X-Git-Url: https://git.exim.org/exim.git/blobdiff_plain/b8514d1960e259d49ab2c84c89eba52ab993da3f..6b331d5834d12bdda21857cd6fffac17038ce3c7:/doc/doc-txt/NewStuff?ds=sidebyside diff --git a/doc/doc-txt/NewStuff b/doc/doc-txt/NewStuff index ecb9814f4..d9a9f6cda 100644 --- a/doc/doc-txt/NewStuff +++ b/doc/doc-txt/NewStuff @@ -6,6 +6,37 @@ Before a formal release, there may be quite a lot of detail so that people can test from the snapshots or the Git before the documentation is updated. Once the documentation is updated, this file is reduced to a short list. +Version 4.97 +------------ + + 1. The expansion-test faciility (exim -be) can set variables. + + 2. An event on a failing SMTP AUTH, for both client and server operations. + +Version 4.96 +------------ + + 1. A new ACL condition: seen. Records/tests a timestamp against a key. + + 2. A variant of the "mask" expansion operator to give normalised IPv6. + + 3. UTC output option for exim_dumpdb, exim_fixdb. + + 4. An event for failing TLS connects to the daemon. + + 5. The ACL "debug" control gains options "stop", "pretrigger" and "trigger". + + 6. Query-style lookups are now checked for quoting, if the query string is + built using untrusted data ("tainted"). For now lack of quoting is merely + logged; a future release will upgrade this to an error. + + 7. The expansion conditions match_ and inlist now set $value for + the expansion of the "true" result of the ${if}. With a static list, this + can be used for de-tainting. + + 8. Recipient verify callouts now set $domain_data & $local_part_data, with + de-tainted values. + Version 4.95 ------------ @@ -33,6 +64,36 @@ Version 4.95 db file, replacing the previous prefix to the SQL string (which had issues when the SQL used tainted values). + 9. Lsearch lookups accept a "ret=full" option, to return both the portion + of the line matching the key, and the remainder. + +10. A command-line option to have a daemon not create a notifier socket. + +11. Faster TLS startup. When various configuration options contain no + expandable elements, the information can be preloaded and cached rather + than the previous behaviour of always loading at startup time for every + connection. This helps particularly for the CA bundle. + +12. Proxy Protocol Timeout is configurable via "proxy_protocol_timeout" + main config option. + +13. Option "smtp_accept_max_per_connection" is now expanded. + +14. Log selector "queue_time_exclusive", enabled by default, to exclude the + time taken for reception from QT log elements. + +15. Main option "smtp_backlog_monitor", to set a level above which listen + socket backlogs are logged. + +16. Main option "hosts_require_helo", requiring HELO or EHLO before MAIL. + +17. A main config option "allow_insecure_tainted_data" allows to turn + +18. TLS ALPN handling. By default, refuse TLS connections that try to specify + a non-smtp (eg. http) use. Options for customising. + +19. Support for MacOS (darwin) has been dropped. + Version 4.94 ------------ @@ -58,7 +119,7 @@ Version 4.94 7. Named-list definitions can now be prefixed "hide" so that "-bP" commands do not output the content. Previously this could only be done on options. - 8. As an exerimental feature, the dovecot authenticatino driver supports inet + 8. As an experimental feature, the dovecot authentication driver supports inet sockets. Previously it was unix-domain sockets only. 9. The ACL control "queue_only" can also be spelled "queue", and now takes an @@ -85,7 +146,7 @@ Version 4.94 16. An option on all single-key lookups, to return (on a hit) a de-tainted version of the lookup key rather than the looked-up data. -17. $domain_data and $localpart_data are now set by all list-match successes. +17. $domain_data and $local_part_data are now set by all list-match successes. Previously only list items that performed lookups did so. Also, matching list items that are tail-match or RE-match now set the numeric variables $0 (etc) in the same way os other RE matches.