Auths: fix possible OOB write in SPA authenticator. Bug 3000

[exim.git] / doc / doc-txt / NewStuff

diff --git a/doc/doc-txt/NewStuff b/doc/doc-txt/NewStuff
index 6f3d4b31c3380c4ef208ecc702d840f51a1ca5cc..2986b2cdd9ccb7af902293067727eb74e6f99cad 100644 (file)
--- a/doc/doc-txt/NewStuff
+++ b/doc/doc-txt/NewStuff
@@ -6,6 +6,30 @@ Before a formal release, there may be quite a lot of detail so that people can
 test from the snapshots or the Git before the documentation is updated. Once
 the documentation is updated, this file is reduced to a short list.
 
 test from the snapshots or the Git before the documentation is updated. Once
 the documentation is updated, this file is reduced to a short list.
 

+Version 4.96
+------------
+
+ 1. A new ACL condition: seen. Records/tests a timestamp against a key.
+
+ 2. A variant of the "mask" expansion operator to give normalised IPv6.
+
+ 3. UTC output option for exim_dumpdb, exim_fixdb.
+
+ 4. An event for failing TLS connects to the daemon.
+
+ 5. The ACL "debug" control gains options "stop", "pretrigger" and "trigger".
+
+ 6. Query-style lookups are now checked for quoting, if the query string is
+    built using untrusted data ("tainted").  For now lack of quoting is merely
+    logged; a future release will upgrade this to an error.
+
+ 7. The expansion conditions match_<list-type> and inlist now set $value for
+    the expansion of the "true" result of the ${if}.  With a static list, this
+    can be used for de-tainting.
+
+ 8. Recipient verify callouts now set $domain_data & $local_part_data, with
+    de-tainted values.
+

 Version 4.95
 ------------
 
 Version 4.95
 ------------
 


@@ -48,7 +72,7 @@ Version 4.95
 
 13. Option "smtp_accept_max_per_connection" is now expanded.
 
 
 13. Option "smtp_accept_max_per_connection" is now expanded.
 

-14. Log selector "queue_size_exclusive", enabled by default, to exclude the
+14. Log selector "queue_time_exclusive", enabled by default, to exclude the

     time taken for reception from QT log elements.
 
 15. Main option "smtp_backlog_monitor", to set a level above which listen
     time taken for reception from QT log elements.
 
 15. Main option "smtp_backlog_monitor", to set a level above which listen


@@ -61,6 +85,8 @@ Version 4.95
 18. TLS ALPN handling.  By default, refuse TLS connections that try to specify
     a non-smtp (eg. http) use.  Options for customising.
 
 18. TLS ALPN handling.  By default, refuse TLS connections that try to specify
     a non-smtp (eg. http) use.  Options for customising.
 

+19. Support for MacOS (darwin) has been dropped.
+

 
 Version 4.94
 ------------
 
 Version 4.94
 ------------