 2023 14:05:35 +0000 (15:05 +0100)]
Fix DYNLOOKUP build for lsearch.  Bug 3012

15 months agoDocs: tidying
Jeremy Harris [Mon, 12 Jun 2023 19:53:15 +0000 (20:53 +0100)]
Docs: tidying

15 months agoGnuTLS: fix crash with "tls_dhparam = none"
Jeremy Harris [Mon, 24 Jul 2023 12:30:40 +0000 (13:30 +0100)]
GnuTLS: fix crash with "tls_dhparam = none"

15 months agoFix use of typedef for FreeBSD
Jeremy Harris [Sun, 23 Jul 2023 12:56:32 +0000 (13:56 +0100)]
Fix use of typedef for FreeBSD

Broken-by: 1209e3e19e29
15 months agoExpansions: disallow UTF-16 surrogates from ${utf8clean:...}. Bug 2998
Jasen Betts [Sun, 23 Jul 2023 12:43:59 +0000 (13:43 +0100)]
Expansions: disallow UTF-16 surrogates from ${utf8clean:...}.  Bug 2998

15 months agoDocs: another note on quoting data for lookups
Jeremy Harris [Fri, 21 Jul 2023 09:35:19 +0000 (10:35 +0100)]
Docs: another note on quoting data for lookups

15 months agoSieve filters: convert to gstring, massage coding style
Jeremy Harris [Sat, 15 Jul 2023 20:21:37 +0000 (21:21 +0100)]
Sieve filters: convert to gstring, massage coding style

15 months agoTestsuite: basic Sieve operations
Jeremy Harris [Sat, 15 Jul 2023 19:24:01 +0000 (20:24 +0100)]
Testsuite: basic Sieve operations

15 months agoDocs: update description of Sieve filter facilities
Jeremy Harris [Sat, 15 Jul 2023 17:13:42 +0000 (18:13 +0100)]
Docs: update description of Sieve filter facilities

15 months agoOpenSSL: add remote host info to log line for in-connection TLS error. Bug 3010
Jeremy Harris [Sat, 15 Jul 2023 15:12:58 +0000 (16:12 +0100)]
OpenSSL: add remote host info to log line for in-connection TLS error.  Bug 3010

15 months agoTestsuite: fix perl syntax. Bug 3009
Andrew Aitchison [Sun, 9 Jul 2023 21:27:32 +0000 (22:27 +0100)]
Testsuite: fix perl syntax.  Bug 3009

Broken-by: 46a36afae41f
15 months agoFix json extract for strings carrying commas. Bug 3006
Jeremy Harris [Sat, 8 Jul 2023 16:59:20 +0000 (17:59 +0100)]
Fix json extract for strings carrying commas.  Bug 3006

15 months agoSupport gring as a first-class conversion specifier in internal string-formatting
Jeremy Harris [Thu, 6 Jul 2023 23:40:43 +0000 (00:40 +0100)]
Support gring as a first-class conversion specifier in internal string-formatting

15 months agoExplicit log of failiing bind addr & port
Jeremy Harris [Thu, 6 Jul 2023 20:43:50 +0000 (21:43 +0100)]
Explicit log of failiing bind addr & port

15 months agoTestsuite: output changes resulting
Jeremy Harris [Thu, 6 Jul 2023 14:24:09 +0000 (15:24 +0100)]
Testsuite: output changes resulting

Broken-by: 46a36afae41f
15 months agoTestsuite: more munging for mailq output
Jeremy Harris [Wed, 5 Jul 2023 14:23:13 +0000 (15:23 +0100)]
Testsuite: more munging for mailq output