Fix ${listextract } from a tainted list

[users/heiko/exim.git] / doc / doc-txt / NewStuff

diff --git a/doc/doc-txt/NewStuff b/doc/doc-txt/NewStuff
index ecb9814f4e6ae91d6608d81a1169d92985452104..cd1699dc6f11cde7c55083b149707da1f686b50d 100644 (file)
--- a/doc/doc-txt/NewStuff
+++ b/doc/doc-txt/NewStuff
@@ -33,6 +33,18 @@ Version 4.95
     db file, replacing the previous prefix to the SQL string (which had
     issues when the SQL used tainted values).
 
     db file, replacing the previous prefix to the SQL string (which had
     issues when the SQL used tainted values).
 

+ 9. Lsearch lookups accept a "ret=full" option, to return both the portion
+    of the line matching the key, and the remainder.
+
+10. A command-line option to have a daemon not create a notifier socket.
+
+11. Faster TLS startup.  When various configuration options contain no
+    expandable elements, the information can be preloaded and cached rather
+    than the provious behaviour of always loading at startup time for every
+    connection.  This helps particularly for the CA bundle.
+
+12. Proxy Protocol Timeout is configurable via "proxy_protocol_timeout"
+    main config option.

 
 Version 4.94
 ------------
 
 Version 4.94
 ------------


@@ -58,7 +70,7 @@ Version 4.94
  7. Named-list definitions can now be prefixed "hide" so that "-bP" commands do
     not output the content.  Previously this could only be done on options.
 
  7. Named-list definitions can now be prefixed "hide" so that "-bP" commands do
     not output the content.  Previously this could only be done on options.
 

- 8. As an exerimental feature, the dovecot authenticatino driver supports inet
+ 8. As an experimental feature, the dovecot authentication driver supports inet

     sockets.  Previously it was unix-domain sockets only.
 
  9. The ACL control "queue_only" can also be spelled "queue", and now takes an
     sockets.  Previously it was unix-domain sockets only.
 
  9. The ACL control "queue_only" can also be spelled "queue", and now takes an


@@ -85,7 +97,7 @@ Version 4.94
 16. An option on all single-key lookups, to return (on a hit) a de-tainted
     version of the lookup key rather than the looked-up data.
 
 16. An option on all single-key lookups, to return (on a hit) a de-tainted
     version of the lookup key rather than the looked-up data.
 

-17. $domain_data and $localpart_data are now set by all list-match successes.
+17. $domain_data and $local_part_data are now set by all list-match successes.

     Previously only list items that performed lookups did so.
     Also, matching list items that are tail-match or RE-match now set the
     numeric variables $0 (etc) in the same way os other RE matches.
     Previously only list items that performed lookups did so.
     Also, matching list items that are tail-match or RE-match now set the
     numeric variables $0 (etc) in the same way os other RE matches.