SECURITY: length limits on many cmdline options

[exim.git] / doc / doc-txt / NewStuff

diff --git a/doc/doc-txt/NewStuff b/doc/doc-txt/NewStuff
index 493244ff1ed6287b3f664fb0ebd21bb63cc07ca5..16dec8808d5fb213c15ae52afbd3d6111ea3ced0 100644 (file)
--- a/doc/doc-txt/NewStuff
+++ b/doc/doc-txt/NewStuff
@@ -17,7 +17,7 @@ Version 4.94
 
  3. A msg:defer event.
 
 
  3. A msg:defer event.
 

- 4. Client-side support in the gsasl authenticator.  Tested against the 
+ 4. Client-side support in the gsasl authenticator.  Tested against the

     plaintext driver for PLAIN; only against itself for SCRAM-SHA-1 and
     SCRAM-SHA-1-PLUS methods.
 
     plaintext driver for PLAIN; only against itself for SCRAM-SHA-1 and
     SCRAM-SHA-1-PLUS methods.
 


@@ -54,14 +54,25 @@ Version 4.94
 15. Options on pgsql and mysql lookups, to specify server separate from the
     lookup string.
 
 15. Options on pgsql and mysql lookups, to specify server separate from the
     lookup string.
 

-16. Expansion item ${listquote {<char} {<item>}}.
+16. An option on all single-key lookups, to return (on a hit) a de-tainted
+    version of the lookup key rather than the looked-up data.

 
 

-17. An option for the ${readsocket {}{}{}} expansion to make the result data
+17. $domain_data and $local_part_data are now set by all list-match successes.
+    Previously only list items that performed lookups did so.
+    Also, matching list items that are tail-match or RE-match now set the
+    numeric variables $0 (etc) in the same way os other RE matches.
+
+18. Expansion item ${listquote {<char} {<item>}}.
+
+19. An option for the ${readsocket {}{}{}} expansion to make the result data

     cacheable.
 
     cacheable.
 

-18. dkim_verify_min_keysizes, a list of minimum acceptable public-key sizes.
+20. dkim_verify_min_keysizes, a list of minimum acceptable public-key sizes.
+
+21. bounce_message_file and warn_message_file are now expanded before use.

 
 

-19. bounce_message_file and warn_message_file are now expanded before use.
+22. New main config option spf_smtp_comment_template to customise the
+    $spf_smtp_comment variable

 
 
 
 
 
 


@@ -103,7 +114,7 @@ Version 4.93
 15: Support under OpenSSL for writing NSS-style key files for packet-capture
     decode.  The environment variable SSLKEYLOGFILE is used; if an absolute path
     it must indicate a file under the spool directory; if relative the the spool
 15: Support under OpenSSL for writing NSS-style key files for packet-capture
     decode.  The environment variable SSLKEYLOGFILE is used; if an absolute path
     it must indicate a file under the spool directory; if relative the the spool

-    directory is prepended.  Works on the server side only.  Support under 
+    directory is prepended.  Works on the server side only.  Support under

     GnuTLS was already there, being done purely by the library (server side
     only, and exim must be run as root).
 
     GnuTLS was already there, being done purely by the library (server side
     only, and exim must be run as root).